pull down to refresh

"I'm a whitehat"
"You are going to pay 10%"

lmao

A very self-righteous hacker.

reply
1445 sats \ 8 replies \ @optimism 9 Sep

Where I'm from, the moment you extort, you're a blackhat.

Edit: PS. "From now on everything is in cleartext" is also extortion, so that's 3 counts.

reply

I'm surprised the hacker thinks this is a viable way to proceed.

Steal some funds if that is what you are going to do, but this kind of "negotiation" is clearly never going to lead to some sort of consensual ending. Hacker has an ego?

reply

Concur.

An uncontrollable ego at that. Anyone that uses OP_RETURN for things like this has issues.

reply

Or it is some kind of personal beef.

reply

<they're the same picture meme>

reply

if they think the FBI isn’t watching this convo like a hawk they’re also delusional. the longer it goes on, the more it helps them find them. the FBI would absolutely reject paying the ransom.

reply

I've been thinking extensively about this the past few days: if you're a fully compliant custodian and someone is holding your AUC (of this amount) hostage, when to talk to the feds? And I think the only possible answer would be: after you called legal as they will hang up on you to call the feds.

they should upload a jpeg in response

reply

What he meant by "I am a whitehat"

reply
209 sats \ 9 replies \ @ek 9 Sep

I think Blockstream should def pay some percentage, one way or the other. See also #1566044. I guess I’m not a whitehat.

reply

I guess not indeed. They're declining a $1.5M bounty, which would be a top 10 (3?) all-time bounty payout across everything that ever was coded in the history of mankind. 10% makes it the top1 by 3.2x, because currently the biggest bounty ever was $10M for a responsibly disclosed wormhole vuln.

reply
168 sats \ 7 replies \ @ek 9 Sep

As I read it, Blockstream wants everything back and is thus not willing to pay anything. Is that a wrong interpretation of the situation?

reply

Wrong interpretation. You should always put everything back and get the bounty paid with non-stolen funds. The 1.5M is the bounty offered, I'm 99% sure. So "they're not willing to pay anything" is a bad assumption on your part, I think.

reply

He doesn't want to give everything back hoping to get something in return because he doesn't want to trust, he wants to verify 😅

reply
147 sats \ 3 replies \ @ek 9 Sep

The “(maybe even 0)” made it sound like it might not be a bad assumption.

reply

That refers to them not having received it yet? I wouldn't pay squat to anyone holding 15% of funds hostage either.

As little as 3 months ago my former security list got blackmailed for 500k USDC including ethereum address. And that was one of countless. So I guess I am biased.

reply

The hacker is afraid that they won't pay him the bounty if he releases he remaining coins.

1.5 million for 5 billion assets is kinda 0 in hacker's eyes. Because he isn't sure...maybe the blockstream guys indicated something to him with disrespect.

reply

Hacker must be from India?

reply

100% this is the interpretation

reply