Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

181–190 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#181

Post by 300bps »

Phlarp wrote: post #167
optimalsolver wrote: post #151

Earlier quoted context omitted.

>math and code were nearly perfect with zero peer review Bitcoin had to be forked in the early years due to critical errors in the original code. There was nothing perfect about it.

Yes, but implementation errors-- not fundamental flaws in the theory or underlying mathematics. It's not a statement about such things being impossible, just unlikely to come from a single individual working in complete isolation up until the bitcion whitepaper release. Additionally this alone would be merely peculiar on it's own, coupled with the lack of retrospective investigations uncovering -anything at all- sign…

Yes, but implementation errors-- not fundamental flaws in the theory or underlying mathematics.

Respectfully, I believe you are looking at Bitcoin through rose colored glasses.

There is nothing special about Bitcoin's theory or underlying mathematics.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#182

Post by MuffinFlavored »

TillE wrote: post #82

It's certainly not the cause of this hack, but nobody should be using asymmetric encryption to protect their own stuff. It should only be used for communication with another party. Quantum computing will eventually be a thing. So use symmetric encryption whenever it's at all possible.

> asymmetric encryption

PGP? RSA? Can you elaborate please?

> symmetric encryption

AES?

Is this what you mean? What's the best way to do AES these days? AES-256-CBC? Is there "symmetric encryption" that is public key/private key? I know AES you just need IV + key and you're "good to go"?

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#183

Post by CodexArcana »

nemo44x wrote: post #119
kristianc wrote: post #59

Earlier quoted context omitted.

Every crypto hack is followed by a swift call for a centralised authority to intervene.

Why is that inconsistent? There’s a lot of people that believe governments only legit purpose is to protect people and their property.

In order for governments to do that the systems have to have a way for an authority to intervene and reverse the transaction...

Which is expressly impossible to do without creating a fork of the chian... Which is pretty contrary to the ethos of the white papers for Bitcoin.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#184

Post by JW_00000 »

psychphysic wrote: post #128
spicymaki wrote: post #76

Earlier quoted context omitted.

Exactly! if the experts can’t secure their accounts, what hope does anyone else have? Soon you will see people saying you should have done this or that complicated thing, or how somebody so smart could should have known better. No matter what they say it is never enough. This is why lack of consumer protections suck.

That's why hardware based security is really the only way at this point. He might be a bitcoin core Dev but does he use ledger/trezor etc? Is his PGP key on his hardrive or a smartcard? In this day and age your computer not a bastion it once was. (It never really was but it's more of a problem in 2022 than 1982).

When someone writes:

> Soon you will see people saying you should have done this or that complicated thing

and you answer:

> Is his PGP key on his hardrive or a smartcard?

you're proving their point.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#185

Post by tmpburning »

samwillis wrote: post #42

Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

> These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

Because no one can create secure software yet, Bitcoin isn't 100% secure.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#186

Post by jwie »

It’s unfortunate. Though what do you expect when possession is ownership and there’s no mediating institution to help you with theft.

If your brokerage account somehow gets hacked and all your funds gets stolen that’s not an unsolvable problem. You’ll likely get made whole after a while. There’s people, institutions, and laws to help you.

Store digital cash in your mattress and someone will steal it, and no one will or can help.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#188

Post by hgsgm »

SilasX wrote: post #88
gjsman-1000 wrote: post #70

Earlier quoted context omitted.

If a Bitcoin Developer with >$3M in Bitcoin didn’t use a hardware wallet… God help the typical Bitcoin user. It’s a tragedy, and inexcusable.

Gavin Andresen, a lead Bitcoin developer, sent me a 10 BTC donation ($3000 at the time) when he meant to send $10 worth of BTC. Yes, I refunded. https://news.ycombinator.com/item?id=14720921

Great example of how "Bitcoin is trustless" means "Bitcoin only works is the trust is provided externally".

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#189

Post by sosodev »

gnull wrote: post #165
sosodev wrote: post #13

Earlier quoted context omitted.

Storing most of his bitcoin in a single hot wallet seems to go against the best practices, no?

What is hot wallet, btw?

I don't know if it has a concrete definition but I generally say it to mean a crypto wallet that is directly or indirectly exposed to the internet.

It's possible to create a bitcoin wallet completely offline in a secure environment. The details to the wallet are then stored physically in a secure location/medium. This is called a cold wallet. People typically use a cold wallet for long-term storage of coins.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#190

Post by amadeuspagel »

> The irony here is Luke being a dev probably made it easier for him to be complacent. His security setup was frankly a lot worse than what most plebs seem to use.

> The standard advice of buy a Trezor and write down your seed on paper is much better than a Gentoo hot wallet.

https://twitter.com/peterktodd/status/1609667983298658304

Post reply on HN