Pages:
Author

Topic: Binance BTC Hack is due to 2FA - page 3. (Read 520 times)

tyz
legendary
Activity: 3360
Merit: 1533
May 08, 2019, 10:24:32 PM
#13
What Dave Jevans recommends moving forward is a 3FA approach. Has anyone used this or what are your thoughts?

You can install as many security mechanisms as possible if the users act carelessly in the end. Social engineering is a broad field, so you can't say exactly how the hackers got to the data, but it often happens via a personal mail asking to change the password and then redirected to a fake site. It is difficult to prevent such mistakes from individual users.
member
Activity: 224
Merit: 62
May 08, 2019, 09:51:31 PM
#12
should we all go out in these from now on with super thick glasses and wear gloves at all times? make sure to hold our breath the entire time and our piss and shit, they could see where you are when you piss, they own the sewer systems. Don`t you even think of shedding 1 single hair or skin flake.

member
Activity: 224
Merit: 62
May 08, 2019, 09:43:14 PM
#11
3FA could work for a while and I am sure hackers will find a way to obtain your fingerprint or retinal scans and use a digital copy of it to bypass security. Any security employed always have the weakest link, the user or human nature that can be exploited.

If 3fa is as I suggested

how will they not get caught? I mean lets say worst case scenario, Let`s say the physically kill your or kidnap you, the funds move on your account, it is reported to blockchain and it sorts it out to the robo network that tells the people, the people are the police, when buddy tries to use the funds at any store the merchant who is a police officer as well, they will arrest him, the cameras will catch him long before he has anything to buy anyways I am sure of it. So even worse case scenario because if they kill you, we will all know because your dna has gone stale, or you have no re upload your own video to the network in a few weeks to reverify. We will be able to see that you have not bought food in 2 weeks and your family probably already reported you missing. I mean like we can see on video if it is you or not when you are 3fa`ing, here is the global sound you make while they force your face to the camera with a gun being point at you, "help they are robbing me lol" "CAW CAW" "CAW CAW" Heck just tilt the camera a little towards them and we will see or just give them the funds, and after tell the network lol.  
 
member
Activity: 224
Merit: 62
May 08, 2019, 08:49:45 PM
#10
We should all be cops, bankers, military, judges, fire force, government.  (IF WE WANT TO BE WILLINGLY)

We should all be voting on issues
We should all be able to make issues to vote on
We should all have at least 1 back up house, with self sustaining food, water and green energy. If not why not 2 or 3.
We should be on mars by now
We should be on the moon by now
We could of been in another galaxy by now!

Patents hold us back, same with copyright. WHY? LIKE WTF? ARE YOU DOING? GREED BLINDS YOU.
open source that shit

If every greedy person stopped being greedy, there would be more for everyone not just everyone, but them included.

Who wants a free moment of my time? Go ahead ask me anything? We don`t live in fear, they do. They are the ones with the bunker backups for them, not US!
https://www.youtube.com/watch?v=WQtRDr0qHvY
THAT OUR LIMITED WORK AND TIME PAID FOR! IT ALSO PAID FOR THEIR JOB TO PROTECT THEM, NOT US!
member
Activity: 224
Merit: 62
May 08, 2019, 08:20:50 PM
#9
3FA could work for a while and I am sure hackers will find a way to obtain your fingerprint or retinal scans and use a digital copy of it to bypass security. Any security employed always have the weakest link, the user or human nature that can be exploited.

True, DNA(spit,blood,sweat,piss,shit) is the ultimate solution, if it was tied into the hospital records we would even be able to tell if the DNA used by that person on the chain is dead. It would be pretty easy to catch people in a p2p network sending one users funds they stolen to another to link it to them, if you don`t get killed and get robbed you just say hey police robo cop network, my funds were stolen, freeze them. If you make people renew it once a year, we can make sure no dead people are voting or collecting UBI. People will stop stealing from eachother, and they will be 100% sure to get caught when they do.

But 2FA < 3FA < 4FA < 5FA < ∞

Is better than 1 or 2 FA

fingerprints is the easiest way to go (some people don`t have fingers)
eyes is another easy way to go (some people don`t have eyes)
DNA is universal.

They don`t have to be pictures, they can be videos, making the person in the video do certain things or random things to verify more proof of person.

We really need to be careful here, not all earthlings are on the same page, if this tech is used in the wrong hands, it could wipe out a entire gene pool, drones could scan your face from the sky and 1 tap you.
We need to keep it away from religious radicals and terrorist.

Imagine I had a blockchain of everyone and their face in my country, we could set up drone helicopter or plane to scan your face and if it does not match our data base, it kills you.

Granted here in Canada, China and US, they already have street cams that are linking you to your facebook and email. So Yah...  I don`t know what to do  Undecided

This is public tech, https://www.youtube.com/watch?v=aE1kA0Jy0Xg Imagine what they got.

We really need to make a Super Colony to prevent this from happening, The tech is in the wrong hands, So is the money supply, It needs to be in all of our hands, so all of humanity's interest are invested in. It was reverse psychology on all of these One World Order things (conspiracy things on youtube) Government speeches. We want a one world order, but we want one that does not force us to be a part of it, we are willing. The One World Order to be run by all of us. Divide and Conquer is how they win. Unite and Conquer is how we all win.

https://www.youtube.com/watch?v=wMKpYxhI2KI
10,000 thumbs up 99%, 90 thumbs down 1%
(well close enough)

90 out of 10,000 people are greedy.

THAT ORDER NEEDS TO BE OUR ORDER.


"And so long as men die, liberty will never perish." COME AT ME BANKERS, COME AT ME POLITICIANS, COME AT ME YOU MACHINE MEN.

 I am the Matter that cannot be crushed anymore, every time you kill me I come back, brighter than ever, go ahead try and put out my flame, I dare you.
jr. member
Activity: 184
Merit: 2
May 08, 2019, 08:20:17 PM
#8
I am just hearing of a 3fa securitysystem for the first time, but it is a welcome development if a 2fa system has failed, it's a very serious threath to cryptocurrency space if a renowned cryptocurrency exchange like binance can be hacked.
sr. member
Activity: 980
Merit: 294
May 08, 2019, 08:04:53 PM
#7
Havent heard of 3fa authentication before but I guess it was coming if 2fa can be hacked into as your article suggested what happened to binance losing their funds.
We already have it, if you're not aware and it seems good if they push it through as additional authenticator as it will strict the access on our accounts.

We have three factors in using authentication
[1] something you know ( e.g. password )
[2] something you have (e.g. smart card )
[3] something you are ( e.g. biometric or fingerprint )

We all see in some scifi movies that scanning a retina to be able to enter into a restricted area is a cool stuff. So I guess that will really enhance the security unless someone kill us and get our eyeball. lol!
member
Activity: 224
Merit: 62
May 08, 2019, 07:59:56 PM
#6
3FA could work for a while and I am sure hackers will find a way to obtain your fingerprint or retinal scans and use a digital copy of it to bypass security. Any security employed always have the weakest link, the user or human nature that can be exploited.

True, DNA(spit,blood,sweat,piss,shit) is the ultimate solution, if it was tied into the hospital records we would even be able to tell if the DNA used by that person on the chain is dead. It would be pretty easy to catch people in a p2p network sending one users funds they stolen to another to link it to them, if you don`t get killed and get robbed you just say hey police robo cop network, my funds were stolen, freeze them. If you make people renew it once a year, we can make sure no dead people are voting or collecting UBI. People will stop stealing from eachother, and they will be 100% sure to get caught when they do.

But 2FA < 3FA < 4FA < 5FA < ∞

Is better than 1 or 2 FA

fingerprints is the easiest way to go (some people don`t have fingers)
eyes is another easy way to go (some people don`t have eyes)
DNA is universal.

They don`t have to be pictures, they can be videos, making the person in the video do certain things or random things to verify more proof of person.

We really need to be careful here, not all earthlings are on the same page, if this tech is used in the wrong hands, it could wipe out a entire gene pool, drones could scan your face from the sky and 1 tap you.
We need to keep it away from religious radicals and terrorist.

Imagine I had a blockchain of everyone and their face in my country, we could set up drone helicopter or plane to scan your face and if it does not match our data base, it kills you.

Granted here in Canada, China and US, they already have street cams that are linking you to your facebook and email. So Yah...  I don`t know what to do  Undecided

This is public tech, https://www.youtube.com/watch?v=aE1kA0Jy0Xg Imagine what they got.
some more stuff https://www.youtube.com/watch?v=Cgxsv1riJhI
https://www.youtube.com/watch?v=4BdyGFfaRlk
legendary
Activity: 2828
Merit: 1497
Join the world-leading crypto sportsbook NOW!
May 08, 2019, 07:57:35 PM
#5
3FA could work for a while and I am sure hackers will find a way to obtain your fingerprint or retinal scans and use a digital copy of it to bypass security. Any security employed always have the weakest link, the user or human nature that can be exploited.
Yes this is what I was thinking too. Anything dealing with security will eventually get hacked because they are not updated often enough giving time to those who are doing the hacking chances to try and crack any sort of defense they would put in place.
legendary
Activity: 2240
Merit: 1069
May 08, 2019, 07:54:45 PM
#4
3FA could work for a while and I am sure hackers will find a way to obtain your fingerprint or retinal scans and use a digital copy of it to bypass security. Any security employed always have the weakest link, the user or human nature that can be exploited.
member
Activity: 224
Merit: 62
May 08, 2019, 07:42:24 PM
#3
With the recent Binance hack of 7,000 BTC cyber security firm Ciphertrace pointed out that the reason hackers were able to obtain API keys, 2FA codes and other info was due to hacking hot wallets using a two factor approach, social engineering and SIM card porting of phone numbers.

What Dave Jevans recommends moving forward is a 3FA approach. Has anyone used this or what are your thoughts?

https://cryptobriefing.com/binance-promises-to-cover-7000-btc-lost-in-hack/

Here is a few things they can do POP proof of person https://www.youtube.com/watch?v=l4x0vOAu0lQ
They could also when they see a bunch of accounts withdrawing or trading alts into bitcoin at the same time, freeze those accounts. Set up a "line up" where they can only service one person at a time. Every time these big exchanges get hacked there is so many accounts doing something at the same time. Why not have a Queue?

Imagine being in a mcdonalds and everyone walks up and orders something from the cashier at the same time, that is what is going on here.
Why not make them form a line and take each customer one at a time? or 3-4...

Kind of like a data throttle or engine throttle

Granted this will only stop massive attacks and slow them down, but small scale attacks will be done if they don`t use 3fa.
850,000 coins went missing more than satoshi owns has because of not having a line, at mt.gox.

It is pretty simple you set up a system where "if certain amount of users withdraw or alts are being traded and exchanged for btc which exceeds above normal a rate of traffic by 1.5x or 2x transactions" exec queue timer.

I don`t know I am no expert at coding but I am sure it would not take much. To do the later suggestion.
legendary
Activity: 2828
Merit: 1497
Join the world-leading crypto sportsbook NOW!
May 08, 2019, 07:35:16 PM
#2
Havent heard of 3fa authentication before but I guess it was coming if 2fa can be hacked into as your article suggested what happened to binance losing their funds.
member
Activity: 296
Merit: 12
May 08, 2019, 05:45:40 PM
#1
With the recent Binance hack of 7,000 BTC cyber security firm Ciphertrace pointed out that the reason hackers were able to obtain API keys, 2FA codes and other info was due to hacking hot wallets using a two factor approach, social engineering and SIM card porting of phone numbers.

What Dave Jevans recommends moving forward is a 3FA approach. Has anyone used this or what are your thoughts?

https://cryptobriefing.com/binance-promises-to-cover-7000-btc-lost-in-hack/
Pages:
Jump to: