Feds suspect ransom negotiator ran ShinyHunters extortion site

If you have children tell them not to participate in these riots - which seem to be either organised by or used by both Melenchon's communist party as well as several islamic groups to achieve their goals - and, if he ever gets embroiled in one, make his way out as quickly as he can. Tell them not to be like Lenin's useful idiots, henchmen for the revolution who are discarded as soon as the goal is achieved. To those who think this means they should just accept any and all governmental abuse and neglect, think again. There are many ways to act against such abuse and neglect without feeding the communist/islamofascist/${extremist} beasts.

https://bsky.app/profile/thenewarab.bsky.social/post/3myb2ze...

Smokey Bear said don't play with matches, I hope Daddy Williamdclt will/did tell his children not to play with live grenades.

Tangent aside, entropy favors the attacker even in the case of a building that has PE stamps on the plans and passes all codes at time of construction. Just leave it alone for a while with no maintenance, it will fall. Or, hire one man to correctly place charges. Far less work than what it took to build it.

edit: I want to make clear that what amazes me is how hard we fight entropy. We have built fragile societies, fragile technologies, we ourselves are fragile. And yet, humans are generally pretty cool and choose not to destroy all of these things, though we do have a few assholes amongst us.

Consider the energy requirements to construct a skyscraper compared to the energy requirements to demolish one.

required codes and standards may raise one (difficulty of removal) or both (difficulty of removal + difficulty of construction) in varying proportion.

On the other hand, "You wouldn't download a wrecking ball?"

I wonder if that ever expands to traditional software when the stakes and blast radius increase significantly with time.

Digital Operational Resilience Act (DORA) and Cyber Resilience Act (CRA) which enforce mandatory governance and processes like resilience testing and cybersecurity lifecycle requirements.

GDPR & Data Protection frameworks which requires architecture to support CRUD operations on all PII, data minimization, customer-managed encryption architectures and so forth.

...and the anti-vibe code framework aka the EU AI Act, which requires human oversight and data quality controls.

This is completely aside from any industry specific engineering codes like in Finance where you have to adhere to things like ISO 20022 or iXBRL/ESEF standards, user accessibility mandates, and PCI Compliance mandates for things like Security Architecture over and above the CRA.

They can have, but they’re sufficiently tied up with other corporate busy work that they don’t.

When you operate in an environment where every "good boy" can be wiped by a single "oh shit", statistics are against you. That is a base truth. The failure can rest on negligence but negligence isn't a necessary component for failure. For attackers their failures are wiped by a single success, for defenders their successes are wiped by a single failure.

In a different life I worked on designing and implementing similar systems to the ones you described, except with even more money going through them. They can can still be hacked, at incredible expense. And the hackers could even make a huge profit with the treasure trove they have access to. But getting away with it is orders of magnitude more difficult than the hack. The money involved to make the hack profitable is impossible to hide on the world stage. It takes a lot of political capital and military to be able to steal billions+++ and get away with it (nation state attackers, not just a group of hackers). So hackers go for lower risk jobs where the payout can even be similar just because of the lower cost to succeed.

18F -> https://ndstudio.gov

As seen credited on recent publications like real realfood.gov.

Although I personally wouldn't lift a finger for the corrupt Christ clowns that run America these days.

https://en.wikipedia.org/wiki/The_Com

And yet arguably the criminals are unwittingly performing a useful public service we might describe as involuntary pentesting with a financial penalty on failure. The ethical way to get rid of the criminals in this scenario is to institute competent regulation (ie not mindless box ticking) and enforcement.

Hypothetically we are all arguably better off with a ransomware attack if the alternative is a cyberattack by a geopolitical adversary at a later date.

Or we pay the criminals, not let innocent people die because turbo nerds care about rewarding cyber criminals who will exist no matter what.

So I guess we should just let people die though, atleast the feds will have jobs and be able to go on vacation and not those damn criminals!! Although I fail to see much difference between US law enforcement and cyber criminals, both of their existence relies on the threat of violance and the extortion of the public with that violence.

Also I'm pretty sure the FBI gave birth to the shiny hunters if you look into it for more than 10 minutes. Its a bunch of kids they basically have chosen not to punish at various points in their criminal evolution. Its almost like they need these phenomenons to exist.

My ideal society is one without crooked cops, but alas I dont think that's likely either so in the meantime, until we can find a solution to that problem we probably shouldnt punish the innocent patients of hospitals.

It seems to me that money and the status of criminals is more important to you than human life, so we should probably deal with whatever brain worm has infected you too.

It's not a contest, we all can care and think deeply and still come to different conclusions.

Who cares if criminals have nice things, Id rather innocent people dont die. Most criminals tend to find ways to ruin their own lives at some point anyways. Peoples lives > pieces of paper.

Its like you're proposing a trolly problem where you choose the 5 people on a track to die because you don't want the single guy on a track to have nice clothes.