Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

Post reply on HN
Print view View original

171–180 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#171

Post by azinman2 »

woodruffw wrote: post #163
Phlarp wrote: post #140

Earlier quoted context omitted.

[flagged]

This is ridiculously ahistorical: the early Bitcoin releases had all kinds of bugs in them[1], and there was a reasonably large enthusiast community looking at it for years before widespread adoption. The US government doesn't need to burn coal to fund the clandestine services. They just put it in a budget line item whose contents are classified. [1]: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposu...

FWIW the GP didn’t say US; there are many more intel orgs and govs desperate for money than the US.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#172

Post by Phlarp »

woodruffw wrote: post #163
Phlarp wrote: post #140

Earlier quoted context omitted.

[flagged]

This is ridiculously ahistorical: the early Bitcoin releases had all kinds of bugs in them[1], and there was a reasonably large enthusiast community looking at it for years before widespread adoption. The US government doesn't need to burn coal to fund the clandestine services. They just put it in a budget line item whose contents are classified. [1]: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposu...

[flagged]

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#173

Post by azinman2 »

staunch wrote: post #159
Phlarp wrote: post #140

Earlier quoted context omitted.

[flagged]

> ...a black ops funding scheme... More specifically, a scheme to enable transferring funds in/out of foreign countries to securely bribe informants and supply agents with money. It's the logical companion to Tor, which was created by the U.S. government to facilitate secure information transfer in/out of foreign countries. But when they created Bitcoin, they decided to make it anonymous after the mistake of doing To…

Bitcoin isn’t anonymous. The transfers of coins are there permanently for all to see.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#174

Post by Phlarp »

azinman2 wrote: post #171
woodruffw wrote: post #163

Earlier quoted context omitted.

This is ridiculously ahistorical: the early Bitcoin releases had all kinds of bugs in them[1], and there was a reasonably large enthusiast community looking at it for years before widespread adoption. The US government doesn't need to burn coal to fund the clandestine services. They just put it in a budget line item whose contents are classified. [1]: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposu...

FWIW the GP didn’t say US; there are many more intel orgs and govs desperate for money than the US.

North Korea seems to have been weaponizing it more aggressively than anyone at this point.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#175

Post by Phlarp »

azinman2 wrote: post #173
staunch wrote: post #159

Earlier quoted context omitted.

> ...a black ops funding scheme... More specifically, a scheme to enable transferring funds in/out of foreign countries to securely bribe informants and supply agents with money. It's the logical companion to Tor, which was created by the U.S. government to facilitate secure information transfer in/out of foreign countries. But when they created Bitcoin, they decided to make it anonymous after the mistake of doing To…

Bitcoin isn’t anonymous. The transfers of coins are there permanently for all to see.

Satoshi is (so far)

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#176

Post by thatguy0900 »

woodruffw wrote: post #163
Phlarp wrote: post #140

Earlier quoted context omitted.

[flagged]

This is ridiculously ahistorical: the early Bitcoin releases had all kinds of bugs in them[1], and there was a reasonably large enthusiast community looking at it for years before widespread adoption. The US government doesn't need to burn coal to fund the clandestine services. They just put it in a budget line item whose contents are classified. [1]: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposu...

And yet the Cia found it useful to sell cocaine. And that's in a country that has unlimited funding.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#177

Post by Phlarp »

bitxbitxbitcoin wrote: post #160
optimalsolver wrote: post #151

Earlier quoted context omitted.

>math and code were nearly perfect with zero peer review Bitcoin had to be forked in the early years due to critical errors in the original code. There was nothing perfect about it.

It’s also pretty well established that there was some peer review.

Peer review before the white paper was published? I'd be fascinated to learn more about any such conversations.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#178

Post by MuffinFlavored »

doodlesdev wrote: post #157
wkdneidbwf wrote: post #146

a hot wallet on a $55 dedicated server from some rando colo? he would have been more secure having it at coinbase…

[flagged]

What do we know that the "hacker" achieved? Was it physical access to the datacenter at the VPS he chose or was it... some "Linux malware virus"?

What did they get? His PGP keys were his Bitcoin private keys? His passphrase? They were just a file laying around on his VPS machine?

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#179

Post by ChrisClark »

kinnth wrote: post #86

Would this happen if his wallet was a hardware wallet like a ledger or trezor?

Probably not, he was storing his bitcoin private key on a low cost server, that regularly got hacked, as recently as a month ago. And he kept using it.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#180

Post by hsbauauvhabzb »

perihelions wrote: post #143
doodlesdev wrote: post #120

Earlier quoted context omitted.

1. Disable JavaScript. 2. Access (almost) any website in the internet 3. ????? 4. Profit edit: Mastodon doesn't work without JavaScript, holy hell. We truly are living in a dystopia. Thankfully you can still access his profile from another trusted instance such as mastodon.social at https://mastodon.social/@lukedashjr@bitcoinhackers.org

I always have JavaScript disabled by default (uMatrix policy), but (0) there's many other attack vectors, to my layman understanding, and (1) at any rate that one's a Mastodon instance and those are blank pages without JS. I'm electing to add new URL regexps to my uBlock filters, to reduce the risk of accidentally clicking a link similar to this. I don't think I want to visit any web domain that caters to people who…

Are you’re (0) and (1) supposed to be citations? If so I’m interested and you forgot to add them.
Post reply on HN