News for hackers. Stuff that matters.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by pshc on Tuesday February 08, 2022 @04:57PM (#30265361)
Yeah, a hardware wallet is good, although for a billion dollars, 100 hardware wallets would be better. Could even go so far as to split a private key into seven horcruxes using Shamir's Secret Sharing and bury them in locations around the world.

Memorizing a seed phrase leaves you vulnerable to a $5 wrench attack, I wouldn't recommend it.

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by GekkePrutser on Tuesday February 08, 2022 @05:09PM (#30265531)
> Memorizing a seed phrase leaves you vulnerable to a $5 wrench attack, I wouldn't recommend it.

Of course the problem is the attacker may not know what method you used and resort to the $5 wrench attack anyway :)

Not stealing $3.6B might be an even safer bet.

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by jerrre on Wednesday February 09, 2022 @05:00AM (#30270917)
still: physical threat + seed phrase cracked > physical threat
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by hnburnsy on Tuesday February 08, 2022 @05:27PM (#30265739)
The famous Bitcoin family reportedly spread their hardware wallets across the globe.

https://www.cnbc.com/2021/08/11/bitcoin-family-hides-bitcoin...

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by pshc on Tuesday February 08, 2022 @05:43PM (#30265909)
Wow.

> Taihuttu has two hiding spots in Europe, another two in Asia, one in South America, and a sixth in Australia.

> We aren’t talking buried treasure – none of the sites are below ground or on a remote island – but the family told CNBC the crypto stashes are hidden in different ways and in a variety of locations, ranging from rental apartments and friends’ homes to self-storage sites.

I hope this is all a decoy or else it’s the worst opsec I’ve seen since about five hours ago.

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by dboat on Tuesday February 08, 2022 @06:52PM (#30266580)
I would not want to be a friend to the sort of idiots who would say stuff like this. Having a target painted on my back as a decoy somehow makes it even worse.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by rlt on Tuesday February 08, 2022 @05:43PM (#30265904)
The article suggests each location contains 100% of the key, not using Shamir’s Secret Sharing.

> Taihuttu is trying to put a crypto cold wallet on every continent so it’s easier to access his holdings.

I hope it’s at least encrypted with an additional passphrase, otherwise it’s only as strong as the weakest bank’s security.

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by mbesto on Tuesday February 08, 2022 @06:01PM (#30266107)
Or the Winklevoss twins who store their codes in separate banks across the country.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by netheril96 on Tuesday February 08, 2022 @10:30PM (#30268411)
You don’t need splitting the private key. Bitcoin has multisig setup. For example, you can setup your wallet such that 6 out of 10 private keys need to sign in order to transfer funds. Spread that 10 private keys out. Or 3 out of 10. Or 2 out of 5. Any n out of m.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by pshc on Tuesday February 08, 2022 @11:01PM (#30268645)
You're right, gathering multisigs would be much safer than gathering SSS shares because you wouldn't be carrying around bits of the private key.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by sratner on Wednesday February 09, 2022 @01:19AM (#30269567)
Any single SSS share does not disclose any additional information about the private key (i.e. it is not like splitting the key itself into parts).
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by MayeulC on Wednesday February 09, 2022 @04:23AM (#30270686)
And SSS also allows n out of m.
Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by weq on Tuesday February 08, 2022 @06:58PM (#30266608)
Reminds me of the man who was sent to jail for refusing to reveal his keys. think this happens alot.

https://arstechnica.com/tech-policy/2020/02/man-who-refused-...

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by mekster on Wednesday February 09, 2022 @01:07AM (#30269491)
For the attacker, the problem isn't about protecting the crypto but to launder.

If gov got to you, it probably doesn't matter how well you got it protected.

Re:Feds arrest couple, seize $3.6B in hacked Bitcoin funds by croon on Wednesday February 09, 2022 @06:52AM (#30271596)
You're still memorizing the seven locations around the world. It's the same thing with extra steps.