Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I just ploughed through the thread on the bitcointalk forum. (disclaimer: a lot of the following summary is based on hearsay and lacks evidence)

Some kid hacked the satoshin@gmx.net mailbox, by guessing the birthdate forgot-password check on gmx.net (yes, it sounds kind of unbelievable to me as well).

He probably used this email to gain access to the SourceForge account, and wrote some juvenile texts about "buttcoin" (everything seems to have been reverted now, see https://news.ycombinator.com/item?id=8293062 ).

He also used the mailbox to gain access to Satoshi's account on p2pfoundation.ning.com, which is the same place where the "Dorian is not Satoshi" message was posted a while back when some news media thought they found SN. Then he used this account to try and pull off a "give me 25BTC or I'll release SN's dox" scam. Nobody in the bitcointalk thread seems to believe the kid actually has SN's dox, because Satoshi was clever enough not to leave personal info in that mailbox.

The kid also used the email to try and threaten the bitcointalk forum admin ("send me some coins before I hitman you" ...). The forum admin seems fine to just let it be, because no real damage has been done, it was just a kid and by now the kid and his family have been doxed, who's probably scared shitless right now realizing what sort of serious business he's been messing with.

Adrian Chen tried to mail satoshin@gmx.net with some questions, and in response got a screenshot of the mailbox, "proving" it was indeed under someone else's control: https://twitter.com/AdrianChen/status/509162847130370048/pho... . There's a second screenshot of some invoice of someone ordering a bitcoin-mining device, with the address info photoshopped out--which was done badly because someone on Reddit quickly revealed part of the name and address. But that order seems partially fake, just some guy that thought it was funny to enter Satoshi's email when ordering the device.

It's assumed the kid no longer has access to the satoshin@gmx.net mailbox. Again I didn't see these claims substantiated either.

All in all, someone smarter could have done a LOT more damage with this hack. But whoever did this really screwed it up. There might be some unintended clues about Satoshi's identity in that mailbox, but it seems like whoever got access isn't clever enough to string all that together (tying it with the research done into his identity so far). So unless the whole mailbox gets dumped somewhere, that's it, case closed?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: