Live data from Hacker News

The Satoshi Nakamoto SourceForge account has been hacked

sourceforge.net

151–160 of 192 posts

Re: The Satoshi Nakamoto SourceForge account has been hacked

#152
post #92
post #75

Earlier quoted context omitted.

That guy did a really bad job of blacking out sensitive information. It probably nails the receiver down to only a couple of hundred people.

With a bit of levels adjustment and http://i.imgur.com/y0Ee8cl.png We're being lied to. This is fake. The street address doesn't match the post code. My assessment: The hacker created the order himself, with fake ID, fake address and doctored the timestamp.

> With a bit of levels adjustment

Care to explain?

Re: The Satoshi Nakamoto SourceForge account has been hacked

#153
post #94

Earlier quoted context omitted.

Only if your DSL router hosts an SMTP relay. You're confusing traceroute with email.

Many (most?) SMTP servers will include the client IP in message headers. IIRC it's even required by ope of the RFCs.

There was a line in that long post on here the other day about Gmail, encryption, and the spam fight that mentioned how what's-his-name explicitly ignored the RFC by scrubbing the IP address out of Gamil headers, so I think you do recall correctly...

Re: The Satoshi Nakamoto SourceForge account has been hacked

#154
post #4

Satoshi's account on p2pfoundation.ning.com also made the first comment since he said "I am not Dorian Nakamoto." back in March. It says: "Dear Satoshi. Your dox, passwords and IP addresses are being sold on the darknet. Apparently you didn't configure Tor properly and your IP leaked when you used your email account sometime in 2010. You are not safe. You need to get out of where you are as soon as possible before th…

Please excuse my ignorance here, but how does one track a persons location by their IP? Any time I have tried to look up an IP, I get a really vague result. ie "Somewhere in this city". Is it possible to get very specific results?

Re: The Satoshi Nakamoto SourceForge account has been hacked

#157
post #92

Earlier quoted context omitted.

With a bit of levels adjustment and http://i.imgur.com/y0Ee8cl.png We're being lied to. This is fake. The street address doesn't match the post code. My assessment: The hacker created the order himself, with fake ID, fake address and doctored the timestamp.

> With a bit of levels adjustment Care to explain?

Bumping the shadows/black levels so that they are brighter. Literally just moving a single slider all the way to the right in photoshop or lightroom. Just google 'levels', or here's a decent intro: http://www.cambridgeincolour.com/tutorials/levels.htm

Re: The Satoshi Nakamoto SourceForge account has been hacked

#158

Earlier quoted context omitted.

So we're looking at the gmx.com account being legitimately hacked -- but Satoshi had good enough opsec to not leak anything interesting from the account. The hacker gained access to the gmx.com mailbox - resets all of the third party accounts and still comes out with nothing of value?!! 1) So he has to fake an invoice to gain media buzz? I don't buy it. 2) What's in the outbox?

> but Satoshi had good enough opsec to not leak anything interesting from the account. Except is St Louis Missouri street address and telephone number.

Could be some scammer buying something and leaving a fake email.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#159

Could this be a government posing as a hacker in order to discredit the threat to mainstream currencies? I don't think so, but I do think conspiracy theories will be abound!

I'll play. My conspiracy theory is that this is a PR stunt by gmx.com to advertise their email service. Motive and opportunity!

Funny theory, but then again, it wouldn't be great advertising considering the gmx account was compromised. Which maybe makes it funnier.

Re: The Satoshi Nakamoto SourceForge account has been hacked

#160

If you take the screenshot showing the leaked e-mail from an order 'he' placed at CardReaderFactory, you get an interesting data point: - You can lookup orders tied to the e-mail address shatoshin@gmx.de - You cannot lookup order tied to gibberish accounts, like odn2n489n4@gmail.com Proof: http://imgur.com/a/22z72

And what does this say?

That the order was real, but that doesn't necesarily mean Satoshi ordered it, since it could have been someone else giving his address.
Post reply on HN