Replies (16)

rafael_xmr's avatar
rafael_xmr 1 week ago
And vulnerabilities can always be reported for some bounty money too, so there was an alternative to not end up like this
this is why I (half jokingly) wonder if it's a rogue AI. Figured out some super-obscure firmware bug to exploit, but doesn't have the self-regard to cover its financial tracks (long-term self-preservation not part of whatever fitness function it was trying to optimize)
JackTheMimic's avatar
JackTheMimic 1 week ago
If I walk behind a guy with a loose watch and wait for it to fall off just to scoop it up, that is immoral. This is akin to waiting for a retarded guy to openly type his pin at the ATM and using his card online. "You know the information to spend, nothing is stolen, right?" This is absurd. There's a difference between churning low ent keys and spinning up new keys and HAPPENING to get a wallet with bitcoin in it.
JackTheMimic's avatar
JackTheMimic 1 week ago
Regardless, there's always a non-zero chance someone creates a wallet with your keys. No matter your precaution a number that exists, can exist in two places.
Those analogies don't quite transfer here. Nothing was taken. The ledger is public. The UTXOs are public. The person guessed the correct private keys to sign some transactions. Conventional concepts of ownership don't really apply to Bitcoin. Whoever holds the spend key can spend.
JackTheMimic's avatar
JackTheMimic 1 week ago
And again, who ever has the watch, or the pin spends it. It's literally 1 to 1. What do you mean "what was taken?" The UTXO that was staked by someone else. The UTXOs are publicly visible but not some contrivance of public property. Are you just pretending that staking ownership of a private key is a frivolous act? I know you think "if I have the number I can spend" but that is no different than "I'm bigger and stronger and I can take what I want. What's to stop me." This is like autistic libertarian stuff. The combination to someone's lock is just a number, if you guess it can you just take whatever is in the safe? Sure. No concept of theft there...
The UTXO is not a thing. It's just a message that was signed in the past. Conventional concepts of ownership don't apply to Bitcoin because in actually there is no Bitcoin. Somebody generating a key on their own is not the same as hacking into your device and copying it. The fact that the key was easy to guess is not the fault of the person who guessed it.
JackTheMimic's avatar
JackTheMimic 1 week ago
Yeah dude, and you are just an electrical impulse of a brain in a vat, gtfo of here.
They do transfer and youre being a dolt. Your rhetorical own isn't one at all and you look like a retard rn to everyone but yourself.
Except coldcard was known not to pay bug bounties. There were multiple instances where vulnerabilities were disclosed and no bounty was paid. A team of researchers received cold cards and coffee mugs for their disclosure 😂
rafael_xmr's avatar
rafael_xmr 1 week ago
I became aware of this later lol I didn't know the whole lore but every time a company behaves like this, this is what happens, in crypto this is what thorchain did too. always need to be aware of how companies treat security researchers before buying their products