Conversation

Notices

1. Andreas K (yacc143@mastodon.social)'s status on Friday, 15-Dec-2023 11:08:51 UTC Andreas K

   in reply to

   • BrianKrebs

   @briankrebs 🤷
   But surely it won't be illegal to pay for IT security consultants to repair the systems. You know, "specially highly recommended" remote working specialists who prefer to be paid in crypto.

   But yes, that's the obvious solution.

   Till somebody make it a case about "Freedom of speech", just a curious observation of a foreigner, the most curious things in the USA (medical therapy, fraud, …) all end up as 1st amendment cases.

   • Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • BrianKrebs (briankrebs@infosec.exchange)'s status on Friday, 15-Dec-2023 11:08:52 UTC BrianKrebs

     I've grudgingly come around to the notion that there is only one way out of the ransomware problem: Make paying a ransom illegal. This is not very different from laws that make it illegal for US companies to pay bribes to foreign officials.

     I really don't see any other way out of this mess. Yes, some victims will unfortunately ignore any laws that say they can't pay, but enforcement probably will not be hard.

     What will be difficult are the situations where peoples' lives are at stake in ransomware incidents This sounds callous, but we can't afford to take the short view here anymore, and our other alternatives aren't great either.

     I'm quite certain this is an unpopular view, but we have already seen the cost of doing nothing. At least in the interests of congruity for our financial sanctions vs Russia, we should probably make this change sooner rather than later.