Awesome, we have someone doing the same thing: https://bitcointalksearch.org/topic/can-you-identify-me-25btc-reward-168317. 2.5 BTC reward.
Topic: [joe is dead] http://findmeifyoucan.eu (Read 7094 times)
UPDATE: someone manages to bribe theymos to give out the IP used to access bitcointalk as joe23: it's consistently 188.165.73.235
lol really?
nope. That was a "simulation". Had theymos done that in reality, the answer would've still been 188.165.73.235, though. Joe23 was giving a hint. He was pretty sure that hint wouldn't help people because it's the IP of the proxy he anonymously bought with bitcoin and only accessed through tor.
UPDATE: someone manages to bribe theymos to give out the IP used to access bitcointalk as joe23: it's consistently 188.165.73.235
lol really?
I'm looking forward to be part of the next challenge someone puts up 
I am offering a new challenge like this one. https://bitcointalksearch.org/topic/can-you-identify-me-25btc-reward-168317 Maybe someone want to find my other profiles on Bitcointalk?
Basicly a variant of bayesian filter would have found joe also. Of course, you should be able to import all messages to it.I would not be surpriced if someone already are using such tools.
what kind of variant of bayesian filter?
https://en.wikipedia.org/wiki/Bayesian_spam_filtering
Quote
General applications of Bayesian filtering
While Bayesian filtering is used widely to identify spam email, the technique can classify (or "cluster") almost any sort of data. It has uses in science, medicine, and engineering. One example is a general purpose classification program called AutoClass
which was originally used to classify stars according to spectral characteristics that were otherwise too subtle to notice. There is recent speculation that even the brain uses Bayesian methods to classify sensory stimuli and decide on behavioral responses.[16]
While Bayesian filtering is used widely to identify spam email, the technique can classify (or "cluster") almost any sort of data. It has uses in science, medicine, and engineering. One example is a general purpose classification program called AutoClass
which was originally used to classify stars according to spectral characteristics that were otherwise too subtle to notice. There is recent speculation that even the brain uses Bayesian methods to classify sensory stimuli and decide on behavioral responses.[16]
Maybe someone want to find my other profiles on Bitcointalk?
Basicly a variant of bayesian filter would have found joe also. Of course, you should be able to import all messages to it.I would not be surpriced if someone already are using such tools.
what kind of variant of bayesian filter?
Maybe someone want to find my other profiles on Bitcointalk?
Basicly a variant of bayesian filter would have found joe also. Of course, you should be able to import all messages to it.I would not be surpriced if someone already are using such tools.
I'll leave this here to freak you out instead: 
I suppose this is a dynamic image. The server grabs your IP address, writes the text into an image and serves that image. Still wouldn't get you a TOR user's real IP address.The thing that freaked me out was that I misunderstood OpenYourEyes' post to mean he could embed arbitrary flash or java code into a simple HTML forum post AND make it execute on the victim's computer automatically and so, through these systems' bypassing of proxy settings, learn joe23's real IP. This would be a very serious security flaw, I expect.
Can anyone suggest a web page where the privacy of your web browser is tested? Like one that tries java, js, flash, html, php, other bug exploits to track an IP, even behind tor? I know panopticlick from the EFF. Anything else?
There's some other sites that test it. Search "browser footprint test" on google.
It looks like you sent me the rest of the bounty. I thank you again.
(oops, the following post was sitting in edit mode for a day, submitting now):
PMed with SANS-Exp, he didn't have anything that would earn him the bounty, so I sent the other 7 BTC to melman2002.
b067aca35f9cdc53df20889b5195a0b2dff19bb79f58b48a39f178c8a62b3989
Congrats again and thanks to you all for participating!
I'm looking forward to be part of the next challenge someone puts up
Oh, and joe wrote from jail: he says he's now pretty poor and he regrets publishing that radical talk on his web-page.
He's holding up allright, though and he hopes his BTC 0.3 will be worth enough to allow him a fresh start by the time he gets out.
It looks like you sent me the rest of the bounty. I thank you again.
We should do that again some time.
Yes, this was awesome. I think it would be cool to have this as a regular thing.
Concur. Even use the same domain name.
It's for sale to the highest bidder
should I put it on bitmit.net?
We should do that again some time.
Yes, this was awesome. I think it would be cool to have this as a regular thing.
Concur. Even use the same domain name.
Same way I tried to find you, but didn't notice that particular spelling error. Nice work.
Maybe someone want to find my other profiles on Bitcointalk?
Are you willing to see that info revealed?
Maybe that 1 BTC someone wanted to chip in could be used as a bounty to find your puppets (or master).
Quote
I didn't click through to your blog page. I'm not sure I even saw the post with the link? You deleted that? I think you could've got me that way, I actually didn't do any securing of my browser other then set the proxy and was naively assuming everything would be forced through the proxy (which is false as I now know thanks to you and others).
Tor Browser Bundle have plugins and java scripts neutralized. Alternatively you can create separate profile for permanent Firefox installation and install Torbutton and other add-ons that TBB have. Changing just proxy in Firefox to 127.0.0.1:9050 is very dangerous. Maybe someone want to find my other profiles on Bitcointalk?
Are you willing to see that info revealed?
Maybe that 1 BTC someone wanted to chip in could be used as a bounty to find your puppets (or master).
Well done MelMan2002! I found a few grammatical errors, but didn't spend much time on them thinking I'd find him going the technical route.
If you use Tor, you should disable JavaScript, and certainly disable plugins (such as Flash, QuickTime, DivX, ActiveX, etc).
I didn't embed the Flash into my post (just a tracking image), I had a link in my post to a blog post (don't know whether you clicked it), and it was that page that hosted the Flash.
I didn't see 85.17.* but there was 85.127,* and 85.28*
Quote from: joe23
This could well have worked, I didn't protect against that.
I'm not sure how you embedded flash, can you explain? just![]()
blah.swf or what?
Do you see 85.17x.xxx.xxx in your logs?
I'm not sure how you embedded flash, can you explain? just
Do you see 85.17x.xxx.xxx in your logs?
If you use Tor, you should disable JavaScript, and certainly disable plugins (such as Flash, QuickTime, DivX, ActiveX, etc).
I didn't embed the Flash into my post (just a tracking image), I had a link in my post to a blog post (don't know whether you clicked it), and it was that page that hosted the Flash.
I didn't see 85.17.* but there was 85.127,* and 85.28*
Yeah, and my heart stopped when I saw 85! I checked my logs (dynamic ip here) and the ones I got always start with 85.176 or 85.177. Started with 85.176 on saturday and sunday.
I didn't click through to your blog page. I'm not sure I even saw the post with the link? You deleted that? I think you could've got me that way, I actually didn't do any securing of my browser other then set the proxy and was naively assuming everything would be forced through the proxy (which is false as I now know thanks to you and others).
Thanks for your effort, anyway.
Maybe someone want to find my other profiles on Bitcointalk?
We should do that again some time.
Yes, this was awesome. I think it would be cool to have this as a regular thing.
Oh definitely! Anyone be sure to post in this thread once someone puts up a challenge so we don't miss out.
Unfortunately, I can't be Mr. X any more now ;(.
Looking forward to be on the other side, though.
I think MelMan2002 should get the full bounty, that was a good job by him.
I'm not really clear from reading the post about what technical issue you were supposed to have missed that wasn't covered by people already.
I'm not really clear from reading the post about what technical issue you were supposed to have missed that wasn't covered by people already.
It was a bulanula-style con trying to claim credit for the previous discovery and get free BTC, posts now deleted.
What posts where deleted? The one where SANS-Exp claims I made a serious flaw is still there: https://bitcointalksearch.org/topic/m.1304530
Let's give it some more time. If he can show I made a serious mistake and that makes it plausible enough that he could've found me that way I think he'd deserve half the bounty. If not, it will go to MelMan2002.
We should do that again some time.
Yes, this was awesome. I think it would be cool to have this as a regular thing.
Jump to: