Slashdot Mirror
Badly-Coded Ransomware Locks User Files and Throws Away Encryption Key (softpedia.com)
An anonymous reader writes: A new ransomware family was not tested by its developer and is encrypting user files and then throwing away the encryption key because of an error in its programming. The ransomware author wanted to cut down costs by using a static encryption key for all users, but the ransomware kept generating random keys which it did not store anywhere. The only way to recover files is if users had a previous backup. You can detect it by the ransom message which has the same ID:qDgx5Bs8H
For optimal software testing, you need several types of testers.
The dev - Someone who knows how to code and what this software is supposed to do, and intimately.
The hacker - Someone who knows how to code, and doesn't care what the software wants because dammit, he's going to make it dance a frigging jig for giggles.
The user - Doesn't know coding, but knows the subject the software is based around because he's the one that uses it. He knows exactly what it needs to do and what he wants it to do and will gladly tell you how you are failing in that.
The ignorant - Can't code, doesn't want to, isn't sure if this computer thing is actually filled with enslaved magic pixies. If there's anyone that will do something no intelligent rational person will ever think of, the ignorant is king. You'd be amazed how many show-stopper bugs have been found by them.