So the enforcement mechanism here has to be through the courts: some student or students will sue the district for negligence. Paying out millions of dollars in legal settlements is something the district will care about, and might cost someone their job, so it's a good stick for the hackers to use if the district would lose such a lawsuit.

What's the case law like here? Are they likely to lose?

I'd bet this is something the voters will care about, but it's likely to be attributed to some 'innocent mistake', 'communication error', or 'server misconfiguration'. The school district won't lose any revenue, and I doubt anyone will get fired. Maybe a contractor will get scapegoated.

People on HN complain about how reckless private companies are with their data, but bureaucracies are even less accountable.

I supposed it may light the districts' ass to get good security, but if you don't know what good security looks like, how are you supposed to know?

Any uni that has undergone similar project will have the project charter, resources, skills, timelines, lessons learned (the whole project folder).

Where there is a will there is a way. And I believe thay many organisations DO know that they operate on low/bad security, they just prefer to roll the dice and use the budget for something else..

https://k12cybersecure.com/map

PS The latest incident, with commentary from the district superintendent: "Got to work this morning, powered up my computer and the first message I got was you’ve been encrypted. Basically, you know, the same old thing…you’ll have to pay us in bitcoin, we’re holding your data ransom, you need to contact this email address."

https://www.kalb.com/2020/10/02/cyber-incident-affects-avoye...

Oh no wait I see the problems.

[1] https://digiconomist.net/bitcoin-energy-consumption

My work with large miners - who all rely on clean or reducing pollution by using unused energy - and the economics of all miners would say that 75% of all mining is renewable energy.

You would therefore have to divide all their problem metrics by 50-60%.

Regarding "e-waste as much as Luxembough", is that really a lot? I don't actually know what to compare that to, all I see is "gasp a country!" and no quantitive metric compared to say any other industry or even other jurisdiction's use. With that in mind, I also am not sure it is accurate. Bitcoin e-waste doesn't really result in more machines, it results in the same amount of machines being replaced and doing more. This is because the economics has already pushed people to renewable energy sources, and the people that can already have. People that are just catching on are using people's "wasted" machines and mining with those.

Ah the source you ask? All the private details about my clients. Hm, yeah not going to happen, there might be a few press releases, and there might be a few court documents that have nothing to do with mining but normal business disagreements in companies that do mine.

The balanced answer is that this is something to remain vigilant about. Nations mining at a loss and printing currency to do so will absolutely not care about the power cost or source, and this is where we are headed. The private sector is not capable of doing this as uneconomically as that site suggests, pay attention as that site's assumptions are intertwined with facts. Just notice where they don't have any facts and be willing to balance that with other accounts like mine.

> You would therefore have to divide all their problem metrics by 50-60%.

Do you mean the metrics would be doubled or halved?

> Bitcoin e-waste doesn't really result in more machines, it results in the same amount of machines being replaced and doing more.

I don't follow. If hardware is being used for crypto it isn't being used for something else. This must either push up the cost of hardware or simply add more to the total amount in the world.

Hardware has a limited life so crypto must contribute to e-waste. Why is it appropriate to attribute the hardware usage to non-crypto workloads but not crypto? What's the difference?

The entire story that crypto is “taking away” is wrong when it is giving in more cases than not because its the only economical way to mine.

This goes hand in hand with the e-waste fallacy. The hardware doesn't go obsolete if the power costs are low enough, and at the remote power source it is low enough. There is a robust trade of “obsolete” hardware from people that have higher power costs to people that have lower power costs.

Is new single purpose hardware being created for a purpose you don't respect even when confronted with new information? Yes. Is the impact overblown and oversimplified? Yes. Should you make sure the reality doesn't turn into the imagined nightmare? Yes. Remain vigilant, just have more accurate arguments so you know what to watch out for.

That could not be more wrong. It requires piles of infrastructure: energy generation, transmission, cooling for miners, miners themselves, and so on.

> The entire story that crypto is “taking away” is wrong when it is giving in more cases than not because its the only economical way to mine.

Literally if people stopped wasting a country of power, generating stations would go offline.

