Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

371–380 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#371

Post by DJBunnies »

MuffinFlavored wrote: post #367
amadeuspagel wrote: post #190

> The irony here is Luke being a dev probably made it easier for him to be complacent. His security setup was frankly a lot worse than what most plebs seem to use. > The standard advice of buy a Trezor and write down your seed on paper is much better than a Gentoo hot wallet. https://twitter.com/peterktodd/status/1609667983298658304

So most crypto users should: 1. Sign up for Coinbase (where you give your driver's license + bank account ACH and get validated as a legit US citizen or whatever) 2. Transfer USD into Coinbase 3. Purchase BTC with that USD 4. Transfer that BTC from Coinbase to a $80 Trezor Model One wallet from Amazon?

From Trezor directly.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#372

Post by tgsovlerkhgsel »

Raed667 wrote: post #96

One of the linked transactions: https://www.blockchain.com/explorer/transactions/btc/432ded9... The destination address ( https://www.blockchain.com/explorer/addresses/btc/1YAR6opJCf... ) seems to have received ~216 BTC yesterday in the span of 4 minutes

Isn't it surprising that an early Bitcoin adopter has "only" 216 Bitcoin? Didn't he join at a time where you'd be mining full blocks solo?

(One of his later tweets claimed that "it's basically all gone" or something like that, implying this wasn't just a small fraction of his total coins.)

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#373

Post by usrusr »

gruez wrote: post #343
tkiolp4 wrote: post #237

Maybe off topic: is it fine to publicly say that you have $3.6M in bitcoin using a profile name that exposes who you are in real life? Wouldn’t the IRS (or local equivalent) come to knock your door and ask for taxes on that money?

>Wouldn’t the IRS (or local equivalent) come to knock your door and ask for taxes on that money? Not sure about other countries, but at least in the US any gains on crypto is only taxable after you've sold (or transacted with) it. Given that he just got his bitcoin stolen, my guess is that he hasn't sold yet, and therefore doesn't owe any taxes yet.

So we can add another possible explanation to the list: it could all be theatre in preparation of selling in the unregistered way?

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#374

Post by MuffinFlavored »

DJBunnies wrote: post #371
MuffinFlavored wrote: post #367

Earlier quoted context omitted.

So most crypto users should: 1. Sign up for Coinbase (where you give your driver's license + bank account ACH and get validated as a legit US citizen or whatever) 2. Transfer USD into Coinbase 3. Purchase BTC with that USD 4. Transfer that BTC from Coinbase to a $80 Trezor Model One wallet from Amazon?

From Trezor directly.

https://trezor.io/trezor-model-one

$70

Got it. Thanks.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#375

Post by DonHopkins »

TylerE wrote: post #295
giardia wrote: post #287

Earlier quoted context omitted.

The implication of your comment is that Bitcoin is developed in part by someone who acts like an idiot.

Not really a stretch in this case https://twitter.com/lukedashjr/status/1169615995742380035 https://old.reddit.com/r/Buttcoin/comments/4936kw/lukejr_is_... Dude seriously Thinks the pope isn’t catholic and the sun revolves around the earth

OMG "vrml dropouts"! ;) That's olde skul.

[anon]>>>>> Does the bitcoin community realize how literally crazy this guy is?

[deleted]>>>> They look the other way. He is by most accounts a talented coder who understands bitcoin's protocol better than most. His eccentricities are alternatively ignored or tolerated, as they are largely (but not always) harmless as far as Bitcoin is concerned.

[deleted]>>>> This tradeoff seems common in fringe libertarian groups. There's always one guy in the group who wants to overthrow the government solely to be able to marry his cousins, and the larger group accepts it because they're not in a position to turn down his assistance.

theskepticalheretic>>> Yeah but that's one hell of a faustian bargain. It wouldn't be too difficult to get a new developer up to speed, or find an equally talented developer who isn't batshit crazy. His craziness drives people away from any project he works on.

Hodldown>> I think you are wrong, I think bitcoin has been looking for real programmers for years but this poor quality of losers, weirdos and vrml dropouts is the best that showed up. I think this is the highest quality a project like this gets.

theskepticalheretic> Well the confounding factor would probably be that experienced high quality programmers have some historical understanding of distributed systems. When they look at bitcoin they chuckle and think "Haha, it's that silly shit from the 90's we used to use to test who had the fastest PC."

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#376

Post by Thorrez »

reedjosh wrote: post #353
fshbbdssbbgdd wrote: post #346

Earlier quoted context omitted.

This thread is actually about security and custody, not valuation. Those are different issues, but we can talk about valuation. My crypto has lost more value than any of my other investments. Since crypto (unlike stocks and bonds) doesn’t entitle me to any cash flows, and (unlike dollars) doesn’t allow me to repay any debts, why shouldn’t the value keep dropping?

Measured using fake dollars. Aka dollars made in other sham Crypto coins and loans. And now the same is happening to the regular markets since higher rates are sucking dollars from the market. My Amazon RSUs are 1/2 of my grant date and falling fast. Sh tcoins gonna sh t, but BTC hasn't failed in any way, and multisig makes it easier than any other commodity to secure.

What do you mean by fake dollars? We're talking about US dollars. Yes, US dollars do change in value (down), but overall they're more stable in terms of purchasing power than bitcoin.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#377

Post by Thorrez »

fshbbdssbbgdd wrote: post #357
reedjosh wrote: post #353

Earlier quoted context omitted.

Measured using fake dollars. Aka dollars made in other sham Crypto coins and loans. And now the same is happening to the regular markets since higher rates are sucking dollars from the market. My Amazon RSUs are 1/2 of my grant date and falling fast. Sh tcoins gonna sh t, but BTC hasn't failed in any way, and multisig makes it easier than any other commodity to secure.

Can you go into more detail about how multisig helps? I assume one of the signatures is my hardware wallet. Who holds the other signature? Do they have SIPC insurance? What happens if my wallet is lost or destroyed?

Let's say I have a 3-of-5 multisig. That means there are 5 hardware wallets. I put a hardware wallet in my safe in my house, one in a bank deposit box, and 3 with 3 friends or relatives.

Now a thief needs to steal 3 of these to steal the coins. That's going to be hard for a thief to do. If a fire or natural disaster happens, it needs to destroy 3 wallets before I lose my money.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#379

Post by m-richthoven »

mikojan wrote: post #233
m-richthoven wrote: post #231

Earlier quoted context omitted.

[flagged]

I fail to see how reading multiple essays on the nuances of "literal and figurative analogies" will convince me that the other guy was nitpicking.

[dead]

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#380

Post by AlexCoventry »

fshbbdssbbgdd wrote: post #286
gruez wrote: post #271

Earlier quoted context omitted.

>These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion) Based on the other comments in this thread it looks like he didn't bother using a hardware wallet (which is literally something that's recommended on bitcoin.org[1]), and kept his wallet.dat on a server exposed to the intern…

So you’re saying that to use crypto properly, I have to secure a physical object that grants irrevocable ownership of my wealth? That sounds bad. Is there a way I can get my crypto held my an institution with SIPC insurance, the way I hold stocks at a brokerage, so I can outsource this issue to someone else who is backed by a government guarantee? (I obviously don’t expect them to guarantee the value of the crypto, j…

You can use a pin to secure the device, FWIW. And back the encrypted seed phrase up. It's really not that hard.
Post reply on HN