Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday August 11 2020, @03:08PM   Printer-friendly
from the as-the-bitcoin-turns dept.

The quest to liberate $300,000 of bitcoin from an old ZIP file:

In October, Michael Stay got a weird message on LinkedIn. A total stranger had lost access to his bitcoin private keys—and wanted Stay's help getting his $300,000 back.

It wasn't a total surprise that The Guy, as Stay calls him, had found the former Google security engineer. Nineteen years ago, Stay published a paper detailing a technique for breaking into encrypted zip files. The Guy had bought around $10,000 worth of bitcoin in January 2016, well before the boom. He had encrypted the private keys in a zip file and had forgotten the password. He was hoping Stay could help him break in.

In a talk at the Defcon security conference this week, Stay details the epic attempt that ensued.

[...] "If we find the password successfully, I will thank you," The Guy wrote with a smiley face. After an initial analysis, Stay estimated that he would need to charge $100,000 to break into the file. The Guy took the deal. After all, he'd still be turning quite the profit.

[...] That's partly why the work was priced so high. Newer generations of zip programs use the established and robust cryptographic standard AES, but outdated versions—like the one used in The Guy's case—use Zip 2.0 Legacy encryption that can often be cracked. The degree of difficulty depends on how it's implemented, though. "It's one thing to say something is broken, but actually breaking it is a whole different ball of wax," says Johns Hopkins University cryptographer Matthew Green.

From a massive pool of passwords and encryption keys, Stay was able to narrow it down to something on the order of quintillions.

[...] By February, four months after that first LinkedIn message, they queued it all up and started the attack.

That initial attempt took 10 days to run... and did not work. Further sleuthing finally uncovered a bug. They were, ultimately, able to successfully extract the contents.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by DECbot on Tuesday August 11 2020, @04:23PM (23 children)

    by DECbot (832) on Tuesday August 11 2020, @04:23PM (#1034986) Journal

    6x9=42?

    Did I miss an issue of the new math journal? Last I read 6x9 is 56. Maybe you mean 6x7?

    --
    cats~$ sudo chown -R us /home/base
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by barbara hudson on Tuesday August 11 2020, @04:28PM (14 children)

    by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Tuesday August 11 2020, @04:28PM (#1034990) Journal
    You're assuming base 10. Try 13.5 (at least that's the radix I got when I worked it out in my head. I could be wrong. And yes, fractional radixes are not supposed to be a thing, but consider it the NEW new math).
    --
    SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
    • (Score: 3, Funny) by barbara hudson on Tuesday August 11 2020, @05:00PM (11 children)

      by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Tuesday August 11 2020, @05:00PM (#1035014) Journal
      Correction : radix of 13. A radix of 13.5 gives 40. But I'm still claiming dibs for the invention of fractional bases.
      --
      SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
      • (Score: 2) by RS3 on Tuesday August 11 2020, @05:45PM (2 children)

        by RS3 (6367) on Tuesday August 11 2020, @05:45PM (#1035039)

        "fractional radix" -- my head hurts. I'm back to hating math like I did in college.

        • (Score: 2) by barbara hudson on Tuesday August 11 2020, @06:17PM (1 child)

          by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Tuesday August 11 2020, @06:17PM (#1035068) Journal
          Turns out the original poster made a typi^Wtypa^Wmistake. I thought it might be some sort of hidden puzzle. Now I'm bummed out. :-(
          --
          SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
          • (Score: 2) by RS3 on Wednesday August 12 2020, @02:21AM

            by RS3 (6367) on Wednesday August 12 2020, @02:21AM (#1035356)

            Bummed out? When I first saw your analysis I thought "makes sense" and "another math thing beyond me". Many of life's great innovations have been stumbled upon, or at least motivated by unintended circumstances (mistakes?). Now you just need to apply for a math research grant and show us how it's done. :)

            It may help to work on moving a decimal point, uh, partially. You know, 0.4 places and such. You'll figure it out.

      • (Score: 0) by Anonymous Coward on Tuesday August 11 2020, @09:50PM (4 children)

        by Anonymous Coward on Tuesday August 11 2020, @09:50PM (#1035193)

        Sorry, you didn't create fractional radix systems first. You were beat by thousands of years. The golden ratio base is probably the widest used and formally studied.

        • (Score: 4, Insightful) by barbara hudson on Tuesday August 11 2020, @11:54PM (3 children)

          by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Tuesday August 11 2020, @11:54PM (#1035270) Journal
          I figured that out later. But at least it means I can deduce things I didn't know from first principles, instead of depending on rote. I'll give myself 0.25 points for creativity.
          --
          SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
          • (Score: 2) by SemperOSS on Wednesday August 12 2020, @06:49AM (2 children)

            by SemperOSS (5072) on Wednesday August 12 2020, @06:49AM (#1035428)

            0.25 points? You're probably showing off by giving yourself the points in base 0.14159265.

            That is more than 263.5 points in base ten … I think.


            --
            I don't need a signature to draw attention to myself.
            Maybe I should add a sarcasm warning now and again?
            • (Score: 3, Interesting) by barbara hudson on Thursday August 13 2020, @12:54AM (1 child)

              by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Thursday August 13 2020, @12:54AM (#1035909) Journal
              It's in base 20 - I took my runners and socks off :-)

              So a very very small quantity indeed, and still probably too generous. But that's okay - my doggies still love me. As long as I walk them, and share my food and bed with them so they can wake me up every few hours , they're happy. They teach me patience, but when they wake me at 4am it's pretty much impossible to get back to sleep, so I read Wikipedia This Day in History and follow interesting stuff down the rabbit hole for an hour or two. I highly recommend it (not waking up at 4 am though, unless you have to get up to pee).

              Would be interesting to see if school age kids learning at home could benefit from such an unstructured approach, where they just followed their interests.

              --
              SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
              • (Score: 2) by SemperOSS on Thursday August 13 2020, @07:49AM

                by SemperOSS (5072) on Thursday August 13 2020, @07:49AM (#1036032)

                My entrance to the rabbit hole was my (long departed) Dad, who would, when we asked a question at the dinner table (or wherever) take us by the hand to the encyclopedia and let us find the right place ourselves, which often failed as we would get sidetracked by some interesting facts on the way.

                Like you, I am still pursuing that way to “entertainment” when I am exposed to places that provide the means. (Even Reddit, but don't tell anyone I go on there.)


                --
                I don't need a signature to draw attention to myself.
                Maybe I should add a sarcasm warning now and again?
      • (Score: 2) by D2 on Tuesday August 11 2020, @09:53PM (2 children)

        by D2 (5107) on Tuesday August 11 2020, @09:53PM (#1035196)
        • (Score: 2) by barbara hudson on Tuesday August 11 2020, @11:51PM (1 child)

          by barbara hudson (6443) <barbara.Jane.hudson@icloud.com> on Tuesday August 11 2020, @11:51PM (#1035269) Journal
          Yeah, I know, looked it up to see if it existed. Sux 2 B me :-) But at least it was a valid idea, just too late.
          --
          SoylentNews is social media. Says so right in the slogan. Soylentnews is people, not tech.
          • (Score: 2) by RS3 on Wednesday August 12 2020, @02:24AM

            by RS3 (6367) on Wednesday August 12 2020, @02:24AM (#1035360)

            And you did it independent of that knowledge.

            If I had a nickle for everything I've invented that's already been invented, well, I'd have some nickles.

    • (Score: 3, Insightful) by hendrikboom on Tuesday August 11 2020, @07:35PM (1 child)

      by hendrikboom (1125) Subscriber Badge on Tuesday August 11 2020, @07:35PM (#1035111) Homepage Journal

      Try arithmetic to the basis sqrt( - 2 ). It was mentioned once in the Scientific American. The say coming up with trial divisors for long division required inspiration.

  • (Score: 0) by Anonymous Coward on Tuesday August 11 2020, @04:37PM (3 children)

    by Anonymous Coward on Tuesday August 11 2020, @04:37PM (#1034997)

    Haha, try again!

    • (Score: 3, Funny) by DECbot on Tuesday August 11 2020, @04:39PM (2 children)

      by DECbot (832) on Tuesday August 11 2020, @04:39PM (#1034999) Journal

      yeah, my bad. 6x7 is 54. Sorry for the typo.

      --
      cats~$ sudo chown -R us /home/base
      • (Score: 0) by Anonymous Coward on Tuesday August 11 2020, @05:18PM (1 child)

        by Anonymous Coward on Tuesday August 11 2020, @05:18PM (#1035023)

        Try again, again?

        • (Score: 0) by Anonymous Coward on Wednesday August 12 2020, @04:10AM

          by Anonymous Coward on Wednesday August 12 2020, @04:10AM (#1035387)

          Probably using an Intel processor.

  • (Score: 3, Informative) by KilroySmith on Tuesday August 11 2020, @04:40PM (1 child)

    by KilroySmith (2113) on Tuesday August 11 2020, @04:40PM (#1035000)

    With your username, it is with delight that I say:
    whoosh!
    Missing this is forgiveable for the millenials of our time, but not a person of your august nature.

    I heartily recommend to you:
    https://www.amazon.com/Ultimate-Hitchhikers-Guide-Galaxy/dp/0345453743 [amazon.com]

    • (Score: 0) by Anonymous Coward on Tuesday August 11 2020, @09:58PM

      by Anonymous Coward on Tuesday August 11 2020, @09:58PM (#1035199)

      Missing this is forgiveable for the millenials of our time,

      It is not.

  • (Score: 1, Informative) by Anonymous Coward on Tuesday August 11 2020, @05:37PM

    by Anonymous Coward on Tuesday August 11 2020, @05:37PM (#1035034)

    I always thought there was something fundamentally wrong with the universe!!!

  • (Score: 0) by Anonymous Coward on Thursday August 13 2020, @04:38AM

    by Anonymous Coward on Thursday August 13 2020, @04:38AM (#1035992)

    The 6x9's in my car are 42 watts.