50 BTC lost because of blank passphrase

figmentofmyass

legendary

Activity: 1652

Merit: 1483

Quote from: danielkruchin on April 03, 2018, 08:06:28 PM

Ok this kind of thing makes me nervous. How do I make sure this never happens to me? Huh

don't use a brainwallet, and you won't get dictionary attacked. it's that simple. most people agree that brainwallets are insecure because humans generally won't choose a passphrase with enough entropy. your passphrase may seem random or hard-to-crack to you, but to a brute-forcing algorithm, it probably isn't.

use a wallet like bitcoin core, and this won't happen.

danielkruchin

newbie

Activity: 60

Merit: 0

Ok this kind of thing makes me nervous. How do I make sure this never happens to me? Huh

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Is this old chest-nut still doing the rounds? Gave me a laugh. Heh.

shrivastav25

newbie

Activity: 1

Merit: 0

Quote from: amaclin on August 06, 2015, 09:06:14 AM

Quote from: Muhammed Zakir on August 06, 2015, 08:39:58 AM

I think there is no "special" threads. I can confirm this because he sweeped from one of my old address

This is not your old address (private key). You sold it to me. Now this is my address. And I can do whatever I want with it.

Aren't these your words?

Quote from: Muhammed Zakir on January 02, 2015, 01:38:45 PM

Thanks! Received! Good trade with you!

Code:

19pjkRG494kzFuNtK1NT1DkeDGyMTw67be - L1AjaYpTdfxwu5Mii6dHhLE4KdveRAdgdF6xxdNua1UBvDZfxkR2 -
1MzakiRDem5MCocbcP7DgfcVGZNZe2KqaC - 5KJtbhbKxocwWNdFGzmv2SBy8XZfAfqRVT33LJnFQePVj74HAjn

Kindly,
Muhammed Zakir

I think you are a scammer because just now I watched the video where your 155 address was mentioned..https://www.youtube.com/watch?v=L7gbX7sfNBs this says you have to download its software and once the user runs it, it scans the system for private keys and bohhhh all money gone..

read the post https://counterpartytalk.org/t/counterwallet-bug-report-amp-technical-support-thread/188/201

notlist3d

legendary

Activity: 1456

Merit: 1000

Quote from: fox19891989 on January 26, 2016, 11:39:37 AM

you should encrypt it your wallet before depositing, 50 btc is a serious amount money, what a pity that you were hacked in 10 minutes, imo hackers may have trojan horses in your computer, what's why you were hacked in just 10 minutes, can't believe, so you learn big lesson from this hack, sorry to hear that. Sad

Or look into hardware wallets. They truly are a nice thing to have if your going to use the address a lot. Just adds a lot more security some are so secure even if computer is compromised you are still safe (as long as you did not do something stupid like save seeds on PC).

And there is paper wallets for if you truly are not going to touch the BTC. Just make sure to do it properly.

People should be using those two options a lot.

fox19891989

hero member

Activity: 840

Merit: 1000

you should encrypt it your wallet before depositing, 50 btc is a serious amount money, what a pity that you were hacked in 10 minutes, imo hackers may have trojan horses in your computer, what's why you were hacked in just 10 minutes, can't believe, so you learn big lesson from this hack, sorry to hear that. Sad

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Quote from: tearfereon on July 30, 2015, 02:54:44 PM

And lucky thief is this: https://blockchain.info/address/1A6Ei5cRfDJ8jjhwxfzLJph8B9ZEthR9Z
I wonder why the other "double spenders" didn't pay more tx fee? They would have more chance to claim it..

If you go to bitaddress dot org and copy the phrase

Quote from: apxu on April 30, 2014, 02:26:12 PM

Look at this
https://blockchain.info/ru/address/155M7TvBRww6WFdtGQgTYUH8DuLheNafCf

tx chain:
d31b4d81641ae81ad71d371921af8dc5a6880f787f48220c58b220942df259fa ->
4156cc3456325e4206f891e3a5d1e2cc39b1b87bfb39d5fe6ca83d987197266e ->
98f9366ae3bcce4f325479ae567e0b1185557757acb6955076269c13acf93eaf ->
acb9322023da425c2054853b1a6e58a46f040b0fe48ddb771d26d1ec7bcf9c2d ->
fafac1f2b61e7cc3a4192f10c6ef0f0d698f477978afe4b5ce36e67d44b35844 -> ...

Just wasting space in blocks Sad

Stop this automated and crazy script please!

Will try similar on other brain / paper wallet sites - I suspect this is where the various 1,000 BTC cryptsy wallet funds have ended up.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: GermanGiant on August 09, 2015, 10:42:43 AM

Quote from: Muhammed Zakir on August 08, 2015, 11:12:25 PM

Quote from: GermanGiant on August 08, 2015, 06:50:44 PM

LoLz... I hope you understand *completely* about the Bit-X scam fast... before it is too late. Wink

p.s. I am assuming that you are innocent and do not understand how Bit-X is duping bitcoiners.

BIT-X is legit unlike the scam you are advertising. However, it is also possible they are selling more than 1 PH.

Wah.... having 1 Phs vouch and selling more than that... and you call it legit ? It is another AM hash in the making, which will wipe out millions from people once again.

I didn't say they are selling more than 1 PH, instead I said that it is possible/probable. After all, it is not selling hashes out of thin air like CMW.

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: Muhammed Zakir on August 08, 2015, 11:12:25 PM

Quote from: GermanGiant on August 08, 2015, 06:50:44 PM

LoLz... I hope you understand *completely* about the Bit-X scam fast... before it is too late. Wink

p.s. I am assuming that you are innocent and do not understand how Bit-X is duping bitcoiners.

BIT-X is legit unlike the scam you are advertising. However, it is also possible they are selling more than 1 PH.

Wah.... having 1 Phs vouch and selling more than that... and you call it legit ? It is another AM hash in the making, which will wipe out millions from people once again.

talkbitcoin

legendary

Activity: 1372

Merit: 1032

All I know is that I know nothing.

omg that is a lot of money. but i think nobody is stupid enough to lose that much on blank password

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: GermanGiant on August 08, 2015, 06:50:44 PM

LoLz... I hope you understand *completely* about the Bit-X scam fast... before it is too late. Wink

p.s. I am assuming that you are innocent and do not understand how Bit-X is duping bitcoiners.

BIT-X is legit unlike the scam you are advertising. However, it is also possible they are selling more than 1 PH.

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: Muhammed Zakir on August 07, 2015, 08:55:43 AM

Quote from: GermanGiant on August 06, 2015, 12:13:52 PM

-snip-

Why on earth you sold your address in the first place ?

I really did not understand *completely* about these things. Later onwards, I started understanding more.

P.S. I won't be committing such as mistake or similar mistake again! Ever!

LoLz... I hope you understand *completely* about the Bit-X scam fast... before it is too late. Wink

p.s. I am assuming that you are innocent and do not understand how Bit-X is duping bitcoiners.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: GermanGiant on August 06, 2015, 12:13:52 PM

-snip-

Why on earth you sold your address in the first place ?

I really did not understand *completely* about these things. Later onwards, I started understanding more.

P.S. I won't be committing such as mistake or similar mistake again! Ever!

tearfereon

full member

Activity: 138

Merit: 100

Quote from: amaclin on August 06, 2015, 02:13:54 PM

Quote from: GermanGiant on August 06, 2015, 12:13:52 PM

Why on earth you sold your address in the first place ?

Why not? Private key is something like private property. Why not to sell it if the price is comfortable and there is an agreement between buyer and seller?

It's like "My wife still has access to my personal bank account after our divorce".
WTF Dude? Are you serious?

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: GermanGiant on August 06, 2015, 12:13:52 PM

Why on earth you sold your address in the first place ?

Why not? Private key is something like private property. Why not to sell it if the price is comfortable and there is an agreement between buyer and seller?

sana9821

sr. member

Activity: 420

Merit: 250

wow thats insane how a small mistake can cause such a big loss, i guess people have to be more careful about all the transactions they make to avoid such bad decisions

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: Muhammed Zakir on August 06, 2015, 09:23:20 AM

Quote from: amaclin on August 06, 2015, 09:06:14 AM

Quote from: Muhammed Zakir on August 06, 2015, 08:39:58 AM

I think there is no "special" threads. I can confirm this because he sweeped from one of my old address

This is not your old address (private key). You sold it to me. Now this is my address. And I can do whatever I want with it.

Aren't these your words?

Quote from: Muhammed Zakir on January 02, 2015, 01:38:45 PM

Thanks! Received! Good trade with you!

Code:

19pjkRG494kzFuNtK1NT1DkeDGyMTw67be - L1AjaYpTdfxwu5Mii6dHhLE4KdveRAdgdF6xxdNua1UBvDZfxkR2 -
1MzakiRDem5MCocbcP7DgfcVGZNZe2KqaC - 5KJtbhbKxocwWNdFGzmv2SBy8XZfAfqRVT33LJnFQePVj74HAjn

Kindly,
Muhammed Zakir

Yes, you are right. It was mine earlier and that's what I meant. My mistake.

Why on earth you sold your address in the first place ?

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: amaclin on August 06, 2015, 09:06:14 AM

Quote from: Muhammed Zakir on August 06, 2015, 08:39:58 AM

I think there is no "special" threads. I can confirm this because he sweeped from one of my old address

This is not your old address (private key). You sold it to me. Now this is my address. And I can do whatever I want with it.

Aren't these your words?

Quote from: Muhammed Zakir on January 02, 2015, 01:38:45 PM

Thanks! Received! Good trade with you!

Code:

19pjkRG494kzFuNtK1NT1DkeDGyMTw67be - L1AjaYpTdfxwu5Mii6dHhLE4KdveRAdgdF6xxdNua1UBvDZfxkR2 -
1MzakiRDem5MCocbcP7DgfcVGZNZe2KqaC - 5KJtbhbKxocwWNdFGzmv2SBy8XZfAfqRVT33LJnFQePVj74HAjn

Kindly,
Muhammed Zakir

Yes, you are right. It was mine earlier and that's what I meant. My mistake.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: Muhammed Zakir on August 06, 2015, 08:39:58 AM

I think there is no "special" threads. I can confirm this because he sweeped from one of my old address

This is not your old address (private key). You sold it to me. Now this is my address. And I can do whatever I want with it.

Aren't these your words?

Quote from: Muhammed Zakir on January 02, 2015, 01:38:45 PM

Thanks! Received! Good trade with you!

Code:

19pjkRG494kzFuNtK1NT1DkeDGyMTw67be - L1AjaYpTdfxwu5Mii6dHhLE4KdveRAdgdF6xxdNua1UBvDZfxkR2 -
1MzakiRDem5MCocbcP7DgfcVGZNZe2KqaC - 5KJtbhbKxocwWNdFGzmv2SBy8XZfAfqRVT33LJnFQePVj74HAjn

Kindly,
Muhammed Zakir

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: luciann on August 05, 2015, 08:32:36 PM

Quote from: Muhammed Zakir on August 03, 2015, 10:32:53 AM

Quote from: Sarthak on August 03, 2015, 09:02:21 AM

There are bots to transfer coins as soon as they are deposited!

Just see the time frame...2 BTC deposited and withdrawn within a second Shocked

User "amaclin" is running a bot. He is already running a bot for sweeping Bitcoins from addresses he bought and from addresses whose private keys were leaked.

Is there a thread to this? incase some peoples address he purchased that others can confirm to ditch their address.

its pretty crazy how someone does that.. esp running a bot just for that..

I think there is no "special" threads. I can confirm this because he sweeped from one of my old address twice and when I analysed that address, I found he has is sweeping from *many* other addresses. I also think he is one of the people who stole Bitcoins when there was a Blockchain.info bug(reused R values). IIIRC, he indirectly agreed he stole Bitcoins.

Velkro

legendary

Activity: 2296

Merit: 1014

Quote from: unamis76 on July 29, 2015, 05:03:05 PM

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Can't believe person with such funds is so unreliable to himself Shocked

luciann

sr. member

Activity: 252

Merit: 250

Quote from: Muhammed Zakir on August 03, 2015, 10:32:53 AM

Quote from: Sarthak on August 03, 2015, 09:02:21 AM

There are bots to transfer coins as soon as they are deposited!

Just see the time frame...2 BTC deposited and withdrawn within a second Shocked

User "amaclin" is running a bot. He is already running a bot for sweeping Bitcoins from addresses he bought and from addresses whose private keys were leaked.

Is there a thread to this? incase some peoples address he purchased that others can confirm to ditch their address.

its pretty crazy how someone does that.. esp running a bot just for that..

luciann

sr. member

Activity: 252

Merit: 250

Quote from: grendel25 on August 01, 2015, 04:02:25 AM

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

This is the type of low-tech jiggery-pokery that is holding bitcoin back. I'm not sure what current bitcoin devs are doing about this sort of thing but it doesn't seem like the user experience gets much attention when it comes to wallets, clients, paper wallets, and all the various ways to manage personal bitcoins.

I agree on this as well.

I could of made the same mistake as this op, based on the userexperience not making it more easier I guess?

I still find it very hard to figure out certain things, and esp dont know how to do paper wallets like you mentioned as well. But the passphrase yeah there needs to be something on the wallet obvious for me to click like the send and recieve tab or something similar.

Or sets and assign a default password automatically.

techgeek

hero member

Activity: 826

Merit: 1000

Quote from: notlist3d on August 03, 2015, 01:03:27 PM

This is a pretty amazing error. I cannot imagine someone with 50 BTC making this mistake.

If it is someone new made this mistake... wow would that be one way to make you want nothing to do with BTC.

Well if you think thats bad.

Theres a guy who lost 74 btc doing a normal transaction with localbitcoins for wanting cash. https://bitcointalksearch.org/topic/got-scammed-on-trading-for-cash-7419-btc-1112060

The short summary is that the guy got his bitcoin, and instead left his laptop and phone which im guessin were part of the plan.

mrhelpful

legendary

Activity: 1456

Merit: 1002

Quote from: ajun96 on July 30, 2015, 07:40:40 PM

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

50 btc is to large bro, $14500 lost, call fbi or police cyber crime ! I hope you can getb back your money although is impossible

once its gone, its gone.

theres not much that a fbi, or police cyber crime youre referring to will do much about it besides making a case which wont resolve. its a shame though the security was left as a blank passphrase, so its a huge reminder we need to check our basics and get our self covered.

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: 98problems on August 03, 2015, 02:37:20 PM

wow thats insane, someone actually might have made a mistake and lost 15000 dollars just because they sent to a wallet with blank passphrase feeling sorry for him

No one knows whether he is the one who swiped it later.

98problems

sr. member

Activity: 364

Merit: 250

wow thats insane, someone actually might have made a mistake and lost 15000 dollars just because they sent to a wallet with blank passphrase feeling sorry for him

notlist3d

legendary

Activity: 1456

Merit: 1000

This is a pretty amazing error. I cannot imagine someone with 50 BTC making this mistake.

If it is someone new made this mistake... wow would that be one way to make you want nothing to do with BTC.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: amaclin on August 03, 2015, 10:53:10 AM

Quote from: Muhammed Zakir on August 03, 2015, 10:32:53 AM

User "amaclin" is running a bot. He is already running a bot for sweeping Bitcoins from addresses he bought and from addresses whose private keys were leaked.

There are dozens of bots which monitor these addresses.

I know. I just added you into one of "them".

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: Muhammed Zakir on August 03, 2015, 10:32:53 AM

User "amaclin" is running a bot. He is already running a bot for sweeping Bitcoins from addresses he bought and from addresses whose private keys were leaked.

There are dozens of bots which monitor these addresses.

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: Sarthak on August 03, 2015, 09:02:21 AM

There are bots to transfer coins as soon as they are deposited!

Just see the time frame...2 BTC deposited and withdrawn within a second Shocked

User "amaclin" is running a bot. He is already running a bot for sweeping Bitcoins from addresses he bought and from addresses whose private keys were leaked.

Sarthak

hero member

Activity: 518

Merit: 501

Error 404: there seems to be nothing here.

There are bots to transfer coins as soon as they are deposited!

Just see the time frame...2 BTC deposited and withdrawn within a second Shocked

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: sipredrica on August 01, 2015, 03:15:49 AM

Yes You Need to be Careful and You need to Keep Your Blockchain Account Details Very Confidentially I Think The Known Peoples Have Crashed out Your Bitcoins. Blockchain Never do Like Cheap Tricks.

What do you mean by that... LoLz ?

RocketSingh

legendary

Activity: 1662

Merit: 1050

Quote from: grendel25 on August 01, 2015, 04:02:25 AM

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

This is the type of low-tech jiggery-pokery that is holding bitcoin back. I'm not sure what current bitcoin devs are doing about this sort of thing but it doesn't seem like the user experience gets much attention when it comes to wallets, clients, paper wallets, and all the various ways to manage personal bitcoins.

What do you expect the central bankers to do, if someone leaves a briefcase full of cash in open market ?

grendel25

legendary

Activity: 2296

Merit: 1031

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

This is the type of low-tech jiggery-pokery that is holding bitcoin back. I'm not sure what current bitcoin devs are doing about this sort of thing but it doesn't seem like the user experience gets much attention when it comes to wallets, clients, paper wallets, and all the various ways to manage personal bitcoins.

sipredrica

member

Activity: 70

Merit: 10

Yes You Need to be Careful and You need to Keep Your Blockchain Account Details Very Confidentially I Think The Known Peoples Have Crashed out Your Bitcoins. Blockchain Never do Like Cheap Tricks.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: GermanGiant on July 31, 2015, 04:36:17 AM

Because they are using bots that are programmed to pay standard Tx fee.
The winner bot of the double spending race paid highest Tx fee.

All bots paid the same fee. The winner transaction came to the miner first.

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: tearfereon on July 30, 2015, 02:54:44 PM

And lucky thief is this: https://blockchain.info/address/1A6Ei5cRfDJ8jjhwxfzLJph8B9ZEthR9Z
I wonder why the other "double spenders" didn't pay more tx fee? They would have more chance to claim it..

Because they are using bots that are programmed to pay standard Tx fee. The winner bot of the double spending race paid highest Tx fee.

kvlolo

full member

Activity: 134

Merit: 100

If it were a mistake, the cost of this mistake is so big.

ajun96

hero member

Activity: 658

Merit: 500

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

50 btc is to large bro, $14500 lost, call fbi or police cyber crime ! I hope you can getb back your money although is impossible

jonald_fyookball

legendary

Activity: 1302

Merit: 1008

Core dev leaves me neg feedback #abuse #political

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

Portability. Immunity from hardware failures.

Cryptopher

legendary

Activity: 1789

Merit: 1008

Keep it dense, yeah?

Quote from: cryptworld on July 30, 2015, 12:26:40 PM

maybe someone created a brainwallet but it had the mistake not to create it with ha passphrase

Madness. To send any coins to a Brainwallet without being thoroughly satisfied with the way in which the keys have been generated is madness.

Painful for the former owner(s) of the coins, and a job well done to the opportunist recipient.

tearfereon

full member

Activity: 138

Merit: 100

And lucky thief is this: https://blockchain.info/address/1A6Ei5cRfDJ8jjhwxfzLJph8B9ZEthR9Z
I wonder why the other "double spenders" didn't pay more tx fee? They would have more chance to claim it..

mrbrt

hero member

Activity: 707

Merit: 500

Quote from: smiletyson on July 30, 2015, 02:42:38 PM

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

There's only 1 advantage: "Easy to remember the priv key".
But it's the most vulnerable part of it.
If you can remember it easily then someone else can hack/guess it easily.

Mmm no. Do you understand what I mean when I say you can verify the amount of entropy? And, also do you even diceware?

smiletyson

hero member

Activity: 661

Merit: 509

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

There's only 1 advantage: "Easy to remember the priv key".
But it's the most vulnerable part of it.
If you can remember it easily then someone else can hack/guess it easily.

mrbrt

hero member

Activity: 707

Merit: 500

Quote from: spazzdla on July 30, 2015, 02:28:05 PM

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

How would one guess a random 15 word string, the words only ever input on an offline computer.

It's possible (likely?) if you don't use a system that generates true randomness - like diceware.

spazzdla

legendary

Activity: 1722

Merit: 1000

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

How would one guess a random 15 word string, the words only ever input on an offline computer.

mrbrt

hero member

Activity: 707

Merit: 500

Quote from: gogxmagog on July 30, 2015, 01:50:10 PM

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

Read this:
http://www.contravex.com/2014/03/14/on-making-high-entropy-bitcoin-paper-wallets/

He goes the extra step and actually prints the wallet out (with the private key), so memorizing the passphrase isn't necessary, but it is the steps he takes in generating the address in the first place that are important.

gogxmagog

legendary

Activity: 1456

Merit: 1010

Ad maiora!

Can someone explain to me why anyone would even use a brain wallet? They seem like the least secure wallet out there, what would be the advantage?

cryptworld

hero member

Activity: 714

Merit: 503

maybe someone created a brainwallet but it had the mistake not to create it with ha passphrase

mrbrt

hero member

Activity: 707

Merit: 500

Quote from: AtheistAKASaneBrain on July 30, 2015, 09:19:53 AM

There are bots and hackers sending those bots inspecting around finding for gaps to get in and steal your BTC. Never leave a wallet without strong encryption, lesson learned the hard way. You didn't deserve 50 BTC being lost tho, thats too much money.

Encryption is irrelevant if you aren't using an adequate amount of entropy.

mrbrt

hero member

Activity: 707

Merit: 500

Quote from: oblivi on July 29, 2015, 05:49:08 PM

Quote from: PolarPoint on July 29, 2015, 05:33:26 PM

Quote from: gentlemand on July 29, 2015, 05:07:44 PM

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

There are bots which scans famous quotes, bible quotes, song lyrics, everything a person can think of plus small mutations. I feel sorry for anyone who lost coins this way. Any brainwallet generated from phrases just aren't safe, people have to learn their lesson the hard way.

Thats why I would never, ever store my main stack within something that can be generated out of thin air. There's no way im ever moving my coins from my local offline hardware unless I want to have spare BTC on my mycellium wallet. Brainwallet sounds good but better stay a paranoid and go good ol offline.

How exactly do you think your "offline addresses" are generated? Do you audit the RNGs of the address generators you use?

Generating the proper amount of entropy for a brainwallet is trivial and verifiable and by their very definition, brainwallets are generated and stored offline.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: TinEye on July 30, 2015, 09:26:02 AM

what about adding a future like that in the client? could in theory the client say to you if you're sending to an address on which the transaction has suffered from a double spend, the same thing you see on the blockchain, in red

Let us ask developers to put in client and publish on web the list of compromised addresses with their private keys. Grin

TinEye

hero member

Activity: 639

Merit: 500

Quote from: faridkifly on July 30, 2015, 09:13:35 AM

Quote from: Nexious on July 29, 2015, 05:51:15 PM

It was a well known brain wallet address, either it was a mistake or done on purpose. If it was a mistake I feel sorry for the person, but sending that large amounts you would double check everything before you sent.

