121–130 of 564 posts
Earlier quoted context omitted.
Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.
So? Just proves how difficult it is to make rockets that never explode. Are you saying that a non-expert would have more success?
Earlier quoted context omitted.
he should been using a hardware wallet and the bulk of it should be on a paper wallet, in the vault of a bank or another real world institution. the hardware used to generate this key should be wiped out. so if he followed best practices, he didn't lose this money edit: just found out that the btc was stolen from a dedicated server on ColoCrossing. this makes no freaking sense. no server connected to internet should…
How on earth are normal people supposed to trust bit coin. When best practice is to treat it like paper money.
Plenty of "normal people" use combinations of physical security to protect their assets. Safes, deposit boxes, tamper proof materials etc.
This all stinks. Between the bio, the vague tweets about server hacks (implying Intel ME or a physical server compromise is at fault, really?), the vague tweets about this situation... Something fishy is going on or wow, really proof that sometimes it's just about being in the right place at the right time because wow dude does not have the first clue about security. Hot wallet, compromised, unrotated servers, come o…
https://bitcoinhackers.org/@lukedashjr his mastodon feed indicates that one of his servers was physically compromised multiple times. Seems like he should have been more paranoid about securing his coins with that knowledge?
Weird he cheaped up on servers paying 55 a month to some random vps provider.
Earlier quoted context omitted.
Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.
Okay, so assuming you get past this theoretical billionaire's physical security (at a minimum gated fences and an alarm system; if they're actually a billionaire, probably 24/7 armed private security as well) and into their mansion, how long do you think it would take you to search their 7 bedroom 10000 square foot mansion for these written down passwords which you have no information as to whether they even exist?
Earlier quoted context omitted.
he should been using a hardware wallet and the bulk of it should be on a paper wallet, in the vault of a bank or another real world institution. the hardware used to generate this key should be wiped out. so if he followed best practices, he didn't lose this money edit: just found out that the btc was stolen from a dedicated server on ColoCrossing. this makes no freaking sense. no server connected to internet should…
How on earth are normal people supposed to trust bit coin. When best practice is to treat it like paper money.
Earlier quoted context omitted.
Every crypto hack is followed by a swift call for a centralised authority to intervene.
Why is that inconsistent? There’s a lot of people that believe governments only legit purpose is to protect people and their property.
Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)
Exactly! if the experts can’t secure their accounts, what hope does anyone else have? Soon you will see people saying you should have done this or that complicated thing, or how somebody so smart could should have known better. No matter what they say it is never enough. This is why lack of consumer protections suck.
He might be a bitcoin core Dev but does he use ledger/trezor etc?
Is his PGP key on his hardrive or a smartcard?
In this day and age your computer not a bastion it once was. (It never really was but it's more of a problem in 2022 than 1982).
I still think the reason Satoshi vanished is that he lost his private key and couldn't handle the embarrassment.
Earlier quoted context omitted.
Looks like possibly a supply chain attack targeted specifically at Luke Jr's server: https://twitter.com/naka_frodo/status/1609655813789949959/ph...
The salty posts about his hosting provider are confusing to me. He is paying $55/month and is expecting aid in forensics and audits? Is that normal for a low cost provider? Edit: Also it sounds like he didn't immediately shut down the server after the first hack? That is completely insane. I understand you want to investigate but you are leaving yourself wide open leaving the system running. It's been compromised. En…