|
Investigations take time. I provided information to the FBI about some scammers. We are two years into it still. If they moved the coins to Binance, IPs will be tracked quite easily. Binance didn't even require a warrant to give info the FBI. All they required was official letterhead and an official fbi.gov email address. If they did ID the hackers, you think they're going to make those names public before they've been arrested by the proper authorities?
|
|
|
|
|
Have you tried reaching out to them via Twitter support? They are usually pretty helpful via Twitter.
|
|
|
|
|
Another option I don't ever see people mention... is to get a list of all your email addresses and usernames you've used and there are websites you can check if those emails/usernames were comprised in data leaks and then you can find passwords used with those old email/usernames by downloading those data leaks. I was able to recover some old non-bitcoin related accounts because I was able to search my email address against over a billion records and found passwords I completely forgot I used to use all the time back in 2005-2009.
|
|
|
|
|
Not sure how these court cases usually play out, but in theory a good lawyer is going to ask the government how they tracked these users down and unless it's a sealed case, those methods should be made public, no?
|
|
|
|
|
There's a "bug" with ERC-20 explorers where they don't log non-standard events. This means a token could have a total supply of 1 billion, but the creators can mint unlimited tokens using non-standard ERC-20 events and most Ether explorers won't pick this up (Etherscan being one). So if someone found a similar bug with Bitcoin, they could in theory mint tokens that don't show up in the total supply that explorers/users see. I don't know much about the 92M bitcoins created, so it may be unrelated to what I mentioned above.
|
|
|
|
It is one command on electrum. Anyway, you didn't answer my question. Yes, mixers is a good solution for the hacker, but can someone prove that he owns the addresses? It quite obvious because when the hacker tries to cashout to fiat. That's when problems come in. Remember, almost all big crypto to fiat exchanges require some sort of KYC. Most are centralized and can handover KYC details, email addresses plus IP logs to the authorities when they trace the transactions to the exchange's address. That's an answer. Thanks. I didn't know that police is searching for bitcoin scammers.
If you didn't know, then know it from today. Here is a perfect example of how the twitter scam hackers were arrested, they tried to cashed out their unmixed stolen bitcoins - https://www.digitaltrends.com/news/tampa-teen-twitter-bitcoin-scam-arrested/To add to this, Binance US doesn't even require a warrant to hand over user information to law enforcement. Below are their requirements. · information of the agent (If possible, full name, phone number, email address, etc.) investigating the incident reported; · the official seal of the law enforcement authority; · explicit requirements from Binance US, such as IP logs, identity documents, etc. |
|
|
|
|
Where should we pose questions about forum and auction etiquette?
Is it unreasonable to send a personal message to an auctioneer seeking an answer to a question about a possible payment method or item delivery?
Should this question be submitted in the auction's thread itself?
What if the goal of the question is to gain a competitive advantage over other users bidding on the auctioneer's item?
If the question is submitted via a personal message and the auctioneer agrees to the alternative payment method you proposed, does the auctioneer have an obligation to make that payment method known to all bidders?
|
|
|
|
I have a Ledger Nano S that I am not using anymore (because I have a Nano X) and I already made the deal with cabalism13 through PM’s. I making this post for reference as well that this transaction happened. I am just about to ship it tomorrow to him. Will update this soon.
Okay cool, thanks for the update. Didn't really wanna ship there myself, but was willing to if it helped this guy out. |
|
|
|
Also would you send it first then I'll send the payment once I receive it?
This is a huge red flag IMO..... I would only do this with escrow or if they pay first. Shipping to their location is sketchy to say the least..... then add the fact they are asking you to send first. I wouldn't waste my time or energy for the clusterf**k this will turn into. I don't mind sending the money first but only for a high trusted user. Won't risk my account for a mere ledger LoL. Built for almost 3yrs just to fckd up with a trade with only a value of less than $100 as it's original price. LoL. If only I really don't need it,... won't be offering like this in times of like this where my expenses are sht to be considered. I confirmed what I have is a Nano Ledger S. This was one of those free ones as you mentioned that I bought from RxAlts last year. With shipping though it may just be better for you to spend the $20 extra to have it shipped straight from ledger.com. It's going to come to like $60 USD with shipping from where I am, where as it would be $76 USD from Ledger.com. You would have to send first or we can use RxAlts as escrow if you don't want to trust me. I'm also skeptical of shipping to the Philippines, Ledger.com would be able to offer you better insurance in case of an issue with shipping... You may be able to email Ledger to ask for a discount code to save money directly from the site. 20% discount codes seem pretty common. |
|
|
|
|
I'd sell you a Ledger Nano S (I think that's what I have) for $40 + shipping to whereever you are from. I have a sealed one I got from rxalts about a year ago. I have to check what exact one it is later today.
|
|
|
|
Where did you get those leaked though? How much crypto do the accounts have for withdrawal?
(1) Obviously the trick here is that someone published these leaked accounts.
(2) Then some noobs think that they hit the jackpot and try to withdraw
(3) Then upon withdrawal, it will request for deposit
One of the oldest trick, but still noobs can fall for this.
Scammers know people scrape PasteBin for username/passwords. Usually it's just SSH "wallets" but this is the first time I've seen it link to a legitimate looking website that even includes an SSL cert. Someone actually wrote up a rather long Medium post about the SSH Wallet scam in April, although I initially reported about it on here back in January https://bitcointalk.org/index.php?topic=5222214.msg54327393#msg54327393https://medium.com/bugbountywriteup/ssh-bitcoin-wallet-demystifying-another-crypto-scam-afee7ad37f35 |
|
|
|
|
Are they licensed to use the Humvee trademark in this product?
|
|
|
|
But finding out an IP address itself is not made easier with the dust attack. And that's somewhat the statement from the article you have linked.
Sorry, but you are not quite correct. Let's say I have a bunch of spy-nodes observing the network. And I'm interested in knowing more about a particular address. First a transaction spends from that address, and with my spy nodes, I find it looks like IP address X originated the transaction. But there's a lot of noise and uncertainty to the point that the observation on its own is ~worthless. But lets say I now send dust to that address, and it again gets spent by what also looks like the IP address of X. Now I might have enough confidence to actually believe that X ip address originated the transaction. But is it practical considering many ISP gives dynamic IP by default and static IP usually costs more, which limit the attacker from finding IP to only to finding nationality of the owner of certain address? If it's the government (or someone working for the gov) tracking down the IP, they can just subpoena the ISP to get the psychical location that was assigned the IP at the time of the transaction.. |
|
|
|
I realize you can track addresses to IPs via running a node, I just wasn't sure how dusting would make it easier as the article claims.
It doesn't. Most articles you can find online about something crypto related are full of wrong information. I rarely see good articles without any major mistakes. However, depending on the wallet you are using, you might be linking your IP and your addresses together all the time. If you aren't using a full node or a privacy-orientated lightweight wallet (e.g. wasabi), you are most likely leaking information about you towards the server fetching all information from the blockchain. Interesting. I've really only used exchange wallets to send/receive, but have dabbled with Bitcoin Core a little bit. I guess my confusion came with not realizing the "dust" from multiple addresses in one wallet would all consolidate. I guess if you've linked an IP to 1 address and then do this dust attack and link new addresses to that original address then you link the IP to all addresses...which I guess makes it easier to trace IPs? |
|
|
|
Now, there is no link stored on the blockchain between bitcoin addresses or transactions and IP addresses, so I'm not entirely sure what the article is getting at when it talks about "tracing IP addresses".
The article links to this explanation of what it means. It's probably reasonably effective in the hands of a skilled attacker, when the sender uses the standard relay network in a normal fashion That explanation has nothing to do with dusting though? I realize you can track addresses to IPs via running a node, I just wasn't sure how dusting would make it easier as the article claims. |
|
|
|
|
Show Posts