Yeah I think so.
Double check is important, but a lot of people is lazy.. They don't want to check it and they lost their btc Cry

what about adding a future like that in the client? could in theory the client say to you if you're sending to an address on which the transaction has suffered from a double spend, the same thing you see on the blockchain, in red

AtheistAKASaneBrain

hero member

Activity: 770

Merit: 509

There are bots and hackers sending those bots inspecting around finding for gaps to get in and steal your BTC. Never leave a wallet without strong encryption, lesson learned the hard way. You didn't deserve 50 BTC being lost tho, thats too much money.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: S4VV4S on July 30, 2015, 03:30:56 AM

4 bots attempted to clean it out:

https://blockchain.info/tx-index/96343089
https://blockchain.info/tx-index/96341462
https://blockchain.info/tx-index/96344575
https://blockchain.info/tx-index/96343087

You should say "at least 4 bots attempted to clean it out".
bc.i does not show all conflicting transactions Grin

faridkifly

sr. member

Activity: 294

Merit: 250

Quote from: Nexious on July 29, 2015, 05:51:15 PM

It was a well known brain wallet address, either it was a mistake or done on purpose. If it was a mistake I feel sorry for the person, but sending that large amounts you would double check everything before you sent.

Yeah I think so.
Double check is important, but a lot of people is lazy.. They don't want to check it and they lost their btc Cry

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: NorrisK on July 30, 2015, 04:27:37 AM

So was sending it to the empty string wallet a double spend or was the transaction out of the wallet a double spend?

Of course the transaction out of the wallet is double spend.

NorrisK

legendary

Activity: 1946

Merit: 1007

So was sending it to the empty string wallet a double spend or was the transaction out of the wallet a double spend?

Mayer Amschel

full member

Activity: 140

Merit: 100

Oh bummer

RocketSingh

legendary

Activity: 1662

Merit: 1050

Quote from: Mickeyb on July 30, 2015, 03:42:47 AM

Quote from: Kprawn on July 30, 2015, 01:15:01 AM

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test?

When you are not careful enough shit happens really fast. 50 BTC is a lot, but I have witnessed people being less or same careful with amounts of 500 BTCs and higher. Didn't some user of this forum guard his passwords and wallet.dat files unencrypted on the cloud and he got hacked for more than 1000 BTCs.

Luckily he managed to negotiate the return of funds with the thief. I guess that some people never learn.

Yah. Here is the thread => https://bitcointalksearch.org/topic/i-was-hacked-1170btc-stolen-500btc-max-bounty-686275

Mickeyb

hero member

Activity: 798

Merit: 1000

Move On !!!!!!

Quote from: Kprawn on July 30, 2015, 01:15:01 AM

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test?

When you are not careful enough shit happens really fast. 50 BTC is a lot, but I have witnessed people being less or same careful with amounts of 500 BTCs and higher. Didn't some user of this forum guard his passwords and wallet.dat files unencrypted on the cloud and he got hacked for more than 1000 BTCs.

Luckily he managed to negotiate the return of funds with the thief. I guess that some people never learn.

S4VV4S

hero member

Activity: 1582

Merit: 502

4 bots attempted to clean it out:

https://blockchain.info/tx-index/96343089
https://blockchain.info/tx-index/96341462
https://blockchain.info/tx-index/96344575
https://blockchain.info/tx-index/96343087

Kprawn

legendary

Activity: 1904

Merit: 1074

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test?

cointell

full member

Activity: 153

Merit: 100

Quote from: Pursuer on July 29, 2015, 10:01:29 PM

Quote from: jonald_fyookball on July 29, 2015, 08:50:57 PM

why are there two addresses for correct horse battery staple?

brainwallet has two modes for creating private keys called "Point Conversion" which makes compressed and uncompressed private keys, hence two different addresses.

Yep, and the two addresses for the empty string are:

https://blockchain.info/address/1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN
https://blockchain.info/address/1F3sAm6ZtwLAUnj7d38pGFxtP3RVEvtsbV

btccashacc

legendary

Activity: 1120

Merit: 1000

Quote from: GermanGiant on July 29, 2015, 04:59:33 PM

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

fuck that $ 14,463.50 :O

Pursuer

legendary

Activity: 1638

Merit: 1163

Where is my ring of blades...

Quote from: jonald_fyookball on July 29, 2015, 08:50:57 PM

why are there two addresses for correct horse battery staple?

brainwallet has two modes for creating private keys called "Point Conversion" which makes compressed and uncompressed private keys, hence two different addresses.

jonald_fyookball

legendary

Activity: 1302

Merit: 1008

Core dev leaves me neg feedback #abuse #political

why are there two addresses for correct horse battery staple?

Gleb Gamow

vip

Activity: 1428

Merit: 1145

foodstamps

hero member

Activity: 938

Merit: 502

Pretty crazy stuff, whether it was a mistake or not. I know the feeling though, I have sent BTC to the wrong address before(never anything near that much though).

Nexious

full member

Activity: 140

Merit: 100

Nexious.com Admin

It was a well known brain wallet address, either it was a mistake or done on purpose. If it was a mistake I feel sorry for the person, but sending that large amounts you would double check everything before you sent.

oblivi

hero member

Activity: 700

Merit: 501

Quote from: PolarPoint on July 29, 2015, 05:33:26 PM

Quote from: gentlemand on July 29, 2015, 05:07:44 PM

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

There are bots which scans famous quotes, bible quotes, song lyrics, everything a person can think of plus small mutations. I feel sorry for anyone who lost coins this way. Any brainwallet generated from phrases just aren't safe, people have to learn their lesson the hard way.

Thats why I would never, ever store my main stack within something that can be generated out of thin air. There's no way im ever moving my coins from my local offline hardware unless I want to have spare BTC on my mycellium wallet. Brainwallet sounds good but better stay a paranoid and go good ol offline.

Remember remember the 5th of November

legendary

Activity: 1862

Merit: 1011

Reverse engineer from time to time

I am envious.

unamis76

legendary

Activity: 1512

Merit: 1012

Quote from: GermanGiant on July 29, 2015, 05:05:30 PM

Quote from: unamis76 on July 29, 2015, 05:03:05 PM

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.

It is also possible that the guy swiped the coins himself. But, as I can see, even after 80+ confirmation blockchain.info is showing the outgoing Tx as double spend.

Yes, that's a possibility too, but a very optimistic one Cheesy

Quote from: gentlemand on July 29, 2015, 05:07:44 PM

Quote from: unamis76 on July 29, 2015, 05:03:05 PM

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...).

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

I don't really get why anyone indulges in them.

Yes, bots exist... People are after free and easy coins, I guess... Roll Eyes

PolarPoint

hero member

Activity: 672

Merit: 500

Quote from: gentlemand on July 29, 2015, 05:07:44 PM

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

There are bots which scans famous quotes, bible quotes, song lyrics, everything a person can think of plus small mutations. I feel sorry for anyone who lost coins this way. Any brainwallet generated from phrases just aren't safe, people have to learn their lesson the hard way.

gentlemand

legendary

Activity: 2590

Merit: 3015

Welt Am Draht

Quote from: unamis76 on July 29, 2015, 05:03:05 PM

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...).

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

I don't really get why anyone indulges in them.

jwcastle

member

Activity: 117

Merit: 10

Looks like more than 1 person tried to claim that 50 BTC.

GermanGiant

hero member

Activity: 784

Merit: 501

Quote from: unamis76 on July 29, 2015, 05:03:05 PM

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.

It is also possible that the guy swiped the coins himself. But, as I can see, even after 80+ confirmation blockchain.info is showing the outgoing Tx as double spend.

unamis76

legendary

Activity: 1512

Merit: 1012

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.

GermanGiant

hero member

Activity: 784

Merit: 501

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

Topic: 50 BTC lost because of blank passphrase (Read 8253 times)