Live data from Hacker News

Bitcoin stolen while laptop was in Apple store

news.ycombinator.com

21–30 of 32 posts

Re: Bitcoin stolen while laptop was in Apple store

#21

Earlier quoted context omitted.

I never suspected it could happen at Apple. And it's not about $10, you know. It's $8500! I was counting on that money.

Have you thought about trying to track the person down using their wallet address? The blockchain is only as anonymous as someone is careful.

They are using mixer service. I am unable to track them. https://blockchain.info/tree/111322425

Re: Bitcoin stolen while laptop was in Apple store

#22
post #15

Earlier quoted context omitted.

firewire / thunderbolt DMA access was fixed many years ago: if you enabled a firmware password, those buses have DMA disabled.

Are you saying that if I have a firmware password on my MBA that my internal SSD is inaccessible via Thunderbolt externally (until I've entered my password)?

No, but your TB device wouldn't have read access to physical memory (where keys would be)

Re: Bitcoin stolen while laptop was in Apple store

#23
post #15

Earlier quoted context omitted.

firewire / thunderbolt DMA access was fixed many years ago: if you enabled a firmware password, those buses have DMA disabled.

Are you saying that if I have a firmware password on my MBA that my internal SSD is inaccessible via Thunderbolt externally (until I've entered my password)?

No - but it means that a device can't read your FileVault keys out of memory so all they can read is the encrypted volume.

Re: Bitcoin stolen while laptop was in Apple store

#25
post #10

Earlier quoted context omitted.

Hm. What's wrong with FileVault? I knew that there could be some issues with my laptop after service it Apple, they informed me about it. But I thought to myself, come on, it's just a minor cooler issue, they won't even need to login to fix it. How could they possible break anything.

FileValult problems: http://mjtsai.com/blog/2012/08/07/filevault-2s-apple-id-back... AFAIK they don't login to fix hardware issues -- they netboot diagnostics software but on multiple occasions I was informed by people that Apple had "made a backup of their system" before a reinstall. What that entails and what the retention policy is, I do not know but I suspect unless they're doing a three-pass erase on their tempo…

They generally do ask for a login on your system when you give them the machine for service. You don't need to provide it.

Re: Bitcoin stolen while laptop was in Apple store

#27

Earlier quoted context omitted.

Have you thought about trying to track the person down using their wallet address? The blockchain is only as anonymous as someone is careful.

They are using mixer service. I am unable to track them. https://blockchain.info/tree/111322425

inform the FBI that you have reason to believe an apple employee at that location is laundering money. And possibly using it to buy drugs.

Re: Bitcoin stolen while laptop was in Apple store

#28
post #27

Earlier quoted context omitted.

They are using mixer service. I am unable to track them. https://blockchain.info/tree/111322425

inform the FBI that you have reason to believe an apple employee at that location is laundering money. And possibly using it to buy drugs.

I filed a report on IC3.gov website.

Re: Bitcoin stolen while laptop was in Apple store

#29
post #4

Moral of the story: don't deal with the Apple Store. The amount of people I know who have had their data trashed (after possibly being cloned) is quite high. The solution to most problems is wipe the machine. They usually come to me after telling them to fuck off. I haven't had to destroy a single machine yet. We're talking trivial shit like an HP printer driver thrashing the CPU or corrupt mail folders. Seriously, 1…

Also treat your computer like a credit card

That's the best comment in this thread.

Re: Bitcoin stolen while laptop was in Apple store

#30
post #24

Might be a good time to backup your drive before logs are rotated... At the time of your writting, you only have kernel.log as a boot time clue, and it will self erase.

Good point. I already saved a copy of system logs.

IANAL but I'd suggest you go further and stop using your computer as soon as possible. Use linux to DD the drive onto a secondary backup drive as a bit for bit archive, put the existing drive in the possession of a third party and then start from scratch. Each time you use the computer you're damaging your credibility in a potential lawsuit.
Post reply on HN