Pages:
Author

Topic: Theft from Paper Wallet - FLHippy Notes compromised (Read 2787 times)

legendary
Activity: 896
Merit: 1000
In this instance though the blame does lie with flhippy. He stole the funds or he got hacked either way his fault.
Exactly. He is a scammer. There is no other reasonable explanation.
legendary
Activity: 3640
Merit: 1571
In this instance though the blame does lie with flhippy. He stole the funds or he got hacked either way his fault.
legendary
Activity: 3640
Merit: 1571
BTW, one [serious] question: Why do you guys say you only suspect he is a scammer? It seems pretty open and shut to me.

This is an interesting question. How do you prove someone owns an address? Unless the individual opts to sign a message with his private key or publically declares ownership "guilt by association" is the best you can do I think.

legendary
Activity: 896
Merit: 1000
Well there is no guarantee that someone knowledgeable will see every thread out there. Even the mods put up notices that they don't delete threads with suspected scams.
I think there is a pretty good bet there is at least 1 ; ) And you don't have to call someone an outright scammer to warn buyers. But you should inform them of the potential for being scammed. More knowledge for the "do-good bitcoiner" is never a bad thing.

BTW, one [serious] question: Why do you guys say you only suspect he is a scammer? It seems pretty open and shut to me.
hero member
Activity: 898
Merit: 1000
If you are fairly sure that this guy is a scammer, you should try to track him down and threaten to take him to court. I don't know what country you're from, but after the judge's ruling in the Trendon Shavers case, it seems that you could stand a reasonable chance?
legendary
Activity: 3640
Merit: 1571
OMG.

Serious palm-face. Can't believe people bought these.

So sad Sad

I am not surprised. Two posts:

And another question...wouldn't it make sense to keep your private key separate from the BTC address that it is associated with?    If someone found both, they could drain your account but if all they have is the Private Key, it doesn't seem like they could do anything with it.

Then there is this thread where someone sells a domain + $30 wordpress theme for over $100:

https://bitcointalksearch.org/topic/wts-bitcoin-web-hosting-site-for-auction-232317

I am the only one in that thread to notice that it is not a custom theme but a mass market one. And yet despite my posting that someone actually bought it!
legendary
Activity: 1795
Merit: 1208
This is not OK.
Funny that on the original thread (here: https://bitcointalksearch.org/topic/for-sale-beautiful-paper-bitcoins-unfunded-custom-printing-any-amount-120221) not a SINGLE person brought up the notion that the OP could VERY easily have sent out bills w/keypairs generated on bitaddress or something, kept records of them, periodically checked them on blockchain, and then when he saw a balance CHA CHING. The notion that the OP was last active 12/12 is probably something to consider, too.

The verdict: SCAMMER TAG and also common sense - you and only you (unless you are gifting a bill/coin) should EVER see the private keys.

OMG.

Serious palm-face. Can't believe people bought these.

So sad Sad
hero member
Activity: 910
Merit: 1005

No transactions from these addresses appear to have been made from blockchain.info and they are not affected by the recent rng problem.

Unfortunately it looks like the person who generated the paper wallet may have retain a copy of the private keys and waited for you to fund the addresses.
legendary
Activity: 3640
Merit: 1571
Well there is no guarantee that someone knowledgeable will see every thread out there. Even the mods put up notices that they don't delete threads with suspected scams.
legendary
Activity: 896
Merit: 1000
Funny that on the original thread (here: https://bitcointalksearch.org/topic/for-sale-beautiful-paper-bitcoins-unfunded-custom-printing-any-amount-120221) not a SINGLE person brought up the notion that the OP could VERY easily have sent out bills w/keypairs generated on bitaddress or something, kept records of them, periodically checked them on blockchain, and then when he saw a balance CHA CHING.

Because people don't know the basics of what they are dealing with. They don't the importance of keeping the private key safe. They have no idea that once the private key is out it doesn't matter if your blockchain.info wallet is protected or not your funds will get stolen. Take this quote for example:

Worst case, I thought, facing a "race' with someone who had live access to my wallet, or communications.

