7 ms·

https://bitcoinhackers.org/@lukedashjr https://bitcoinhackers.org/@lukedashjr his mastodon feed indicates that one of his servers was physically compromised mul

https://bitcoinhackers.org/@lukedashjr https://bitcoinhackers.org/@lukedashjr his mastodon feed indicates that one of his servers was physically compromised multiple times. Seems like he should have been more paranoid about securing his coins with that knowledge?

perihelions 4y ago
Speaking of paranoid, that link you've posted, isn't that a link to a server that's known to be compromised, and also an apparent watering hole for crypto wallet holders? Am I unreasonable in thinking that's a very scary link?
- sosodev 4y ago
  Dunno, it's unclear if that Mastodon instance is hosted on his compromised servers.
  - deleted 4y ago
    [deleted]
- doodlesdev 4y ago
  1. Disable JavaScript. 2. Access (almost) any website in the internet 3. ????? 4. Profit edit: Mastodon doesn't work without JavaScript, holy hell. We truly are living in a dystopia. Thankfully you can still access his profile from another trusted instance such as mastodon.social at https://mastodon.social/@lukedashjr@bitcoinhackers.org https://mastodon.social/@lukedashjr@bitcoinhackers.org
  - perihelions 4y ago
    I always have JavaScript disabled by default (uMatrix policy), but (0) there's many other attack vectors, to my layman understanding, and (1) at any rate that one's a Mastodon instance and those are blank pages without JS. I'm electing to add new URL regexps to my uBlock filters, to reduce the risk of accidentally clicking a link similar to this. I don't think I want to visit any web domain that caters to people who hold crypto wallets. /.*coin.*/ /.*crypto.*/ /.*eth.*/
    - hsbauauvhabzb 4y ago
      Are you’re (0) and (1) supposed to be citations? If so I’m interested and you forgot to add them.
      - andromaton 4y ago
        I think he is numbering his bullet points from zero.
    - jwilk 4y ago
      > one's a Mastodon instance and those are blank pages without JS Not all of them. Those still running Mastodon v3.5 (rather than v4.0) seem to work fine.
  - jwilk 4y ago
    > https://mastodon.social/@lukedashjr@bitcoinhackers.org https://mastodon.social/@lukedashjr@bitcoinhackers.org This just redirects me back to <https://bitcoinhackers.org/@lukedashjr https://bitcoinhackers.org/@lukedashjr>.
    - doodlesdev 4y ago
      Interesting, you might need to it yourself through the UI then, just copy everything after the slash and paste into the search of any trusted Mastodon instance and it should load the profile through there. Not sure why the URL redirects to the other instance.
  - Andrex 4y ago
    Mastodon not working without JS is a complete joke. I hope its popularity is stymied until this is fixed.
- deleted 4y ago
  [deleted]
Dma54rhs 4y ago
Weird he cheaped up on servers paying 55 a month to some random vps provider.
- doodlesdev 4y ago
  And even after being hacked once due to !!! physical access to the servers !!! he was still looking for an "accessible" dedicated server instead of a trusted service or self hosting somewhere he could keep safe. He had more than 200 bitcoins. People are weird.
  - adql 4y ago
    > once due to !!! physical access to the servers !!! That was his inept deduction that was basically "well, I don't know how they got in so it must be hosting provider"
- MuffinFlavored 4y ago
  > some random vps provider. devil's advocate: is DigitalOcean in this category?
  - bobkazamakis 4y ago
    vps provider, yes. Random, less so, since they're on the nyse.
- dibt 4y ago
  How do you spend $55/month on a VPS? Isn't that the amount you spend on a reasonably popular application host? He obviously is more of a software developer than an sysadmin, so maybe it's just a poorly optimized personal app host.

perihelions 4y ago

Speaking of paranoid, that link you've posted, isn't that a link to a server that's known to be compromised, and also an apparent watering hole for crypto wallet holders? Am I unreasonable in thinking that's a very scary link?

sosodev 4y ago
Dunno, it's unclear if that Mastodon instance is hosted on his compromised servers.
- deleted 4y ago
  [deleted]
doodlesdev 4y ago
1. Disable JavaScript. 2. Access (almost) any website in the internet 3. ????? 4. Profit edit: Mastodon doesn't work without JavaScript, holy hell. We truly are living in a dystopia. Thankfully you can still access his profile from another trusted instance such as mastodon.social at https://mastodon.social/@lukedashjr@bitcoinhackers.org https://mastodon.social/@lukedashjr@bitcoinhackers.org
- perihelions 4y ago
  I always have JavaScript disabled by default (uMatrix policy), but (0) there's many other attack vectors, to my layman understanding, and (1) at any rate that one's a Mastodon instance and those are blank pages without JS. I'm electing to add new URL regexps to my uBlock filters, to reduce the risk of accidentally clicking a link similar to this. I don't think I want to visit any web domain that caters to people who hold crypto wallets. /.*coin.*/ /.*crypto.*/ /.*eth.*/
  - hsbauauvhabzb 4y ago
    Are you’re (0) and (1) supposed to be citations? If so I’m interested and you forgot to add them.
    - andromaton 4y ago
      I think he is numbering his bullet points from zero.
  - jwilk 4y ago
    > one's a Mastodon instance and those are blank pages without JS Not all of them. Those still running Mastodon v3.5 (rather than v4.0) seem to work fine.
- jwilk 4y ago
  > https://mastodon.social/@lukedashjr@bitcoinhackers.org https://mastodon.social/@lukedashjr@bitcoinhackers.org This just redirects me back to <https://bitcoinhackers.org/@lukedashjr https://bitcoinhackers.org/@lukedashjr>.
  - doodlesdev 4y ago
    Interesting, you might need to it yourself through the UI then, just copy everything after the slash and paste into the search of any trusted Mastodon instance and it should load the profile through there. Not sure why the URL redirects to the other instance.
- Andrex 4y ago
  Mastodon not working without JS is a complete joke. I hope its popularity is stymied until this is fixed.
deleted 4y ago
[deleted]

Dma54rhs 4y ago

Weird he cheaped up on servers paying 55 a month to some random vps provider.

doodlesdev 4y ago
And even after being hacked once due to !!! physical access to the servers !!! he was still looking for an "accessible" dedicated server instead of a trusted service or self hosting somewhere he could keep safe. He had more than 200 bitcoins. People are weird.
- adql 4y ago
  > once due to !!! physical access to the servers !!! That was his inept deduction that was basically "well, I don't know how they got in so it must be hosting provider"
MuffinFlavored 4y ago
> some random vps provider. devil's advocate: is DigitalOcean in this category?
- bobkazamakis 4y ago
  vps provider, yes. Random, less so, since they're on the nyse.
dibt 4y ago
How do you spend $55/month on a VPS? Isn't that the amount you spend on a reasonably popular application host? He obviously is more of a software developer than an sysadmin, so maybe it's just a poorly optimized personal app host.