Waramp22 (OP)
|
|
August 27, 2014, 05:03:43 PM |
|
Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes. I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account. wallet.aes.json 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
|
|
|
|
SgtSpike
Legendary
Offline
Activity: 1400
Merit: 1005
|
|
August 27, 2014, 05:18:34 PM |
|
13-14 chars isn't bruteforceable. You probably had some malware.
|
|
|
|
Ayers
Legendary
Offline
Activity: 2814
Merit: 1024
DGbet.fun - Crypto Sportsbook
|
|
August 27, 2014, 06:38:13 PM |
|
not worth it for just 16 cents
|
|
|
|
DiamondCardz
Legendary
Offline
Activity: 1134
Merit: 1118
|
|
August 27, 2014, 06:52:35 PM |
|
Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.
|
BA Computer Science, University of Oxford Dissertation was about threat modelling on distributed ledgers.
|
|
|
juju
|
|
August 27, 2014, 08:19:03 PM |
|
Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.
This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication? If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.
|
|
|
|
odolvlobo
Legendary
Offline
Activity: 4508
Merit: 3419
|
|
August 27, 2014, 09:28:47 PM |
|
Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.
This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication? If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory. Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet: - Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
- Obtain your password and id from you.
The latter case is by far the most common scenario.
|
Join an anti-signature campaign: Click ignore on the members of signature campaigns. PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
|
|
|
Waramp22 (OP)
|
|
August 27, 2014, 11:38:16 PM |
|
not worth it for just 16 cents
I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not. Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.
This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication? If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory. Yes, alot, but i had not logged into blockchain from January 12th until it was hacked on July 7th. I was too Paranoid of keyloggers/malware. My email does not have 2 factor authentication. The thief could have easily got my wallet file but then how could he have cracked it? I made 4 cold wallets to keep it in. Now i am paranoid because although i disconnected the ethernet cable and saved the BIP38 encrypted paper wallet (PDF) directly to a usb drive, I had to type in the password which may have been picked up by malware. I think i am officially done storing my bitcoin on any computer, as there are too many points of failure. You need to have a dedicated laptop/printer that never touches the internet to store your money safely by printing out paper wallets and keeping them in a safe. Maybe a Piper bitcoin wallet printer? Here is my public key. https://blockchain.info/address/1K2sV195TPP3mUCeHxZxizWUFZFRAvBsHn
|
|
|
|
wasserman99
|
|
August 28, 2014, 12:08:48 AM |
|
Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.
This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication? If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory. Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet: - Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
- Obtain your password and id from you.
The latter case is by far the most common scenario. Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.
|
|
|
|
Waramp22 (OP)
|
|
August 28, 2014, 12:22:18 AM |
|
Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.
I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.
|
|
|
|
montello
|
|
August 28, 2014, 11:23:38 AM |
|
All that stress for just 16 cents,its not worth it.
|
|
|
|
Sindelar1938
|
|
August 28, 2014, 11:25:39 AM |
|
16 cents? You gotta be kidding I would assume that most of us value our time more than that
|
|
|
|
sandykho47
Sr. Member
Offline
Activity: 252
Merit: 251
Knowledge its everything
|
|
August 28, 2014, 11:43:29 AM |
|
$0.16 is not worth If you say 16 BTC this will worthy And i think you need yo set blockchain.info very carefully
|
Kemampuanku Tidak semua orang memiliki dan dapat melakukannya . Tidak memakan kaum sendiri . dan mempunyai kode etik yang tidak masuk akal.
|
|
|
1Referee
Legendary
Offline
Activity: 2170
Merit: 1427
|
|
August 28, 2014, 12:00:41 PM |
|
Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent
|
|
|
|
Waramp22 (OP)
|
|
August 29, 2014, 01:05:02 AM |
|
$0.16 is not worth If you say 16 BTC this will worthy And i think you need yo set blockchain.info very carefully 16 cents? You gotta be kidding I would assume that most of us value our time more than that
Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent See below!!! I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.
|
|
|
|
FFrost
|
|
August 29, 2014, 09:46:04 AM |
|
Your joking right? Why would someone even bother to hack it just a waste of electricity.
|
|
|
|
BitcoinBadger
Member
Offline
Activity: 111
Merit: 10
|
|
August 29, 2014, 10:22:24 AM |
|
14 characters will take more than 700 years to bruteforce. Even with supercomputer, expect some years to crack.. Sorry mate , keep wallet safer next time
|
|
|
|
wasserman99
|
|
August 29, 2014, 03:23:32 PM |
|
Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.
I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere. They "let" you have the private key in unencrypted format because you are in 100% control of your keys at all times. You can also download your private keys in an unencrypted format after acknowledging a warning.
|
|
|
|
Microbit001
Member
Offline
Activity: 63
Merit: 10
|
|
August 29, 2014, 06:44:32 PM |
|
Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes. I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account. wallet.aes.json 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 Machines aren't gotten so smart to crack such a encryption in so short period of time.It would take a lifetime and even more to do so
|
|
|
|
|