Πώς το FTX Collapse θα μπορούσε να αφήσει εκτεθειμένους τους χρήστες του Blockfolio

By Bitcoin Περιοδικό - 1 έτος πριν - Χρόνος ανάγνωσης: 7 λεπτά

Πώς το FTX Collapse θα μπορούσε να αφήσει εκτεθειμένους τους χρήστες του Blockfolio

The data necessary to analyze previous Blockfolio entries is now mixed up into the massive cryptocurrency exchange’s collapse.

This is an opinion editorial by Morgan Rockwell, founder of Bitcoin Kinetics.

I'm not concerned with Sam Bankman-Fried allegedly να πάρει ένα δάνειο from Alameda, which was actually FTX customer funds wired through Alameda to be credited on FTX. I'm not concerned with the moral compass of the διασημότητα investors who gave billions to a kid they didn't really know or understand, yet endorsed with wealth and credibility. I'm not very concerned with the financial and επιπτώσεις στην αγορά στις πολλές εταιρείες, ανταλλακτήρια και εμπόρους που για κάποιο λόγο εξαρτιόνταν από την FTX με οποιαδήποτε μορφή.

I'm most concerned with Sam Bankman-Fried getting the personal identification information of millions of customers, and using that data to do chain analysis on the Blockfolio app he purchased which was used by many Bitcoiners and cryptocurrency holders as a tracking tool of Bitcoin, Ethereum and other watch-only cryptocurrency wallets.

Πηγή: Εικόνες Google

If you aren't aware, Blockfolio was an app that was used by many Bitcoin holders and other cryptocurrency holders to keep track of the exchange rate or the prices of their coins held in cold storage or on wallets that they only wanted to be watching and not have actively on a hot wallet on their mobile device. Storing the wallet addresses actually were not even needed on the app. You could just put in a amount of a certain cryptocurrency that you wanted to watch and say that you had — but there was also a feature to connect to exchanges to keep track of all of your coins across all of the exchanges you had them on in one app. This was the beauty of Blockfolio as it didn't necessarily ask for too much personal identification information other than an email to help keep track of your account so you can log in from multiple devices.

Οι περισσότεροι από εμάς, όπως εγώ, συνειδητοποιήσαμε τον Sam Bankman-Fried επειδή της αγοράς του Blockfolio από μια νεοσύστατη οντότητα που ονομάζεται FTX. Για αρκετές εβδομάδες, η εφαρμογή Blockfolio μετονομάστηκε σε εφαρμογή FTX, η οποία τώρα είχε τη δική της ανταλλαγή. Διέθετε επίσης ένα νέο σύνολο κανόνων Γνωρίστε τον Πελάτη σας, πολιτικών καταπολέμησης της νομιμοποίησης εσόδων από παράνομες δραστηριότητες, νέους Όρους Παροχής Υπηρεσιών, καθώς και το δικό του πορτοφόλι θεματοφυλακής που κατείχε η FTX, υποθέσαμε.

Εδώ μπορείτε να δείτε τους Όρους Παροχής Υπηρεσιών στο Blockfolio από τις 30 Ιουνίου 2017:

πηγή: Πολιτική Απορρήτου Blockfolio 2017

Ο Blockfolio υποστήριξε μανιωδώς ότι δεν ήταν και δεν θα πουλούσαν ποτέ δεδομένα χρηστών. Το Blockfolio προσπάθησε ακόμη και να αποπροσδιορίσει τους χρήστες με έναν μηχανισμό κατακερματισμού για αναγνωριστικά για να μην αφήνουν καν τον εαυτό τους να αναγνωρίζει και να συνδέει χαρτοφυλάκια χρηστών με διευθύνσεις email. Αυτό προφανώς δεν συνέβη ποτέ μετά την αγορά και τη μετατροπή σε FTX.

Εδώ μπορείτε να δείτε την έντονη διαφορά στη νέα Πολιτική Απορρήτου FTX:

πηγή: Πολιτική απορρήτου FTX 2022

Εδώ είναι τι λίγα αναφέρονται σχετικά με τα προσωπικά στοιχεία ταυτοποίησης στους Όρους Παροχής Υπηρεσιών της FTX, τα οποία είναι ένα διαφορετικό έγγραφο από την Πολιτική Απορρήτου.

πηγή: Όροι Παροχής Υπηρεσιών FTX 2022

Για αναφορά, εάν δεν έχετε διαβάσει ποτέ τους Όρους Παροχής Υπηρεσιών ή την Πολιτική Απορρήτου μιας εταιρείας στο παρελθόν, σας συνιστώ ανεπιφύλακτα να πάρετε μια δυνατή μπύρα και να απολαύσετε αυτή τη λέξη σούπα!

This all has brought up questions around this merger and the acquisition that happened in the cryptocurrency industry only a few years ago. I am concerned because after the fallout of this exchange, FTX going bankrupt and all of its assets potentially being put up for auction, I would like to know the state of the personal identification information that FTX had been forced to gather because of KYC and AML laws. My concern is the vast amount of information gathered including passports, phone numbers, IP addresses, home addresses, cryptocurrency wallet addresses, email addresses, passwords and government IDs. All of these could be sold at auction as customer data or customer profiles to whoever finds them valuable.

Πηγή: Πολιτική απορρήτου FTX (γνωστοποίηση σε περίπτωση συγχώνευσης, πώλησης ή άλλων μεταβιβάσεων περιουσιακών στοιχείων)

Now the assets held by FTX whether they were actually real cryptocurrency such as bitcoin or made up tokens built on another layer one network such as ethereum are not too important in this conversation in my opinion. What is important is the data, the privacy data, the data mining operation that could have or will be done on all of this data FTX had gathered on customers either it was done by them or it will be done by whomever buys this data at auction. Even more so, the jurisdiction of that data is open to anywhere on earth.

Πηγή: FTX Privacy Policy (διεθνείς μεταφορές δεδομένων)

As someone who has personally worked on coin analysis concepts and technology for the United States Military, as well as consulted on this for the Department of Defense as a so called "subject matter expert," I can personally attest that it is very easy to correlate a person to their Bitcoin wallet address using nothing more than the amounts of bitcoin held on specific addresses, as well as the device data that is keeping track of those specific amounts on specific addresses — this is simple SIGINT, MASINT or HUMINT, all of which are different forms of intelligence gathering.

πηγή: Wikipedia Αναζήτηση για HUMINT

If you are keeping track of any bitcoin on any wallet over any Bitcoin explorer that is looked through a browser or app on any device, phone, laptop or tablet, there is now a record that will be connected to the IP address, the MAC number, the SIM phone number, the VOIP number, credit card number, home address and any other personal identifying information that is attached in any way to this device. I know this because Edward Snowden leaked documents showing that the NSA had a program called xkeyscore και εφαρμογές χρησιμοποιήθηκαν όπως OAKSTAR και το υποπρόγραμμά του ΜΑΙΜΟΥΡΟΥΚΕΤΑ to specifically keep track of Bitcoin users at the NSA.

Source: https://theintercept.com/2018/03/20/the-nsa-worked-to-track-down-bitcoin-users-snowden-documents-reveal/

Now what I'm getting at is this data that FTX was forced under AML and KYC law to be gathered. This is potentially one of the largest gatherings of this type of data in the cryptocurrency industry ever done in history. This data, combined with coin analysis information related to bitcoin, ethereum and other cryptocurrency amounts being tracked by the previously titled Blockfolio app has created a situation where KYC data personal identifying information can be now superimposed over Blockfolio email addresses, UTXOs and watch addresses that plenty of people used on Blockfolio without any personal information being divulged to the app.

So this means that people that used Blockfolio to keep track of the amount of cryptocurrency they had, wanted to buy or were keeping track of for whatever reason will now be able to be correlated to very detailed personal identification information. The concern I have is not whether FTX and its hundreds of subsidiaries were keeping track of this information from Blockfolio or using it in any way, but that their vast new pool of customer information and data will be binded in the future to the Blockfolio data. I don't assume FTX was intelligent enough to do this for any purpose such as advertising, or data sharing with a hedge fund like Ρομπέν των Δασών πιάστηκε να κάνει, αλλά υποθέτω ότι μπορεί να σκέφτηκαν να πουλήσουν αυτά τα δεδομένα σε υπηρεσίες επιβολής του νόμου, σε διαφημιστές ή σε παράγοντες της κοινότητας πληροφοριών, όπως είπε η SBF ότι υπήρχε μια ανοιχτή πόρτα για τις ρυθμιστικές αρχές και τις υπηρεσίες επιβολής του νόμου στο FTX.

Αυτό που πρέπει να σκεφτούμε τώρα είναι όταν τα περιουσιακά στοιχεία της FTX βγουν σε δημοπρασία, κάτι που θα κάνουν, ότι όχι μόνο τα ψηφιακά νομίσματα και οι μάρκες καθώς και οι άδειες θα πωληθούν σε κάποιο νέο μέρος, αλλά θα είναι οι ίδιοι οι πελάτες , προσωπικές πληροφορίες ταυτοποίησης και τη μαζική εξόρυξη δεδομένων που θα μπορούσε ή θα γίνει με αυτά τα δεδομένα.

I was never an FTX user, I never created an account with FTX or FTX.us and I never wired any money to Alameda. Unfortunately, because of my longevity in the Bitcoin space, I used Blockfolio like many Bitcoin users before me to keep track of the amounts of Bitcoin I had in multiple locations and their total value. Now that data that I thought was private will be connected to KYC data of anyone I know, interacted with over a wire and any device they used, especially if through multiple connections it leads back to FTX in any way.

What we need to do now is ask the serious questions and not focus on the financial obligations or mishandlings of SBF and FTX. But we must ask who has this data? What has been done with this data and who will be owning this data in the future? The reality is FTT dissolving into nothing isn't a "Force Majeure Event," so most of the users are screwed.

Πηγή: FTX Terms Of Service 2022

If this at all concerns you or involves you, I would suggest we all find the proper channels to protect ourselves from the worst case scenario from this fallout of data. This is the biggest problem with KYC and AML laws,because after all of this financial chaos, there is now a criminal-run exchange that is in possession of millions of people's personal information about their devices, their homes, their financials and more, all available to the highest bidder.

:

Οι Όροι Χρήσης & Πολιτική Απορρήτου του Blockfolio πηγαίνουν σε νεκρούς συνδέσμους στον ιστότοπο FTX.com, αλλά βρήκα μια έκδοση του 2017.
Πρέπει να συνδεθείτε μέσω του Zendesk για να δείτε τα TOS/PP του Blockfolio που λείπουν καθώς και τα νέα FTX TOS/PP που σημαίνει ότι έπρεπε να δώσω ένα email και PPI για να δω ακόμη και τα έγγραφα.

This is a guest post by Morgan Rockwell. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Περιοδικό.

Πρωτότυπη πηγή: Bitcoin περιοδικό