> This goes hand in hand with the e-waste fallacy. The hardware doesn't go obsolete if the power costs are low enough, and at the remote power source it is low enough. There is a robust trade of “obsolete” hardware from people that have higher power costs to people that have lower power costs.

Absolutely not a fallacy. People literally throw out old miners and replace them with new miners to get a leg up on their peers. This is the waste. You can't pretend this away. 107 grams worth per transaction.

Again, even if the hardware has a longer life due to "cheaper" energy why is crypto uniquely suited to take advantage of this?

> Is new single purpose hardware being created for a purpose you don't respect even when confronted with new information? Yes. Is the impact overblown and oversimplified? Yes. Should you make sure the reality doesn't turn into the imagined nightmare? Yes. Remain vigilant, just have more accurate arguments so you know what to watch out for.

This kind of cryptic condescension raises red flags for me. If you have information please share it. I am capable of making up my own mind without being talked down to.

Other things just aren't profitable and didnt satisfy anything for the energy provider.

And again, nobody is looking for other things just for the sake of proving that something else can use less energy because there isn't a problem. Computers with no* emissions are reducing emissions and adding a use for energy that was not otherwise going to be used. It is literally the opposite of the story being peddled by pointing at the amount of power being used. This wasn't available beforehand, it isn't important to anyone if “unique” is too strong of a word or not.

*its annoying that I can perceive someone will argue that instead of the rest of the point.

The mining incentive structure and automatic deoptimization of the algorithm mean that there’s a constant arms race to build faster hashing hardware that lasts a few months and then gets thrown out without improving the performance characteristics of the underlying system. 7 transactions per second costs 620kWh and yields 107g of garbage. Each pair of transactions is like chucking your phone out the window and powering a home for 45 days. Do you see how shameful that is?

A Tesla gets 4 miles per kWh, so each pair of transactions - where you scribbled down an IOU into a big multiplayer excel sheet - consumes as much resources as driving round-trip across the United States and throwing your iPhone out when you get back.

The crazy thing is there's frequently a big overlap between the crypto enthusiasts and people who you know, believe in global warming and recycling.

> And again, nobody is looking for other things just for the sake of proving that something else can use less energy because there isn't a problem.

And I bet global warming isn't real either huh? I mean those oil companies aren't looking for alternative sources of energy because there isn't a problem.

The reality is economic incentives beat rationality pretty much every time hands down.

Just a nuance.

Mining does reduce pollution for oil companies. Its low infrastructure demands and longer than you expect shelf life does utilize power that was being unused or wasted. This is the crux of your argument and it is not accurate. You got here because you decided you dont like how that power is now being used after misunderstanding that it wasn't being used, and I dont care.

It is 100% additive. It doesn't reduce pollution for oil companies, at all, in any way. Certainly not when you take into account all the oil consumed to build and deliver all the mining hardware that's turned over to the tune of 12.31kT per year.

Fine say you're right. Show me a single study, a single article, a single write-up from a reputable source that shows bitcoin reduces pollution for oil companies.

> Its low infrastructure demands...

12.3kT of waste per year means a lot of infrastructure relative to what it provides which is basically nothing.

> ...and longer than you expect shelf life

Shelf life?

> ...does utilize power that was being unused or wasted.

No. If that power wasn't being squandered on a multiplayer excel game, it would be used for productive things. The same power cannot be used twice.

> This is the crux of your argument and it is not accurate. You got here because you decided you dont like how that power is now being used after misunderstanding that it wasn't being used, and I dont care.

It is massively, overwhelmingly less efficient than traditional banking and the generated waste and wasted power is purely incremental. If that entire transaction volume moved to traditional rails, the incremental power required to support it would probably be ~one guy on a stationary bike's worth.

VisaNet alone can handle 65,000 transactions per second. 7 is 0.01% of that.

For perspective, bitcoin would require, if scaled linearly, 123 Megatons of e-waste (triple the entire world today put together). It would require 700,000TWh or 23X the entire world's output of electricity. It would also emit 333,000 megatons of CO2. More than 10X the entire world's current output. Just to replace VisaNet. Of course it's physically incapable since even wasting that quantity of resources, the total transaction count would still be 7.

