News for hackers. Stuff that matters.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @10:11PM (#24033544)
>Let this be a lesson to those that say bitcoin and other cryptocurrency has no real value outside of speculation.

>This kind of attack would be almost impossible in the pre-bitcoin era.... Instead democratizing currency, we're democratizing large scale crime.

Just wanted to make this same point - right now, cryptocurrency has negative value for society. Perhaps this is a justification for banning the current implementations.

Re:US travel firm $4.5M ransom negotiation open chat by NotSammyHagar on Sunday August 02, 2020 @10:41PM (#24033713)
We need to make laws in western countries that paying off these kinds of ransoms is illegal. It gives money to criminal elements and only encourages this. I also thought it would be possible for powerful law enforcement groups to follow the bitcoins even through exchanges. Why does this not run into the worldwide hunt for the perpetrators?
Re:US travel firm $4.5M ransom negotiation open chat by vkou on Sunday August 02, 2020 @11:40PM (#24033999)
It's theoretically possible for powerful state-level adversaries to follow bitcoins through tumblers and exchanges (If they operate the former). Also, at some point, you're going to have to be paying rent, so you'll need to turn your BTC into dollars or pezos or pieces of eight, and may need to explain to your friendly tax authorities how you can by 4.5 million USD worth of BTC.

In practice, though, it's not clear what exactly are the capabilities of each branch of law enforcement.

Re:US travel firm $4.5M ransom negotiation open chat by jdietrich on Monday August 03, 2020 @01:03AM (#24034370)
In a lot of jurisdictions, your friendly tax authorities won't ask or care; international fraud is a valuable source of foreign currency for many countries as long as you're reasonably discreet about it. Banks and payment processors can't afford to be nearly as blasé, because they're at far greater risk of facing international sanctions; Bitcoin provides an essential layer of obfuscation and deniability.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Monday August 03, 2020 @03:20AM (#24034978)
In the US for example, there's an actual field in your 1040 tax return for entering income from otherwise undeclared illegal businesses. Putting your drug or extortion money there and paying taxes is not admitting guilt and can't be used against you IIRC.
Re:US travel firm $4.5M ransom negotiation open chat by jobigoud on Monday August 03, 2020 @03:43AM (#24035079)
What does one gain by doing this? Is there a particular incentive apart from one's own principles?
Re:US travel firm $4.5M ransom negotiation open chat by icelancer on Monday August 03, 2020 @03:59AM (#24035169)
Tax fraud is usually much more painful to suffer from instead of a simple drug charge or illegal gambling charge. If you get nicked on drug charges there will be parallel reconstruction to get you on tax fraud despite this "not happening" between US government branches.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Monday August 03, 2020 @02:31PM (#24041512)
I think you have it backwards. If you commit tax fraud, you will be prosecuted. And the FBI will work with the IRS to do this.

But, supposedly, putting a non-zero value in the "illegal income" field of the 1040 (which ISN'T fraud) both (1) can't be used as evidence against you in court, and (2) isn't reported by default to the IRS to the FBI or other law enforcement agencies, so you don't end up on any watch lists.

Of course you gotta take their word for part (2), but it is their incentive to get every tax dollar regardless of source.

Re:US travel firm $4.5M ransom negotiation open chat by icelancer on Monday August 03, 2020 @05:09PM (#24043453)
No sorry, I agree with you. I mean if you don't declare your income THEN you get busted on the illegal activity, you are guaranteed to get busted twice.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Tuesday August 04, 2020 @03:07AM (#24047471)
Ah I misunderstood, sorry.
Re:US travel firm $4.5M ransom negotiation open chat by Denvercoder9 on Monday August 03, 2020 @08:30AM (#24036851)
They got Al Capone on tax fraud.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Monday August 03, 2020 @03:18AM (#24034969)
It already is illegal, actually. Evil Corp, for example, is a listed entity that US persons can't send money (including bitcoin) to.
Re:US travel firm $4.5M ransom negotiation open chat by mytailorisrich on Monday August 03, 2020 @03:51AM (#24035128)
> We need to make laws in western countries that paying off these kinds of ransoms is illegal.

