Pages:
Author

Topic: Please forgive my ignorance, but WTF ? - page 2. (Read 4385 times)

legendary
Activity: 1358
Merit: 1002
June 03, 2012, 08:59:40 PM
#16
Well bitlane, I like you so I'll leave you some leads for you to follow...

You can see in this IRC log that BitcoinicaHacker used the usernames B1tcoinz and ageis on IRC http://ibot.rikers.org/20120521.html.gz

Looking for ageis on IRC logs I found some on #postfix IRC channel, which isn't much surprising, given that the dude used an exploited mailserver to pawn Bitcoinica and he's asking questions about, get ready, SASL and authentication stuff.
http://echelog.com/logs/browse/postfix/1321657200
http://echelog.com/logs/browse/postfix/1321743600

Also found an ageis on the IRC Bitcoin dev channel:
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/09/1
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/14/1
And the following that I found on #bitcoin-dev tells me that he's the same ageis on the #postfix
Quote
03:08    ageis [email protected]

Keep digging...
Every human makes mistakes and this dude is nothing else but human.

Now, if this helps to catch the guy, I want 10k BTC of reward lol

Most likely impersonated a reputable member to throw you off Sad

Did he? And he happened to impersonate it on some channel that isn't Bitcoin related, right?
And only him? Why not impersonate lot's of them, then?
Also, care to explain this
Name:    ageisp0lis
Posts:    11
Position:    Jr. Member
Date Registered:    October 22, 2011, 02:03:34 AM
Last Active:    May 21, 2012, 08:47:58 AM

Half hour after the usernames fuck up. Checking if somehow someone noticed it, maybe?

You guys can ignore it but the fact is: it's the only lead there is so far.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 03, 2012, 08:54:10 PM
#15
Well bitlane, I like you so I'll leave you some leads for you to follow...

You can see in this IRC log that BitcoinicaHacker used the usernames B1tcoinz and ageis on IRC http://ibot.rikers.org/20120521.html.gz

Looking for ageis on IRC logs I found some on #postfix IRC channel, which isn't much surprising, given that the dude used an exploited mailserver to pawn Bitcoinica and he's asking questions about, get ready, SASL and authentication stuff.
http://echelog.com/logs/browse/postfix/1321657200
http://echelog.com/logs/browse/postfix/1321743600

Also found an ageis on the IRC Bitcoin dev channel:
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/09/1
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/14/1
And the following that I found on #bitcoin-dev tells me that he's the same ageis on the #postfix
Quote
03:08    ageis [email protected]

Keep digging...
Every human makes mistakes and this dude is nothing else but human.

Now, if this helps to catch the guy, I want 10k BTC of reward lol

Most likely impersonated a reputable member to throw you off Sad
Yeah there needs to be some actual evidence. psy's stuff isn't evidence. And I'm sure rg can confirm that, since he's met him in person. I also have IRC logs that are pretty convincing.
hero member
Activity: 784
Merit: 1000
bitcoin hundred-aire
June 03, 2012, 08:49:14 PM
#14
Well bitlane, I like you so I'll leave you some leads for you to follow...

You can see in this IRC log that BitcoinicaHacker used the usernames B1tcoinz and ageis on IRC http://ibot.rikers.org/20120521.html.gz

Looking for ageis on IRC logs I found some on #postfix IRC channel, which isn't much surprising, given that the dude used an exploited mailserver to pawn Bitcoinica and he's asking questions about, get ready, SASL and authentication stuff.
http://echelog.com/logs/browse/postfix/1321657200
http://echelog.com/logs/browse/postfix/1321743600

Also found an ageis on the IRC Bitcoin dev channel:
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/09/1
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/14/1
And the following that I found on #bitcoin-dev tells me that he's the same ageis on the #postfix
Quote
03:08    ageis [email protected]

Keep digging...
Every human makes mistakes and this dude is nothing else but human.

