Topic: NXT :: descendant of Bitcoin - Updated Information - page 1928. (Read 2761645 times)

Popcorn.

WHAT TIME (GMT) WILL THE SOURCE CODE BE RELEASED?....ITS ALREADY JAN 3rd IN JAPAN/AUSTRALIA......CHINA IS COMING UP IN 10 MINUTES.

Shit...! Why are these account balance is negative?

I do not claim I got hacked. The only thing I know is that digitalocean asked me if I knew about this because there are different ip logins on my digitalocean account.

So you admit to stealing account information, but not taking the funds. You admit to creating a hacked client, and poisoning a link from a developer. But coincidentally also say your VPS account was hacked into and someone else used your account to actually do the stealing? So they had about an hour to figure out you poisoned a link, hack your VPS, and replace your hacked client with their hacked client?  Just admit it, you stole the NXT, return it before you dig yourself in deeper. I have in my history the time and path to your VPS server, which "hour" did you have your hacked client on your VPS?

I have just read the last 50 pages of this topic and wow this is crazy.

First of all yes the client was posted by me and I added some code that would send the secrets to my server.
A week ago there were all the ddos issues and billions created which led to a lot of client updates.
During these updates I noticed a lot of those clients had different hashes which made me wondering how easy it would be to modify the client and get it circulated.
So that is what I did. I quoted the official post made by jean-luc on 31/12 and changed the url. Setting this all up took less then an hour.
The server was only online for about an hour and I decided to shut it down after I had gotten access to about 10 accounts.

Now here is what is odd. Yes I got access to some accounts but not those people here who are claiming they got hacked.
The accounts that I got access to never had more then 1000 nxt in them and I never had the intention of taking it.
To the people who got hacked before 0.4.8 I can say that it was definetly not me who could have stolen your coins.

Normally at this point I was going to post details about how easy it is to steal nxt and how people have to be aware about where they download their client instead if only focussing only on their pass strength.
That point has been made very clear now in an unfortunate way.

To be honest if I had found an account containing a 50 million next I would have probably taken it and diseappeared but that was not the case. I am human after all.

I know there are other modified clients around whether they use the same type of attack I don't know.
Digitalocean has also contacted me that people here have sent complaints and that different IP's have logged in on my account.
Whether someone else had access to my vps, people downloaded a different infected client or someone is playing it smart letting me take the blame I do not know. 

People are angry and ofcourse I can understand that but the only thing I can do is tell my story and hope a correct explanation for these thefts will appear.

- Someone cracked SHA256 and Curve25519 (why then multi-million accounts not hacked?)
- Someone distributes modified NRS (someone should decompile PaulyC's software)
- Keylogger
- He used online node that records entered passphrases

Thanks for the additional info, seems to point again to EpicThomas
He quoted the original message, but modified the link! And later modified it back!
Check:
https://bitcointalksearch.org/topic/m.4237883
BUT in Google cache (Do not use the link found in cache!):
http://webcache.googleusercontent.com/search?q=

I think this is a great effort but I urge you to hold off for a day or two and see if we can get EpicThomas to rethink the wisdom of keeping his ill-gotten gains and put the money back that he stole.

Worth a shot.  And I am 99.99% sure I will have the law on his tail if he doesn't.  I am a persistent fellow once I take up a cause.