That'd be the sort of counter-productive legislation we see too often. The only result would be to push this underground and to keep authorities in the dark. It might end up helping criminals.

A similar case has been made about corruption: If you're asked for a bribe by, say, a corrupt official you usually have no choice but to pay and once you have paid you are in it with them, both criminals, so no-one talks.

Re:US travel firm $4.5M ransom negotiation open chat by chrismorgan on Monday August 03, 2020 @11:44AM (#24039166)
I disagree with “no choice but to pay”, so long as the bribery is illegal and the relevant legislation not entirely hollow.

You may be able to clearly document the attempted bribery, and report it to the relevant authority—which may be a central agency of some form, or may be just going up the chain within the same organisation. Success will vary by country, authority and magnitude of offence. But even threatening to do this (politely) normally achieves the desired result, though it does nothing to actually uproot the corruption.

Alternatively, just indicate clearly that you’re not willing to play along with this illegal behaviour.

The zero rupee note (https://en.wikipedia.org/wiki/Zero_rupee_note) is a fairly successful example of doing this, and bear in mind that India corruption problem is much larger than any western country’s—although it’s illegal, it’s still par for the course in a great many areas. Yet standing up to this bribery is quite possible if only you have any inclination to do so.

I am currently in India, residing with another Australian who has lived in India for forty-odd years and operated business locally, and bribes were solicited from time to time, but he would not play ball, typically by either pretend nothing had happened (that is, ignoring any “hints” that you could pay for such-and-such) or by actively declining. Flunkies that try to take bribes personally are generally quite ready to backtrack once they see which way the wind is blowing (they could get in trouble with their boss), and more institutional bribery can generally be waited out, at the least. Even if it’s occasionally a long wait (like, months instead of days, or years instead of weeks).

A large part of the fight on these sorts of issues is changing cultural norms. Consider seatbelts over time in Australia (and much of the world): fifty years ago seatbelts were uncommon, but legislation was paired with a big marketing push to normalise wearing seatbelts had the effect that before terribly long society would look down with severe displeasure on anyone that didn’t wear a seatbelt while driving, so that now most people (well over 99% of the driving population, at a guess) wouldn’t dream of driving without wearing a seatbelt. The same is possible here, and will be far easier than selling ice to proverbial eskimos, because it’s easy to take the moral high ground in advertising (and moral high ground is almost as powerful as safety and “think of the children”): we will not parley with criminals.

Re:US travel firm $4.5M ransom negotiation open chat by mytailorisrich on Monday August 03, 2020 @12:46PM (#24040047)
When you are a nobody facing a demand for a bribe by an official or police you have no choice but to pay.

> nd more institutional bribery can generally be waited out, at the least. Even if it’s occasionally a long wait (like, months instead of days, or years instead of weeks).

And in the real world that means you pay.

> wouldn’t dream of driving without wearing a seatbelt.

Because people understand that it is in their interest to wear a seatbelt. That's very different from paying a a bride that is often in the person's interest.

It was an Indian economist, and chief economist at the World Bank, that suggested making payment of bride legal to shift incentives [1]. You still have an incentive to pay but also an incentive to report it, while it increases the risk for the bribe-taker. Whether that would work or not, it recognises that the key to influencing behaviour is to create the right incentives.

[1] https://www.bbc.co.uk/news/business-20218833

[dead]
Re:US travel firm $4.5M ransom negotiation open chat by smegma2 on Monday August 03, 2020 @12:48AM (#24034330)
I think you're confusing two different areas of law enforcement.
Re:US travel firm $4.5M ransom negotiation open chat by chottocharaii on Monday August 03, 2020 @12:42AM (#24034303)
That was a municipal police call-out.

That said, slashing the municipal police isn’t a terrible idea

Re:US travel firm $4.5M ransom negotiation open chat by jdietrich on Monday August 03, 2020 @01:15AM (#24034427)
The existence of municipal police is a large part of the problem; the sheer number of police forces in the US is a huge barrier to effective oversight and accountability. A cynic might argue that this lack of accountability in routine policing is a deliberate choice.
Re:US travel firm $4.5M ransom negotiation open chat by jey on Monday August 03, 2020 @12:17AM (#24034195)
How do you know that? Are you judging based on a representative sample of all uses of cryptocurrency, or the uses you hear about?
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @12:24AM (#24034232)
If there are any large scale positive uses of cryptocurrency, I'm sure that we would have heard of them by now; The proponents would have shouted them from the rooftops.

That said, proponents do have a shot at enlightening us (me and other viewers of the thread). What large scale positive application are you aware of?

Re:US travel firm $4.5M ransom negotiation open chat by jey on Monday August 03, 2020 @01:46AM (#24034560)
The main one I know of is international money transfers (remittances). Usually these have to go through an oligopoly that sets the fees and exchange rates to be favorable to itself. This is the kind of market that's pretty big on the international scale, but it's completely boring and non-sensational to read about a bunch of people who are sending $400 to their moms on a regular basis.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @02:03AM (#24034636)
As far as I know, nearly everyone uses Western Union (Transferwise etc. etc.) for that. Bitcoin is too costly* and complicated for most people.

* Two set of fees to exchange crypto to fiat + transfer fee compared to one set of fiat currency exchange + transfer fee.

Re:US travel firm $4.5M ransom negotiation open chat by ehmish on Monday August 03, 2020 @02:14AM (#24034674)
I recall these services used to be pretty crap, bitcoin added a bit of much needed competition
Re:US travel firm $4.5M ransom negotiation open chat by sonicggg on Monday August 03, 2020 @11:40AM (#24039110)
But you're making an assumption here that both the sender and recipient will be using fiat currency in the end, and that crypto is only being used as means to make the transfer. This is not necessarily true.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @06:02PM (#24043988)
IMHO, it's a pretty reasonable assumption, as very few businesses agree to be paid in crypto directly.
Re:US travel firm $4.5M ransom negotiation open chat by icelancer on Monday August 03, 2020 @04:03AM (#24035194)
BTC is not the only cryptocurrency used there. I've sent LTC and XRP most often, but XMR lately. tx fees need not be large (also Lightning Network exists).
Re:US travel firm $4.5M ransom negotiation open chat by swebs on Monday August 03, 2020 @06:46AM (#24036168)
It's great for bypassing mass censorship. Wikileaks, Hatreon, 4chan are all prominent examples.

https://wikileaks.org/Banking-Blockade.html

Re:US travel firm $4.5M ransom negotiation open chat by rossjudson on Monday August 03, 2020 @02:30AM (#24034745)
Speculative holding of Bitcoin is the answer to a simple question: "How do I profit from crime, without doing crime?"
Re:US travel firm $4.5M ransom negotiation open chat by kortilla on Sunday August 02, 2020 @10:16PM (#24033579)
Not sure how you arrived at a negative value. Or are you suggesting there is no positive use-case that could offset it?
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @10:20PM (#24033602)
I'm just looking at how it is currently used. If after all these years there isn't a positive use-case to offset it, there might not be one at all.
Re:US travel firm $4.5M ransom negotiation open chat by zenexer on Sunday August 02, 2020 @10:59PM (#24033798)
Although I refuted some of your arguments above (https://news.ycombinator.com/item?id=24033759), I agree that cryptocurrency has fairly limited utility, especially given the costs.

The biggest issue I have with cryptocurrency is that it’s an utter waste of resources. It incentivizes the consumption of electricity (and talent) purely to print money, rather than to produce value. Yes, currencies provide some value to society, but we already have more sustainable options.

I see the appeal if you hate taxes and regulations or live under a particularly oppressive regime. However, given that it relies, to some extent, on public infrastructure like internet and electricity that governments can outright shut off if they so desire, there are better options. Raw materials and bartering work pretty well. Just don’t invest in tulips.

