Anyone noticed there are no repeat messages on his Mastodon, that historically reflected his Twitter, or vice versa?
“My PGP key is compromised, and at least many of my bitcoins stolen”
41–50 of 564 posts
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#42Context now that the editorialised title has changed, this is a core Bitcoin developer.
These things happen every day, but happening to a core developer (if confirmed!) who has a deep understanding of the systems and security indicates just how fragile crypto can be (in my opinion)
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#43Earlier quoted context omitted.
I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.
Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.
Why make it so complex? Just do a title search online and you’ll get access to their address if they own a home.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#44Earlier quoted context omitted.
Storing most of his bitcoin in a single hot wallet seems to go against the best practices, no?
He said it was not most of his bitcoins. https://twitter.com/LukeDashjr/status/1609618498027753472 EDIT: Right, maybe it's all
First he said "at least many of my bitcoins stolen" and then followed up with "Nevermind many. It's basically all gone"
Which implies that it is indeed most of his bitcoins.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#45Loss of his bitcoin is not yet confirmed. It's possible that only his twitter account got hacked, and the hacker is having some fun with it. Beyond being a bitcoin core dev [1], Luke-Jr is also the author of an independent node and wallet implementation known as Bitcoin Knots [2]. [1] https://github.com/luke-jr [2] https://bitcoinknots.org/
It looks like it is just twitter hack. The wording in those tweets doesn't fit Luke's writing style.
This is his mastodon, let's see if he posts anything there:
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#46Submitted title was "Top Bitcoin dev gets owned". It's great to post that kind of explanation in the comments, but please don't use the title for it. That's against the site guidelines: "Please use the original title, unless it is misleading or linkbait; don't editorialize." https://news.ycombinator.com/newsguidelines.html
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#47Would be interesting to know how his BTC were stolen. Because he is a BTC core developer, I believe he followed the best practices, like not writing down his password. So infection or keylogger?
I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.
Password books are basically physical password managers. The only problem I have with them is that the passwords in most password books I've seen aren't very creative or random. As long as you write down randomly generated passwords instead of permutations of the names of your kids/pets/parents, I don't know what people are panicking about.
The perfect password book is combined with a word you remember but don't write down as a pepper, but I doubt it's much of a problem in practice; it takes one leak of an u hashed password to break the code.
I think for many the risk of someone breaking in and stealing your password book is much smaller than the risk of a centralised password manager getting hacked (LastPass and friends).
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#48"the pedos who took over Vatican City are NOT Catholic"
Sympathy cratering...
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#49Earlier quoted context omitted.
Storing most of his bitcoin in a single hot wallet seems to go against the best practices, no?
He said it was not most of his bitcoins. https://twitter.com/LukeDashjr/status/1609618498027753472 EDIT: Right, maybe it's all
He then said it was basically all:
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#50Earlier quoted context omitted.
Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.
Why make it so complex? Just do a title search online and you’ll get access to their address if they own a home.
Of course its obvious there's many ways to get someone's address.
The point is that companies put vast effort into digital security but in many cases it's easily compromised by going to the home of the person that is the hacking target.