OK, but its all about 1 person. AT LEAST one early, bitcoin-savy person must have seen that posting, I think its safe to say. Yet no one warned "customers" about any risks (which said "bitcoin pioneers" certainly knew about). Maybe I'm just too bitcoin-altruistic lol, I would have done it.
legendary
Activity: 3640
Merit: 1571
Funny that on the original thread (here: https://bitcointalksearch.org/topic/for-sale-beautiful-paper-bitcoins-unfunded-custom-printing-any-amount-120221) not a SINGLE person brought up the notion that the OP could VERY easily have sent out bills w/keypairs generated on bitaddress or something, kept records of them, periodically checked them on blockchain, and then when he saw a balance CHA CHING.

Because people don't know the basics of what they are dealing with. They don't the importance of keeping the private key safe. They have no idea that once the private key is out it doesn't matter if your blockchain.info wallet is protected or not your funds will get stolen. Take this quote for example:

Worst case, I thought, facing a "race' with someone who had live access to my wallet, or communications.
legendary
Activity: 3640
Merit: 1571
There is another possibility. This shows transfers *from* flhippy's own address to the scammers address:

https://blockchain.info/address/12nYheijKSLStynPSoNvnTMF8V5y9essVL

So maybe what happened was that flhippy's computer got hacked and the scammer got all the private keys and cleaned them out.
legendary
Activity: 1274
Merit: 1004
Sorry for your loss man, contact bitmit, they might have his address, get it and file a complaint against him.
Ps: His pics http://www.flickr.com/photos/flhippy/
legendary
Activity: 896
Merit: 1000
Funny that on the original thread (here: https://bitcointalksearch.org/topic/for-sale-beautiful-paper-bitcoins-unfunded-custom-printing-any-amount-120221) not a SINGLE person brought up the notion that the OP could VERY easily have sent out bills w/keypairs generated on bitaddress or something, kept records of them, periodically checked them on blockchain, and then when he saw a balance CHA CHING. The notion that the OP was last active 12/12 is probably something to consider, too.

The verdict: SCAMMER TAG and also common sense - you and only you (unless you are gifting a bill/coin) should EVER see the private keys.
hero member
Activity: 898
Merit: 1000
That was my worry on this one - A paper wallet is only as trustworthy as the person who created it. So if you want to trust it completely, you have to make it yourself...
legendary
Activity: 3640
Merit: 1571
Normally when you buy paper wallets they don't come with private keys already printed on them. That is something you do on your own. Because otherwise how can you trust the security of that wallet? The person selling it to you could have kept a copy of the private key to spend your coins at any moment he chooses.

member
Activity: 67
Merit: 10
Not just that but this address is also receiving money from 1FLH1pPyN5nNxhJUafyd2cUkBwbAaZUNQP directly.
sr. member
Activity: 366
Merit: 258
How about a new theory?

FLHippy did it. https://blockchain.info/address/12nYheijKSLStynPSoNvnTMF8V5y9essVL

See any pattern to the keys originating transactions?

I'm with you on this one. 
newbie
Activity: 16
Merit: 0
How about a new theory?

FLHippy did it. https://blockchain.info/address/12nYheijKSLStynPSoNvnTMF8V5y9essVL

See any pattern to the keys originating transactions?
legendary
Activity: 3640
Merit: 1571
If you imported the paper wallet key into blockchain.info and then used it to send coins you could have been affected by the bad rng problem.

Never import a private key into your main wallet.

Import it into a new wallet, spend all the coins and never use the wallet or that private key's bitcoin address again

Crap. At the time, I though this was the most secure way to do it. Worst case, I thought, facing a "race' with someone who had live access to my wallet, or communications. I never imagined I could have exposed the forward addresses key.

You may want to read this article I wrote. It covers some the basic concepts of bitcoin:

http://bitcoinspakistan.com/blog/private-key-public-key-bitcoin-address-and-the-blockchain/

A private key is basically a number and a wallet is just a collection of private keys. Once you have a private key you can spend the coins using any number of ways. You don't need access to blockchain.info.
Pages:
Jump to: