11 ms·
The Satoshi Nakamoto SourceForge account has been hacked
- jordhy 12y agoHackers have changed bitcoin's description to read: Buttcoin is a peer-to-peer butt. Peer-to-peer means that no central authority issues new butts or tracks butts. These tasks are managed collectively by the network. It’s like a bitcoin, but with butts instead.
- 80ProofPudding 12y agoStarting to wish these guys would hire writers. So much more exposure for saying something clever or funny... but no. Butts.
- snorrah 12y agoButts are always funny
- vezzy-fnord 12y agoButtcoin.org is also a satirical blog that mocks the extremely vested segments of the Bitcoin community: http://buttcoin.org/ http://buttcoin.org/ I used to read it at one time, and it was actually often the voice of reason in a sea of anarcho-capitalist pipe dreams, but I don't know about its present state.
- patio11 12y agoIt was bought by a straw purchaser on behalf of BFL, a Bitcoin mining hardware manufacturer with an aversion to shipping in a timely fashion, as a reputation management ploy. They edited some pointed posts about BFL and left the rest of the blog up. Just another day in the Bitcoin economy.
- AlexMax 12y agoThe original buttcoiners seem to have moved on to http://reddit.com/r/buttcoin http://reddit.com/r/buttcoin The buttcoiners seem to make light of the BFL purchase, since in their mind, the former owner has done something that many Bitcoin investors have not - made a profit off of Bitcoin.
- r721 12y agotheymos: "satoshin@gmx.com is compromised" https://bitcointalk.org/index.php?topic=775174.0 https://bitcointalk.org/index.php?topic=775174.0
- croddin 12y agoSatoshi's account on p2pfoundation.ning.com also made the first comment since he said "I am not Dorian Nakamoto." back in March. It says: "Dear Satoshi. Your dox, passwords and IP addresses are being sold on the darknet. Apparently you didn't configure Tor properly and your IP leaked when you used your email account sometime in 2010. You are not safe. You need to get out of where you are as soon as possible before these people harm you. Thank you for inventing Bitcoin." http://p2pfoundation.ning.com/forum/topic/listForContributor?user=0ye0gncqg772o http://p2pfoundation.ning.com/forum/topic/listForContributor...
- rufugee 12y agoSo could someone explain how an IP address would leak when using an email account? I suppose potentially in the SMTP header, but this would assume he was using a email server running on his own personal ip, right? So is the guess here (assuming this is even true) that he had an email server running at home, leaked the ip, and then was attacked when someone found it?
- cataflam 12y agoMany SMTP servers include the IP address of the sender in the headers (usually the Received header). Just look around, you'll be surprised.
- rufugee 12y agoUsing webmail would defeat that, though, right?
- encoderer 12y agoNot if the webmail implementation passes-on your IP, which it should if you believe Spam is a bigger issue than email sender privacy. Basically, if a webmail service doesn't pass along your IP, there would be no way for recipient networks to ever block a flood of unwanted email because they could never blacklist, say, yahoo.com. I read something about this lately... maybe from Paul Buchheit?
- WoodenChair 12y agoCould this be a government posing as a hacker in order to discredit the threat to mainstream currencies? I don't think so, but I do think conspiracy theories will be abound!
- GFK_of_xmaspast 12y agoBitcoiners tend to discredit only themselves.
- jrockway 12y agoNo no, it's a conspiracy to create a conspiracy around the conspiracy. Hanlon's Razor is instructive here.
- automatthew 12y agoHanlon's Razor is enemy propaganda.
- programmarchy 12y agoI'll play. My conspiracy theory is that this is a PR stunt by gmx.com to advertise their email service. Motive and opportunity!
- fredoliveira 12y agoFunny theory, but then again, it wouldn't be great advertising considering the gmx account was compromised. Which maybe makes it funnier.
- patio11 12y agoIt's looking like his email address got recycled, and someone is using that to request password resets on accounts associated with it.
- deleted 12y ago[deleted]
- 3pt14159 12y agoActually it doesn't: https://twitter.com/petertoddbtc/status/509145414008725504 https://twitter.com/petertoddbtc/status/509145414008725504
- pg_is_a_butt 12y agoSourceForge in general seems terrible. i tried to filter by 1 star reviews and at first it selected the wrong filter because i didn't click right on the star and reloaded the page... went back and clicked right on the star, "star=1" showed in the URL, but it still only showed 5 star reviews. it was made by the halfwits at slashdot, so i wouldn't trust sourceforge for anything.
- thejj 12y agoA bitcoin address appeared on satoshi's profile page: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjuxF6xbbV https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... http://p2pfoundation.ning.com/profile/SatoshiNakamoto http://p2pfoundation.ning.com/profile/SatoshiNakamoto Satoshi Nakamoto posted a status: "Tip Jar: 19pta6x1hXzV9F5hHnhMARYbRjuxF6xbbV"
- deleted 12y ago[deleted]
- shlorn 12y agoIntresting theory from https://bitcointalk.org/index.php?topic=775174.80 https://bitcointalk.org/index.php?topic=775174.80 [Quote] nycgoat on September 08, 2014, 11:49:43 PM Is it possible that he deleted the e-mail address @gmx when he left the project and that it has been recycled? Someone else may have been able to sign up, then use the reset password feature on these other sites. It is likely that the @gmx address would have been destroyed at the conclusion of his participation in the project, as all relevant information and e-mails have been public from the beginning. 1) Satoshi finishes with Bitcoin and deletes GMX account 2) He does not delete other accounts (sourceforge, i2p, etc) 3) GMX account is recycled after x period of time 4) Person signs up for @gmx account after it is recycled 5) Passwords for other sites are reset because they still point to the @gmx e-mail address as a recovery 6) Person tries to profit by extortion and fails This is probably the most likely scenario... and they probably don't have any of Satoshi's information because it is unlikely that any e-mails were still in the box when he re-set up the @gmx address. [/Quote]
- torgoguys 12y agoThe behavior of the p2pfoundation "resurfacing" of Satoshi is different than the sourceforge one, possibly indicating 2 people with some of Satoshi's credentials, so in my mind that lends some credibility to the explanation on the p2pfoundation post (Satoshi's info being sold to various buyers) as being more likely.
- Hermel 12y agoThat does not contradict shlorn's hypothesis. One hacker gains access to Satoshi's accounts through @gmx recycling. Then he sells those accounts separately.
- markbao 12y agoThe screenshots in the text file supposedly show evidence that the attacker gained access to the actual GMX account, not a recycled one, since a) there are still messages in there and b) it seems that the account owner has been active, judging from the "replied to" icons in the inbox.
- kintamanimatt 12y agoSeems to have been reverted now.
- deleted 12y ago[deleted]
- georgemcbay 12y agohttps://twitter.com/petertoddbtc/status/509145414008725504 https://twitter.com/petertoddbtc/status/509145414008725504 Peter Todd @petertoddbtc "Interesting, got another forwarded email from "satoshi", from 2011 - indicates this was a hijacked account, not expired and re-registered." ---- Going to grab some popcorn, this might get pretty entertaining...
- unreal37 12y agoInteresting link. I'm sure there's a lot more to come if what they have is true. But the comment about the popcorn doesn't seem right. Is it entertaining to watch him get dox'ed? Shall we encourage hackers holding info for ransom?
- georgemcbay 12y ago"Is it entertaining to watch him get dox'ed?" uh... yes, of course it is? I'm not saying it is necessarily a good thing, especially for him personally, but it is undeniably interesting. Why is Jack the Ripper still making headlines? Because the unknown breeds mystery, which is inherently entertaining to people.
- dredwerker 12y agoApparently we know who Jack the ripper is now. http://www.nbcnews.com/science/science-news/was-it-aaron-kosminski-jack-ripper-dna-claims-get-ripped-n198506 http://www.nbcnews.com/science/science-news/was-it-aaron-kos... He is Aaron Kosminski according to DNA probably.
- codezero 12y agoWill be vetted after his book has sold out. :)
- deleted 12y ago[deleted]
- berberous 12y agoMore details via Wired: http://www.wired.com/2014/09/satoshi/ http://www.wired.com/2014/09/satoshi/ 1) A pastebin threating to dox Satoshi for 25 BTC: http://pastebin.com/7gbPi8Qr http://pastebin.com/7gbPi8Qr. Address has received less than .02 BTC thus far: https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjuxF6xbbV https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux... 2) The GMX screenshots show 11k+ emails in the inbox, with one from as far back as June 2013
- notastartup 12y agoscreenshot not loading for me
- 8ig8 12y agoMirrored screenshots here: http://i.imgur.com/McgiZwb.png http://i.imgur.com/McgiZwb.png http://i.imgur.com/lfCJeBI.png http://i.imgur.com/lfCJeBI.png Edit: To respond to https://news.ycombinator.com/item?id=8288579 https://news.ycombinator.com/item?id=8288579 Looks like "Phone 31x" under the email address, which is consistent with St Louis area code of 314.
- deleted 12y ago[deleted]
- 3rd3 12y agoThat guy did a really bad job of blacking out sensitive information. It probably nails the receiver down to only a couple of hundred people.
- deleted 12y ago[deleted]
- berberous 12y agoAssuming it's not doctored, I'm very surprised he would order something from a random company to his real name/address using his Satoshi e-mail...presumably he has other e-mails, and that seems like pretty horrendous op sec. Unless he bought it for a friend? edit: the item he ordered was a FPGA in mid 2013. He's really bothering with a single $400 miner in 2013...? He doesn't have enough BTC?
- notastartup 12y agoWhat are the signs that it has been hacked, the sourceforge page looks correct, has it been recovered?
- berberous 12y agoThey changed the description to "buttcoin" (which has now been reverted), made some private information public, and removed the administrators. See: http://www.reddit.com/r/Bitcoin/comments/2fuuzf/the_old_now_unused_bitcoin_sourceforge_project/ http://www.reddit.com/r/Bitcoin/comments/2fuuzf/the_old_now_...
- Aqueous 12y agoI won't post a working link to the images but I did view them and the top-most email says it was sent 12/6/22, a date that has not occurred yet. So this is either a bug in GMX that doesn't validate timestamps or he didn't finish his otherwise convincing photoshop job :-)
- markbao 12y agoThe email in question looks like a Chinese spam email, which are often sent with dates in the future to show up at the top of date-sorted inboxes. See also: "spam chinese emails from the future?" http://forums.androidcentral.com/samsung-galaxy-s3/278777-spam-chinese-emails-future.html http://forums.androidcentral.com/samsung-galaxy-s3/278777-sp...
- Aqueous 12y agoStrange. I've never noticed such an email in my inbox. I would have thought that a future timestamp would be flagged by their spam heuristics.
- k0dog 12y agoI wonder if this could be Satoshi creating an additional layer of complexity in the hunt for his/her identity. By compromising his email address and web properties he can basically direct the masses in any direction he/she wants to. While ensuring that they have false bits of information seeded within them. Creating a myth and story around the creator is brilliant to ensuring future relevance. I doubt this is a planned event; however, if the Satoshi did plan it... Wow tip my hat to you sir/ma'am
- mparlane 12y agoAnd what if you are Satoshi, and you created this account to create a third dimension of complexity.
- chj 12y agoHow can you blackmail a person for digital information you steal? Who knows if you won't blackmail again?
- artursapek 12y agoHeh, so far this guy has earned about 10 bucks. https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjuxF6xbbV https://blockchain.info/address/19pta6x1hXzV9F5hHnhMARYbRjux...
- aburan28 12y agoCouldn't this person who has Satoshi's GMX email then reset the passwords on any of Satoshi's existing accounts?
- deleted 12y ago[deleted]
- jonalmeida 12y agoOne of the comments on the Wired post[1] shows that the email from CardReaderFactory is a hoax: you can see the person's name using the Levels tool in Photoshop. Confirmed with Photoshop myself using the imgur image links I got from this HN post. [1]: http://www.wired.com/2014/09/satoshi/#comment-1580438754 http://www.wired.com/2014/09/satoshi/#comment-1580438754
- vincentkriek 12y agoWhat makes this a hoax? Couldn't that person be Satoshi?
- maximumoverload 12y agoApparently, that address does not exist.
- austinheap 12y agoIf you take the screenshot showing the leaked e-mail from an order 'he' placed at CardReaderFactory, you get an interesting data point: - You can lookup orders tied to the e-mail address shatoshin@gmx.de - You cannot lookup order tied to gibberish accounts, like odn2n489n4@gmail.com Proof: http://imgur.com/a/22z72 http://imgur.com/a/22z72
- sktrdie 12y agoAnd what does this say?
