Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Satoshi Nakamoto SourceForge account has been hacked

sourceforge.net

Post reply on HN
Print view View original

81–90 of 192 posts

Re: The Satoshi Nakamoto SourceForge account has been hacked

#81

Post by berberous »

3rd3 wrote: post #75
8ig8 wrote: post #71

Earlier quoted context omitted.

Mirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.

That guy did a really bad job of blacking out sensitive information. It probably nails the receiver down to only a couple of hundred people.

Assuming it's not doctored, I'm very surprised he would order something from a random company to his real name/address using his Satoshi e-mail...presumably he has other e-mails, and that seems like pretty horrendous op sec. Unless he bought it for a friend?

edit: the item he ordered was a FPGA in mid 2013. He's really bothering with a single $400 miner in 2013...? He doesn't have enough BTC?

Re: The Satoshi Nakamoto SourceForge account has been hacked

#82

Post by jrochkind1 »

serf wrote: post #73
jrochkind1 wrote: post #46

Earlier quoted context omitted.

gmail, for instance, includes the client IP address in mail headers. I learned this myself recently from an article here on HN, https://news.ycombinator.com/item?id=2083798 Haven't checked it myself, just reported there by a former gmail engineer in the context of their anti-spammer efforts.

You're wrong. Most SMTP requires IP in the header, gmail does not. This causes contempt between certain groups, as while it's a boon for personal privacy, it often hinders investigations. Here's a video with Mike Hearn giving a talk about spam. At the end and middle are mentions about gmail's lack of IP from sent emails, the end specifically from a network admin expressing his grievances about Google's efforts being…

Interesting. The link I posted above must not be the one I read a few days ago on HN (or somewhere else?), cause it was actually posted several years ago on HN. Let me find what I read recently...

Aha, it was on reddit, and is here: https://moderncrypto.org/mail-archive/messaging/2014/000780....

Ah, and you're right, I misremembered what it said about that, indeed it says gmail does not do that. okay!

Obviously it _could_ if it wanted to, and other webmail might. But gmail does not, okay!

Re: The Satoshi Nakamoto SourceForge account has been hacked

#83

Post by Aqueous »

I won't post a working link to the images but I did view them and the top-most email says it was sent 12/6/22, a date that has not occurred yet. So this is either a bug in GMX that doesn't validate timestamps or he didn't finish his otherwise convincing photoshop job :-)

Re: The Satoshi Nakamoto SourceForge account has been hacked

#84

Post by georgemcbay »

unreal37 wrote: post #72
georgemcbay wrote: post #52

https://twitter.com/petertoddbtc/status/509145414008725504 Peter Todd ‏ @petertoddbtc "Interesting, got another forwarded email from "satoshi", from 2011 - indicates this was a hijacked account, not expired and re-registered." ---- Going to grab some popcorn, this might get pretty entertaining...

Interesting link. I'm sure there's a lot more to come if what they have is true. But the comment about the popcorn doesn't seem right. Is it entertaining to watch him get dox'ed? Shall we encourage hackers holding info for ransom?

"Is it entertaining to watch him get dox'ed?"

uh... yes, of course it is?

I'm not saying it is necessarily a good thing, especially for him personally, but it is undeniably interesting.

Why is Jack the Ripper still making headlines? Because the unknown breeds mystery, which is inherently entertaining to people.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#85

Post by 8ig8 »

8ig8 wrote: post #71
berberous wrote: post #61

More details via Wired: http://www.wired.com/2014/09/satoshi/ 1) A pastebin threating to dox Satoshi for 25 BTC: http://pastebin.com/7gbPi8Qr . Address has received less than .02 BTC thus far: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... 2) The GMX screenshots show 11k+ emails in the inbox, with one from as far back as June 2013

Mirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.

The "Lancelot" (line item from order) manual?

https://www.cardreaderfactory.com/download/documentation/lan...

Re: The Satoshi Nakamoto SourceForge account has been hacked

#86

Post by markbao »

shlorn wrote: post #20

Intresting theory from https://bitcointalk.org/index.php?topic=775174.80 [Quote] nycgoat on September 08, 2014, 11:49:43 PM Is it possible that he deleted the e-mail address @gmx when he left the project and that it has been recycled? Someone else may have been able to sign up, then use the reset password feature on these other sites. It is likely that the @gmx address would have been destroyed at the conclusion of h…

The screenshots in the text file supposedly show evidence that the attacker gained access to the actual GMX account, not a recycled one, since a) there are still messages in there and b) it seems that the account owner has been active, judging from the "replied to" icons in the inbox.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#87

Post by markbao »

Aqueous wrote: post #83

I won't post a working link to the images but I did view them and the top-most email says it was sent 12/6/22, a date that has not occurred yet. So this is either a bug in GMX that doesn't validate timestamps or he didn't finish his otherwise convincing photoshop job :-)

The email in question looks like a Chinese spam email, which are often sent with dates in the future to show up at the top of date-sorted inboxes.

See also: "spam chinese emails from the future?" http://forums.androidcentral.com/samsung-galaxy-s3/278777-sp...

Re: The Satoshi Nakamoto SourceForge account has been hacked

#88

Post by [deleted] »

rufugee wrote: post #8
croddin wrote: post #4

Satoshi's account on p2pfoundation.ning.com also made the first comment since he said "I am not Dorian Nakamoto." back in March. It says: "Dear Satoshi. Your dox, passwords and IP addresses are being sold on the darknet. Apparently you didn't configure Tor properly and your IP leaked when you used your email account sometime in 2010. You are not safe. You need to get out of where you are as soon as possible before th…

So could someone explain how an IP address would leak when using an email account? I suppose potentially in the SMTP header, but this would assume he was using a email server running on his own personal ip, right? So is the guess here (assuming this is even true) that he had an email server running at home, leaked the ip, and then was attacked when someone found it?

[deleted]

Re: The Satoshi Nakamoto SourceForge account has been hacked

#89

Post by Element_ »

8ig8 wrote: post #71
berberous wrote: post #61

More details via Wired: http://www.wired.com/2014/09/satoshi/ 1) A pastebin threating to dox Satoshi for 25 BTC: http://pastebin.com/7gbPi8Qr . Address has received less than .02 BTC thus far: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... 2) The GMX screenshots show 11k+ emails in the inbox, with one from as far back as June 2013

Mirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.

The first email in that screenshot has a date of "12/6/22".

Re: The Satoshi Nakamoto SourceForge account has been hacked

#90

Post by markbao »

8ig8 wrote: post #71
berberous wrote: post #61

More details via Wired: http://www.wired.com/2014/09/satoshi/ 1) A pastebin threating to dox Satoshi for 25 BTC: http://pastebin.com/7gbPi8Qr . Address has received less than .02 BTC thus far: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... 2) The GMX screenshots show 11k+ emails in the inbox, with one from as far back as June 2013

Mirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.

It's fascinating to see that the account seems to be active, if we are to trust the "replied" icons to G.M. (Bitcoin developer?) and R.M. (Wired reporter that wrote the article on this leak?).

EDIT: From the Wired article, it seems like the hacker corresponded with the Wired reporter via the email address (to prove authenticity?) and may have done the same with the Bitcoin developer as well, judging from timestamps.

Post reply on HN