sicko-yes stonks-up

Sadly probably just “scary foreigner” propaganda, but you can dream

  • Crucible [he/him, comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    63
    ·
    16 天前

    Just watched the coffeezilla 10 minute explainer on this and I guess the logic is ‘it must be DPRK because no one else would have the audacity’ which I love for their reputation, but also is funny since his channel’s motto is ‘crime is legal now’ and has covered individual guys bashing each other with hammers for hundred million dollar crypto wallets

  • jack [he/him, comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    58
    ·
    16 天前

    I don’t believe this was the DPRK, sadly, but I actually love this form of propaganda for how ineffective it is.

    1. It’s completely unactionable. What are they gonna do? Sanction North Korea?

    2. Crypto bros are super unpopular and so this boosts the popularity of Free Korea.

    • Soot [any]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      15
      ·
      16 天前

      Yeah there’s about zero evidence to truly believe it, but this being purported as true does make the above points funny as hell

    • Soot [any]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      29
      ·
      edit-2
      15 天前

      EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.

        • Soot [any]@hexbear.netOP
          link
          fedilink
          English
          arrow-up
          7
          ·
          edit-2
          15 天前

          EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.

          • electric_nan@lemmy.ml
            link
            fedilink
            English
            arrow-up
            22
            ·
            16 天前

            No it’s not. I’ve met a lot of people in infosec and they are clear about both being an issue. AI bots are like a force-multiplier for certain tasks, and comparing huge code repositories against known avenues of attack is one of them. Even though AI isn’t “smart” or creative like a person, you can spin up a fleet of them to brute force something very quickly.

            • queermunist she/her@lemmy.ml
              link
              fedilink
              English
              arrow-up
              15
              ·
              16 天前

              Yeah like the PHP vulnerability was something that was already known about, but was not thought to be exploitable.

              Bots change the threat calculation. They’re not magic hacking machines, but they make new forms of attack possible.

            • Soot [any]@hexbear.netOP
              link
              fedilink
              English
              arrow-up
              7
              ·
              edit-2
              15 天前

              EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.

              • electric_nan@lemmy.ml
                link
                fedilink
                English
                arrow-up
                5
                ·
                16 天前

                I was recently at a B-Sides event and I saw some researchers talk about it in a way that didn’t seem to me like “hype”. One example was a forensic analysis of a breach, that showed seconds between a file being accessed (industrial control manual), and their networked environmental systems being bricked. The chain of events suggested that the bot wasn’t initially targeting that system, but it was prompted to find something it could damage. Yes, AI is hype-train 9000, but people are using it. The amount of spam/phishing emails hitting our filters has tripled (or more in the last few weeks alone. Phone scammers are increasingly using AI bots. These are all leading to more security incidents.

      • chgxvjh [comrade/them, he/him]@hexbear.net
        link
        fedilink
        English
        arrow-up
        5
        ·
        16 天前

        With newer code sure but they are also finding old bugs like in PHP.

        Projects on a of critical importance on a shoestring budget and suddenly now that corpos can spend money on security audits without paying workers they are willing to spend the money.

        • Soot [any]@hexbear.netOP
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          15 天前

          EDIT: I regret saying anything, having these conversations is exhausting. AI is the real brainworms. Think for yourselves nerds.

            • Chana [none/use name]@hexbear.net
              link
              fedilink
              English
              arrow-up
              2
              ·
              16 天前

              I really don’t think so. Outside of lower level languages like C or rust everything is just memorizing a few incantations for most server languages. Main thing is that PHP (WordPress) actively gets you to change and deploy server code as a rando.

                • Chana [none/use name]@hexbear.net
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  15 天前

                  That is a WordPress thing though. And it is a bad design decision that creates a myriad of vulnerabilities that constantly occur as the underlying framework is itself not robust enough to prevent catastrophic mistakes. This ends up making running a secure WordPress site that has the features everyone documents rely on hosting it on a cloud service rather than yourself, as they will automatically apply patches to work around these constantly-emerging vulnerabilities. Major CVE last with with RCE. If you host anything with even just PHP take the service down if it hasn’t been patched yet.

                  Anyone could do the same with a NodeJS CRM or something and make it just as accessible. PHP isn’t itself more accessible. It is just a bad design decision by WordPress that those using other languages choose not to replicate.

  • Infamousblt [any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    40
    ·
    16 天前

    I’m just gonna start blaming North Korea for my mistakes at work. Oh sorry boss I actually can’t work today North Korea hacked my Internet. Oh sorry boss that document is late because North Korea hacked my laptop and deleted it. Oh sorry boss I didn’t respond to that email because North Korea marked it read before I saw it and it got buried

    • Soot [any]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      20
      ·
      16 天前

      It’s amazing and super convenient that the source of all our failures are people in the bad countries

      i-spil-my-jice Damnit North Korea

  • Evilsandwichman [none/use name]@hexbear.net
    link
    fedilink
    English
    arrow-up
    25
    ·
    16 天前

    Good? If I recall correctly Binance did something that harmed Palestinians; either Palestinians from Gaza/West Bank were blocked, or it was being used to raise funds to help Palestinians and they blocked that (DURING the genocide).

    The DPRK is already based on Palestine, this would just make them cooler.

    • Soot [any]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      20
      ·
      16 天前

      I mean hell yeah for sure. Just being crypto was bad enough in my eyes, no surprise if they’re also chuds

  • Monk3brain3 [any, he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    20
    ·
    16 天前

    Someone has to fight the scourge of cryptocurrency and I can’t think of a better candidate lmao (with NK despite its faults being ultimately anti US imperialism). China also banned crypto so even less reason for NK not to go absolutely ham