- sartrt 12y agohttp://pastebin.com/vAwmBBpC http://pastebin.com/vAwmBBpC
- sartrt 12y agohttp://pastebin.com/vAwmBBpC http://pastebin.com/vAwmBBpC
- mykhal 12y agomore relevant link: https://archive.today/odPyB https://archive.today/odPyB
- return0 12y agoWhoever satoshi is/are, it's a good opportunity to step forward and become the public face of bitcoin without this stupid hide-and-seek.
- jokoon 12y agoif he has a lot of bitcoins, wouldn't it be smarter for him to just sell them right now ? I mean it's much safer to have real money in a bank account than to have bitcoins.
- mzs 12y agoWhat was there? It is just the bitcoin SF page now.
- sktrdie 12y agoThis makes me wonder whether the "I am not Dorian Nakamoto" message left on p2pfoundation is also a fake. It did seem weird back then that instead of signing a message using his well known public key, he decided to use a p2p forum to announce the fact.
- nogridbag 12y agoI believe Satoshi Nakamoto is zohar002. This is my belief... At least for now! http://www.destructoid.com/blogs/Hyper+Lemon+Buster+Cannon/the-legend-of-zohar002-244052.phtml http://www.destructoid.com/blogs/Hyper+Lemon+Buster+Cannon/t...
- galoppini 12y agoGreetings, We suspended s_nakamoto's account 2 hours and 17 minutes after the attacker gained access to that account. After generating a list of changes made, confirming method of attack, and identifying no serious changes to project content, the project was restored to its pre-attack state, and the compromised user account was removed from the project. Risk to the community is believed to be low, as file content wasn't modified. Regards, Roberto Galoppini, SourceForge.net See https://sourceforge.net/p/forge/site-support/8512/ https://sourceforge.net/p/forge/site-support/8512/
- tripzilch 12y agoI just ploughed through the thread on the bitcointalk forum. (disclaimer: a lot of the following summary is based on hearsay and lacks evidence) Some kid hacked the satoshin@gmx.net mailbox, by guessing the birthdate forgot-password check on gmx.net (yes, it sounds kind of unbelievable to me as well). He probably used this email to gain access to the SourceForge account, and wrote some juvenile texts about "buttcoin" (everything seems to have been reverted now, see https://news.ycombinator.com/item?id=8293062 https://news.ycombinator.com/item?id=8293062 ). He also used the mailbox to gain access to Satoshi's account on p2pfoundation.ning.com, which is the same place where the "Dorian is not Satoshi" message was posted a while back when some news media thought they found SN. Then he used this account to try and pull off a "give me 25BTC or I'll release SN's dox" scam. Nobody in the bitcointalk thread seems to believe the kid actually has SN's dox, because Satoshi was clever enough not to leave personal info in that mailbox. The kid also used the email to try and threaten the bitcointalk forum admin ("send me some coins before I hitman you" ...). The forum admin seems fine to just let it be, because no real damage has been done, it was just a kid and by now the kid and his family have been doxed, who's probably scared shitless right now realizing what sort of serious business he's been messing with. Adrian Chen tried to mail satoshin@gmx.net with some questions, and in response got a screenshot of the mailbox, "proving" it was indeed under someone else's control: https://twitter.com/AdrianChen/status/509162847130370048/photo/1 https://twitter.com/AdrianChen/status/509162847130370048/pho... . There's a second screenshot of some invoice of someone ordering a bitcoin-mining device, with the address info photoshopped out--which was done badly because someone on Reddit quickly revealed part of the name and address. But that order seems partially fake, just some guy that thought it was funny to enter Satoshi's email when ordering the device. It's assumed the kid no longer has access to the satoshin@gmx.net mailbox. Again I didn't see these claims substantiated either. All in all, someone smarter could have done a LOT more damage with this hack. But whoever did this really screwed it up. There might be some unintended clues about Satoshi's identity in that mailbox, but it seems like whoever got access isn't clever enough to string all that together (tying it with the research done into his identity so far). So unless the whole mailbox gets dumped somewhere, that's it, case closed?