Re:US travel firm $4.5M ransom negotiation open chat by 5986043handy on Sunday August 02, 2020 @11:31PM (#24033957)
The waste of electricity/mining gear is mostly due to Proof of Work consensus, but moving to Proof of Stake/other consensus algorithms will eliminate basically all waste (eg. Ethereum is moving to PoS).
Re:US travel firm $4.5M ransom negotiation open chat by asdfasgasdgasdg on Monday August 03, 2020 @01:09AM (#24034397)
I feel like I've been hearing about ethereum proof of stake for years. When are they actually going to move to it?
Re:US travel firm $4.5M ransom negotiation open chat by Polylactic_acid on Monday August 03, 2020 @02:04AM (#24034638)
From what I can see, cryptocurrency is technologically frozen right now because any change results in some people making less money so there can never be a consensus on anything.
Re:US travel firm $4.5M ransom negotiation open chat by dogecoinbase on Monday August 03, 2020 @01:22AM (#24034445)
No one has a demonstrated effective PoS implementation yet (that isn't simple centralization). ETH will not move to PoS anytime soon enough to be meaningful, nor will any other cryptocurrency.
Re:US travel firm $4.5M ransom negotiation open chat by microcolonel on Sunday August 02, 2020 @10:33PM (#24033669)
That's because you live in a country with a functioning currency.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @11:15PM (#24033881)
I keep hearing that, but I am not familiar with any data that shows actual widespread use by common people* in those countries without a functional currency.

Most of these countries barely have a stable internet connection or even stable electrical power, so I wouldn't surprised if these 'currencies' aren't so helpful in practice.

* Note that use by corrupt politicians to launder their ill-gotten gains is not a positive.

Re:US travel firm $4.5M ransom negotiation open chat by mareko on Monday August 03, 2020 @12:13AM (#24034173)
It's true that Bitcoin is a poor medium of exchange: it's not stable, has slow transaction times, does not work well with mobile devices, and has intimidating identifiers, but it did open the door to new ideas that will likely soon have a huge impact on exactly the uses you're describing.
Re:US travel firm $4.5M ransom negotiation open chat by arp242 on Monday August 03, 2020 @02:57AM (#24034872)
I feel like I've been hearing this for over 5 years. I hope it materializes, but to be honest it's hard to not be skeptical, not in the least because a lot of the original values of Bitcoin/cryptocurrencies seem to have been subverted by certain people to serve their own needs (which ... is what usually happens if there are no rules to set boundaries).
Re:US travel firm $4.5M ransom negotiation open chat by mareko on Monday August 03, 2020 @12:20PM (#24039692)
I'm a little biased, but check out celo.org and valoraapp.com. Celo is a Proof of Stake protocol built to work efficiently on mobile, with stable value, and with phone numbers as identifiers.
Re:US travel firm $4.5M ransom negotiation open chat by icelancer on Monday August 03, 2020 @04:02AM (#24035188)
I pay for translation services in cryptocurrency (XMR lately) to Venezuelan citizens who can't readily use USD. Easily thousands of dollars per year.
Re:US travel firm $4.5M ransom negotiation open chat by swader999 on Sunday August 02, 2020 @11:38PM (#24033993)
Cypress in 2013, Venezuela currently.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @11:51PM (#24034054)
Cyprus currency is the Euro, hardly a bad local currency as far as value is concerned, and the local residents are already adept in keeping funds in other currencies. Historically, Bitcoin had little marketshare there and made no difference. Are there any evidence of large scale use in Venezuela?
Re:US travel firm $4.5M ransom negotiation open chat by raverbashing on Monday August 03, 2020 @03:16AM (#24034959)
Countries without functioning currencies just use (or at least peg) all transactions to Dollar/Euro, etc

Yes, bitcoin can play a role but it's not like you're paying for your groceries in bitcoin. Cash under the mattress > blockchain

Re:US travel firm $4.5M ransom negotiation open chat by jsmith99 on Monday August 03, 2020 @02:16AM (#24034684)
There are simpler solutions, such as dollar bills, or a centralised digital banking system in a trusted currency.
Re:US travel firm $4.5M ransom negotiation open chat by microcolonel on Monday August 03, 2020 @02:11PM (#24041235)
These depend on a functioning legal system in a country that recognizes human rights. Dollar bills may work in incompetent states, but they don't in oppressive ones.
Re:US travel firm $4.5M ransom negotiation open chat by enraged_camel on Sunday August 02, 2020 @10:35PM (#24033675)
I'm not convinced that it is negative. After every high profile hack or breach, we complain about how organizations regularly get away with poor security practices with mere slaps on the wrist (in terms of legal penalties they end up having to pay).

