YHK - yet another hacker news clone

Yeah. Pretty wild. I've never done that, and wouldn't, but I know folks who would. If I ever do any interview work on my laptop, it's always sandboxed, but generally, I just nope out of such interviews, anyway. It's usually one of many red flags.

Contractors in the UK are already required to have liability insurance, or any large business won't touch them with a barge pole.

Multiple wtfs: one dev can access 6B; the dev does job interview from the work laptop; the work laptop has permission to run random executables with it having access to sensitive stuff. Maybe they went on to hack into stuff from the dev's laptop that they should not have had access to.

Of course as usual the legacy media article fails to address that key issue. If I had to guess I'd say that their system uses some sort of HSM to sign chain transactions but there are not strong controls on what txn it will agree to sign. Therefore somewhere in their code there's a place where you can just insert your transaction du jour and it'll go through. Once you have that scenario anyone who can modify the system's code will be able to steal as much money as they want. So the "developer laptop" may have only been used to push a PR or perhaps change code via a more direct route -- publishing a new container image or other build artifact. Using AI tools I think it would be quite feasible to point an agent at the pile of code on that laptop and just ask it "what code do I need to change to allow any transaction to be sent on-chain"? So the attacker didn't need to have deep knowledge of the system.