101–110 of 564 posts
> What the heck @FBI @ic3 why can't I reach anyone??? Uh, because it’s New Year’s Day? Don’t get injured or become a crime victim on a holiday, if possible.
like they are going to summon resources to try to find some guy who is probably in Russia or something
https://bitcoinhackers.org/@lukedashjr his mastodon feed indicates that one of his servers was physically compromised multiple times. Seems like he should have been more paranoid about securing his coins with that knowledge?
Earlier quoted context omitted.
Assuming this physical access claim is truthful (and i have doubts), I would feel at this point its budget letting him down. If your threat model includes "targeted attacks from people with physical access", it's time to run a vm on aws or azure and use the tooling they make available to secure it further. If you want tonnes of resourcing at a quite low budget, there's only a certain amount of "calling out" the group…
If he has enough Bitcoins for it to be possible for ‘many of them’ to be stolen, he doesn’t have a small budget.
Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)
Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.
Would be interesting to know how his BTC were stolen. Because he is a BTC core developer, I believe he followed the best practices, like not writing down his password. So infection or keylogger?
Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)
https://twitter.com/naka_frodo/status/1609655813789949959/ph...
It's certainly not the cause of this hack, but nobody should be using asymmetric encryption to protect their own stuff. It should only be used for communication with another party. Quantum computing will eventually be a thing. So use symmetric encryption whenever it's at all possible.
Is symmetric encryption safer? Why so? As well, if asymetric encryption is ever broken, then nothing is safe on the internet.
However, including working quantum computers in your threat profile is ridiculous for things like this at the moment.
Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)
Earlier quoted context omitted.
Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.
Okay, so assuming you get past this theoretical billionaire's physical security (at a minimum gated fences and an alarm system; if they're actually a billionaire, probably 24/7 armed private security as well) and into their mansion, how long do you think it would take you to search their 7 bedroom 10000 square foot mansion for these written down passwords which you have no information as to whether they even exist?
You'd find a legit way into the house.
Update: https://twitter.com/naka_frodo/status/1609655813789949959/ph... Looks like possibly a supply chain attack targeted specifically at Luke Jr's server.