Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

131–140 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#131

Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.

The only mistakes experts made in the Challenger explosion was failing to draw pretty a enough picture to convince barely numerate management to stop the launch.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#132

Earlier quoted context omitted.

> It can be very difficult to protect against targeted attacks from adversaries. Not really. The device used to sign transactions should never be connected to the Internet.

Not really? “Targeted attack” can mean many things. If you have control over wast sums of hard to trace treasure a determined attacker might just kidnap you and/or your loved ones, and win your cooperation using threats of violence. Your suggested safety precaution is a sensible start, but far from enough if you have a lot of bitcoin.

[deleted]

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#134

Earlier quoted context omitted.

Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.

This is not quite the same. Experts did make mistakes for the challenger explosion, but they did much better than the average person. Put 1000 people at complete random into a room and say design and build a rocket, I suspect they won't even get to the build phase after several years. When it comes to something everyone should be able to do, an expert making a mistake is a bad omen for the rest of us.

Nah we just need to give up the fantasy that you can be sure a computer isn't compromised.

Hardware all the way.

I have my pgp key on a yubikey, my crypto on a ledger. My passwords on a mooltipass.

There are few mistakes I could make leading to this kind of compromise. Perhaps none!

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#135

Just for a little context luke jr was infamous on cryptocurrency forums for being adamant that the sun revolved around the earth, all religions other than catholicism are evil, there is an "ethical aspect to slavery" and that bitcoin's 1 KB/s throughput was too much and should be cut down even further. https://archive.is/sS5Ml https://archive.is/DrP83 https://np.reddit.com/r/Christianity/comments/36w6nw/why_did... ht…

> The funny thing is that they had to go back to the geocentric world view in order to get the satellites to orbit properly.

So people are trusting Bitcoin with someone who thinks GPS is a lie

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#136

Earlier quoted context omitted.

If a Bitcoin Developer with >$3M in Bitcoin didn’t use a hardware wallet… God help the typical Bitcoin user. It’s a tragedy, and inexcusable.

fraud and reconciliation are fundamental in our finance systems. To claim this as anything other than a failing of bitcoin as a whole is "inexcusable".

I still get butterflies thinking about the clever beauty of the great network, computer, software, cryptographic security piñata in the sky.

It means that rather than being a story about public affairs, snake oils, and conspiracies -- security is now a legitimate business concern.

I won't pretend to have an endgame, but I really don't see too much to loathe. Even the most vehement concerns are easily reframed as opportunity.

- Unsuspecting public? To contrast crypto with the system not many people's personal financial planning involves bounding correlations between News Sentiment -> VVIX -> VIX -> Derivatives market -> Volatile inflation across all sectors.

- Security concerns? Again, this slaps a price tag, and hence quantifiable risk-level on every computer system security level -- airgapped? networked? It's practically its own insurance, on software that is still centuries away from being closed-form auditable.

- Proof of work? Global governments cooperate to limit, minimize, control power usage. Not such a bad thing in that light, the power system could use more care and engineering as it is.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#137
post #91

Earlier quoted context omitted.

Speaking of paranoid, that link you've posted, isn't that a link to a server that's known to be compromised, and also an apparent watering hole for crypto wallet holders? Am I unreasonable in thinking that's a very scary link?

Dunno, it's unclear if that Mastodon instance is hosted on his compromised servers.

[deleted]

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#138

Earlier quoted context omitted.

I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.

Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.

So the "Live, Laugh, Love" sticker on the kitchen wall isn't safe? /s

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#139

Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

Experts make mistakes all the time, fail to see hidden risks, like Challenger explosion. This will never see mainstream adoption at this rate. If the hacker is smarter, being smart is not good enough.

The experts told NASA not to launch, and exactly why, and were right.

Management chose not to listen.

Post reply on HN