HNHacker News
TopNewBestAskShowJobs

user24

4,153 karma · joined February 24, 2010

submissionscomments
user24··on Wwwwwwwww.jodi.org
Whoa, blast from the past! I remember loading this up when I was on dialup!
user24··on Quantifying the value of BitCoin
Such value?
user24··on Show HN: I've been making one HTML5 game per week. Here's my 10th game
I'm also seeing this issue. Example, I died right after taking this screenshot: http://imgur.com/Egy49Kv
user24··on Newsweek Bitcoin story quoted Satoshi Nakamoto accurately
> Newsweek Bitcoin story quoted Satoshi Nakamoto accurately

claim the LA Times, quoting the captain, speaking for his deputies, a few days after the story broke and the significance has sunk in.

I'm just saying that extraordinary claims require extraordinary proof, and this is not good enough.

user24··on Tell HN: Meeting Satoshi
Replying again to say that I am extremely touched by both donations that I received, and I have sent them on to the address being used to gather funds by the bitcoin community as an apology to Dorian Nakamoto.

http://www.reddit.com/r/Bitcoin/comments/1ztjmg/andreas_im_f...

user24··on Tell HN: Meeting Satoshi
Thanks, I really appreciate it! Judging by the timing of your comment I think you are 1AdNb.

It looks like your wallet does it properly, using different addresses all the time.

user24··on Tell HN: Meeting Satoshi
It's an interesting topic, writing it inspired me to research more and I found this: http://anonymity-in-bitcoin.blogspot.co.uk/2011/07/bitcoin-i...

Expect more blockchain traffic analysis papers in the future.

user24··on Tell HN: Meeting Satoshi
It depends how you use your bitcoin addresses. If you're lazy like me and reuse your bitcoin address for multiple transactions then yes.

Let's walk through this with one of my wallet addresses.

https://blockchain.info/address/1PWSyqweZ7SZ8AMi9hWRtEU5Cd7P...

You can see that I sent 0.00597702 BTC to an address beginning "1Jtfi". That was worth $3.99 yesterday, suggesting a USD pricing structure for that transaction.

In the previous transaction, you can see 0.1198 BTC ($79.49) being paid to me. You might deduce that I sold something for bitcoin, or that I bought some bitcoin from someone. Given that they came from six different addresses, you might conclude that this is probably not a direct person-to-person trade, but went through some sort of escrow or mixer. The odd USD value might suggest non-USD, but it could easily have been $80 yesterday.

Prior to that, I paid the same 1Jtfi address 0.0278 BTC. If you track the exchange rate back to the date of that TX, you can see it works out to $3.99 again, showing that I'm paying the same entity the same amount of money on multiple occasions.

Prior to that, 1AVZ paid me 0.00271878 BTC

Prior to that, I paid 0.0326 BTC to 1P4v.

Let's assume that 1Jtfi is the cafe (it's actually me buying reddit gold for people, hence $3.99 each time). They can look up my blockchain info (not just on blockchain.info, that's just a convenient way of browsing it) and see the whole ledger.

If the cafe knows that the 1P4v address is a porn site (let's say the porn site publish a donation address), then it's incontrovertible.

Another example, try to 'follow the money' on my first purchase of bitcoin: https://blockchain.info/address/1ARvvMWkZRXcCupgJCZeiRsZxVGZ...

In that tx, I am 12xSZ buying from 1ARvv.

Click the 'change address' 1BTCcq (nice vanity address).

Now try to track the seller, guess which of the two addresses is him and which is his client. It's pretty obvious that 1DPwh is the buyer and 1P5s1 is the same seller again.

Now we can basically track the smaller amounts, with the theory that the guy I bought from is selling small amount from a large stash, keep clicking the larger amount,

After a couple of transactions though it gets messy: https://blockchain.info/address/1Nt1sd2ECNyjdXmQsrpzqffPS9SJ...

Ah, now who's our guy? Well, it's probably the one who kept an odd number of coins (much more likely someone will buy 5 BTC than 4.86764344 BTC).

Now, the proper way to do it is for me to set up a new address for each transaction and move my funds between addresses every time I transact. That way you can't prove whether me sending $80 to 1abcde is sending to myself or to someone else. You can't trace the funds like we just did, because there's no time to establish patterns. You'd also want to avoid sending BTC to an address you've sent to before, and avoid round numbers of BTC. And avoid transacting at timestamps with a pattern to them.

So, it's theoretically capable of a decent level of anonymity. But as with most things, in practice it is susceptible to human error.

By the way, if you liked this comment, feel free to donate bitcoin to 1PWSyqweZ7SZ8AMi9hWRtEU5Cd7PEvb9em - maybe I can have fun tracing your transactions too :)

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
- unfortunately the iMac has two mics for noise reduction...
user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
My attempt:

NSA: We categorically do not store any content.

subtext: we don't, but GCHQ does and they let us search it.

That's the real insideousness of the whole five eyes thing. If it's illegal in your country, just get another of the eyes to do it. You can truthfully deny that you do it, while still reaping the benefits as if you had done it. Disgusting subversion of controls that are there for good reasons.

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
The London train bombings were nothing in comparison to the years of IRA terrorism that London suffered.

The argument that "these are strange times and require a new class of countermeasures" is exactly the lie they want to sell you.

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
"iMac has two built-in microphones"

https://www.apple.com/imac/features/

So that won't work for me, sadly.

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
Yeah, I would like a nice one-piece aluminium thing instead of a cut-in-half loo roll!
user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
I wonder if having the webcam always on but piping to /dev/null would prevent a trojan from accessing it...

I also wonder if plugging a 3rd party mic into line-in and switching it off would have a similar effect for the mic.

You can never be sure unless your fix is physical.

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
Reminds me of this story, the googling of which is now in my search history so I hope you're grateful.

"A US card cloner forced would-be gang members to take part in group sex sessions as part of an initiation ceremony designed to weed out undercover cops, according to a detective."

http://www.theregister.co.uk/2012/02/01/smut_initiation_card...

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
The mic issue is actually more worrying, but as you point out, there aren't such easy solutions.
user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
Yeah, in this case.

It doesn't fill me with confidence that 'they' aren't remotely activating and recording images without our knowledge though.

As to topicality, it depends how narrow your interpretation of the topic is.

user24··on GCHQ intercepted webcam images of millions of Yahoo users worldwide
This is why I have a piece of cardboard hanging over my webcam. That would have seemed extremely paranoid last year.
user24··on Bizarre Shadowy Paper-Based Payment System Being Rolled Out Worldwide
Again, that's just making fun of the way the press misrepresent bitcoin.

In fact, the fact that these 'critiques' don't actually apply to central banking is what makes this piece so funny.

user24··on Why is the mouse cursor slightly tilted and not straight?
I remember one called Microangelo.
user24··on Turn It Off: NSA's Achilles' Heel
don't be ridiculous.
user24··on Jb’s story about how he nearly lost his Twitter handle
Please show me a lawyer who wants to go head-to-head with Apple, Google or Amazon on a case like this on "no win no fee" terms.
user24··on Have I tattooed a syntax error on my arm?
What about some VB?
user24··on Have I tattooed a syntax error on my arm?
I remember when my brother proudly showed me his Chinese tattoo. He said "guess what it says". I looked at it for about 15 seconds and said "Tiger?" and he was like "how'd you know that?!".

It said "tig" in a sort of Chinesey looking font.

user24··on Have I tattooed a syntax error on my arm?
I wanted to get <?=phpinfo();?> on my arm once. The thought of what it would output if run on a human still amuses me and if I had got it done, I don't think I'd be sick of it now, even though I've not coded in PHP for 2 or 3 years.
user24··on Is looking for Wi-Fi access points purely passive?
repledit to mention that this only works for open routers.
user24··on Is looking for Wi-Fi access points purely passive?
Yes, doesn't have to be a nearby router though. The point is: your device broadcasts the names of all routers it's connected to. You just need to listen, then spoof the name, then the device will connect to you.

If the target device is already connected, you just need to DoS the router it's connected to and the device will reset the connection and start looking again. There are probably more elegant ways to force a reconnect than a simple DoS attack too.

user24··on Is looking for Wi-Fi access points purely passive?
Not only that but also, as SSIDs are often unique, it's possible to completely passively track all the locations your device has been. More info in this talk: https://www.youtube.com/watch?v=03iEaKPRb9A
user24··on JavaScript: The Right Way
A mention of JS debuggers like theseus might be good.

Would be cool to automatically change the URL to the anchor as I scroll.

user24··on Tell HN: Server Status
No-one's going to say "Yeah I was going to apply to YC but HN keeps going down so I don't think I will after all".
← PreviousPage 5 of 34Next →