Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you want to avoid being hacked, the best first step is probably to avoid posting to a technical forum the fact you have 2000 bitcoins, using a non-burner account that includes your gmail and other personal info.

In all seriousness, if you really have that many bitcoin (I suspect you may have meant $2k worth of bitcoin), seriously consider your opsec. Make sure you have 2FA on your gmail and other important accounts, with no phone number linked (i.e. software 2FA only; people are porting phone numbers and then resetting 2FA).



But i seriously doubt that there are hackers capable of getting into gmail account and finding the device where i stored bitcoin.

Right now, I've put bitcoins in blockchain.info on completely different pc and backed up the keys to raw paper secured in safe.

Blockchain.info is linked to my protonmail account.

But even protonmail doesn't know about my private keys.

But only thing i wondering is wether blockchain.info can be hacked or not.

For some reason i do not trust Trezor like stuff because the hardware might fail then what will i do?

Right now I've memorized private key, so i can restore it anytime.

Do you guys see any vunerability in this approach?


I feel like I'm being trolled. If not, seriously stop giving people your details - you are creating an over $7 million honeypot / bug bounty! Delete all of this. Use a burner/fake account on a different forum, and ask for advice without mentioning the number of bitcoins you have.

Other advice:

1. If you have 2000 bitcoins, consider splitting them up via different storage methods. There is risk in doing this (wider attack surface; locking yourself out), but if someone hacks you, better they only take half your bitcoins before you can secure yourself.

2. If the Trezor fails, just use your memorized private key / raw paper backup.

3. Sell half, even if bullish. It could always go to zero.


They just said that they're flying to <major city> tomorrow and hope they don't get kidnapped. It's a troll.


If you're as loose with your personal information in public as you are about the fact you have millions of USD in bitcoin, then you're probably not difficult to physically locate. At that point it's just a matter of a wrench or hammer I'd suppose.

https://www.xkcd.com/538/


So you mean there are people who will assult me for a few million?

Everyday i see guys in supercars around me, i never seen them being assaulted when they are clearly without security and they clearly have all that money.


But to steal millions from those people you need a lot more resources and a risky plan. Whereas to steal BTC from someone like you, you need a wrench to the head for some convincing, like in the linked comic.

I mean to steal millions from someones bank account you need them at the bank and even then you get a trail from bank transfer to another account etc. plus the bank could reverse transaction when police gets involved. While if they can access your wallet they can transfer anonymously to another wallet that no one knows who it belongs to.

So the person you are responding to has a point, I think.


No, this is paranoia to the extreme.

Nobody is going around hunting down people living in western countries to steal their Bitcoin.

This meme of "Don't Tell anyone that you own Bitcoin !!1!1" only exists because Bitcoin people are usually libertarian/paranoid to begin with.



[flagged]


Do you need a ride from the airport? :)


I need a ride too :)


Because their funds are easier to track. And easier to prove that they belong to them. Someone just needs to get your keys off you and there's that. You've got nothing on them.


Their money is mostly stored in regulated and insured banks and investments. Even if you get their bank password, you can't just move all their money at once to an untraceable account in an irreversible transaction leaving them with absolutely no recourse.


> So you mean there are people who will assult me for a few million?

People rob banks for a couple thousand dollars, or convenience stores for a couple hundred.

Supercars are very different - if you steal one, it's a) pretty easy for cops to spot and b) pretty hard to exchange for cash. Cryptocurrency, on the other hand, can be irretrievably exfiltrated in minutes.


The weak point is not your gmail account security. It's that now that you've announced that you have X million dollars in a form that's easy to transfer to an anonymous account, they could show up at your house or kidnap your children. The thing stopping that from being more common with USD is that international transfers will be stopped, law enforcement can track accounts, things like that. Bitcoin has none of those protections.


I don't believe that you have 2,000 Bitcoin. Nobody that interested in Bitcoin would even think of using blockchain.info to hold a fraction of that much. I don't even like, use, or think Bitcoin is useful, and even I'd know better than to do that.

I can't believe someone holding more than $50k in blockchain.info, and even that is ridiculously unadvisable. Web wallets are not secure. I very much doubt anyone interested enough in Bitcoin to acquire 2,000 of them early enough on would do such a thing.


You have just made a $7M bet that you won't fuck up your opsec. You made this bet against the world. You are also betting that you have physical security that can handle the power of a Desert Eagle.


Nobody is going around hunting people who own Bitcoin in western countries.

This paranoia is just a dumb meme.



Your link only proves my point. That is basically a list of every single bitcoin attack that has ever happened in the entire world. If that is all people have to worry about, then I think people are pretty safe.

It is just a silly meme to be that paranoid about this stuff.


No, but you should try to practice more security through obscurity by not telling the entire internet about it.


> Right now, I've put bitcoins in blockchain.info on completely different pc and backed up the keys to raw paper secured in safe.

That seems like a great approach. But whatever you do, don't disclose what you have to anyone. See [1] for details.

[1] https://www.reddit.com/r/Monero/comments/7lb7rm/be_your_own_...


Thanks for all that personal info, while your at it why don't you just tell us that private key too?

Seriously, you're here asking about security but you're giving us all your details. Your gmail is even known. Security through Obscurity is a real thing, and you've just painted a huge multi-million dollar target on your back.





Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: