跳到主内容
@wquguru
精选65Bloomberg Television(YouTube)加密货币多源精选 ×8

比特币是黑客攻击的煤矿金丝雀

Bitcoin 'A Canary In The Coal Mine' For Hacks: Rubenfeld

原文
发到 X

Described it feeling like your cofounder and developers were, quote, off at war. What was happening behind the scenes, and what, in your view, made us all so urgent? It really did feel like that. It's been an action packed couple of weeks. What really made it feel that way is that there was a clear attack underway. So, awareness of this hack on the cold card device, started to be made known. There were notifications.

And immediately, both developers and the community at large kind of hopped to action. On the developer side, a a group of developers who have been called the red team immediately dove in and started assessing the situation and then really building defenses. We believe the hack was aided both by AI, but the defenses are also being aided by AI. So there was very much the, perception that this group of several dozen developers was really out on the front lines.

So it it's something it was the feeling that, you know, maybe the outer wall had breached, right, of the of the initial cold card hack. But additional additional losses would be coming, and so there was an enormous sense of urgency to both inform people who have Bitcoin on these devices, but then the developers themselves as they be started scanning Bitcoin software across the industry, helping to put patches in place and really strengthen those walls.

So the out the, additional walls did not continue to fall leading to more losses. So everybody who was not, a developer and able to contribute to that effort, really it really what did feel like. You know, we had sent these developers off to war, and they were really fighting on our and Bitcoin's behalf, you know, volunteering their time, resources, training, tools. And all of us, who work in the industry, hold assets, hold Bitcoin, really, we're we're wishing them well, providing support, providing sustenance, backup however we could, but, really, they were the warriors.

If we continue the the metaphor and we think what this conflict looks like a year from now is the technology just continues to get better and better, I mean, each and every day. Do we have the defenses? Do these companies have the defenses to stay at least one step ahead of the bad actors? I think that's one of the big learnings of these last two weeks. We have to look at Bitcoin and Bitcoin related code as the canary in the coal mine.

The reason for that is if you think about hackers having very powerful tools and the opportunity to scan open source software, public repositories of of companies. They're looking for vulnerabilities. Where are they gonna put their efforts? They're gonna put their efforts first where there's Bitcoin on the other side, and there's a huge payday for those efforts. After that, they will continue to use these tactics to infiltrate companies, kind of the good old fashioned way, going after customer data, going for any vulnerabilities that will, at the end of the day, either be useful to steal funds or to gain information that can be sold on the black market.

So I think one of the big concerns that the red team and that the Bitcoin community and industry is surfacing right now is the difference between the American models and the open source Chinese model that was likely, instrumental in the initial hack. The the situation that we're finding is that the open source model, the Chinese model, is effectively, unharnessed. So it it is not constrained in its ability. So it can be freely used.

The American frontier models, I'm talking, you know, Claude and OpenAI, Anthropic and OpenAI, they have put in safety mechanisms that say, hey. If you are using these tools to really poke at the security of code, we're gonna shut you down. Okay. And our concern is that using the frontier models, if they do not allow developers to use this for our defenses Uh-huh. Is that American companies will be at risk in the coming year.

更进一步:量化金融体系

看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力

进入量化体系 →

关联讨论

同一事件的更多信源

相似阅读

另一事件,读法相近