Perhaps these ransomware attacks are the market's way of making things... more fair.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @10:51PM (#24033763)
So far, these attacks don't seem to have prompted security improvements. I guess that for large companies, the payment is a small sum, comparable to the fines they pay every once in a while.

Security improvements seem to be driven more by regulation (GDPR), competition (when did ElasticSearch release TLS support for free? Not after the Nth open ES cluster - only after Amazon competed with them), and large costs (switching to Linux servers because they're cheaper. Though there are concerns about current security practices there too...).

Re:US travel firm $4.5M ransom negotiation open chat by vmception on Sunday August 02, 2020 @11:43PM (#24034007)
Bug bounties rising to their actual market price is not a negative value for society.
Re:US travel firm $4.5M ransom negotiation open chat by istjohn on Sunday August 02, 2020 @11:55PM (#24034076)
By your logic, bank robbers are simply a manifestation of market forces. What did you expect to happen with all that cash in one place with no armed guards?
Re:US travel firm $4.5M ransom negotiation open chat by vmception on Monday August 03, 2020 @12:03AM (#24034111)
That analogy only works if banks were paying people to pretend to rob them all day every day and show them how they did it, and also underpaying them.

so, no.

Re:US travel firm $4.5M ransom negotiation open chat by istjohn on Monday August 03, 2020 @12:41AM (#24034294)
Actually, you're making my point for me. Banks don't typically hire physical pen testers at all, and yet our reaction to a bank robbery is not, "Well, that's just what you get for not taking security seriously." Nor is that our reaction when a gas station gets held up.

In a perfect world, everyone can be trusted, and we don't need locks on our doors or passwords on our phones. In a dystopia, everyone has to carry a gun or have a bodyguard to leave their fortified homes, and a quarter of GDP goes towards security measures. We're somewhere in the middle, but things like this push us a little further down the road to more sunk costs in security measures.

A locksmith might make a killing after a local crime wave, but they should understand that crime is bad for the neighborhood regardless. Cyber crime raises demand for white hat services, but what's good for white hats is not necessarily good for society at large.

Re:US travel firm $4.5M ransom negotiation open chat by vmception on Monday August 03, 2020 @06:09AM (#24035936)
Companies should be liable for negligence depending on the kind of hack. If they were hacked through use of an old package - defined by regulations - then they should be liable.

If it was a zero-day or something newer - defined by regulations - then the company is not liable.

Your analogies are cute but I want new laws, further making your analogies moot.

Re:US travel firm $4.5M ransom negotiation open chat by daveevad on Monday August 03, 2020 @12:13AM (#24034176)

  Bank Secretary : So, people hire you to break into their places... to make sure no one can break into their places?

  Martin Bishop : It's a living.

  Bank Secretary : Not a very good one.
Re:US travel firm $4.5M ransom negotiation open chat by spurdoman77 on Sunday August 02, 2020 @11:50PM (#24034049)
Market price? Interesting way to put it. You could say that the ransomware issuer has a monopoly to the data and will price it to the level where the company owners have higher return paying and continuing it than closing the company down.
Re:US travel firm $4.5M ransom negotiation open chat by vmception on Monday August 03, 2020 @12:04AM (#24034118)
its two order of magnitude better than the unilateral pricing set by companies to their white hack programs, which white hat people have to fight for.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Sunday August 02, 2020 @10:12PM (#24033548)
Banning... how?
Re:US travel firm $4.5M ransom negotiation open chat by Larrikin on Sunday August 02, 2020 @10:50PM (#24033761)
Bitcoin is only useful currently when it can be turned into cash. There are no real businesses that don't turn their payments into a taxable national currency at the end. If you just ban exchanges in a few dominant countries btc is effectively useless as a hold of value and you're back to convincing the pizza guy to accept 30 coins for one pizza and other one off transactions
Re:US travel firm $4.5M ransom negotiation open chat by albuic on Monday August 03, 2020 @06:24PM (#24044184)
If you give me 30 bitcoins I will even give you a free pizza and deliver them almost anywhere. Joke appart, it is effectively useless for now but some places are now accepting it which means that the usefulness might change sooner than we expect. It doesn't mean the seller won't be able to locate you with the address for the delivery though. Real problem will be if they use Monero or some real anonymous cryptocurrency where fungability is respected.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Monday August 03, 2020 @03:09AM (#24034921)
That doesn't really have any impact on the situation being discussed, though. Criminals are still more than happy to accept bitcoin.
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @10:29PM (#24033640)
The entire thing relies on several things: nearly always-on connectivity, ability to convert to USD, crummy UX, and legit cover.

A ban would do serious harm to 2, 3 and 4. If no one could pay legitimately and it would become (ever more) difficult to launder, the ransomware demands would die. The first (connectivity) could be impacted as well. What would happen when traffic shaping makes sync take longer and when every LN transaction risks losing money due to disconnections?

Re:US travel firm $4.5M ransom negotiation open chat by zenexer on Sunday August 02, 2020 @10:50PM (#24033759)
This isn’t a defense of Bitcoin. I’m often quite critical of cryptocurrency and believe the world would be better off without it. However, “banning” it won’t have the effects you’ve described, and you seem have some misunderstandings about how Bitcoin works, especially as it pertains to the criminal world.

1. Bitcoin transactions don’t require access to the internet at the time the transaction takes place. There have been solutions for performing offline transactions, though none have really taken off. Nevertheless, it’s not hard to do, though it’s riskier for the recipient than an online transaction. I won’t go into the technical details, but it’s nothing fancy. The idea is that you can place money in any number of accounts ahead of time, then simply pay people by handing them the keys to those accounts. There’s little overhead for creating new accounts; often merchants will use a fresh account for every transaction. Of course, the recipient has to be able to trust that they’re actually receiving keys to an account with the right amount of currency, which is a harder problem to solve.

2. This isn’t necessary. Bitcoin was popular in certain criminal communities long before there was any easy way to convert between Bitcoin and fiat. Cashing out dirty Bitcoin to USD remains risky.

3. The UX is already terrible. The UX that criminals experience isn’t the same UX that investors experience. They can’t use services like Coinbase to cash out.

4. Prior to Bitcoin going mainstream, the cover was that you could exchange your Bitcoin for various illegal products and services. (Want to buy a stolen car?) When there’s a whole underground economy whose participants are thoroughly convinced they are outside the reach of the law, any currency will work, as long as there’s a consensus within that community.

Banning cryptocurrency would have some interesting effects, but it would be nearly impossible to enforce, and it wouldn’t have the impact you’re seeking.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @11:04PM (#24033829)
1. Passing keys around risks the original sender (or anyone listening in) grabbing the money after 'payment', and voids any guarantees Bitcoin etc. might be able to make - the transaction isn't even listed on the chain.

This would turn a 'trustless blockchain' to a 'non-blockchain relying on trust'. Assuming this transition can even be done (what would be the point of cryptocurrency in that case?), the result would be like the known hawala networks, which at least do not enable so much criminal activity and have some decent uses.

2,4. Bitcoin had an aura around it. Something experimental not really concerned with money or big crime, maybe a way to buy light drugs. Later on as a magnet for speculation. Remove the official cover, and laundering would become way more difficult.

3. There's terrible UX, and there's 'terrible horrible UX when one could easily lose money because the ISP closes your lightening connection'.

So I think this is possible to enforce, not completely, but there's no need for 100% enforcement to have a positive effect.

Re:US travel firm $4.5M ransom negotiation open chat by vmception on Sunday August 02, 2020 @11:50PM (#24034048)
That implementation of offline transactions is a poor one, so the rebuttal would be too, but the reality is that bitcoin can work with offline transactions.

You can create the transaction object and hand that over. Transferrable literally as a file.

Instead of having over notes with the private key on them.

Eventually that transaction will need to be settled onchain. This can work in a world without a familiar looking ubiquitous internet. Regional internet cafes or even radio stations can settle signed transactions. People can have stocks of transactions and they just go to the cafe to settle those and also get their updated balance.

