Can AI Profile Our Personalities to Guess Passwords? The @cprkrn 5 BTC Recovery

[Dictator69]

I was reading the news about @cprkrn, a user on X who reported that he successfully recovered his lost 5 BTC from 2013 using Claude AI. He had the mnemonics and the wallet ID, but he did not had the password. He also did not have the mnemonics and found it few weeks before the breakthrough, but he found them. But he was still lacking the password. He was using the btcrecover tool to brute force the password, and according to his X post, he tried more than 10 trillion patterns.

Anyway, a few days before using Claude, he checked all his notes and old college data, and it had emails, notes, everything in it. The data was about 1 GB, and he fed all of it to Claude AI. The AI tool found patterns by analyzing his 11 year old writing style and personal notes. It identified some words like "lol420' and "police". Then these words were used by the btcrecover tool to guess the exact password, and it was found. The correct password was "lol420fuckthePOLICE!:)". Interestingly, Claude also found a bug in the btcrecover code that was causing the tool to fail even with the right password, and it fixed the script for him but that's another thing because we know how AI could find logical errors in the code. My concern is following:

I don't know how Claude could find such accurate words, but if it is real, then we are so exposed in this AI era. Because we are leaving our digital footprints open for hackers. What if AI can sense our personality to guess passwords? Like I am talking a lot on Bitcointalk, my pattern of words is exposed because every single word I have spoken is in my mind. It is like a set of vocabulary that I have in mind, and obviously, I would create a password from my own memory.

What if human made passwords based on memories are no longer secure due to AI? Can these AI tools profile us? Can they find words that we could have used to secure our wallets?

I suggest we should never give our personal information to AI. Just to point out, these days the security system is different than the one in question. We don't need passwords at all, we need seed phrases alone. But passwords are important and someone could have access to our devices and they could access our wallets like this if they have a history of our notes, emails, our discussions and logs etc. It could work for them even if they failed to access the recovery phrase from those notes because it was not written there.

[lonelyobserver0]

I think this is the reason for holding on to privacy, which many think no longer exists, but we are still the ones who decide what personal information we share. However, the best passwords are always those automatically generated as random alphanumeric strings, as a password manager system like bitwarden or even just firefox can do

[coinlary]

Can they find words that we could have used to secure our wallets?

Yes, if you store them on the same device hosting them. That’s why any sensitive data stored on an internet  connected device is never fully safe even when encrypted with weak password , especially those running all sorts of AI models.

BTW , passwords shouldn’t be based on things you use or interact with every day. It can be used as an addition, but using only normal words with no extra combinations makes it weak and easier to guess. With stronger combinations, it becomes much harder to guess correctly because an attacker would need to try every possible combination, which can take a very long time.

Also, it doesn’t just guess by itself. It usually relies on toolsand methods, either you ask it to creat one, use existing ones  that people already  built or configured, make a custom one all by yourself e.t.c.

[snowpega]

...
I don't know how Claude could find such accurate words, but if it is real, then we are so exposed in this AI era. Because we are leaving our digital footprints open for hackers. What if AI can sense our personality to guess passwords? Like I am talking a lot on Bitcointalk, my pattern of words is exposed because every single word I have spoken is in my mind. It is like a set of vocabulary that I have in mind, and obviously, I would create a password from my own memory.
...

Hmm, your concern is valid, as a few days ago I was also using AI, and I was surprised when he told me everything about my past and future plans. AI told me everything exactly correct, and literally most of the information he told me I have never shared with it. So, for just this, you can have an idea that in the era of AI how much insecure we are. What I understand after knowing all that is AI scans our devices all the time and keeps updating its database with our actions and doing and making itself more intelligent.

Then I decided to limit its access for my mobile phone so that it can not be able to collect further data from my mobile phone, anything so personal about me. We have to pay our best attention in making secure ourselves from AI. No doubt it has many pros, but now I suspect its cons are overcoming its pros, and in the coming time, it can be a headache for us in many ways. So, we need to be attentive regarding this matter before it's too late. What do you think about it?

[lovesmayfamilis]

...
I don't know how Claude could find such accurate words, but if it is real, then we are so exposed in this AI era. Because we are leaving our digital footprints open for hackers. What if AI can sense our personality to guess passwords? Like I am talking a lot on Bitcointalk, my pattern of words is exposed because every single word I have spoken is in my mind. It is like a set of vocabulary that I have in mind, and obviously, I would create a password from my own memory.
...

Hmm, your concern is valid, as a few days ago I was also using AI, and I was surprised when he told me everything about my past and future plans. AI told me everything exactly correct, and literally most of the information he told me I have never shared with it. So, for just this, you can have an idea that in the era of AI how much insecure we are. What I understand after knowing all that is AI scans our devices all the time and keeps updating its database with our actions and doing and making itself more intelligent.

