this post was submitted on 30 Oct 2026
502 points (99.0% liked)

Technology

89355 readers
3473 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

Article is by Molly White, who you might recognize from Mastodon and web3isgoinggreat.com:

https://hachyderm.io/@molly0xfff/117526961419935070

I wrote up what we know about the Binance hack so far. By my best estimate, Binance is out around $3 billion after stablecoin issuers froze what they could. Changpeng Zhao is promising Binance will cover it, but he’s legally barred from running the company.

you are viewing a single comment's thread
view the rest of the comments
[–] FlashMobOfOne@lemmy.world 24 points 2 days ago (3 children)

Lotta comments here blaming the victims.

This was likely an instance of social engineering within Binance and nothing to do with the underlying securities, folks.

[–] Denfa@lemmy.world 2 points 1 day ago (1 children)

Are you saying Binance engineers always intended to trigger a steal? Because that’s exactly what I thought when I saw the headline but I’m not well informed about block-chain security.

[–] FlashMobOfOne@lemmy.world 3 points 1 day ago* (last edited 1 day ago) (1 children)

No, I think someone obtained one of their employees' credentials via social engineering. It's not that hard to do, you just call someone and tell them you're from IT and their password, or security key, or passkey or whatever is expiring and pretend to set them up with a new one or convince them to let you remote into their PC to make some kind of security update.

That's usually how it happens.

[–] Denfa@lemmy.world 3 points 1 day ago (1 children)
[–] FlashMobOfOne@lemmy.world 2 points 1 day ago

Sure thing. Have a nice Saturday!

[–] ayyy@sh.itjust.works 18 points 2 days ago (2 children)

Are they really “victims” when they willingly gave their money to an unregulated not-bank?

[–] FlashMobOfOne@lemmy.world 19 points 2 days ago* (last edited 2 days ago) (3 children)

Yes.

You may not like the product but these people still have a reasonable expectation of security, and they should.

I don't care for AI girlfriends, but when they convince a teen to off themselves I still acknowledge that the teen is, objectively, a victim even though the product is unregulated.

someone can be a victim and the blame can lie mostly in said victim's actions.

[–] REDACTED@infosec.pub 6 points 2 days ago (1 children)

You may not like the product but these people still have a reasonable expectation of security

I'm a sane human being, therefore my expectancy of safety from any crypto exchange point is zero.

If I'd hold a wallet, I'd likely install the most strict firewall rules out there.

[–] FlashMobOfOne@lemmy.world 0 points 2 days ago (1 children)

"I'm a sane human being"

Not a great start.

my expectancy of safety from any crypto exchange point is zero

Honestly, I'm skeptical of using dedicated crypto exchanges too. I have somewhere between 15 and 20 percent of my portfolio in crypto, but through a regular brokerages that deal in standard securities like stocks, bonds, and mutual funds. If I had all of my wealth in it, I'd have it all stored in a cold wallet on external media, but even that isn't 100% foolproof.

There have been several incidents with crypto exchanges, yes. That said, there are hundreds, if not thousands, of major corporations in the US have had significant publicly infamous security breaches within the last decade, so it seems illogical to pretend as if security breaches are somehow unique to the crypto industry.

People who use crypto are not insane.

[–] REDACTED@infosec.pub 4 points 1 day ago* (last edited 1 day ago) (1 children)

Not a great start.

Just FYI, when people say that, it rarely means self-bloating/putting themselves pedestal, it usually means insulting the thing you're talking about, aka. "only insane would trust to hold large sums on crypto exchange points", not that I'm super duper sane. A figure of speech

[–] FlashMobOfOne@lemmy.world 2 points 1 day ago

Thank you for the explanation. Have a nice Saturday.

[–] ayyy@sh.itjust.works 4 points 2 days ago* (last edited 2 days ago) (2 children)

That’s different because we don’t expect teenagers to make good decisions so we try to protect them. All Binance customers are adults.

[–] tachikoma@lemmy.today 13 points 2 days ago* (last edited 2 days ago)

You expect adults to make good decisions?

This is why the world is the way it is...

[–] FlashMobOfOne@lemmy.world 3 points 2 days ago

We'll just have to agree to disagree. Have a nice day.

[–] badgermurphy@lemmy.world 6 points 2 days ago

They were victims of being convinced to do that, yes.

[–] NathanRanch@lemmy.zip 7 points 2 days ago (1 children)

I read they got into a container from an old laptop. If true that's one I.T. department about to get snapped.

[–] pineapplelover@lemmy.dbzer0.com 3 points 1 day ago (1 children)

Yeah it was a dev ops engineer's laptop

[–] jjlinux@lemmy.zip 2 points 1 day ago

Fucking lol. That's where we're at today in terms of development and cybersecurity 🤣