There's no world in which you can rationalize away that it's drastically, overwhelmingly, mind-blowingly less efficient.

https://www.bloomberg.com/news/articles/2019-12-06/why-bitco...

In case you can’t access bloomberg here it is over amp

https://www.google.com/amp/s/www.bloomberg.com/amp/news/arti...

One of your other points that I choose to respond to: The energy use doesn’t scale linearly to transaction activity and is not a prerequisite to the function of a proof of work network

I think there is enough information here to alter your lecture so I’ll wait and see. The rebuttal that I predict will be based on the size is the mining operation in the article, so just assume there are bigger ones doing the same thing.

> The energy use doesn’t scale linearly to transaction activity and is not a prerequisite to the function of a proof of work network

That's just a nice way of saying the bitcoin network cannot scale, intentionally so. Scaling is antithetical to proof-of-waste. At some point you run out of resources to waste.

It is being converted to power for the onsite computers instead of being flared away. How is that not better than the immediate flaring

Yes.

There are simply stronger arguments to lean into...

CPUs are able to do more with the same TDP each revision, Bitcoin can only perform the exact same 7 transactions per second no matter how much faster the underlying hardware gets.

I'm not convinced that banning cryptocurrencies will 1) significantly curb ransomware activity nor 2) that it's worth banning a tool with legitimate use that's valuable in certain countries with unstable economic situations (there are valid, non-nefarious reasons for why you'd need to move money without your government's approval).

Really? You're suggesting this happened on the same scale? So how many hospitals got hacked like this with PaySafeCard? How frequently did these occur? Nothing's changed since cryptocurrencies came along?

> Tech support scams use gift cards to get paid.

That's why nobody even mentioned tech support scams.

If the school feels that they cannot handle cyber security at such a level then use a typewriter for students' personal information. Once this information gets out there it can't be unreleased.

Edit: I do concede that crypto currencies probably increased the amount of ransom attacks on systems. I also think that security in systems that don't contain any PII probably isn't as important and these attacks do affect them too.

Mimblewimble based coins require an interaction between payment sending wallet and payment receiving wallet, making them unsuitable for ransom payments.

Sure there is. Just make it not possible to convert Bitcoin into real things. If it can't be turned into money or candy or online gaming tokens or electric eels and remains virtual, then what's the point?

If the US and China crack down on trading houses and currency conversion (aka ban them) there's not enough mining happening elsewhere in the world to keep the chain safe.

Getting such a ban in place would be the hard part. If US banned bitcoin, I'd imagine US's enemies would sponsor bitcoin exchanges/miners just to piss off the US. Also, considering that miners be located literally anywhere and only need a modest amount of bandwidth to operate, shutting down clandestine mining operations would be very difficult. See: all the illegal drug labs/grow ops around the world.

There's no telling how the legalities surrounding crypto currency will evolve but I seriously doubt that it will ever disappear.

Anyone with that much mining power has a huge financial incentive to keep the golden goose alive.

Isn’t a sufficiently underground crypto currency vulnerable to interference?

As a reminder, if you have kids - freeze their credit!

https://www.nerdwallet.com/article/finance/child-identity-th...

For comparison, in France, the national bank keeps a record of all loans anyone has taken. When you apply for a new loan, the bank will check with the national one your history, and decide based on that to lend or not, and inform the national bank of their decision. I suppose Americans can be afraid that "the government" will know their loan history in such a system, but it's not like they can't currently ask and het that information, and they're still more trustworthy than commercial companies that don't care about you ( their clients being banks and companies) or your data beyond their sales.

But it's not like anyone on the US would dare to destroy a profitable industry.

If banks' interests were aligned with their users (or legislation forced them to) the whole credit history system would be replaced by something more secure & less prone to fraud.

If I was a parent, I would be livid.

Make sure that you have good backups. So you can laugh at their demands.

Didn't a company with backups recently pay because they realized restoring would take months?

This will likely require criminal penalties to enforce.