News for hackers. Stuff that matters.

fadys

No. (I know).
I have the transfer-to addresses. The thief has done this multiple times...for 7.5 BTC too, in one instance. He's not lying and has never been known to lie.

I'm sure in the same way you can be sure that if you were tasked with doing the same thing, you'll feel 100% confident that no one would be able to access that paper. And even if they did, they wouldn't know what they were looking at.

Your first point is spot-on.

But about the rest...the Ledger's wallet's seed words were on paper, never seen by a computer after it was generated.

His Trust Wallet, however, did have his seed words on his phone. But again, it has a 6-digit passcode.

It's a wallet on his phone and a hardware wallet. Both were wiped clean at about the same time.
Can you imagine a scenario where you secretly write some words down on paper, three years ago, near no devices, and you store it somewhere where you absolutely know for sure no one will ever access? I can imagine such a scenario for myself.

That's what he did.

Then we have the whole Trust Wallet compromise on his iPhone.

He wrote the words on paper, away from any other devices, years ago.

The Ledger came from Ledger (the company) sealed in its packaging.

It's literally no one close to him. Please take that as a fact. The paper with the seed words was written a few years ago. It has been hidden since.

I'm willing to bet we'll be hearing about more people getting their wallets wiped clean.

That's partly why I'm posting this here. There must be something else going on. The paper with the seed words WAS NOT accessed.
The photo for his Trust Wallet? Maybe.

But that doesn't explain his Ledger wallet! I'll keep saying it...those seed words were on paper, hidden from all sight, without anyone knowing they exist...for years.

Then, on February 24th, both wallets get cleaned out at around the same time. Why sit on the seed words for years?

I cannot stress this enough. The seed words on paper were never exposed.

iCloud could explain his Trust Wallet, but not his Ledger wallet (with the seed words on paper, hidden and literally not seeing the light of day for years).

I want to make it clear that the Ledger passphrase, on paper, and hidden, was not ever accessed. And, even if it was, which it wasn't, his Trust Wallet on his iPhone was also compromised.

How can someone guess both passphrases, from separate wallets, in separate locations with different words? It's literally impossible.

Whatever technology is used to generate the passphrases in each of those wallets must be compromised.

Nothing else can explain it.

Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

I'm really devastated. My nephew just called me and told me all his cryptocurrency is gone -- valued over $40,000. He has spent years earning it and resisting pulling it out, hoping he could eventually use it to pay for his college education.Here are the facts:- He has a Ledger Nano S wallet.- That wallet had 4.77 LTC, 4.48 ETH, and 0.73 BTC.- The Ledger generated a passphrase containing 24...

( Read More... | 62 comments | 28 points | on HN )
Re:Ask HN: What was your best passive income in 2018? on Sunday November 18, 2018 @11:45AM (#18481208)
As you noted, you would still miss many recommendations without an Amazon link.

But even so, that would kind of defeat the purpose; I don't just want to aggregate recommendations. I want to include, more so, the ones that are interesting than frequent.

Additionally, besides books, I'll be posting other types of recommendations (travel, hardware, etc.).

Re:Ask HN: What was your best passive income in 2018? on Sunday November 18, 2018 @11:40AM (#18481170)
Yeah, AdBlock disables the OneLink functionality.
Re:Ask HN: What was your best passive income in 2018? on Sunday November 18, 2018 @09:17AM (#18480463)
I do it all manually, but I use the API to get the actual comment text. I have been collecting recommendations for years. This is my way of organizing and sharing them.

Amazon has a service called OneLink that supposedly routes users to the Amazon store that's closest to their country (presumably, from their IP address). I'm using it (a simple script tag) but I don't know how reliable it is.

Re:Ask HN: What was your best passive income in 2018? on Sunday November 18, 2018 @08:21AM (#18480236)
I built https://hnrecommends.com a little while ago. It's the start of a curated list of Hacker News recommendations. I'm adding recommendations and products daily.

It's made a few dollars from affiliate links so far.

Over the years, I collected recommendations from various Hacker News users. It's common to see a book, for example, getting recommended again and again and when I noticed a product or service consistently mentioned I would take note. At times, even a single recommendation was strong enough to get me to bookmark it. HN Recommends is my attempt at sharing all the gems I have gathered from the Hacker New community.

More recommendations will be posted soon.

Read Molecular Biology of the Cell. It's an indispensable book for anyone studying or interested in cell biology and molecular genetics. It has been described as “the most influential cell biology textbook of its time.”

https://brucealberts.ucsf.edu/current-projects/molecular-bio...

https://www.amazon.com/Molecular-Biology-Sixth-Bruce-Alberts...

Can you point to some computational biology papers from the cancer field that you're reproducing? I'd love to give it a go myself. If you don't mind, can you also contact me (email is in my profile)? Maybe we can collaborate.
lucyleaf.com

It's a subscription loose-leaf tea service. We source organic, premium teas from suppliers throughout the world.

Here are two coupon codes for HN readers:

Monthly subscription - $5 off: HN5OFF31016

Yearly subscription - $50 off: HN50OFF31016

Ask HN: Possible to Tour Google or Facebook Today?

I'll be in the San Jose area today with my brother and my 8-year-old nephew. If anyone from HN can get us a tour at Google or Facebook please reach out to me. My email is in my profile. We'll be available from 11:30 AM to 1:30 PM and 2:30 to about 5:00. Thank you.

( Read More... | no comments | on HN )
If you're anything like me, you're on here all day, feverishly reading everything that's posted.

A lot of the content is good, but some of it is a waste of time. We hope to make you more productive by sifting through it and only sending you what we feel is the cream of the crop.

Re:Who is living off their (bootstrapped) startup fulltime? on Thursday April 26, 2012 @11:28AM (#3894358)
I launched http://teapeat.com about 6 months ago.

Income from delivering monthly tea is slowly climbing every month.

Re:Stripe Gallery on Wednesday April 18, 2012 @04:31PM (#3860030)
Glad to see our site made it (http://teapeat.com).

We honestly could not have launched so soon without Stripe. We spent over a month haggling with Authorize.net and immediately jumped ship to Stripe as soon as it was available.

It makes accepting payments (and subscriptions!) so easy.

Re:Shipping $36000 worth of Japanese candy on Saturday January 14, 2012 @07:14PM (#3465791)
Thanks. I will definitely do that. I actually thought about selling tea "equipment" through the site but for it to be economical I would have to buy a decent quantity. Using an affiliate program may indeed be the better option at this point.
Re:Shipping $36000 worth of Japanese candy on Saturday January 14, 2012 @05:47PM (#3465553)
This can definitely work with other Japanese goods. I tried a similar service (after seeing Bemmu's early success) with tea (http://teapeat.com).

With only posting to HN, I had a decent amount of sign ups.

Re:Shipping $36000 worth of Japanese candy on Saturday January 14, 2012 @05:45PM (#3465541)
I launched http://teapeat.com a little over a month ago. I like to call it TAAS: Tea as a Service.

I've had a decent amount of signups since then, but it has leveled off. I hope to share what I've learned so far very soon.

Older »