Now, if this helps to catch the guy, I want 10k BTC of reward lol

Most likely impersonated a reputable member to throw you off Sad
legendary
Activity: 1358
Merit: 1002
June 03, 2012, 02:27:39 PM
#13
Well bitlane, I like you so I'll leave you some leads for you to follow...

You can see in this IRC log that BitcoinicaHacker used the usernames B1tcoinz and ageis on IRC http://ibot.rikers.org/20120521.html.gz

Looking for ageis on IRC logs I found some on #postfix IRC channel, which isn't much surprising, given that the dude used an exploited mailserver to pawn Bitcoinica and he's asking questions about, get ready, SASL and authentication stuff.
http://echelog.com/logs/browse/postfix/1321657200
http://echelog.com/logs/browse/postfix/1321743600

Also found an ageis on the IRC Bitcoin dev channel:
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/09/1
http://bitcoinstats.com/irc/bitcoin-dev/logs/2012/04/14/1
And the following that I found on #bitcoin-dev tells me that he's the same ageis on the #postfix
Quote
03:08    ageis [email protected]

Keep digging...
Every human makes mistakes and this dude is nothing else but human.

Now, if this helps to catch the guy, I want 10k BTC of reward lol
sr. member
Activity: 462
Merit: 250
I heart thebaron
June 03, 2012, 02:03:32 PM
#12
So anyway, bitlane, I'm glad you looked into it and shared what you found. 

Sometimes it takes a 'simpler' mind to look at the situation, unattached - CALL ME RAINMAN Wink
sr. member
Activity: 444
Merit: 250
I prefer evolution to revolution.
June 03, 2012, 01:56:25 PM
#11
There is probably a way - an expensive and time-consuming way - to track through the block-chain over the weeks/months/years after a theft has been recognized, and eventually identify the thief.  I doubt that 18,000 BC (about $90k, I guess) would cover it, but if the people we make fun of for sleuthing ignore our dispersions and keep at it, cooperate with each other, and get encouragement and help from us, that cost may go down.

So if and when we know who did it, what do we do then?  I kind of doubt that there's any state that would be willing to defend BitCoin (and I don't think I'd want them involved anyway).  That leaves vigilantes (which, for legal reasons, we can't condone) and tracking the criminal to pressure him/her until the thief pays back the stolen bitcoin.

I suppose this is already going on, but that the efforts are kept hidden from everyone in order to avoid alarming the thief who might then put extra effort into burying the trail.  I disagree with that reason.  I think any such efforts should be open, specifically because BitCoin users tend to be smart enough to "play chess" the way I like to play it - that is, honestly explaining my rationale to my opponent (if they want to hear it), under the assumption that, in the chess game this optimizes learning and engenders respect and friendship and, with the bitcoin thief sleuthing, the thief's efforts to thwart the pursuers' progress will backfire.  Especially since the openness of the process may not be complete (yes I know that's a bit duplicitous, but it seems justified).

So anyway, bitlane, I'm glad you looked into it and shared what you found. 

The thief is probably reading this and laughing at me.  That's why I've deployed my "Laugh-detector-inator" (apologies to Dr. Dufenschmirtz).  I recommend you give up now, whoever you are!
legendary
Activity: 1204
Merit: 1015
June 03, 2012, 12:45:59 PM
#10
The reason why they post the IP is because it is extremely valuable when combined with statistical analysis to find out who sent a transaction. For a single transaction, it's worthless. For 40 transactions, not so much. The problem is finding enough transactions to make the IP useful. While we might never know the exact IP of a transaction, analyzing the IP of who relayed a transaction could tip off what country a transaction came from.
sr. member
Activity: 462
Merit: 250
I heart thebaron
June 03, 2012, 12:37:53 PM
#9
Felt like Sherlock for a sec, didn't you?  Cool

No....lol

I just got lucky and started finding my own IP attached to a bunch of transactions that I have been involved in and didn't properly understand what it meant.....hehe

