i was wrong, Binance hack wasn't Cursor vuln - it was a much longer op
0 Boosts
0 Likes
@pndc i ran separate work and personal laptops just for mental hygiene and was immediately happier
@davidgerard Hark at mister lah-di-dah with budget for more than one working machine at a time.
@pndc they're not working for long i assure you
@pndc did i show you the aggrieved email IT sent my boss's boss about the condition of my work laptop
@davidgerard "We had to handle it in a fume chamber?"
Xxxxx has given me a laptop used by David Gerard and the below damaged has been reported on closer inspection.
12/05/2010: User reported hard disk failure. S/N: xxxxxxxx & Asset xxxx
Left side of casing cracked by at the fan.
Power inlet is damaged.
Casing to the left in front of keyboard and the front left corner by the microphone is cracked. Toshiba logo has been removed to the right of the touch pad.
Top of the screen casing is cracked.
Screw missing from right hinge.
Docking port is pushed into the motherboard.
Casing under fan is depressed and cracked.
“Open Rights Group” label has been stuck on top of the laptop.
Hard disk has failed. Hard disk was only replaced in November 2009.
The laptop was purchased last year and I’m not sure how the damaged was sustained but it is a worst case in comparison to Xxxxx Xxxxx. A hard drive failure was reported initially, but from inspection the overall condition of the laptop is poor for a model of this age.
====
it was the complaint about the open rights group sticker on the end as a “NOT ONLY THAT BUT” that got me giggling
i blame toshibas for being shit, cos they are
@davidgerard Soo.. Did this one enggineer do a job interview and related assignments for another company on the Binance-company laptop (quite bold move i must say) or do they not have company devices and it was a private one, byod style? (Which would be even worse, considering the company we're talking about here)
Good old fashionsocial engineering ?
@davidgerard It was definitely one of those "too good to check" stories, so perhaps we should have expected it to turn out to not be true after all. Oh, well.
I was already aware of the malware-delivering headhunting scam as it's been used a few times before to get into sensitive systems. Developers' personal laptops usually have terrible security (it gets in the way when hacking at stuff) and yet these machines also often have privileged access to their employers' systems. Supporting evidence: my personal kit until I got wise to the fact this is no longer a theoretical attack and started sandboxing.