Reused R values again

[johoe]

Okay, most is swept, I think less than a 1 BTC remaining

Wrong this address alone holds 1.6BTC https://blockchain.info/address/1JLiqe4sbD2Qfj1cnmaPDiaxAjQTVBXaMk
This one has 0.15BTC https://blockchain.info/address/1Lp5FEqQf5dHeZyJpoB46gxMUqpbVtepBN
This one has 1.15BTC https://blockchain.info/address/1HYw2qecuFCL1CdXt1eShPF9fyUdXLUfBW
This one has 0.28BTC https://blockchain.info/address/1MY5sbAmgQyhZ5cAeqkiREnGdqvf7MbwfT

I feel like Sisyphos.  You think you swiped everything but in the mean time someone else sends you new money...

[1714631208]

1714631208

[1714631208]

1714631208

[1714631208]

1714631208

[1714631208]

1714631208

[LFC_Bitcoin]

Reddit talking about johoe today.

http://www.reddit.com/r/Bitcoin/comments/2p9zv2/300_more_btc_swept_from_insecure_wallets_by_johoe/

[itod]

Okay, most is swept, I think less than a 1 BTC remaining

Wrong this address alone holds 1.6BTC https://blockchain.info/address/1JLiqe4sbD2Qfj1cnmaPDiaxAjQTVBXaMk
This one has 0.15BTC https://blockchain.info/address/1Lp5FEqQf5dHeZyJpoB46gxMUqpbVtepBN
This one has 1.15BTC https://blockchain.info/address/1HYw2qecuFCL1CdXt1eShPF9fyUdXLUfBW
This one has 0.28BTC https://blockchain.info/address/1MY5sbAmgQyhZ5cAeqkiREnGdqvf7MbwfT

I feel like Sisyphos.  You think you swiped everything but in the mean time someone else sends you new money...

You need Bitcoin forwarder service, upload private keys and it forwards funds the moment it sees them on the blockchain. Since it doesn't exist, you'll have to write your own

[BlindMayorBitcorn]

Okay, most is swept, I think less than a 1 BTC remaining

Wrong this address alone holds 1.6BTC https://blockchain.info/address/1JLiqe4sbD2Qfj1cnmaPDiaxAjQTVBXaMk
This one has 0.15BTC https://blockchain.info/address/1Lp5FEqQf5dHeZyJpoB46gxMUqpbVtepBN
This one has 1.15BTC https://blockchain.info/address/1HYw2qecuFCL1CdXt1eShPF9fyUdXLUfBW
This one has 0.28BTC https://blockchain.info/address/1MY5sbAmgQyhZ5cAeqkiREnGdqvf7MbwfT

I feel like Sisyphos.  You think you swiped everything but in the mean time someone else sends you new money...

Keep rollin' that big Bitcoin up that hill, brother. We have need of you up there

[johoe]

Another 500 keys cracked 

I have computed more random values, but still have not captured all.
Unfortunately my ssh session timed out and took my script with it 
Have to run it again, it will probably find some more keys.

[goosoodude]

Seems to me that johoe can do that nobody else can on this planet.
https://blockchain.info/address/1HuqM18GMVaLxTRGdmSgytzVYnhRzu7U68
awesome!
(he just saved/swept more ~300 btc)

  

the answer is in the post directly above yours (by bcearl).

You, sir, are a true hero! Thanks for saving the day again.

What surprises me is that no hacker tried to use this in the meantime to steal.

[HospitalDonations]

Ok this for help us continue  
we be wait more your details and informations  


P.S

You very popular in tv show
guy robin hod
make 200.000$ victms you big boy in bitcoins scene

also thanx for any your donations we accept in our scene litle more
i am very love you!

[sumantso]

Another 500 keys cracked 

I have computed more random values, but still have not captured all.
Unfortunately my ssh session timed out and took my script with it 
Have to run it again, it will probably find some more keys.

This is going on and on with no end in sight

Keep up the good work, johoe.

[LFC_Bitcoin]

I think it'd be a good idea not to explain in any detail no matter how minor the process that allows you to get these private keys etc.

People with different intentions are going to learn how to do it.

[JorgeStolfi]

I feel like Sisyphos.  You think you swiped everything but in the mean time someone else sends you new money...

You need Bitcoin forwarder service, upload private keys and it forwards funds the moment it sees them on the blockchain. Since it doesn't exist, you'll have to write your own

If there was a forwarding option in the protocol, the first thing a black hat hacker would do is to sweep the coins, the second thing would be to set up forwarding to his address (and set it again every time the original owner tries to reset it).

[ProfMac]

Do I have to use bitcoin-cli listtransactions and then dump each transaction to check which output was spent?

The wallet operations on bitcoind are so slow when you have 1400 private keys imported.

As I understand there's a new feature which will be introduced into bitcoind 0.10.0 to work with addresses without importing private keys (watch-only):
https://github.com/bitcoin/bitcoin/pull/4045
It should give you what you want with 'listtransactions', and should be working already in 0.10 branch in github, if you feel like working with it.

I'm confused here.

I have been using the reference (Satoshi) client, both the graphic version and the daemon version.  I did not check before posting, but I am pretty sure that I have used watch only addresses for a year or two.

[bitcoinaliens]

As always I plan to return it to bc.i and you can contact their support to get your refund.

I've had 1+btc "sweeped" into your account, and have requested to get it returned from Blockchain.info - this is their response:
    

Mandrik (Blockchain)
Dec 14 20:11

Thank you for this information. We require further investigation into this matter, which means we need to verify that this address was generated in your wallet. Unfortunately we can only do this with the wallet identifier + password. Please provide this information along with the total amount removed from the other address.

Be sure to *NEVER* use the compromised bitcoin address again. You should also generate a new wallet at https://www.blockchain.info/wallet/new, and never use the other wallet again, since you'll be sharing the password information with us.

This looks like the stupidest idea ever to me - to send them my identifier and password over email (I have other bitcoin in other wallets inside that account... not for long..)

I'm pretty shocked that this is their approach to helping me to SECURE my bitcoin? Is this even allowed / legit?

[John (John K.)]

As always I plan to return it to bc.i and you can contact their support to get your refund.

I've had 1+btc "sweeped" into your account, and have requested to get it returned from Blockchain.info - this is their response:
    

Mandrik (Blockchain)
Dec 14 20:11

Thank you for this information. We require further investigation into this matter, which means we need to verify that this address was generated in your wallet. Unfortunately we can only do this with the wallet identifier + password. Please provide this information along with the total amount removed from the other address.

Be sure to *NEVER* use the compromised bitcoin address again. You should also generate a new wallet at https://www.blockchain.info/wallet/new, and never use the other wallet again, since you'll be sharing the password information with us.

This looks like the stupidest idea ever to me - to send them my identifier and password over email (I have other bitcoin in other wallets inside that account... not for long..)

I'm pretty shocked that this is their approach to helping me to SECURE my bitcoin? Is this even allowed / legit?

Are you sure this was sent by blockchain.info not some other scammer?

[FinanceUS]

As always I plan to return it to bc.i and you can contact their support to get your refund.

I've had 1+btc "sweeped" into your account, and have requested to get it returned from Blockchain.info - this is their response:
    

Mandrik (Blockchain)
Dec 14 20:11

Thank you for this information. We require further investigation into this matter, which means we need to verify that this address was generated in your wallet. Unfortunately we can only do this with the wallet identifier + password. Please provide this information along with the total amount removed from the other address.

Be sure to *NEVER* use the compromised bitcoin address again. You should also generate a new wallet at https://www.blockchain.info/wallet/new, and never use the other wallet again, since you'll be sharing the password information with us.

This looks like the stupidest idea ever to me - to send them my identifier and password over email (I have other bitcoin in other wallets inside that account... not for long..)

I'm pretty shocked that this is their approach to helping me to SECURE my bitcoin? Is this even allowed / legit?

I guess you'd move your funds away from all other addresses generated in this wallet first. You will have to abandon this account anyway.

If you're still afraid of signing transactions with blockchain.info, you may sign these transactions offline with other clients like Electrum.

[smoothie]

@johoe,

I'll send you one of my brass coins (unloaded) to you for free.

PM me or email me your shipping information and I'll send it your way.

smoothie@lealana.com

thanks for being honest! It is refreshing to have that around here. 

[smoothie]

I think it'd be a good idea not to explain in any detail no matter how minor the process that allows you to get these private keys etc.

People with different intentions are going to learn how to do it.

True. A fix needs to be implemented soon so that other malicious bystanders do not gain access to his method(s) and wreak havoc.

[wantrepreneur]

Johoe, you just swept my keys!!!

Thank god your doing the right thing, you are my f*cking hero.

(will PM my address for further verification)

[molecular]

Another 500 keys cracked 

I have computed more random values, but still have not captured all.
Unfortunately my ssh session timed out and took my script with it 
Have to run it again, it will probably find some more keys.

try 'screen' command (gnu screen)

keeps your shit running even if you connection goes down. You can connect again with 'screen -x'

[russokai]

Johoe, you just swept my keys!!!

Thank god your doing the right thing, you are my f*cking hero.

(will PM my address for further verification)

Yes he swept mine too and just emailed blockchain about it.  But yes Johoe is a great guy...tough to find those in this world most of the time.

[dserrano5]

Unfortunately my ssh session timed out and took my script with it  

try 'screen' command (gnu screen)

keeps your shit running even if you connection goes down.

Then try mosh. Your connection won't go down. Even if your IP changes.