4 ms·

While the article seems part-advertisement, the risk is real. Best not to let strangers know your worth, and use multi-factor authentication everywhere. It's a

While the article seems part-advertisement, the risk is real. Best not to let strangers know your worth, and use multi-factor authentication everywhere. It's a disgusting (and beautiful) world we live in!

declnz 5y ago
But one point of the article was that he did have MFA - and it's no use in this scenario (attacker had physical access to second factor)
- mustafa_pasi 5y ago
  It's not really MFA if it's all done on your phone.
  - declnz 5y ago
    Fair point! The article mentioned his laptop but it's unclear to me. Aside: It's something I worry about sometimes too on phones...
tablespoon 5y ago
> While the article seems part-advertisement It's all advertisement. The first paragraph is "Spoiler alert: their funds secured via Casa multisig remain safe." > the risk is real. I'm not so sure, I think there's a good chance this was made up. Unless this victim let on how much cryptocurrency he had early on in the conversation, this whole scenario seems too high-risk/low-reward to be very real. I mean, a Tinder account backed by a real person (supposedly with real photos to not put off the mark), waiting for people interested in cryptocurrency to steal it? Not drugging a lot of small fish who were bragging and attracting the attention of the police before finding a whale?
- Cthulhu_ 5y ago
  Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake. The victim engaged with the thief because they too had "I am a crypto trader" in their bio, which indicates they may be equally wealthy. It's a kind of financial classism, common financial ground, possibly "falling into wealth" from low investments, etc.
  - tablespoon 5y ago
    > Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake. I think the flaw with that is that I could totally see some unemployed dude who took his meager savings and went all /r/wallstreetbets into dogecoin describing themselves the same way on a dating app. I guess the question is, which one is closer to the more typical case?
asdfman123 5y ago
I once asked about the best way to exchange a significant amount of crypto in a public FB group (I know, poor opsec). That night, someone on the other side of the world shared a random PDF with me. I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know?
- tablespoon 5y ago
  > I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know? There's no way anyone can answer that unless you share the PDF for analysis (and I couldn't even answer then).
  - asdfman123 5y ago
    I did want to look at it but there's too much risk of me clicking on the wrong thing. So it will stay in limbo forever.
ajkdhcb2 5y ago
>Best not to let strangers know your worth Bitcoin has no privacy by default, so that's not going to work unless people never transact

declnz 5y ago

But one point of the article was that he did have MFA - and it's no use in this scenario (attacker had physical access to second factor)

mustafa_pasi 5y ago
It's not really MFA if it's all done on your phone.
- declnz 5y ago
  Fair point! The article mentioned his laptop but it's unclear to me. Aside: It's something I worry about sometimes too on phones...

tablespoon 5y ago

> While the article seems part-advertisement It's all advertisement. The first paragraph is "Spoiler alert: their funds secured via Casa multisig remain safe." > the risk is real. I'm not so sure, I think there's a good chance this was made up. Unless this victim let on how much cryptocurrency he had early on in the conversation, this whole scenario seems too high-risk/low-reward to be very real. I mean, a Tinder account backed by a real person (supposedly with real photos to not put off the mark), waiting for people interested in cryptocurrency to steal it? Not drugging a lot of small fish who were bragging and attracting the attention of the police before finding a whale?

Cthulhu_ 5y ago
Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake. The victim engaged with the thief because they too had "I am a crypto trader" in their bio, which indicates they may be equally wealthy. It's a kind of financial classism, common financial ground, possibly "falling into wealth" from low investments, etc.
- tablespoon 5y ago
  > Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake. I think the flaw with that is that I could totally see some unemployed dude who took his meager savings and went all /r/wallstreetbets into dogecoin describing themselves the same way on a dating app. I guess the question is, which one is closer to the more typical case?

asdfman123 5y ago

I once asked about the best way to exchange a significant amount of crypto in a public FB group (I know, poor opsec). That night, someone on the other side of the world shared a random PDF with me. I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know?

tablespoon 5y ago
> I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know? There's no way anyone can answer that unless you share the PDF for analysis (and I couldn't even answer then).
- asdfman123 5y ago
  I did want to look at it but there's too much risk of me clicking on the wrong thing. So it will stay in limbo forever.

ajkdhcb2 5y ago

>Best not to let strangers know your worth Bitcoin has no privacy by default, so that's not going to work unless people never transact