zlacker

Wow. Such hacking prowess. Such bad opsec. Weird.

Ps not condoning the theft but I just find it strange that people with the skills to steal this much get caught using bog standard cloud storage. You'd think they could afford something better ;) Something along the lines of "you don't take notes on a criminal f** conspiracy" :)

>>GekkeP+(OP)
The article mentioned they were not thought to have conducted the hack itself.

>>SirYan+I
Ah ok sorry I checked the comments only. Should have read TFA sorry :)

>>GekkeP+(OP)
Honestly don’t know why people don’t AES/GPG encrypt the keys and send a message to alt.anonymous.messages.

That’s 30+ years of storage for free.

>>GekkeP+(OP)
> I just find it strange that people with the skills

people in Tech will yak-shave choosing the "correct" cypher. Then get pwned by an implementation detail like a bug in enigmail.

1) Hacking, 2) opsec and 3) tradecraft are totally different skills. The most dangerous people (to themselves) are the ones who cover only one of 3. The more advanced among them _know_ they lack in the other areas, but think they can compensate going even deeper on whatever they already know.

>>GekkeP+(OP)
People are sometimes too busy to deal with the many details of 'perfect' opsec. In other circumstances, they hire a professional to handle it for them, but that is more difficult for criminals.

>>GekkeP+(OP)
Anakata (guy who founded the pirate bay) hacked a bank and he is definitely some kind of genius. His idea for getting money out of the bank was to enlist a teenage thug to go to the ATM and withdraw money, which he had sent to the guy's account. Smart people do stupid shit all the time.

>>digian+q4
maybe he backed up to icloud by accident

>>GekkeP+(OP)
But the report does not state that they actually did it, only laundered it. it may have been someone else

>>vmchal+fs
This. It's harder than you may think to leave zero cloud trail of your activity and storage.

>>vmchal+fs
I bet he just got opted into iCloud Drive documents and desktop folders.

>>digian+q4
Why couldn't they just use a brain wallet on an offline device with no internal storage. Keep a hand written copy of the generated passphrase laminated in some plastic in some fake plaster rock under a tree in a wood or something.

>>raducu+Ok1
Take it easy Andy Dufrense

>>GekkeP+(OP)
We only know about the ones that get caught.

>>SirYan+I
That's just author's speculation. Most probably he did conduct the hack himself, because he had private keys to all the original withdrawal addresses.

>>raducu+Ok1
The idea is this would survive a search and potential jail term.