Hacker News Reader

Comment by mrcharles | Hacker News Reader

Correct me if I'm wrong, but given the P2P nature of bitcoin, wouldn't it effectively give someone interested in malicious activity a list of target IP addresses? In theory he could set up his own P2P, watch for large transactions, and then he has an ip running a bitcoin client who (potentially) has a large wallet.

Then it's just a matter of running common exploits (or new ones, if you have them) in order to access the machine and the bitcoin wallet.

View on HN

Also: this is the perfect crime for those so inclined to do this. What authorities are going to give a damn about your missing Bitcoins?

I've thought about that as well. But I would imagine if you have the technical chops to do that (I'd be interested in seeing a distribution of Mac/Linux/Windows users for BitCoin as well), you'd have the technical chops to get more money from other ways than stealing a few bitcoins. That said if I were a botnet master I'd put in some code to search for a wallet as a 'bonus'.

There's no way to know which IP address corresponds to which bitcoin address.

The point is that all of the IP addresses recorded in the network transactions are Bitcoin users.

No, you can make a receiving address without ever connecting to the network. Current clients won't do so (that I'm aware of), but it's entirely possible.

The main reason though is that new addresses aren't broadcast. The only time you know their location is when they send, and only if you were watching their traffic / the traffic of all nodes they sent to.

Reply on news.ycombinator.com