This capability always undermines a "ban crypto" thesis, or even a "crypto doesn't survive the apocalypse when the power goes out" thesis. It is merely a concept, just like computers communicating to each other is a replicable concept even if the head of state has an internet kill switch.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @12:03AM (#24034115)
Well, that was a simple scenario with a simple answer. But there are many other things powerful adversaries could do. For example, what happens when miner traffic itself is disrupted and the network is forcibly split between China and the rest of the world? Leaving everyone at risk of having their transactions overwritten when the network is allowed to reintegrate?

Anyway, we don't need a 100% effective ban to get an effect. A 90% ban may well be good enough for any practical purpose. Your example is a good one - sure, there are ways to get around 'internet kill switches' several countries have, but in practice these (unfortunately) work.

The fact that some people in a cafe can get one cryptocurrency transfer going is no defeat for a ban, so long as the ban is effective enough to reach its intended effects (e.g. making ransomware useless).

Re:US travel firm $4.5M ransom negotiation open chat by ric2b on Monday August 03, 2020 @06:19AM (#24035999)
> what happens when miner traffic itself is disrupted and the network is forcibly split between China and the rest of the world?

How would this be done? It only takes a single node capable of connecting to both networks to keep the whole thing working. There are already many nodes working with satellite connections so I'm pretty sure this can't be done even by state actors.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @06:07PM (#24044029)
A satellite connection is still dependent on BGP routing to get to China/RoW and still goes via the Great Firewall to connect to China (if outside of China, not sure on how the miners in China do it - possibly they don't have satellite equipment at all). Poisoning BGP routes is well within the capability of state actors, and China could of course decide to block its firewall.
Re:US travel firm $4.5M ransom negotiation open chat by vmception on Monday August 03, 2020 @12:06AM (#24034131)
sure yeah, a deflationary currency crashes back to $2.50 and institutions are turned off of it for good

but the utility stays the same at $2.50 or $25,000 (offline-for-most, stateless monetary system with managed/predictable supply)

the same utility is inherited by most of other blockchain technologies

Re:US travel firm $4.5M ransom negotiation open chat by jsmith99 on Monday August 03, 2020 @02:15AM (#24034676)
If you only upload your transactions infrequently how do you prevent double spend attacks?
Re:US travel firm $4.5M ransom negotiation open chat by melq on Sunday August 02, 2020 @10:34PM (#24033673)
I think the person you're responding to is how you would go about banning it in the first place, not necessarily why you would ban it.
Re:US travel firm $4.5M ransom negotiation open chat by garmaine on Monday August 03, 2020 @03:16AM (#24034958)
Yes that's what I meant (not sure why you were down-voted).

Banning banks from doing business with bitcoin exchanges is not banning bitcoin. Banning use of bitcoin entirely is legally plausible, but technically impossible to implement without draconian internet censorship on the scale of China. It's a 100x harder to ban bitcoin than, say, bittorrent, and banning that in a free society ended up not being possible.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @03:41AM (#24035072)
Well, ensuring that no one sets up a Bitcoin network from their retrofitted computers in the privacy of their home is not banning Bitcoin, at least not a useful ban that we should care to enforce.

If we can disrupt the network so that even criminals can't get ordinary people to 'pay' via the network, than it's for all practical purposes a ban.

I don't agree that banning it is harder than bittorrent. It's dramatically easier. Bittorrent doesn't have global state, so there's no one place to strike. The entire Bitcoin network depends on global consensus, and therefore there is one place to strike. If it is weakened so that it shrinks enough (how many miners will want to mine for an illegal activity?), than 50%+1 attack will be trivial for a state actor.

Re:US travel firm $4.5M ransom negotiation open chat by apta on Monday August 03, 2020 @03:20AM (#24034983)
> right now, cryptocurrency has negative value for society

It's hard to say. The current fiat system, due to predatory and parasitic practices such as the inherent interest involved in working with it, and how the government is able to control inflation at will, is absurd.

Re:US travel firm $4.5M ransom negotiation open chat by kerkeslager on Sunday August 02, 2020 @11:02PM (#24033819)
> Just wanted to make this same point - right now, cryptocurrency has negative value for society. Perhaps this is a justification for banning the current implementations.

Ehhhh, I think the overall impact of Bitcoin is negative, but the "democratizing large-scale crime" argument is a pretty poor argument for why that is. First, Bitcoin isn't "democratizing" anything good or bad--people need to stop using this word with regard to Bitcoin. But assuming you mean something along the lines of "enabling", or "empowering", I'm not sure that the shift in computer hacking crime which is caused by Bitcoin is actually negative.

Prior to Bitcoin, the people who paid for poor security were consumers whose data, money, and time were stolen. In theory if an entity exposes your data, you can sue them, but in reality, data breaches are common and when entities actually get sued, they rarely pay out significantly. I've followed the Equifax case every step of the way for years and still haven't received a dime, and I doubt many people would follow through all the hoops they've put in place--I'm mostly doing it out of curiosity at this point.

That still happens, but more and more, ransomware's biggest targets are large entities which should have secured their services better. Not only does ransomware punish the entities who should have prioritized security, not the consumers, it also makes it public knowledge whose security is lax.

Now there are a lot of complexities here. In theory, ransomeware hackers could also sell the data--but as far as I know that doesn't happen much, probably because they rely on the "honest crook" effect to ever get paid. And sometimes ransomware is employed against individuals.

And to be clear, I'm not endorsing ransomeware attacks. I'm just saying this looks like harm reduction to me: if a big business is going to not prioritize security and get hacked, then I'd rather they pay a ransom than have user's private data sold on the darkweb. In a more just system, that's just the fines they'd be paying anyway.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @11:24PM (#24033925)
What harm reduction happens when the 'large entities' are the courts[0], municipalities[1] or even hospitals[2]? Alleged better safeguarding of our data* isn't worth it.

* I suspect that right now companies find it cheaper to pay than to improve their security.

[0] https://wtop.com/national/2020/05/texas-high-courts-hit-by-r...

[1] https://www.msspalert.com/cybersecurity-research/municipalit...

[2] https://www.wwnytv.com/2020/07/28/western-ny-hospital-recoun... https://edition.cnn.com/2019/10/11/us/alabama-hospital-ranso...

Re:US travel firm $4.5M ransom negotiation open chat by kerkeslager on Monday August 03, 2020 @09:31AM (#24037524)
> What harm reduction happens when the 'large entities' are the courts[0], municipalities[1] or even hospitals[2]?

Aren't these the entities that you would most want to keep your data secure?

> Alleged better safeguarding of our data* isn't worth it.

> * I suspect that right now companies find it cheaper to pay than to improve their security.

That makes no sense, because if you don't improve your security, you'll be hacked in the same way again. There isn't an upper bound on how much it can cost to not improve your security.

Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Monday August 03, 2020 @06:20PM (#24044152)
>Aren't these the entities that you would most want to keep your data secure?

I don't think the local municipality or the courts have anything I'd consider sensitive on me. Regardless, my bigger desire is for them to stay running, especially the hospitals. I'm not willing to temporarily shut some down 'for better security'.

>That makes no sense, because if you don't improve your security, you'll be hacked in the same way again. There isn't an upper bound on how much it can cost to not improve your security.

What actually happens is that the targets pay, and issue tougher mandates which may or may not be respected in their organization. These hacks are rare enough for now - I suspect hackers don't like to hit the same target again soon after (bigger risk of the target not paying you) - so eventually the organization slips back into same security morass they were in the first place, if they ever left it. There isn't a true desire to change.

Also, there is an upper bound if you're paying insurance, like that hospital did[0]. Over the long term insurers will raise their price, but at least it's a predictable bound.

[0] https://www.wwnytv.com/2020/07/28/western-ny-hospital-recoun...

Re:US travel firm $4.5M ransom negotiation open chat by tsimionescu on Monday August 03, 2020 @01:55AM (#24034610)
Even if the ransomware perpetrators aren't selling the data, do you think there is any real chance that a company that just paid millions of dollars in ransom would next go and invest more money into security?

More likely, other criminals will come knocking on the same company's systems and get that data for other purposes.

Re:US travel firm $4.5M ransom negotiation open chat by kerkeslager on Monday August 03, 2020 @10:07AM (#24037937)
> Even if the ransomware perpetrators aren't selling the data, do you think there is any real chance that a company that just paid millions of dollars in ransom would next go and invest more money into security?

Yes. Or, they can get hacked again and pay another ransom until they learn their lesson.