Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

91–100 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#91

Post by sosodev »

perihelions wrote: post #84
sosodev wrote: post #27

https://bitcoinhackers.org/@lukedashjr his mastodon feed indicates that one of his servers was physically compromised multiple times. Seems like he should have been more paranoid about securing his coins with that knowledge?

Speaking of paranoid, that link you've posted, isn't that a link to a server that's known to be compromised, and also an apparent watering hole for crypto wallet holders? Am I unreasonable in thinking that's a very scary link?

Dunno, it's unclear if that Mastodon instance is hosted on his compromised servers.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#92

Post by eastbound »

TillE wrote: post #82

It's certainly not the cause of this hack, but nobody should be using asymmetric encryption to protect their own stuff. It should only be used for communication with another party. Quantum computing will eventually be a thing. So use symmetric encryption whenever it's at all possible.

Is symmetric encryption safer? Why so?

As well, if asymetric encryption is ever broken, then nothing is safe on the internet.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#93

Post by dang »

kumarm wrote: post #66
dang wrote: post #19

Earlier quoted context omitted.

Ok, but please don't post repetitive flamewar comments to HN—this kind of thing has been posted a thousand times by now; the only value left in it is indignation, which is the opposite of the curiosity we want here. Perhaps you don't owe paradise better, but you do owe this community better if you're participating in it. https://news.ycombinator.com/newsguidelines.html

Got it. I agree the comment was useless.

Appreciated!

Btw one more thought: this kind of thing is natural in conversation because repetition has other functions (e.g. it connects people to share and agree on familiar things). So commenters aren't doing anything wrong in principle when they post like this—it's actually HN's rules which are the unnatural thing. But it's clear that we have to have them, given the mandate of the site.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#94

Post by rkho »

reducesuffering wrote: post #58
vbo wrote: post #37

[flagged]

You're right, I've got it! We'll store our money in a savings account, with transfer safeguards, where someone can't irreversibly yeet my life savings into the abyss.

And yet they did: https://www.bloomberg.com/news/articles/2022-02-17/police-be...

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#95

Post by tinus_hn »

technion wrote: post #85
phphphphp wrote: post #33

Apparently his servers keep getting hacked, which doesn’t reflect well on his security practices: https://twitter.com/LukeDashjr/status/1606885577843957762

Assuming this physical access claim is truthful (and i have doubts), I would feel at this point its budget letting him down. If your threat model includes "targeted attacks from people with physical access", it's time to run a vm on aws or azure and use the tooling they make available to secure it further. If you want tonnes of resourcing at a quite low budget, there's only a certain amount of "calling out" the group…

If he has enough Bitcoins for it to be possible for ‘many of them’ to be stolen, he doesn’t have a small budget.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#96

Post by Raed667 »

One of the linked transactions: https://www.blockchain.com/explorer/transactions/btc/432ded9...

The destination address (https://www.blockchain.com/explorer/addresses/btc/1YAR6opJCf...) seems to have received ~216 BTC yesterday in the span of 4 minutes

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#97

Post by rblatz »

nemo44x wrote: post #43
andrewstuart wrote: post #29

Earlier quoted context omitted.

Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.

Why make it so complex? Just do a title search online and you’ll get access to their address if they own a home.

Unless they own it in a trust.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#99

Post by technion »

tinus_hn wrote: post #95
technion wrote: post #85

Earlier quoted context omitted.

Assuming this physical access claim is truthful (and i have doubts), I would feel at this point its budget letting him down. If your threat model includes "targeted attacks from people with physical access", it's time to run a vm on aws or azure and use the tooling they make available to secure it further. If you want tonnes of resourcing at a quite low budget, there's only a certain amount of "calling out" the group…

If he has enough Bitcoins for it to be possible for ‘many of them’ to be stolen, he doesn’t have a small budget.

Just makes this thread stranger. I know if I had over $3m in btc and was working professionally with them I wouldn't state my top budget was $55.

Edit: his tweets specifically talk about not using "cloud nonsense " and states getting your own key to a rack is too expensive for him.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#100

Post by paulpauper »

samwillis wrote: post #42

Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.
Post reply on HN