Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

191–200 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#191

Post by paulpauper »

green-eclipse wrote: post #40
jtchang wrote: post #18

If you hold a large amount of bitcoin your threat model should be way above the average person. It sounds like his infrastructure was specifically targeted. It can be very difficult to protect against targeted attacks from adversaries.

Incredibly difficult to defend against nation state attackers and such. North Korea is very persistent in crypto hacks, for example: https://www.npr.org/2022/12/22/1144996480/crypto-hacking-nor...

if something is cryptographically secure, it should not matter how big the threat actor is

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#192

Post by rewtraw »

paulpauper wrote: post #164
tromp wrote: post #141

Earlier quoted context omitted.

999,999 times out of a million, the answer is no. the 1 time out of a million is when an attacker manages to intercept the hardware wallet being shipped to the victim and tamper with it.

read Reddit. way more people being hacked than 1/1,000,000 . Having malware that changes the destination address for example.

That's not the hardware wallet being exploited though, it targets the user's computer. Verifying the address on the screen of a hardware wallet during confirmation would reveal the mismatch.

But most HW wallets have tiny screens that make users apathetic to validating tx data.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#193

Post by MrMan »

psychphysic wrote: post #128
spicymaki wrote: post #76

Earlier quoted context omitted.

Exactly! if the experts can’t secure their accounts, what hope does anyone else have? Soon you will see people saying you should have done this or that complicated thing, or how somebody so smart could should have known better. No matter what they say it is never enough. This is why lack of consumer protections suck.

That's why hardware based security is really the only way at this point. He might be a bitcoin core Dev but does he use ledger/trezor etc? Is his PGP key on his hardrive or a smartcard? In this day and age your computer not a bastion it once was. (It never really was but it's more of a problem in 2022 than 1982).

a really obtuse and clueless response which literally makes the previous posters post for them by dint of its cluelessness

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#195

Post by hgsgm »

doodlesdev wrote: post #142

Could this be a "boating accident" since it's tax season? Or maybe only his Twitter was hacked? No info from him at his mastodon https://mastodon.social/@lukedashjr@bitcoinhackers.org If true this is absolutely devastating. Somewhat funny too, but devastating. edit: Well, it's confirmed. Insane. https://twitter.com/peterktodd/status/1609655629903265795 https://twitter.com/peterktodd/status/1609666001251229696

Peter writes in that thread that "computer security is a mess" and also that any competent IT professional can secure their cryptoc with [whatever is considered state of the art this year].

Imagined banking was only available to people with equivalent of a college degree in finance and ongoing continuing education ..but also half the education is provided by criminals trying to rob use across national borders.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#196

Post by tmpburning »

gjsman-1000 wrote: post #70
yuvadam wrote: post #63

Earlier quoted context omitted.

Peter Todd claims he has confirmation [1] [1] - https://twitter.com/peterktodd/status/1609655629903265795

If a Bitcoin Developer with >$3M in Bitcoin didn’t use a hardware wallet… God help the typical Bitcoin user. It’s a tragedy, and inexcusable.

I host my Bitcoins publicly as a gpg encrypted file

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#197

Post by torben-friis »

lizknope wrote: post #187

I needed a good laugh to start off the new year! Couldn't have happened to a more awful person. https://www.reddit.com/r/Buttcoin/comments/4936kw/lukejr_is_...

Jesus. Why is it that people with this level of crazy keep appearing at the top of important tech projects??

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#198

Post by bena »

woodruffw wrote: post #154
psychphysic wrote: post #128

Earlier quoted context omitted.

That's why hardware based security is really the only way at this point. He might be a bitcoin core Dev but does he use ledger/trezor etc? Is his PGP key on his hardrive or a smartcard? In this day and age your computer not a bastion it once was. (It never really was but it's more of a problem in 2022 than 1982).

This completely talks past what the person you're replying to is saying: it doesn't matter if "hardware based security is [...] the only way," because its conspicuous absence indicates that even the experts fail to meet the onerous requirements placed on them by cryptocurrency.

Yeah, this only highlights how ridiculous the requirements are.

The system needs to be tolerant of failures and faults of multiple natures. And cryptocurrency is very intolerant or many types of failures and faults.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#199

Post by lern_too_spel »

rkho wrote: post #94
reducesuffering wrote: post #58

Earlier quoted context omitted.

You're right, I've got it! We'll store our money in a savings account, with transfer safeguards, where someone can't irreversibly yeet my life savings into the abyss.

And yet they did: https://www.bloomberg.com/news/articles/2022-02-17/police-be...

That's the point. If you're a criminal, you don't get to keep the proceeds of your crime. In this case, people were blocking streets and creating nonstop noise disturbances in order to get donations from foreigners who wanted to shut down the city.

Or do you think I should be able to pay a trucker to block your driveway and honk their horn all night? If so, the way to solve it isn't to let anybody get money for any illegal activity (which is only possible on Bitcoin because regulation hasn't caught up, not for any technical reason) but to make it legal for me to pay the trucker to block your driveway and honk their horn.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#200

Post by torben-friis »

MuffinFlavored wrote: post #182
TillE wrote: post #82

It's certainly not the cause of this hack, but nobody should be using asymmetric encryption to protect their own stuff. It should only be used for communication with another party. Quantum computing will eventually be a thing. So use symmetric encryption whenever it's at all possible.

> asymmetric encryption PGP? RSA? Can you elaborate please? > symmetric encryption AES? Is this what you mean? What's the best way to do AES these days? AES-256-CBC? Is there "symmetric encryption" that is public key/private key? I know AES you just need IV + key and you're "good to go"?

I think he’s just implying that since asymmetric depends on the reverse operation being slow, there will eventually be a system fast enough or a non slow algorithm for the operation.

A bit far fetched IMO if the threat model depends on quantum computing but I have no idea about the subject so…

Post reply on HN