←back to thread

I have recordings proving Coinbase knew about breach months before disclosure

(jonathanclark.com)
685 points jclarkcom | 1 comments | 16 Nov 25 20:18 UTC | HN request time: 0s | source
Show context
mtlynch ◴[16 Nov 25 21:33 UTC] No.45948612[source]▶
This is an extremely clickbaity headline.

The "recordings" are of a phisher attempting to get information from the author. It proves nothing about what Coinbase knew.

The author turned the information over to Coinbase, but that doesn't prove Coinbase knew about their breach. The customer could have leaked their account details in some other way.

replies(3): >>45948791 #>>45949182 #>>45954989 #
jclarkcom ◴[16 Nov 25 21:56 UTC] No.45948791[source]▶
I sent the phone recording and emails to coinbase, and they acknowledged them saying "This report is super robust and gives us a lot to look into. We are investigating this scammer now."
replies(2): >>45949567 #>>45949714 #
1. mtlynch ◴[17 Nov 25 00:08 UTC] No.45949714[source]▶
The recordings don't prove anything about what Coinbase knew.

I stand by my statement that the title is clickbait, as it's misleading on two fronts:

- It's the email, not the call recording that proves what Coinbase knew, but "recordings prove" sounds more sensational

- The email proves that Coinbase was aware of a sophisticated attack against a single user. You didn't have enough information to prove that there was a large scale leak of Coinbase customer data. There are sophisticated attacks against individual Coinbase users all the time due to the value of the accounts there.