Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

411–420 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#411

Post by mrtksn »

matrix_overload wrote: post #402
fshbbdssbbgdd wrote: post #286

Earlier quoted context omitted.

So you’re saying that to use crypto properly, I have to secure a physical object that grants irrevocable ownership of my wealth? That sounds bad. Is there a way I can get my crypto held my an institution with SIPC insurance, the way I hold stocks at a brokerage, so I can outsource this issue to someone else who is backed by a government guarantee? (I obviously don’t expect them to guarantee the value of the crypto, j…

>I have to secure a physical object that grants irrevocable ownership of my wealth? Not really. Can be a file copied across dozens of public places that is well-encrypted (say AES256+Blowfish) using a key securely derived (say PBKDF2 with many iterations) from a random password you don't use anywhere else. That said, if you do that, have a system that will drill you for that password weekly, or you will just forget i…

This doesn't help at all, it's still a single point of failure without recourse. You might be subjected to rubber hose cryptography or any of the systems you use might be hacked and your password extracted.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#412

Post by daniel-levin »

MuffinFlavored wrote: post #367
amadeuspagel wrote: post #190

> The irony here is Luke being a dev probably made it easier for him to be complacent. His security setup was frankly a lot worse than what most plebs seem to use. > The standard advice of buy a Trezor and write down your seed on paper is much better than a Gentoo hot wallet. https://twitter.com/peterktodd/status/1609667983298658304

So most crypto users should: 1. Sign up for Coinbase (where you give your driver's license + bank account ACH and get validated as a legit US citizen or whatever) 2. Transfer USD into Coinbase 3. Purchase BTC with that USD 4. Transfer that BTC from Coinbase to a $80 Trezor Model One wallet from Amazon?

Coinbase unironically suggests using PKI to protect oneself. It’s unbelievable self-satire.

https://www.coinbase.com/blog/celer-bridge-incident-analysis

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#413

Post by mrtksn »

sillysaurusx wrote: post #358
Raed667 wrote: post #96

One of the linked transactions: https://www.blockchain.com/explorer/transactions/btc/432ded9... The destination address ( https://www.blockchain.com/explorer/addresses/btc/1YAR6opJCf... ) seems to have received ~216 BTC yesterday in the span of 4 minutes

The hacker will have a rough time converting these to USD without exposing himself. If they’re in Russia they probably don’t need to care, but there’s a reasonable chance they live in a country that the FBI can reach. On the other hand, no one can do anything until the coins are moved or more information is uncovered. What a nightmare to lose $3.6m overnight.

Or just make a deal with someone in Russia?

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#414

Post by andreskytt »

ec59cb1659 wrote: post #392
fshbbdssbbgdd wrote: post #286

Earlier quoted context omitted.

So you’re saying that to use crypto properly, I have to secure a physical object that grants irrevocable ownership of my wealth? That sounds bad. Is there a way I can get my crypto held my an institution with SIPC insurance, the way I hold stocks at a brokerage, so I can outsource this issue to someone else who is backed by a government guarantee? (I obviously don’t expect them to guarantee the value of the crypto, j…

It's not about money, it's about power. If you hold a physical item, you have the maximum power over it as possible. If you want to entrust someone else with it, go ahead, but at the end of the day your access to the item will be subject to their whims and those of the greater political establishment / woke clergy / corrupt and powerful.

Nope, not at all. Your hardware wallet is useless without the bitcoin trust frameworks and the implicit agreement among many people that these particular bits on your hardware denote anything of value. Both of these are completely beyond your control and reliant on mechanisms not fully understood. It’s a system boundary question: yes, your wallet is under your control (how do you know what’s baked into the silicone or firmware, I do not know), but the whole system is not.

There is a huge amount of vested interest in persuading people bitcoin or ethereum require no trust in third parties. This is not true, as illustrated by this case: the person writing code that’s supposed to secure your money made incorrect assumptions about security and was thus robbed. If you own bitcoin, you necessarily need to trust this person and his colleagues are neither malicious nor stupid. Why that’s better than making the same assumptions about state institutions and banks is, to me, not clear.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#415

Post by tsimionescu »

lampshades wrote: post #220
tsimionescu wrote: post #202

Earlier quoted context omitted.

Why just two lock vaults and not some army bunkers, together with the nuclear codes preferably? At some point this level of care becomes more than absurd.

> makes up hypothetical situations > attacks his own hypothetical situations

No, I was attacking your idea that it's somehow common sense that the best way of storing BTC is by working with multiple banks (!!!) to store various key fragments, by showing a more extreme version.

Of course, if someone did follow your example, and then the government compelled the banks to hand over access to the physical tokens, other people similar to you would come out and say "not your keys, not your bitcoin", or insist on even more byzantine forms of secret protection.

Not to mention, with your proposed scheme, actually using your BTC becomes significantly slower than any international bank transfer.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#416

Post by bobkazamakis »

MuffinFlavored wrote: post #169
Dma54rhs wrote: post #102

Earlier quoted context omitted.

Weird he cheaped up on servers paying 55 a month to some random vps provider.

> some random vps provider. devil's advocate: is DigitalOcean in this category?

vps provider, yes. Random, less so, since they're on the nyse.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#417

Post by hi5eyes »

andreskytt wrote: post #414
ec59cb1659 wrote: post #392

Earlier quoted context omitted.

It's not about money, it's about power. If you hold a physical item, you have the maximum power over it as possible. If you want to entrust someone else with it, go ahead, but at the end of the day your access to the item will be subject to their whims and those of the greater political establishment / woke clergy / corrupt and powerful.

Nope, not at all. Your hardware wallet is useless without the bitcoin trust frameworks and the implicit agreement among many people that these particular bits on your hardware denote anything of value. Both of these are completely beyond your control and reliant on mechanisms not fully understood. It’s a system boundary question: yes, your wallet is under your control (how do you know what’s baked into the silicone o…

why does everyone trust the bitcoin core dev to be telling the truth about getting "hacked" and having his funds immediately mixed?

this seems more like it could be similar to a simple boating accident

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#418

Post by pyuser583 »

DonHopkins wrote: post #375
TylerE wrote: post #295

Earlier quoted context omitted.

Not really a stretch in this case https://twitter.com/lukedashjr/status/1169615995742380035 https://old.reddit.com/r/Buttcoin/comments/4936kw/lukejr_is_... Dude seriously Thinks the pope isn’t catholic and the sun revolves around the earth

OMG "vrml dropouts"! ;) That's olde skul. [anon]>>>>> Does the bitcoin community realize how literally crazy this guy is? [deleted]>>>> They look the other way. He is by most accounts a talented coder who understands bitcoin's protocol better than most. His eccentricities are alternatively ignored or tolerated, as they are largely (but not always) harmless as far as Bitcoin is concerned. [deleted]>>>> This tradeoff s…

Plenty of great programmers are nut jobs.

I personally know at least two sedevancatists who are amazing coders.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#419

Post by sillysaurusx »

mrtksn wrote: post #413
sillysaurusx wrote: post #358

Earlier quoted context omitted.

The hacker will have a rough time converting these to USD without exposing himself. If they’re in Russia they probably don’t need to care, but there’s a reasonable chance they live in a country that the FBI can reach. On the other hand, no one can do anything until the coins are moved or more information is uncovered. What a nightmare to lose $3.6m overnight.

Or just make a deal with someone in Russia?

That’ll likely go about as well as making a deal in RuneScape. Though the hacker doesn’t have many options.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#420

Post by pyuser583 »

simonw wrote: post #35

I still think the reason Satoshi vanished is that he lost his private key and couldn't handle the embarrassment.

I figured he’s a guy who works in the national security sector and didn’t want his extra curricular work drawing attention to himself.

If he had to pass occasional polygraphs, it could create some weird situations.

And if he signed a contract giving all intellectual output to his employer (including side projects), he could find himself in a lawsuit.

Post reply on HN