❌

Reading view

How crypto hacking funds isolated North Korea’s nuclear programme

Cryptocurrency theft is estimated to generate half of the country’s foreign currency income

North Korea plays by its own rules. The isolated, secretive and autocratic country is largely cut off from the world’s economic system – but when it comes to generating foreign earnings it relies on some of the world’s most sophisticated hacking.

Experts, such as TRM Labs, quickly attributed the extraordinary $6.3bn (£4.7bn) Binance cryptocurrency theft to TraderTraitor, an elite North Korean hacking unit that has also been known as the Lazarus Group. Though the link may not be proven yet, the pattern of behaviour is familiar.

Continue reading...

© Photograph: AP

© Photograph: AP

© Photograph: AP

  •  

Tell us: have you been affected by the Binance hack?

We’d like to hear from people who’ve been directly affected by the hack or now have concerns about crypto security

The world’s largest cryptocurrency exchange has been hit by an industry-record $6.3bn (£4.7bn) hack.

Binance has scrambled to freeze the affected assets, with about $3bn located so far. Co-founder Yi He said the company would cover “all hacking losses”. Analysts have attributed the attack to North Korean state backed hackers.

Continue reading...

© Photograph: Bloomberg/Getty Images

© Photograph: Bloomberg/Getty Images

© Photograph: Bloomberg/Getty Images

  •  

North Korea is likely culprit behind $6.3bn crypto hack, ‘largest heist in history’

Binance exchange says it will cover customer losses as it scrambles to freeze affected assets, with about $3bn located so far

The world’s largest cryptocurrency exchange has been hit by a record $6.3bn (£4.7bn) hack described as the biggest heist in history, with experts identifying North Korea as the likely culprit.

Binance said it would cover all customer losses as it froze $3bn of the affected assets.

Continue reading...

© Photograph: Darrin Zammit Lupi/Reuters

© Photograph: Darrin Zammit Lupi/Reuters

© Photograph: Darrin Zammit Lupi/Reuters

  •  

North Korea is likely culprit behind $6.3bn crypto hack, ‘largest heist in history’

Binance exchange says it will cover customer losses as it scrambles to freeze affected assets, with about $3bn located so far

The world’s largest cryptocurrency exchange has been hit by a record $6.3bn (£4.7bn) hack described as the biggest heist in history, with experts identifying North Korea as the likely culprit.

Binance said it would cover all customer losses as it froze $3bn of the affected assets.

Continue reading...

© Photograph: Darrin Zammit Lupi/Reuters

© Photograph: Darrin Zammit Lupi/Reuters

© Photograph: Darrin Zammit Lupi/Reuters

  •  

DHS cites risk to more than 40,000 personnel in effort to take leaked data offline

The Department of Homeland Security asked an Icelandic hosting company to take down data obtained through hack

The US Department of Homeland Security (DHS) asked ⁠an Icelandic hosting company on Thursday to take down or limit access to data related to thousands ⁠of agency personnel, saying ⁠the content ​put them at risk, according to the request posted online by hosting company FlokiNET.

The database “places more than ⁠40,000 identifiable individuals at risk of harassment, stalking and physical harm”, the request said.

Continue reading...

© Photograph: Julius Constantine Motal/The Guardian

© Photograph: Julius Constantine Motal/The Guardian

© Photograph: Julius Constantine Motal/The Guardian

  •  

Вредные советы для тех, кто хочет угробить A/B-эксперимент

В цифровых продуктах даже мелочь — цвет кнопки, формулировка заголовка или порядок экранов — влияет на поведение пользователей. Чтобы не гадать, команды запускают A/B-тесты: сравнивают варианты и выбирают решение, подтверждённое данными. Сегодня мы разберём надёжные способы всё испортить.

Разработчик закончил фичу, код покрыт тестами, на стенде всё зелёное, на проде ничего не падает. Команда уже готова раскатить изменения на всех, но приходят аналитики и говорят: «Эксперимент невалиден, данные использовать нельзя». Звучит как бюрократия, пока не разберёшься в деталях.

Любой A/B-тест состоит из маршрутизации пользователей, логики входа в эксперимент, деления на группы, метрик и правил принятия решений. Ошибка на любом этапе превращает тест в генератор красивых, но бесполезных графиков.

Читать далее
  •  

Non-profit group leaks data of more than 40,000 homeland security workers

Information released by Distributed Denial of Secrets is the third such government data disclosure in the last month

Data identifying more than 41,000 employees and contractors for the US Department of Homeland Security (DHS) was released on Wednesday in an unprecedented leak that reveals how the agency is organized. The records, which were made public by the transparency nonprofit Distributed Denial of Secrets, reference operation names, surveillance programs and information on undercover initiatives.

DHS did not immediately return a message seeking comment.

Continue reading...

© Photograph: Anadolu/Anadolu Agency

© Photograph: Anadolu/Anadolu Agency

© Photograph: Anadolu/Anadolu Agency

  •  

Non-profit group leaks data of more than 40,000 homeland security workers

Information released by Distributed Denial of Secrets is the third such government data disclosure in the last month

Data identifying more than 41,000 employees and contractors for the US Department of Homeland Security (DHS) was released on Wednesday in an unprecedented leak that reveals how the agency is organized. The records, which were made public by the transparency nonprofit Distributed Denial of Secrets, reference operation names, surveillance programs and information on undercover initiatives.

DHS did not immediately return a message seeking comment.

Continue reading...

© Photograph: Anadolu/Anadolu Agency

© Photograph: Anadolu/Anadolu Agency

© Photograph: Anadolu/Anadolu Agency

  •  

Разведка, Pentest и причем тут контейнеры?

Как использовать мощь BlackArch и Kali Linux, оставаясь на чистой домашней системе и не ломая ее? Рассказываю историю создания Open Source проекта VoidSec — модульного менеджера, который автоматизирует менеджмент пентест‑утилит в изолированных Podman‑контейнерах, избавляя от боли от поломанных зависимостей раз и навсегда.

Читать далее
  •  
❌