Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Russian Hacker Pleads Guilty to Bank Fraud
Newest First  |  Oldest First  |  Threaded View
RyanSepe
RyanSepe,
User Rank: Ninja
2/27/2019 | 11:15:14 AM
Re: 5 Years
I definitely agree with your sentiment personally. However, it is 5 years MAXIMUM. That's the worst case scenario, signifying that in many cases the sentencing will be less than 5 years. To some that 360K a year mark may be worth 1-3 years in prison especially with many of them taking plea deals.
REISEN1955
REISEN1955,
User Rank: Ninja
2/26/2019 | 3:52:32 PM
Re: 5 Years
There is the loss of freedom.  An article here postulated that a successful hacker can earn $360,000 per year.  Not a bad gig if you can get it but - if caught - one cannot walk down to the deli and get coffee.  I like my home and enjoy sleeping in a good bed at night.  So there is THAT risk too.  Pardon me but ain't worth it.  So 5 years in a can somewhere is indeed major. 
Dr.T
Dr.T,
User Rank: Ninja
2/26/2019 | 11:05:27 AM
Re: 5 Years
If 5 years is the maximum received, then I don't think its going to divert those doing this for their livelihood to stop their nefarious ways. I think even one year would be discouraging as long as this would be a common practice. Most get away with their hacking.
Dr.T
Dr.T,
User Rank: Ninja
2/26/2019 | 11:03:58 AM
Re: One more down for the good guys
You present the idea that crime doesn't pay and there are repercussions but on the other hand you show that for this type of crime the sentencing is minimal. Hopefully sentencing would not be minimal, however your point makes sense.
RyanSepe
RyanSepe,
User Rank: Ninja
2/26/2019 | 10:55:29 AM
5 Years
To really make some headway, I believe that some of the guilty hackers need to have an example made of them. If 5 years is the maximum received, then I don't think its going to divert those doing this for their livelihood to stop their nefarious ways.
RyanSepe
RyanSepe,
User Rank: Ninja
2/26/2019 | 10:54:08 AM
Re: One more down for the good guys
Agreed, unforutnately advertising the guilty plea is a double-edged sword. You present the idea that crime doesn't pay and there are repercussions but on the other hand you show that for this type of crime the sentencing is minimal. 
REISEN1955
REISEN1955,
User Rank: Ninja
2/26/2019 | 8:36:28 AM
One more down for the good guys
Great news - problem is the hundred of other pieces of scum out there mining and creating havoc. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-23616
PUBLISHED: 2023-01-28
Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, when submitting a membership request, there is no character limit for the reason provided with the request. This could potentially allow a user to...
CVE-2023-23617
PUBLISHED: 2023-01-28
OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds.
CVE-2023-23620
PUBLISHED: 2023-01-28
Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, the contents of latest/top routes for restricted tags can be accessed by unauthorized users. This issue is patched in version 3.0.1 on the `stable...
CVE-2023-23621
PUBLISHED: 2023-01-28
Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, a malicious user can cause a regular expression denial of service using a carefully crafted user agent. This issue is patched in version 3...
CVE-2023-23624
PUBLISHED: 2023-01-28
Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, someone can use the `exclude_tag param` to filter out topics and deduce which ones were using a specific hidden tag. This affects any Disc...