Live data from Hacker News

“My PGP key is compromised, and at least many of my bitcoins stolen”

twitter.com

331–340 of 564 posts

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#331
post #304

Earlier quoted context omitted.

>If it was that simple and easy why wasn't he doing it. It's simply a ridiculous failure mode that you can lose your entire life savings with no recourse if you make a silly mistake. Except in this case, it seems like he went out of his way to make it less secure, by putting his wallet on his server. This isn't a case of someone losing his mattress savings in a random home burglary, this is a case of someone leaving…

At the risk of murdering this dead horse there's a reason nobody positions duffle bags of cash as the future of finance no matter where located. Precisely because they can be stolen without recourse. Had that money been safely in a bank account they'd still have it in both these examples. I mean this guy is already demanding the FBI get involved when the FBI's position is you should just put it in a bank account and…

>At the risk of murdering this dead horse there's a reason nobody positions duffle bags of cash as the future of finance no matter where located

I think you're conflating "someone who is defending crypto in this particular instance" with "someone who thinks bitcoin will take over the world".

>I mean this guy is already demanding the FBI get involved when the FBI's position is you should just put it in a bank account and not need to call us in the first place.

Yeah, I think we're in agreement here that he was acting like an idiot.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#332
post #318
post #293

Earlier quoted context omitted.

That's a No True Scotsman answer — it's not hard to make people keep their wallets secure, because people who got their wallets stolen don't count.

The opposite of "no true scottsman" is nut picking[1]. In this case, I think failing to follow widely promulgated security advice is a fairly reasonable justification to exclude him. [1] https://rationalwiki.org/wiki/Nutpicking

Bitcoin core developer is the nuttiest of bitcoin users? The whole point is that he should be the one of most knowledgeable exemplary users.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#333

Earlier quoted context omitted.

If you're assuming that Satoshi was a spook, wouldn't the use of L1 English and Western timezones more likely to be an attempt to obfuscate?

This results in logical regress: any positive evidence that Nakamoto was a native-English speaking Westerner can be spun into negative evidence of an exceptionally advanced adversary. In other words, it's "that's just what they want you to think!" logic. And that can be true, but it's not exceptionally convincing.

I find it no more convincing that the whole notion of Bitcoin being some kind of covert CIA (Mossad, FSB, ...) money laundering operation in the first place. If we're willing to go there in the first place, then we should admit that none of the obvious cues are likely to be truthful.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#334
post #318

Earlier quoted context omitted.

The opposite of "no true scottsman" is nut picking[1]. In this case, I think failing to follow widely promulgated security advice is a fairly reasonable justification to exclude him. [1] https://rationalwiki.org/wiki/Nutpicking

Because the average person always follows security advice?

The average person also isn't a prominent bitcoin core developer who holds 200 BTC. If you're as exposed as this guy, I think it's fairly reasonable to at least follow the most basic of security advice.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#335

Earlier quoted context omitted.

he should been using a hardware wallet and the bulk of it should be on a paper wallet, in the vault of a bank or another real world institution. the hardware used to generate this key should be wiped out. so if he followed best practices, he didn't lose this money edit: just found out that the btc was stolen from a dedicated server on ColoCrossing. this makes no freaking sense. no server connected to internet should…

How on earth are normal people supposed to trust bit coin. When best practice is to treat it like paper money.

As others have said, he for whatever reason had a completely lazy setup for someone who develops for Bitcoin Core. He doesn't even use a hardware wallet or use a separate computer for his BTC bag or other sensitive data.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#336
post #271

Context now that the editorialised title has changed, this is a core Bitcoin developer. These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)

>These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion) Based on the other comments in this thread it looks like he didn't bother using a hardware wallet (which is literally something that's recommended on bitcoin.org[1]), and kept his wallet.dat on a server exposed to the intern…

He probably run a full node and an LN node on his server, to contribute to Bitcoin network. This requires storing wallet.dat on the server, and keeping non trivial amount of coins in it.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#337
post #332
post #318

Earlier quoted context omitted.

The opposite of "no true scottsman" is nut picking[1]. In this case, I think failing to follow widely promulgated security advice is a fairly reasonable justification to exclude him. [1] https://rationalwiki.org/wiki/Nutpicking

Bitcoin core developer is the nuttiest of bitcoin users? The whole point is that he should be the one of most knowledgeable exemplary users.

>Bitcoin core developer is the nuttiest of bitcoin users?

In this case you can substitute "nuttiest" with "most lazy".

>The whole point is that he should be the one of most knowledgeable exemplary users.

In this case it wasn't because of lack of knowledge, it was something else (eg. laziness/apathy/cockiness). Kind of like how most people know that they should eat less and exercise more, but don't.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#339
post #271

Earlier quoted context omitted.

>These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion) Based on the other comments in this thread it looks like he didn't bother using a hardware wallet (which is literally something that's recommended on bitcoin.org[1]), and kept his wallet.dat on a server exposed to the intern…

He probably run a full node and an LN node on his server, to contribute to Bitcoin network. This requires storing wallet.dat on the server, and keeping non trivial amount of coins in it.

I know little about LN node, but a regular full node doesn’t need a wallet. The reference implementation does come with a wallet but it doesn’t need to have any balance.

Re: “My PGP key is compromised, and at least many of my bitcoins stolen”

#340
post #337
post #332

Earlier quoted context omitted.

Bitcoin core developer is the nuttiest of bitcoin users? The whole point is that he should be the one of most knowledgeable exemplary users.

>Bitcoin core developer is the nuttiest of bitcoin users? In this case you can substitute "nuttiest" with "most lazy". >The whole point is that he should be the one of most knowledgeable exemplary users. In this case it wasn't because of lack of knowledge, it was something else (eg. laziness/apathy/cockiness). Kind of like how most people know that they should eat less and exercise more, but don't.

User laziness/apathy/cockiness are the unsolved part of key management.

https://en.wikipedia.org/wiki/Dancing_pigs

Post reply on HN