Then I decided to limit its access for my mobile phone so that it can not be able to collect further data from my mobile phone, anything so personal about me. We have to pay our best attention in making secure ourselves from AI. No doubt it has many pros, but now I suspect its cons are overcoming its pros, and in the coming time, it can be a headache for us in many ways. So, we need to be attentive regarding this matter before it's too late. What do you think about it?

Does this mean it's time for us to start fooling AI by deliberately creating a fake story about our lives? I'm somewhat surprised that AI knows more about you than you do, although I can imagine how much information all these trackers collect about us, because we sometimes use our gadgets to correspond on any topics that can also be tracked. Today's Internet requires people to have a "split personality" so that we are alone offline and completely different for all AI watching us online.🫣🤐

[Hypnotizer]

That’s why people should be careful about their digital footprint in the era of rapid AI advancement because if you’re not privacy minded your information and security is very vulnerable.

This means that those people “documenting” their entire life on social media posting every single move of them on the internet might actually be target for this password guess using AI to analyze patterns.

Does this mean it's time for us to start fooling AI by deliberately creating a fake story about our lives? I'm somewhat surprised that AI knows more about you than you do, although I can imagine how much information all these trackers collect about us, because we sometimes use our gadgets to correspond on any topics that can also be tracked. Today's Internet requires people to have a "split personality" so that we are alone offline and completely different for all AI watching us online.🫣🤐

That’s what a normal sensible person would do…why would you give AI access to such amount of information about your personal life? Sometimes you should use AI you haven’t actually signed with for some question.

Your life on the Digital space or internet should be very different from that which you live in real life, because most of these apps we used are probably under surveillance.

[pawanjain]

I suggest we should never give our personal information to AI. Just to point out, these days the security system is different than the one in question. We don't need passwords at all, we need seed phrases alone. But passwords are important and someone could have access to our devices and they could access our wallets like this if they have a history of our notes, emails, our discussions and logs etc. It could work for them even if they failed to access the recovery phrase from those notes because it was not written there.

Yeah that does make sense. First of all, we shouldn't be using common passwords that we regularly use to convey something anywhere.
That is an immediate threat to our security. Secondly, we should never ever give out those words to AI because yes, AI does store our data.
I don't really trust AI when it comes to data because I think, AI can leak our data at any point of time to anybody.
So it's better to use unique random words for passwords to be on the safer side.

[Ambatman]

Wow so AI accessed by the public has grown this far
I was of the belief that it was more like a PR for Claude AI
And to encourage people to share their data with the AI since it can supposedly
Solve problems they can't.

Another risk is identity theft. I have seen people that place their pictures in AI
Sadly even if you don't another would.

[Patikno]

I suggest we should never give our personal information to AI. Just to point out, these days the security system is different than the one in question. We don't need passwords at all, we need seed phrases alone. But passwords are important and someone could have access to our devices and they could access our wallets like this if they have a history of our notes, emails, our discussions and logs etc. It could work for them even if they failed to access the recovery phrase from those notes because it was not written there.

AI is becoming increasingly sophisticated, and it will likely become even more so in the next few years as training improves. I believe we should protect our privacy from now on, by keeping our personal data strictly confidential, as I have often said. I also recommend not inputting our personal data or information to AI (as the OP also suggested). AI can be a useful tool to help us, but, it could pose a real threat in the future.

I once watched a movie called Eagle Eye (about AI, released in 2008), and I thought it was impossible to realize. However, as time goes by, the film seems to be becoming more and more relevant to current technological developments, especially regarding the current existence of AI. Furthermore, I think the documentary about Edward Snowden is also very relevant to what is happening right now. I fear, that all sorts of undesirable things could happen to us someday. Therefore, I hope you will protect your privacy, and personal data with great care.

[Cryptomultiplier]

I suggest we should never give our personal information to AI. Just to point out, these days the security system is different than the one in question. We don't need passwords at all, we need seed phrases alone. But passwords are important and someone could have access to our devices and they could access our wallets like this if they have a history of our notes, emails, our discussions and logs etc. It could work for them even if they failed to access the recovery phrase from those notes because it was not written there.

AI is becoming increasingly sophisticated, and it will likely become even more so in the next few years as training improves. I believe we should protect our privacy from now on, by keeping our personal data strictly confidential, as I have often said. I also recommend not inputting our personal data or information to AI (as the OP also suggested). AI can be a useful tool to help us, but, it could pose a real threat in the future.

I once watched a movie called Eagle Eye (about AI, released in 2008), and I thought it was impossible to realize. However, as time goes by, the film seems to be becoming more and more relevant to current technological developments, especially regarding the current existence of AI. Furthermore, I think the documentary about Edward Snowden is also very relevant to what is happening right now. I fear, that all sorts of undesirable things could happen to us someday. Therefore, I hope you will protect your privacy, and personal data with great care.

What even scares me more is the development and use of quantum computers as it is believed to already be in existence.
What becomes an investors safe guard against the rising tide of AI and quantum computers when a story like this is real and evidently possible in today's modern world?

