Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by ryanlol on Thursday August 03, 2017 @02:12PM
(#14922151)
This is utter nonsense. He didn't stop Wannacry. The Wannacry devs stopped Wannacry, if he didn't grab the domain it'd have been picked up by some other TI firm within minutes or hours.
[ Parent
| on HN ]
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by araneae on Thursday August 03, 2017 @02:43PM
(#14922454)
I mean, he literally stopped WannaCry.
Just because someone else could have stopped it, doesn't mean he didn't stop it. That's... just a fact...
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by ryanlol on Thursday August 03, 2017 @03:18PM
(#14922840)
You're mixing up could and would here.
This was inevitable because of how WannaCry was designed.
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by vanattab on Thursday August 03, 2017 @04:31PM
(#14923547)
If Newton had not discovered and articulated his 3 laws of motion when he did someone else WOULD have in the decades that followed. Is it an error to say Newton was the first to discover his laws of motion? By this definition how can anything be attributed to anyone?
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by ryanlol on Thursday August 03, 2017 @04:39PM
(#14923642)
Do you attribute a car bombing to the person that set up the bomb or the guy that inevitably turned on the car and set off the bomb?
In this case WannaCry creators built a system that would inevitably be triggered within a few hours from the malware going live.
I think it is meaningless to attribute the WannaCry killswitch to him instead of the authors. If he hadn't registered the domain some other threat intelligence firm would've done it moments later.
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by slurppurple on Thursday August 03, 2017 @02:26PM
(#14922280)
I mean he had to notice that it was contacting that website, might not have been an obvious thing to look for.
Re:Researcher Who Stopped WannaCry Ransomware Detained in US...
by ryanlol on Thursday August 03, 2017 @02:31PM
(#14922339)
Nah, this was one of the first things you'd notice. No need to reverse the binary, you see the domain in pcaps when you run it.
Registering unregistered domains the malware connects to is a very obvious thing to do, in this case he got "lucky".