[joe is dead] http://findmeifyoucan.eu

[joe23]

Hey fellow bitcoiners,

I am really a registered user in this forum since at least summer 2012. I set up this secondary, hopefully anonymous identity to give away some free bitcoins by ways of a challenge:

challenge:

I hereby challenge you to find the real me!

I set up a site on the net: http://findmeifyoucan.eu

I hereby promise to pay BTC 14 to anyone who provides one of the following pieces of information identifying the operator of findmeifyoucan.eu or (which is the same) the author of this post:

• forum account id of 'real me'
• my real name and (address or phone number or date of birth)
• any IP-address that could be traced to my real identity by authorities

rules:

• Rules are t14 BTC bountyo be interpreted by me, in case of dispute, I am right, you are wrong
• you must post here one of the above infos and a bitcoin address to which the bounty should be sent
• you must provide a credible story of how you obtained the info
• a 'hunch' is not enough, no guessing
• I can change these rules at any time and will do so in OP (Original Post, the one you're reading)
• the state of the OP at the time of claim is decisive for the rules, so please quote OP when claiming bounty

   
notes:
 

• I'll give away small amounts of bitcoin to people pointing out flaws/mistakes/possible improvements regarding my anonymity
• speculation in this thread is encouraged

additional info leaked:
 

• theymous publishes the IP I use to access bitcointalk: 188.165.73.235
• theymos publishes PM in which I ask MysteryMiner wether he was one of the german guys wearing masks at the Conference in London.
• it is discovered that joe uses lastpass
• "real me"s timezone has leaked: "it indicates timezone somewhere near UTC."

rewards payed for valuable feedback to:

• MysteryMiner
• Jasinlee
• Openyoureyes

feel free to ask any questions... I might be happy to answer... or not.

joe is dead, see this post by real me: https://bitcointalk.org/index.php?topic=120918.msg1304572#msg1304572

[joe23]

screenshot of my electrum wallet:

https://i.imgur.com/dsq3s.png

[Blazr]

Matthew?

[joe23]

Matthew?

no guessing, but made me LOL

[Phinnaeus Gage]

Matthew?

no guessing, but made me LOL

Scammer tags have been dole out for less. Do you realized that with your answer you've broken two rules in the OP?

speculation in this thread is encouraged

feel free to ask any questions... I might be happy to answer... or not.

Blazr asked a question in the form of a speculation. The correct answer would have been with a 'no', but you went with the 'no guessing' which translates to 'no speculation'.

Hey fellow bitcoiners,

I am really a registered user in this forum since at least summer 2012. I set up this secondary, hopefully anonymous identity to give away some free bitcoins by ways of a challenge:

challenge:

I hereby challenge you to find the real me!

I set up a site on the net: http://findmeifyoucan.eu

I hereby promise to pay BTC 5 to anyone who provides one of the following pieces of information identifying the operator of findmeifyoucan.eu or (which is the same) the author of this post:

• forum account id of 'real me'
• my real name and (address or phone number or date of birth)
• any IP-address that could be traced to my real identity by authorities

rules:

• Rules are to be interpreted by me, in case of dispute, I am right, you are wrong
• you must post here one of the above infos and a bitcoin address to which the bounty should be sent
• you must provide a credible story of how you obtained the info
• a 'hunch' is not enough, no guessing
• I can change these rules at any time and will do so in OP (Original Post, the one you're reading)
• the state of the OP at the time of claim is decisive for the rules, so please quote OP when claiming bounty

   
notes:
 

• I'll give away small amounts of bitcoin to people pointing out flaws/mistakes/possible improvements regarding my anonymity
• speculation in this thread is encouraged

feel free to ask any questions... I might be happy to answer... or not.

[Phinnaeus Gage]

I have reread your rules, and...

Okay. I figured out which user you are--someone703.

1EWRJ5BeibZxMguujPLzqM8WWiHpFJtLLx

since at least summer 2012 = January, 2012

You both use tormail.net

You both use https://i.imgur.com to post images.

[MysteryMiner]

The operators of Silk Road can find at least your SR username given time and amount of deposit. If it is a SR deposit address at all

All other steps seems to be secure if Tor was used all the time. Weakest link might be a VPS if you are using it for VPN.

Have not tried to follow coins in both directions with blockexplorer to see if they are linked with some known addresses here on forum. I'm too lazy to type the address from image lol I save this for some more BTC desperate members.

[joe23]

thanks for all your replies, I have not been identified yet.

The operators of Silk Road can find at least your SR username given time and amount of deposit. If it is a SR deposit address at all

true. BTC

All other steps seems to be secure if Tor was used all the time. Weakest link might be a VPS if you are using it for VPN.

thanks for checking man, this is reassuring so far.

Have not tried to follow coins in both directions with blockexplorer to see if they are linked with some known addresses here on forum. I'm too lazy to type the address from image lol I save this for some more BTC desperate members.

you wouldn't have found anything about the "initial funding transaction", I think. I "cleaned" the funds using silkraod, that 10 BTC "initial load" is a silkroad withdrawl.

[psilan]

AndrewBUD.

I analyse your England. Derp.

BTC goes here 1H8uBfk6bw8kj3CWurjct5KHKe6NY3HAp4
Thanks.

[joe23]

Blazr asked a question in the form of a speculation. The correct answer would have been with a 'no', but you went with the 'no guessing' which translates to 'no speculation'.

he can speculate all he wants, but will not get an answer to a guess.

I didn't break my rules and even if I had: I'd just change them .

This is for fun (although I most definitel will pay the bounty when I get identified according to the rules)

I'm also not opposed to escrow.

[joe23]

All other steps seems to be secure if Tor was used all the time. Weakest link might be a VPS if you are using it for VPN.

Yes, I'm using the VPS that hosts the page as a proxy (through tor) to access bitcointalk because bitcointalk disallows tor ips.

Is that best practice?

[MysteryMiner]

The problem of staying hidden is not in the short term. In long run you get comfortable, relax on security, reuse the same address or e-mail or whatever and you have instantly linked yourself to some other person You.

Such periodic checks are great idea if your security is at stake. Better lose some bitchiness than lose anonymity and freedom.

Yes, I'm using the VPS that hosts the page as a proxy (through tor) to access bitcointalk because bitcointalk disallows tor ips.

Is that best practice?

Chaining Socks proxy at the end of Tor? Yes it is how it's done!

[Blazr]

I'm using the VPS that hosts the page as a proxy (through tor) to access bitcointalk because bitcointalk disallows tor ips.

Darn! I was just about to send you a PM with a transparent gif image in it to record your IP, in the off-chance you were browsing the forums without TOR or a proxy.

[joe23]

I'm using the VPS that hosts the page as a proxy (through tor) to access bitcointalk because bitcointalk disallows tor ips.

Darn! I was just about to send you a PM with a transparent gif image in it to record your IP, in the off-chance you were browsing the forums without TOR or a proxy.

Oh well, back to checking for SSH vulnerabilities.

I'm thinking about giving you guys access to the server in the end (maybe I will lower the bounty then) to simulate "officials" gaining access to the machine.

[MysteryMiner]

Oh well, back to checking for SSH vulnerabilities.

Girls can't do that! Go back to kitchen and make me a hot meal!

I'm thinking about giving you guys access to the server in the end (maybe I will lower the bounty then) to simulate "officials" gaining access to the machine.

For LEA it will take at least few days to do this "officially" if both the source of offending IP address (Bitcointalk) and VPS are in the same country. More if some parts of chain is located overseas. So at least don't give access right now to keep this interesting.

[joe23]

UPDATE: someone manages to bribe theymos to give out the IP used to access bitcointalk as joe23: it's consistently 188.165.73.235

[jasinlee]

Just checked he cleared metadata on the pic if anyone was planning to look. I think maybe tradefortress.

[joe23]

just loaded more funds to joes wallet

https://i.imgur.com/iptLL.png

will increase bounty soon

[joe23]

Oh well, back to checking for SSH vulnerabilities.

Girls can't do that! Go back to kitchen and make me a hot meal!

I'm thinking about giving you guys access to the server in the end (maybe I will lower the bounty then) to simulate "officials" gaining access to the machine.

For LEA it will take at least few days to do this "officially" if both the source of offending IP address (Bitcointalk) and VPS are in the same country. More if some parts of chain is located overseas. So at least don't give access right now to keep this interesting.

ok, I will keep it realistic and wait for a couple of days.

[joe23]

Just checked he cleared metadata on the pic if anyone was planning to look. I think maybe tradefortress.

wow. good idea. Didn't think of that. Got lucky my screenshot-tool (scrot) seems to not leak any info OR maybe imgur trims it. Will check that out.

Extremely good point, tough, jasinlee. I will award a 0.05 BTC special bonus for that, give me an address and I will send.