I suck at being a detective.
legendary
Activity: 1050
Merit: 1000
You are WRONG!
June 03, 2012, 12:31:42 PM
#8
Felt like Sherlock for a sec, didn't you?  Cool
he is a Internet detective, LOL.
sr. member
Activity: 280
Merit: 250
June 03, 2012, 12:28:39 PM
#7
Felt like Sherlock for a sec, didn't you?  Cool
legendary
Activity: 1050
Merit: 1000
You are WRONG!
June 03, 2012, 12:26:57 PM
#6
LOL, bitcoins can't be traced to a IP.

the ip in blockchain.info, is the ip that forwarded the transaction to blockchain.info, it is therefor not from the original sender of the bitcoins.
sr. member
Activity: 462
Merit: 250
I heart thebaron
June 03, 2012, 12:26:14 PM
#5
AAhh..OK.

Sorry guys.

As I said, I have no idea how to even use blockchain.info to 'follow' TXs...LOL
legendary
Activity: 1148
Merit: 1008
If you want to walk on water, get out of the boat
June 03, 2012, 12:25:40 PM
#4
The IP means nothing.
It's just the IP that relayed that transaction to blockchain.info. Not who created it (maybe yes maybe no, no way to know)
sr. member
Activity: 476
Merit: 250
June 03, 2012, 12:24:31 PM
#3
The IP address associated with the above address is 91.121.174.223 (according to blockchain.info)

This is just the IP of the one who relayed the transaction, as far as I know.
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
June 03, 2012, 12:24:17 PM
#2
The main problem is that is not necessarily the IP that originated the transaction, just the first known to have relayed it.  Any node will relay a valid transaction. What blockchain.info records is the first node it heard a transaction from, and if the originator does not have his own connection to blockchain.info's servers (a very probable thing) blockchain.info simply can't know the offenders IP.
sr. member
Activity: 462
Merit: 250
I heart thebaron
June 03, 2012, 12:21:57 PM
#1
So, in regards to the Bitcoinica ordeal....

The Facts:

Today, we have discovered a suspicious Bitcoin transaction that doesn't seem to be initiated by any one of the company owners. Some of them are not online at the moment so

this is not conclusive.

Suspicious transaction:

  {
        "account" : "",
        "address" : "182tGyiczhXSSCTciVujNRkkMw1zQxUVhp",
        "category" : "send",
        "amount" : -18547.66867623,
        "fee" : 0.00000000,
        "blockhash" : "00000000000003f6bfd3e2fcbf76091853b28be234b5473a67f89b9d5bee019c",
        "blockindex" : 1,
        "txid" : "7a22917744aa9ed740faf3068a2f895424ed816ed1a04012b47df7a493f056e8",
        "time" : 1336738723
    },

The IP address associated with the above address is 91.121.174.223 (according to blockchain.info)

So, just surfing around, I came across a few things that puzzle me:




So...The 'Receiver' of the 'SENT' bitcoins from Bitcoinica runs a pool on port80 ?

....and is generating blocks ? (as recently as June 1, 2012)






As I said, please forgive my ignorance, as I really do have no idea if any of this is even relevant, but I had to ask....

More links for your browsing pleasure maybe ?....

http://blockchain.info/tree/5416502

http://blockchain.info/ip-address/91.121.174.223

http://blockchain.info/tx-index/7504034/438fbc2bd1435a460743290ab8265a2e9a84589d55a40cb3e0c8f0d29f17a1b1

http://blockchain.info/tree/7504034

http://blockchain.info/address/1HBrT9Yjb4THfw7sFvAHtcU5q3vJrJMabq

http://blockchain.info/tx-index/7428041/4def4f169ce16d730558b48ced612f478dc6c849a9c2b398b281170c5fbccf55



I have no idea, as I said, if this is relevant, makes any sense....or is old news already.
I just figured a post couldn't hurt.
bitlane.
Pages:
Jump to: