Live data from Hacker News

The Satoshi Nakamoto SourceForge account has been hacked

sourceforge.net

101–110 of 192 posts

Re: The Satoshi Nakamoto SourceForge account has been hacked

#101
post #69

Earlier quoted context omitted.

gmail, for instance, includes the client IP address in mail headers. I learned this myself recently from an article here on HN, https://news.ycombinator.com/item?id=2083798 Haven't checked it myself, just reported there by a former gmail engineer in the context of their anti-spammer efforts.

Gmail has NEVER included the IP in headers (you can easily check this yourself). Hotmail/Outlook on the other hand ...

Depends on how you access Gmail. Webmail doesn't include your IP in the headers. SMTP does.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#102
post #49

Earlier quoted context omitted.

> But if you have a billion dollars of gold in your basement, you should be very, very paranoid. At close to 25 tonnes, and ~1.3m³, I'd like to see the engineering behind such a heist

Kill occupants of building, move 1.3 cubic meters of gold in 30 trips with transport van. Now you have a few other problems, such as making sure that you're not going to end up in the same way. Besides surveillance cam footage recording your whereabout during part of your trip and the distance being fairly easily estimated if you do two trips in quick succession leading to a possible ID and or location of the stash.…

I believe all you need is several mini coopers.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#104

Could this be a government posing as a hacker in order to discredit the threat to mainstream currencies? I don't think so, but I do think conspiracy theories will be abound!

I'll play. My conspiracy theory is that this is a PR stunt by gmx.com to advertise their email service. Motive and opportunity!

Re: The Satoshi Nakamoto SourceForge account has been hacked

#105
post #34

Earlier quoted context omitted.

"Security through obscurity" being bad only applies to cryptography, and have no bearing whatsoever to the concept of security in real life. To answer your question, actually, yes, it's almost proven to be the most effective measurement for one's safety: don't want to get hurt? Don't let people find you: get in a forest/ mountain range and hide.

> "Security through obscurity" being bad only applies to cryptography, and have no bearing whatsoever to the concept of security in real life. Why do you believe this? The concept predates widespread use of encryption and originally applied to things like physical locks. Their "security through obscurity" approach was custom mechanisms which were easily defeated shortly after development by determined thieves. This r…

That statement, read alone, sounds a bit more stronger than I intended for it to be. I agree with what you said. Although I should note that we aren't allowed to run around in top secret building to draw out the floor plan ;).

Thinking about it, I guess "security through obscurity" wasn't the correct term to use in the case. What I meant was simply that: there are completely valid reasons to keep your name and/ or location unknown, both for your safety, and otherwise convenience of life.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#106

Earlier quoted context omitted.

Interesting link. I'm sure there's a lot more to come if what they have is true. But the comment about the popcorn doesn't seem right. Is it entertaining to watch him get dox'ed? Shall we encourage hackers holding info for ransom?

"Is it entertaining to watch him get dox'ed?" uh... yes, of course it is? I'm not saying it is necessarily a good thing, especially for him personally, but it is undeniably interesting. Why is Jack the Ripper still making headlines? Because the unknown breeds mystery, which is inherently entertaining to people.

Apparently we know who Jack the ripper is now. http://www.nbcnews.com/science/science-news/was-it-aaron-kos...

He is Aaron Kosminski according to DNA probably.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#107

Earlier quoted context omitted.

"Is it entertaining to watch him get dox'ed?" uh... yes, of course it is? I'm not saying it is necessarily a good thing, especially for him personally, but it is undeniably interesting. Why is Jack the Ripper still making headlines? Because the unknown breeds mystery, which is inherently entertaining to people.

Apparently we know who Jack the ripper is now. http://www.nbcnews.com/science/science-news/was-it-aaron-kos... He is Aaron Kosminski according to DNA probably.

Will be vetted after his book has sold out. :)

Re: The Satoshi Nakamoto SourceForge account has been hacked

#108
post #71

More details via Wired: http://www.wired.com/2014/09/satoshi/ 1) A pastebin threating to dox Satoshi for 25 BTC: http://pastebin.com/7gbPi8Qr . Address has received less than .02 BTC thus far: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... 2) The GMX screenshots show 11k+ emails in the inbox, with one from as far back as June 2013

Mirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.

So we're looking at the gmx.com account being legitimately hacked -- but Satoshi had good enough opsec to not leak anything interesting from the account.

The hacker gained access to the gmx.com mailbox - resets all of the third party accounts and still comes out with nothing of value?!!

1) So he has to fake an invoice to gain media buzz? I don't buy it.

2) What's in the outbox?

Re: The Satoshi Nakamoto SourceForge account has been hacked

#109
post #49

Earlier quoted context omitted.

> But if you have a billion dollars of gold in your basement, you should be very, very paranoid. At close to 25 tonnes, and ~1.3m³, I'd like to see the engineering behind such a heist

Someone stole 6 million pounds of maple syrup from Canada's strategic reserves. http://www.businessweek.com/articles/2013-01-02/the-great-ca... I'm sure moving a couple cubic meters of gold isn't a problem if you're motivated.

The Global Strategic Maple Syrup Reserve, no less.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#110
post #101
post #69

Earlier quoted context omitted.

Gmail has NEVER included the IP in headers (you can easily check this yourself). Hotmail/Outlook on the other hand ...

Depends on how you access Gmail. Webmail doesn't include your IP in the headers. SMTP does.

Ah ok. I've only ever used webmail, it makes sense SMTP would include the IP.
Post reply on HN