15
Wisecrack
181d

So someone posted their btc wallet details (system automated message through a custom tool) to a paste in alternative.

Was the login for an ssh. Wont confirm or deny ssh-ing into it, but another guy who saw the same thing messaged me, sent a screenshot. Account had 127k usd worth of btc in it.

Called the radio station it belonged to and gave them a heads up. Probably should reported it as well but people already seen it so it'll get taken down soon enough.

Here I am broke, busting my ass and reality throws this in my lap. But I ain't never been no god damn thief. Hope the radio station it belongs to doesnt get robbed by someone less honest though.

Honesty is probably half the reason I've spent half my life broke trying to find or make opportunities.

And frankly I've heard real horror stories of good faith reports (whitehat style pentesting, etc) and the people that report it get fucked hard by authorities. What can you do though.

Enough navel gazing though.
What the fuck is wrong with the people who build these sort of account reset tools anyway?

Comments
  • 8
    It is easy to be tempted by the carelessness of others to enrich yourself, but it will always feel as something you took from others. Your honesty and integrity will be rewarded someday.
  • 2
    @NeatNerdPrime thanks for that man. Dont know if it's true, but it's a good sentiment.
  • 0
  • 3
    If this is true, then you deserve the utmost respect. It's easy to judge others when talking hypotheticals. “Man, those damn thieves, I'm better than that”. Yet, when presented with a lucrative opportunity, their brains magically make up excuses: “It's their fault that they exposed their wallet like this. Those who possess this kind of money should know better. If it isn't me, then someone else will take the advantage”, and many, many others. Mix and match however you like. Some even go as far as to call it “survival of the fittest”.

    To see the opportunity but decline it is a whole different story. I salute you, sir.
  • 4
    Also, it's a very specific amount of money. If it is, say, exactly one million dollars, it's someone playing big, but playing nonetheless. If it's a small sum, it's probably someone's pocket change. But this sum, not too small and not too big, legitimately looks like someone's life savings.

    People whose life savings are in this range never recover when you take it away, neither financially nor emotionally.

    Hate to tell it, but the sum doesn't matter — it's someone else's money, period.

    You did the right thing.
  • 1
    Honesty is the best policy. Good job and keep it up!
  • 1
    Am I the only one having a hard time understanding wtf the first part of this story means?

    They posted their bitcoin wallet login? Or an SSH key? To a "paste in" alternative? A "system automated message"?

    Huh? Wut?
  • 0
    @Inigo

    Fucking autocorrect as usual broke ass piece of shit that it is, auto-'corrected' the post.

    It's a pastbin alternative. And jesus fucking christ it 'autocorrected' again before I caught it.

    Was an ssh login and password posted by an automated tool either for an account reset or a temporary access code, and an unrestricted bitcoin wallet.

    Fuck I really hate autocorrect.
  • 1
    @kobenz I can neither confirm nor deny I ssh'd anything.
  • 0
    @kobenz by the way your comment was poetry.
  • 0
    @Wisecrack thanks, er I guess that *partially* clarifies it 🤔 But why would an automated tool go around pasting ssh logins into Pastebins? Why would an 'account reset' function do this? Sorry if I'm being thick here, I'm really struggling to understand this
  • 0
    @Inigo I dont know. Some dumbass wrote their btc wallet manager to do account resets through a paste in alternative is all I know.

    That or it was a honeypot.
Add Comment