Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

31–40 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#34
post #13

Would be interesting to know how his BTC were stolen. Because he is a BTC core developer, I believe he followed the best practices, like not writing down his password. So infection or keylogger?

Storing most of his bitcoin in a single hot wallet seems to go against the best practices, no?

He said it was not most of his bitcoins.

https://twitter.com/LukeDashjr/status/1609618498027753472

EDIT: Right, maybe it's all

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#36
post #15

> What the heck @FBI @ic3 why can't I reach anyone??? Uh, because it’s New Year’s Day? Don’t get injured or become a crime victim on a holiday, if possible.

Slightly off-topic, but who is this @ic3 and why does he tag them in the same way as the FBI? Here's the account, for reference: https://twitter.com/ic3 . Doesn't look like an official to me.

[deleted]

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#38

Would be interesting to know how his BTC were stolen. Because he is a BTC core developer, I believe he followed the best practices, like not writing down his password. So infection or keylogger?

I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.

It comes from the threat model, having a password book on your desk in a cubicle is absolutely not secure.

On a desk at home? It is marginal, certainly a burglary is a low frequency event, but we also have events like fire that make it insecure in other ways.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#39
post #15

> What the heck @FBI @ic3 why can't I reach anyone??? Uh, because it’s New Year’s Day? Don’t get injured or become a crime victim on a holiday, if possible.

Slightly off-topic, but who is this @ic3 and why does he tag them in the same way as the FBI? Here's the account, for reference: https://twitter.com/ic3 . Doesn't look like an official to me.

Clearly he meant https://www.ic3.gov/ but tagged a wrong account.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#40
post #18

If you hold a large amount of bitcoin your threat model should be way above the average person. It sounds like his infrastructure was specifically targeted. It can be very difficult to protect against targeted attacks from adversaries.

Incredibly difficult to defend against nation state attackers and such. North Korea is very persistent in crypto hacks, for example:

https://www.npr.org/2022/12/22/1144996480/crypto-hacking-nor...

Post reply on HN