Please crack my blockchain wallet and take my 16 cents

Microbit001

member

Activity: 63

Merit: 10

Quote from: Waramp22 on August 27, 2014, 12:03:43 PM

Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes.

I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account.

wallet.aes.json

Code:

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

Machines aren't gotten so smart to crack such a encryption in so short period of time.It would take a lifetime and even more to do so

wasserman99

sr. member

Activity: 476

Merit: 250

Quote from: Waramp22 on August 27, 2014, 07:22:18 PM

Quote from: wasserman99 on August 27, 2014, 07:08:48 PM

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.

I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.

They "let" you have the private key in unencrypted format because you are in 100% control of your keys at all times. You can also download your private keys in an unencrypted format after acknowledging a warning.

BitcoinBadger

member

Activity: 111

Merit: 10

14 characters will take more than 700 years to bruteforce. Even with supercomputer, expect some years to crack..

Sorry mate

, keep wallet safer next time

FFrost

full member

Activity: 224

Merit: 100

Your joking right? Why would someone even bother to hack it just a waste of electricity.

Waramp22

sr. member

Activity: 321

Merit: 250

Quote from: sandykho47 on August 28, 2014, 06:43:29 AM

$0.16 is not worth
If you say 16 BTC this will worthy Grin

And i think you need yo set blockchain.info very carefully

Quote from: Sindelar1938 on August 28, 2014, 06:25:39 AM

16 cents? You gotta be kidding
I would assume that most of us value our time more than that

Quote from: 1Referee on August 28, 2014, 07:00:41 AM

Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent Wink

See below!!!

Quote from: Waramp22 on August 27, 2014, 06:38:16 PM

I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.

1Referee

legendary

Activity: 2170

Merit: 1427

Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent Wink

sandykho47

sr. member

Activity: 252

Merit: 251

Knowledge its everything

$0.16 is not worth
If you say 16 BTC this will worthy Grin

And i think you need yo set blockchain.info very carefully

Sindelar1938

hero member

Activity: 490

Merit: 500

16 cents? You gotta be kidding
I would assume that most of us value our time more than that

montello

full member

Activity: 126

Merit: 100

All that stress for just 16 cents,its not worth it.

Waramp22

sr. member

Activity: 321

Merit: 250

Quote from: wasserman99 on August 27, 2014, 07:08:48 PM

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.

I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.

wasserman99

sr. member

Activity: 476

Merit: 250

Quote from: odolvlobo on August 27, 2014, 04:28:47 PM

Quote from: juju on August 27, 2014, 03:19:03 PM

Quote from: DiamondCardz on August 27, 2014, 01:52:35 PM

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet:

Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
Obtain your password and id from you.

The latter case is by far the most common scenario.

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.

Waramp22

sr. member

Activity: 321

Merit: 250

Quote from: Ayers on August 27, 2014, 01:38:13 PM

not worth it for just 16 cents

I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.

Quote from: juju on August 27, 2014, 03:19:03 PM

Quote from: DiamondCardz on August 27, 2014, 01:52:35 PM

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Yes, alot, but i had not logged into blockchain from January 12th until it was hacked on July 7th. I was too Paranoid of keyloggers/malware. My email does not have 2 factor authentication. The thief could have easily got my wallet file but then how could he have cracked it?

I made 4 cold wallets to keep it in. Now i am paranoid because although i disconnected the ethernet cable and saved the BIP38 encrypted paper wallet (PDF) directly to a usb drive, I had to type in the password which may have been picked up by malware. I think i am officially done storing my bitcoin on any computer, as there are too many points of failure. You need to have a dedicated laptop/printer that never touches the internet to store your money safely by printing out paper wallets and keeping them in a safe. Maybe a Piper bitcoin wallet printer?

Here is my public key.
https://blockchain.info/address/1K2sV195TPP3mUCeHxZxizWUFZFRAvBsHn

odolvlobo

legendary

Activity: 4522

Merit: 3426

Quote from: juju on August 27, 2014, 03:19:03 PM

Quote from: DiamondCardz on August 27, 2014, 01:52:35 PM

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet:

Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
Obtain your password and id from you.

The latter case is by far the most common scenario.

juju

sr. member

Activity: 381

Merit: 250

Quote from: DiamondCardz on August 27, 2014, 01:52:35 PM

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

DiamondCardz

legendary

Activity: 1134

Merit: 1118

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

Ayers

legendary

Activity: 2590

Merit: 1022

Leading Crypto Sports Betting & Casino Platform

not worth it for just 16 cents

SgtSpike

legendary

Activity: 1400

Merit: 1005

13-14 chars isn't bruteforceable. You probably had some malware.

Waramp22

sr. member

Activity: 321

Merit: 250

Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes.

I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account.

wallet.aes.json

Code:

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

Topic: Please crack my blockchain wallet and take my 16 cents (Read 1834 times)