Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 25 posts

Re: Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

#11

Post by bbcbasic »

bobbygoodlatte wrote: post #7
jbmorgado wrote: post #6

This story illustrates perfectly one of the big reasons why Bitcoin and company aren't and will probably never be used by the general population for anything really. If even someone that is technical savvy (I don't know much about the OP but someone that uses RAR, knows how to make crypto wallets and knows how to check the processes running in his computer is much ahead of the average person in terms of IT knowledge)…

Coinbase 2-factor auth plus their long-term Vault storage is plenty secure for the general population.

Or even better a checking account.

Re: Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

#12

Post by _RPM »

Obi_Juan_Kenobi wrote: post #5

How are they cold storage paper wallets? They certainly aren't paper. They also aren't cold, being on a networked computer. I don't like victim-blaming, especially because this is really a usability issue for crypto, but I have never heard anyone say that a pw protected .rar file is appropriate security. If you're going to make a significant investment into crypto, I just don't understand how you can ignore all the s…

The fact that he uses RAR, a non open format makes it even worse.

Re: Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

#15

Post by RealityVoid »

jbmorgado wrote: post #6

This story illustrates perfectly one of the big reasons why Bitcoin and company aren't and will probably never be used by the general population for anything really. If even someone that is technical savvy (I don't know much about the OP but someone that uses RAR, knows how to make crypto wallets and knows how to check the processes running in his computer is much ahead of the average person in terms of IT knowledge)…

I see no reason why bitcoin wallets can not be made to work as simple or simpler than a credit card. The fact that, currently, they are not easy, is not an indication usage can not ever be easy.

Credit-card sized, NFC-powered, tiny embedded devices could be a very practical, very secure, very easy to use hardware wallets.

The only limitation I see is that I could not see them work securely without a screen and I can't imagine a screen as thin as a credit card... :(

Re: Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

#16

Post by ThisIs_MyName »

bbcbasic wrote: post #11
bobbygoodlatte wrote: post #7

Earlier quoted context omitted.

Coinbase 2-factor auth plus their long-term Vault storage is plenty secure for the general population.

Or even better a checking account.

Yeah, if you're ok with a third part like Coinbase holding your money, just use a bank. That's what banks are meant for!

Re: Ask HN: $10k in cryptos stolen off my desktop from an encrypted folder, how?

#18

Post by beaker52 »

My best guesses:

a) Your machine was already compromised when you made the rar

b) The attacker logged your password, either when you entered the archive or into another service which shares the same password

c) perhaps WinRAR encrypted archives have a cyptographic flaw making them easily broken by software

d) perhaps the attacker has been bruteforcing for a while

Post reply on HN