Cryptocurrency investor robbed via his cellphone account sues AT&T for $224M

Re:Cryptocurrency investor robbed via his cellphone account ... by wolfgke on Thursday August 16, 2018 @12:06PM (#17775844)

> If Bank A makes my PIN number automatically the last 4 of my SSN, and Company B discloses that information

By Kerckhoffs's principle

> https://en.wikipedia.org/w/index.php?title=Kerckhoffs%27s_pr...

a cryptosystem has to stay secure even if everything about the system, except the key, is public knowledge. So Bank A is at fault, because it neglected basic guiding principles for designing security systems.

[ Parent | on HN ]

Re:Cryptocurrency investor robbed via his cellphone account ... by bdcravens on Thursday August 16, 2018 @12:24PM (#17776024)

Which gets to the frivolity of the lawsuit. The primarily responsible party, the exchange, is likely a less lucrative target than AT&T.

[ Parent | on HN ]

Re:Cryptocurrency investor robbed via his cellphone account ... by dsfyu404ed on Thursday August 16, 2018 @12:42PM (#17776240)

Suing the people with the money is rule #1 of lawsuits.

[ Parent | on HN ]

Re:Cryptocurrency investor robbed via his cellphone account ... by pc86 on Thursday August 16, 2018 @01:39PM (#17776851)

Which would be the case if Kerckhoff's principle was enshrined in law, which it's not.

[ Parent | on HN ]

Re:Cryptocurrency investor robbed via his cellphone account ... by wolfgke on Thursday August 16, 2018 @06:44PM (#17779028)

But it is deeply central for designing any secure system that one can really argue that it is a disregard of due diligence when not followed.

[ Parent | on HN ]