News for hackers. Stuff that matters.

A comment on CBS's Showtime caught mining crypto-coins in viewers' web browsers. Parent comment

Re:CBS's Showtime caught mining crypto-coins in viewers' web... by hellbanner on Tuesday September 26, 2017 @02:30PM (#15341355)
Social engineering is responsible for in part or entirety many hacks. I'm not arguing that technical solutions will "fix everything". Technical stability is on aspect of secure systems.

The video is arguing: why should a doorbell have the ability to set your house on fire? (Metaphorically).

Heartbleed was an issue of exactly this

"The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software"

Architecturally, this should never have been possible.

http://www.pl-enthusiast.net/2014/07/01/how-did-heartbleed-r...

http://heartbleed.com/

Obviously attackers are going to look for the weakest point, but your agument sounds like "social engineering should happen, so don't bother locking your doors at all".

[ Parent | on HN ]
Re:CBS's Showtime caught mining crypto-coins in viewers' web... by cocktailpeanuts on Tuesday September 26, 2017 @02:40PM (#15341432)
No i was only arguing it's not as easy as you think. Just like your solution you suggested can easily be hacked, any technological solution a human being comes up with is vulnerable to hacks.

The only thing I was criticizing was you seem to think it's easy to simply create a secure system. It's not. That's why there are tons of smart people in security but hacks still happen.

[ Parent | on HN ]
Re:CBS's Showtime caught mining crypto-coins in viewers' web... by pharrington on Tuesday September 26, 2017 @08:52PM (#15344024)
He's saying we know how to increase the energy needed to compromise a system, while spending less energy than would otherwise happen in the case of compromise. The harder a task is, the less often the task occurs.
[ Parent | on HN ]
Re:CBS's Showtime caught mining crypto-coins in viewers' web... by hellbanner on Thursday September 28, 2017 @07:34AM (#15356336)
Yes hacks still happen. See pharrington's response. I don't think it's easy to create a secure system. I'm in favor of making software more difficult to hack. I think the Heartbleed example speaks for itself.
[ Parent | on HN ]