Hacker News new | ask | show | jobs
by nybble41 2327 days ago
Due diligence is not sufficient in the interesting cases. If exchanges instituted a blacklist of known ransom payments, for example, ransomware authors would just wait until the coins have been changed into some other untraceable form before releasing their hostages. Blacklisting the transaction in time to do any good would be the same as not paying the ransom. Reporting the address after the fact can only harm innocents several stages removed from the ransomers who could not possibly have known that the transaction was tainted.

The only reasonable solution is to track down the actual ransomers and make them pay for the damage they caused. Dragging other parties into this can only make things worse.

1 comments

Making the receiving parties intent in covering losses can help a lot during discovery. Dragging "innocents" into it might just get us to a system that makes it hard for extortionists. And that system might not look like the Bitcoin we know.

You can argue that we should suffer the extortionists for other benefits we get out of Bitcoin. I'm not convinced at this point.

> Dragging "innocents" into it might just get us to a system that makes it hard for extortionists.

If you're willing to harm innocents for the sake of your cause—even if the goal is to make things harder for extortionists—then you're no better than those you're fighting.

I see this as an example where the ends can justify the means. The maximum loss those people could incur would be the sums exchanged. If those are restored to the damaged party I don't see how there's a good reason to protect the people who traded. They can still demand restoration from their partners after all. If they traded with crooks, they might get nothing back. Such is life.

To say this is the moral equivalence of extortion is a long shot.