Going to go out on a limb and say this is a Twitter account compromise.
“My PGP key is compromised, and at least many of my bitcoins stolen”
51–60 of 564 posts
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#52Turns out the advice “not your wallet, not your coins” still holds true in this context.
[deleted]
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#53[flagged]
Is it HN's problem? Never even knew the guy existed until 5 minutes ago.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#54[flagged]
because it's a useless problem to solve. The affected person going "FBI help me please" is the definition of that 'Bike Fall' meme. The answer to these situations is, use a currency where you can call someone that can roll your transaction back.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#55If you hold a large amount of bitcoin your threat model should be way above the average person. It sounds like his infrastructure was specifically targeted. It can be very difficult to protect against targeted attacks from adversaries.
> It can be very difficult to protect against targeted attacks from adversaries. Not really. The device used to sign transactions should never be connected to the Internet.
If the level is millions of dollars, that device could be physically stolen, or some aspect of the cryptography/auth scheme could be attacked through a 0-day.
Of course, it's also possible he just wanted something closer to the convenience of a bank account/credit card instead of a pile of cash and failed in the opsec.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#56Earlier quoted context omitted.
I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.
Password books are basically physical password managers. The only problem I have with them is that the passwords in most password books I've seen aren't very creative or random. As long as you write down randomly generated passwords instead of permutations of the names of your kids/pets/parents, I don't know what people are panicking about. The perfect password book is combined with a word you remember but don't writ…
[deleted]
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#57Loss of his bitcoin is not yet confirmed. It's possible that only his twitter account got hacked, and the hacker is having some fun with it. Beyond being a bitcoin core dev [1], Luke-Jr is also the author of an independent node and wallet implementation known as Bitcoin Knots [2]. [1] https://github.com/luke-jr [2] https://bitcoinknots.org/
It looks like it is just twitter hack. The wording in those tweets doesn't fit Luke's writing style. This is his mastodon, let's see if he posts anything there: https://bitcoinhackers.org/@lukedashjr
You believe that someone keeps their normal "writing style" when his livelihood gets stolen? :>
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#58[flagged]
You're right, I've got it! We'll store our money in a savings account, with transfer safeguards, where someone can't irreversibly yeet my life savings into the abyss.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#59> What the heck @FBI @ic3 why can't I reach anyone??? Uh, because it’s New Year’s Day? Don’t get injured or become a crime victim on a holiday, if possible.
Every crypto hack is followed by a swift call for a centralised authority to intervene.
Re: “My PGP key is compromised, and at least many of my bitcoins stolen”
#60Earlier quoted context omitted.
I am not a security person, but I can't help but wonder where the advice of not writing things down comes from? I think my wife's password book on her desk is a lot more safe than most computer experts.
Say your wife is a well known Bitcoin billionaire. And your wife bought something from my eBay store. Now I have your home address. And if I am a ruthless character then I quietly break into your house one day with th3e objective of leaving no sign I was ever there. Search for written down passwords, take a photo, leave.
Okay, so assuming you get past this theoretical billionaire's physical security (at a minimum gated fences and an alarm system; if they're actually a billionaire, probably 24/7 armed private security as well) and into their mansion, how long do you think it would take you to search their 7 bedroom 10000 square foot mansion for these written down passwords which you have no information as to whether they even exist?