pull down to refresh

An incredible REKT story about LuBian’s collapse that wasn’t due to a clever exploit or shadowy state actor - it was a cryptographic faceplant.
31 sats \ 7 replies \ @xz 14h
I know that the evidence indicates exactly this but would it be too wild to imagine that low-entropy keys would be perfect cover for both a clever exploit and a shadowy actor?
  • Launch pool with cheapest input costs.
  • Vertical growth of pool during time when many unsuspecting hobbyists are mining
  • Pull rug
  • Send out pleas as a cost percentage as cover
What's the line at the end of The Usual Suspects, the greatest trick the devil pulled was convincing the world he didn't exist?
reply
the greatest trick the devil pulled was convincing the world he didn't exist?
Like the "greatest" Bitfinex hack.... that end in creating tether.
reply
0 sats \ 4 replies \ @xz 12h
My memory is so hazy on the never ending dubious hacks and rugs. Love to explore that whole fiasco again one day.
Is that part of how Tether came to be?
reply
Bitfinex hack was in 2016. USDT was created in 2014.
reply
you have to study more about those events. here a comprehensive list:
reply
0 sats \ 1 reply \ @lightcoin 7h
that's not how chronology works lmao
reply
I am not talking about chronology... I am talking about how they prepared everything to became what they are today. The literal "creation" of it in 2014 it was just a preparation for they had planned for later. You should look at the big picture, not focusing only on just 1 little square.
We are dealing with professional crooks not just amateurs...
reply
deleted by author
Fascinating read. A quote towards the end really struck me:
“ When basic entropy generation can cost more than most countries' GDP, maybe it's time to stop pretending this industry has grown up “
Yep. We haven’t even close seen the last of it. All these trad-fi ETF focused dudes have their head in the sand big time. A huge scandal is coming: a single miss placed or stolen key from a coin base insider will quickly and painfully rip away the blissful ignorance surrounding that space currently. Bitcoins history shows us time and time again that the only safe people in the space are the bitcoin-only self custodied.
I think too that is just another reminder to the doomers who somehow equate bitcoin ETF and trad-fi popularity to death of bitcoin or death of bitcoins message. Just because someone is shouting their message loudly into your ear doesn’t mean that your own message has lost footing or merit.
As always,
Stay humble stack sats self custody
reply
That's absolutely nuts.....
Did they generate their key using like python built in rng or something? HAHA. Or set_seed=42 as in all the examples??
That being said, someone going through and testing all the wallets generated from common rng packages, using seeds 0, 42, 100, 123, would probably yield some interesting results.
reply
this is one of the craziest stories i've read. hackers are absolutely going through and testing low-entropy generation tools, there was a defcon presentation on it a few years back so they absolutely are doing it now.
As far as their entropy, they could have taken dice from a gaming store or dice from a real casino, rolled the binaries themselves and generated very high entropy that way.
You still need a computer to produce the checksum but the entropy can be produced through nature... a shitton of dice rolls and be way better off.
reply