From my understanding, Ai only did well to find the right historical data in time to fix a broken recovery tool, that aided the user have a better chance of getting the right combination that eventually worked.
The best bet to combat AI technology from being able to guess a users password information would be to learn and adopt the use of sophisticated tools like a password manager that removes the human touch, use air gapped hardware wallet for cold storage and trust in the use of open source applications more.

For more info on the story;
https://www.tomshardware.com/tech-industry/cryptocurrency/bitcoin-trader-recovers-usd400-000-using-claude-ai-after-losing-wallet-password-11-years-ago-bot-tried-3-5-trillion-passwords-before-decrypting-an-old-wallet-backup?hl=en-US

https://medium.com/techx-official/a-man-has-used-claude-to-recover-around-400-000-in-bitcoin-f03d71bfd497

[retreat]

Considering that AI is now smarter and able to analyze more deeply with the information they use, it is possible that they have more information about you. But if not, then it should not be such a scary thing because AI only works to analyze patterns from available data, not actually able to guess passwords with just a picture of you. That's not how it works. That's why in the case of @cprkrn, he provided so much sensitive information to Claude to be analyzed and then from the information he provided Claude found clues that pointed to the password he forgot.

That's why it's important to set limits on how much personal information is given to the internet or to AI, especially sensitive information, because we will never know how that data is used by certain parties.

[BlackHatCoiner]

AI will completely demolish security through obscurity. This example is a good one. AI is automated vulnerability discovery. It dramatically lowers the cost and effort required to map networks, reverse-engineer code and discover hidden flaws. Because it can complete tasks that would normally require human intelligence and a lot of time, it will lead to a rapid expansion of automated hacking and exploitation.

It's been less than 2 months, and Claude Mythos discovered critical bugs in the Linux kernel that were hidden for decades. Expect a lot more in 10 years from now.

[7788bitcoin]

~
I don't know how Claude could find such accurate words, but if it is real, then we are so exposed in this AI era. Because we are leaving our digital footprints open for hackers. What if AI can sense our personality to guess passwords? Like I am talking a lot on Bitcointalk, my pattern of words is exposed because every single word I have spoken is in my mind. It is like a set of vocabulary that I have in mind, and obviously, I would create a password from my own memory.

The way this user was able to find the password was by uploading a massive amount of sensitive data from his college years into Claude, including old hard drives, Apple Notes, Gmail logs, and pictures of old school notebooks.

If you provide your data, it is possible that an AI could predict what your password is. I would not advise anyone to do this but I am glad he was able to retrieve his coins after a decade.

[X-ray]

It is certainly possible, but not everyone use random passwords that can be guessed from their favourite words.

I've always used password manager because the password is as random as it can be.

However, there has been development of passkeys where you don't need password anymore but using some kind of encrypted key that is bound to your device.

Currently websites are migrating from password to that.

[The Cryptovator]

What if human made passwords based on memories are no longer secure due to AI? Can these AI tools profile us? Can they find words that we could have used to secure our wallets?

Probably not, unless the AI knows your password behaviour. In general life we use so many words, either online or offline, but we don't use all of them for the password. It's different things, and every one of us has a different pattern. The AI needs your password pattern to find the accurate passwords. To find your password, it's very important to know your password vocabulary, not only your daily speaking vocabulary.

We have to remember, the more advanced technology we are getting, the more difficulties we have to encounter. We have to protect our privacy anyhow, but it seems our behaviour AI reading is various ways. Though AI is very useful for us, like the story we read about BTC recovering, on the other hand, it's also a threat for us as well unless we are careful about our password behaviour. Vocabulary is quite important when talking with AI.

[Odohu]

As beautiful as your line of reasoning goes, I don't see this happening because people do not use password based on their personality. Password is something secrete and most of the times, people never mention words or phrases relating to their password in their online conversations. AI is a powerful tool but I don't think we have reached where AI will perform mind reading, if that happens then we will be talking about metaphysics and not just technology.

[shinratensei_]

I guess it's the same way your siblings might be able to guess what your password is, happened to many people and since AI have more comprehensive analysis hence the risk is multiplied.
Attack from hacker using AI actually has been rising, we are getting news about exploit everyday or at very least once a week. I could imagine hackers are running their own AI and feeding our data to it.

However, have you ever considered that maybe our data is already collected by existing companies? we literally have thousands of company building telemetry to profile you. You don't need to feed AI with your data and because they already have it.

[PrivacyG]

I still remember some of my oldest passwords and I can not imagine how Claude could guess them considering I am pretty sure I never had a habit of writing down parts of it in plain files, file names, emails and whatever else.  If I ever did, it was not out of an obsession for writing them down in my notes but simply a coincidence and they were rare enough to not even consider a possible clue for my passwords.

I mean.  I am sorry.  But if I had 100 notes in the note book of a stranger and half of them had texts about police and 420 then these would have been the first key words and digits in a brute force attempt.  I do not know.  Claude may have done some interesting things but this is not one of them for me.