Reddit Apologizes for ‘Online Witch Hunt’

Quote

reddit 0 Reddit Apologizes for Online Witch HuntReddit General Manager Erik Martin used the company’s blog to publiclyapologize for the site’s role in fueling an “online witch hunt” for Sunil Tripathi, a missing Brown Univ. student falsely identified as a possible suspect in the Boston Marathon bombing.

Last week, prior to the FBI naming Dzhokhar and Tamerlan Tsarnaev as the primary suspects in the bombing, members of the link-sharing site set out tocrowdsource the identities of the people behind the attack. Their vigilante efforts turned counterproductive when Tripathi’s name was picked up by those monitoring police scanners. The site helped spread the misinformation, and became “one of the more ugly and disgusting places that had a lot of traffic,” Tripathi’s sister told ABC News.

Reddit Apologizes for ‘Online Witch Hunt’ | DFI News.

Incoming search terms:

  • simon lang stoke

Unregulated Hacker Currency Used for Any Purpose

Quote

unregulated Unregulated Hacker Currency Used for Any Purpose In this April 3, 2013 photo, Mike Caldwell, a 35-year-old software engineer, poses with bitcoin tokens at his shop in Sandy, Utah. Caldwell mints physical versions of bitcoins, cranking out homemade tokens with codes protected by tamper-proof holographic seals, a retro-futuristic kind of prepaid cash. With up to 70,000 transactions each day over the past month, bitcoins have been propelled from the world of Internet oddities to the cusp of mainstream use, a remarkable breakthrough for a currency which made its online debut only four years ago. Courtesy of AP Photo/Rick Bowmer

With $600 stuffed in one pocket and a smartphone tucked in the other, Patricio Fink recently struck the kind of deal that’s feeding the rise of a new kind of money — a virtual currency whose oscillations have pulled geeks and speculators alike through stomach-churning highs and lows.

The Argentine software developer was dealing in bitcoins — getting an injection of the cyber currency in exchange for a wad of real greenbacks he handed to a pair of Australian tourists in a Buenos Aires Starbucks. The visitors wanted spending money at black market rates without the risk of getting roughed up in one of the Argentine capital’s black market exchanges. Fink wanted to pad his electronic wallet.

In the safety of the coffee shop, the tourists transferred Fink their bitcoins through an app on their smartphone and walked away with the cash.

“It’s something that is new,” said Fink, 24, who described the deal to The Associated Press over Skype. “And it’s working.”

It’s transactions like these — up to 70,000 of them each day over the past month — that have propelled bitcoins from the world of Internet oddities to the cusp of mainstream use, a remarkable breakthrough for a currency that made its online debut only four years ago.

When they first began pinging across the Internet, bitcoins could buy you almost nothing. Now, there’s almost nothing that bitcoins can’t buy. From hard drugs to hard currency, songs to survival gear, cars to consumer goods, retailers are rushing to welcome the virtual currency whose unofficial symbol is a dollar-like, double-barred B.

Advocates describe Bitcoin as the foundation stone of a Utopian economy: no borders, no change fees, no closing hours, and no one to tell you what you can and can’t do with your money.

Just days ago the total value of bitcoins in circulation hit $2 billion, up from a tiny fraction of that last year. But late Wednesday, Bitcoin crashed, shedding more than 60 percent of its value in the space of a few hours before recouping some of its losses. Critics say the roller coaster currency movements are just another sign that Bitcoin is a bubble waiting to burst.

Amid all the hype, Bitcoin’s origins are a question mark.

The mechanics of the virtual currency were first outlined in a research paper signed by Satoshi Nakamoto — likely a pseudonym — and the coins made their online debut in 2009. How the coins are created, how the transactions are authenticated and how the whole system manages to power forward with no central bank, no financial regulator and a user base of wily hackers all comes down to computing power and savoir faire.

Or, as Nicholas Colas, chief market strategist for the ConvergEx Group, describes it: “genius on so many levels.”

The linchpin of the system is a network of “miners” — high-end computer users who supply the Bitcoin network with the processing power needed to maintain a transparent, running tally of all transactions. The tally is one of the most important ways in which the system prevents fraud, and the miners are rewarded for supporting the system with an occasional helping of brand-new bitcoins.

Those bitcoins have become a dangerously hot commodity in the past few days.

Rising from roughly $13 at the beginning of the year, the price of a single bitcoin blasted through the $100 barrier last week, according to Mt. Gox, a site where users can swap bitcoins for more traditional currencies.

On Tuesday, the price of a single bitcoin had topped $200. On Wednesday, it hit $266 before a flash crash dragged it back down to just over $100. By Thursday, bitcoins were trading for around $150.

The rebel currency may seem unstable, but then so do some of its more traditional counterparts. Some say Bitcoin got new momentum after the banking crisis in Cyprus pushed depositors there to find creative ways to move money. Fink, the Argentine, favors bitcoins because he believes they will insulate him from his country’s high inflation. Others — from Iranian musicians to American auto dealers — use the currency to dodge international sanctions or reach new markets.

But the anything-goes nature of Bitcoin has also made it attractive to denizens of the Internet’s dark side.

One of the most prominent destinations for bitcoins remains Silk Road, a black market website where drug dealers advertise their wares in a consumer-friendly atmosphere redolent of Amazon or eBay — complete with a shopping cart icon, a five-point rating system and voluminous user reviews. The site uses Tor, an online anonymity network, to mask the location of its servers, while bitcoin payments ensure there’s no paper trail.

One British user told the AP he first got interested in Silk Road while he was working in China, where he used the site to order banned books. After moving to Japan, he turned to the site for an occasional high.

“Buying recreational drugs in Japan is difficult, especially if you don’t know people from growing up there,” said the user, who asked for anonymity because he did not want his connection to Silk Road to be publicly known.

He warned that one of the site’s drawbacks is that the drugs can take weeks to arrive “so there’s no spontaneity.”

Drug dealers aren’t the only ones cashing in on Bitcoin. The hackers behind Lulz Security, whose campaign of online havoc drew worldwide attention back in 2011, received thousands of dollars’ worth of bitcoins after promising followers that the money would go toward launching attacks against the FBI.

A report apparently drawn up by the bureau and leaked to the Internet last year said that “since Bitcoin does not have a centralized authority, detecting suspicious activity, identifying users and obtaining transaction records is problematic for law enforcement.”

It went on to warn that bitcoins might become “an increasingly useful tool for various illegal activities beyond the cyber realm” — including child pornography, trafficking and terrorism.

The FBI did not immediately respond to an email seeking comment.

Late last month, the U.S. Treasury’s Financial Crimes Enforcement Network, or FinCen, announced it was extending its money-laundering rules to U.S. bitcoin dealers and transfer services, meaning that companies that trade in the cybercurrency would have to keep more detailed records and report high-value transactions.

Many in the Bitcoin community are frustrated at the attention paid to the shadier side of the virtual economy.

Atlanta-based entrepreneur Anthony Gallippi said the focus on drugs and hacking misses the “much bigger e-commerce use for this that’s growing and that’s growing rapidly.”

Very few businesses set their prices in bitcoins — the currency swings would be too jarring — but an increasing number are accepting it for payment. Gallippi’s company, BitPay, handles Bitcoin transactions for some 4,500 companies, taking payments in bitcoins and forwarding the cash equivalent to the vendor involved, which means that his clients are insulated from the cyber currency’s volatility.

Gallippi said many of the businesses are e-commerce websites, but he said an increasing number of traditional retailers were looking to get into the game as well.

“We just had an auto dealership in Kansas City apply,” he said.

In March, BitPay said its vendors had done a record $5.2 million in bitcoin sales — well ahead of the $1.2 million’s worth of monthly revenue estimated to have coursed through Silk Road last year.

Even artists accept bitcoins. Tehran-based music producer Mohammad Rafigh said the currency had allowed him to sell his albums “all over the world and not only in Iran.”

Gallippi said the cyber currency’s ease of access was its biggest selling point.

With Bitcoin, “I can access my money from any computing device at any time and do whatever the heck I want with it,” he said. “Once you move your money into the cloud why would you ever go back to putting your money in the bank?”

Many Wall Street veterans are skeptical — and they may feel vindicated after Bitcoin’s latest tumble.

“Trading tulips in real time,” is how longtime UBS stockbroker Art Cashin described Bitcoin’s vertiginous rise, comparing it to the now-unfathomable craze that saw 17th-century Dutch speculators trade spectacular sums of money for a single flower bulb.

“It is rare that we get to see a bubble-like phenomenon trade tick for tick in real time,” he said in a note to clients.

One Bitcoin supporter with a unique perspective on the boom might be Mike Caldwell, a 35-year-old software engineer based in suburban Utah. Caldwell is unusual insofar as he mints physical versions of bitcoins at his residence, cranking out thousands of homemade tokens with codes protected by tamper-proof holographic seals — a retro-futuristic kind of prepaid cash.

Caldwell acknowledges that the physical coins were intended as novelty items, minted for the benefit of people “who had a hard time grasping a virtual coin.”

But that hasn’t held back business. Caldwell said he’d minted between 16,000 and 17,000 coins in the year and a half that he’s been in business. Demand is so intense he recently announced he was accepting clients by invitation only.

Some may wonder whether Caldwell’s coins will one day be among the few physical reminders of an expensive fad that evaporated into the ether — perhaps the result of a breakdown in its electronic architecture, or maybe after a crackdown by government regulators.

When asked, Caldwell acknowledged that bitcoin might be in for a bumpy ride. But he drew the analogy between the peer-to-peer currency enthusiasts who hope to shake the finance world in the 2010s with the generation of peer-to-peer movie swappers who challenged the entertainment industry’s business model in the 2000s.

“Movie pirates always win the long game against Hollywood,” he said. “Bitcoin works the same way.”

Unregulated Hacker Currency Used for Any Purpose | DFI News.

Spiking Bitcoins Minted by Skype Malware

Quote

spiking Spiking Bitcoins Minted by Skype Malware
                                                                            Courtesy of Kapersky Lab

As the value of bitcoins skyrockets, security researchers have discovered yet another piece of malware that harnesses the processing power of compromised PCs to mint the digital currency.

Scammers spreading malware on Skype are taking a nefarious approach to mine Bitcoins. Malicious code hijacks a computer’s resources, according to Kaspersky Lab. While the bitcoin-miner.exe malware harnesses only the CPU resources, which are much slower than GPUs in BTC mining, the attackers have the benefit of infecting many computers and then chaining them together to mint the digital currency. Unlike legitimate miners, the criminals don’t have to pay the purchase price of the hardware or pay for the electricity to run them.

Spiking Bitcoins Minted by Skype Malware | DFI News.

Fool Me Once… — Krebs on Security

Quote

When you’re lurking in the computer crime underground, it pays to watch your back and to keep your BS meter set to  ’maximum.’ But when you’ve gained access to an elite black market section of a closely guarded crime forum to which very few have access, it’s easy to let your guard down. That’s what I did earlier this year, and it caused me to chase a false story. This blog post aims to set the record straight on that front, and to offer a cautionary (and possibly entertaining) tale to other would-be cybersleuths.

bait 285x153 Fool Me Once… — Krebs on SecurityOn Jan. 16, 2013, I published a post titled, “New Java Exploit Fetches $5,000 Per Buyer.” The details in that story came from a sales thread posted to an exclusive subforum of Darkode.com, a secretive underground community that has long served as a bazaar for all manner of cybercriminal wares, including exploit kitsspam services,ransomware programs, and stealthy botnets. I’ve maintained a presence on this forum off and on (mostly on) for the past three years, in large part because Darkode has been a reliable place to find information about zero-days, or highly valuable threats that exploit previously unknown vulnerabilities in software — threats that are shared or used by attackers before the developer of the target software knows about the vulnerability.

I had previously broken several other stories about zero-day exploits for sale on Darkode that later showed up “in-the-wild” and confirmed by the affected vendors, and this sales thread was posted by one of the forum’s most trusted members. The sales thread also was created during a time in which Java’s maker Oracle Corp. was struggling with multiple zero-days in Java.

What I didn’t know at the time was that this particular sales thread was little more than a carefully laid trap by the Darkode administrators to discover which accounts I was using to lurk on their forum. Ironically, I recently learned of this snare after white/grey hat hackers compromised virtually all of the administrator accounts and private messages on Darkode.

“Looks like Krebs swallowed the bait, and i got an idea how to catch him now for the next thread,” wrote Darkode administrator “Mafi” in a Jan. 16 private message to a co-admin who uses the nickname “sp3cial1st”.

Following this post, the administrators compared notes as to which users had viewed the fake Java zero-day sales thread during the brief, two-day period it was live on a restricted portion of Darkode. “I have taken a careful examination of the logs related to the java 0day thread,” sp3cial1st wrote to a Darkode administrator who used the nick “187″.

A side note is probably in order here. This 187 user was apparently quite paranoid; he changed nicknames on the forum like so many pairs of underwear. In this screenshot of a private message between 187  and sp3cial1st, we can see 187 asking to have his forum name changed from his previous nick — “teardrop” — to 187. This is interesting because “teardrop” was the nickname used by the Darkode member who bragged to other admins about having his friend launch a distributed denial-of-service attack on my site on July 10, 2012, after I wrote about a zero-day exploit in Plesk that I’d discovered for sale on Darkode. By the way, 187 appears to be a Canadian citizen who likes to use the alias “Ryan Russels”; by his own admission, 187 is a 36-year-old male currently living with his wife in Dubai and wanted in Canada for unspecified criminal charges.

mafionwatermarkingmath 285x283 Fool Me Once… — Krebs on Security

Darkode admin “Mafi” explains his watermarking system.

At any rate, leaked private forum messages indicate that the administration of Darkode came up with the fake Java 0day idea after determining that their clever watermarking scheme had been exposed. Forum admin Mafi devised a system for secretly tagging each Web page on the forum with unique markers that could help identify and then ban forum accounts that were being used by security researchers to take screen grabs.

Mafi’s watermarking system can extract the user ID used to take any screen grab as long as that image includes the information under the “Author” sidebar on the left edge of the forum page: As explained in the screen shot to the left, the watermarking system computes  two qualities present in that area: the “rep” or reputation field, and the user’s number of posts.

I debated whether to run this post detailing how I got fooled by Darkode’s disinformation campaign/mole hunt, in part because I worried that explaining it all could entail “outing” some of my sources and methods. But I believe that one only grows by admitting one’s mistakes, and so to Oracle and to any readers I may have upset or misled by my previous story on this apparently bogus zero-day, I heartily apologize.

Incidentally, these screen shots are hardly the full story. Earlier this week, a security blogger that I’ve long included on my blogroll — Xylitol — leaked a huge archive of screen shots he’s taken from his own lurkings on Darkode. Those, combined with the dozen or so administrator account screen grabs in this post, offer hours of fun for any researcher interested in profiling the most active members of this forum.

For example, looking at the personal signature used by one of the Darkode admins — a user with the screen name “Parabola” — we can see that this user owns several shady businesses, including a service that helps users move money between virtual currencies such asWebMoney and Liberty Reserve. Looking closer at that service, one can discover that the same server also hosts spamming and keylogging services. According to his introductory postto Darkode when he joined in 2009, Parabola work(ed/s) in IT at a software company based in Texas.

Closer inspection of the screen grab of Parabola’s intro shows that he was invited to Darkode by a user named Iserdo, the former owner of the forum. This latter identity belonged to a hacker arrested in 2010 under suspicion of creating, selling and maintaining the “Mariposa” or “Butterfly” botnet, a crime machine that infected millions of PCs. Other active Darkode members that have been busted by authorities for botnet activity include BX1, a 24-year-old Algerian national who was recently arrested in Bangkok for allegedly earning millions of dollars by operating botnets powered by the ZeuS Trojan. Interestingly, BX1 himself warned other Darkode members in November 2012 that the FBI was investigating him. A portion of the Darkode community’s reaction to his arrest can be read here and here.

Fool Me Once… — Krebs on Security.

Incoming search terms:

  • oracle Corp to Corp Consulting

“The Future of Bitcoin” : An Excellent Article by The New Yorker

Quote

bitcoin future bustillos The Future of Bitcoin : An Excellent Article by The New Yorker

On March 16th, the Cypriot President Nicos Anastasiades, who’d been in office for about a month, announced a strategy to solve the country’s banking crisis. This plan, which would be funded in part by confiscating money directly from every single bank account in Cyprus—even the very smallest—met with instantaneous and violent opposition from the country’s citizens. Offstage, the European Union, led by a group of adamant Germans, Finns, and Danes, as well as the I.M.F. and the European Central Bank, pointed a cannon at Anastasiades’s head: if he didn’t move forward with this plan, the Cyprus banks would go bust and their hapless customers would lose pretty much all their money, instead of a measly 6.75 per cent. However, under great pressure from their constituents, Cypriot M.P.s rejected the proposal and sent Anastasiades back to the drawing board.

The following Monday, the price of the decentralized electronic currency bitcoin rose from forty-five to fifty-five dollars on the major exchanges, and by Wednesday it had nipped up to sixty-five dollars. The financial media generally agreed that the two dramas are related. According to Bloomberg Businessweek, it appears that Spaniards are liable to have been particularly active buyers of bitcoins that week, having taken the debacle in Cyprus as the likely sign of a forthcoming governmental plunder of their own savings. The evidence coming out of Spain is circumstantial—a spike in Google searches for “bitcoin,” and another on mobile-app downloads of Bitcoin-related software were widely reported—but the pieces appear to fit. Subsequent developments (including the announcement of an eleventh-hour bailout deal for Cyprus) have so far failed to stabilize the euro or cool the bitcoin fever, with the price over a hundred and three at the time of writing.

That a number of panicked Europeans appear to have reckoned the wildly volatile, vulnerable, and tiny bitcoin market a preferable alternative to their own banking system, even temporarily, signals a serious widening of the cracks between the northern and southern E.U. countries in the wake of the euro-zone debt crisis. It also illustrates the broader collapse of trust that is threatening the world of global banking and fiat money.

The weakness in existing currencies stems from lack of faith in institutions—particularly central banks, which are often in league with commercial and investment banks. When a government bails out a failed bank or insurance company—in essence, by printing money—the net effect is that the currency as a whole is debased, in favor of a few and at the literal expense of everyone else, which amounts to a fair description of today’s global financial system. Hence the sudden appeal of bitcoins, which appear, for the moment, at least, to be immune to the machinations of inept or crooked bankers and politicians.

* * *

In many ways, bitcoins function essentially like any other currency, and are accepted as payment by a growing number of merchants, both online and in the real world. But they are generated at a predetermined rate by an open-source computer program, which was set in motion in January of 2009. This program produced each one of the nearly eleven million bitcoins in circulation (with a total value just over a billion dollars at the current rate of exchange), and it runs on a massive peer-to-peer network of some twenty thousand independent nodes, which are generally very powerful (and expensive) G.P.U. or ASIC computer systems optimized to compete for new bitcoins. (Standards vary, but there seems to be a consensus forming around Bitcoin, capitalized, for the system, the software, and the network it runs on, and bitcoin, lowercase, for the currency itself.)

Bitcoin releases a twenty-five-coin reward to the first node in the network that succeeds in solving a difficult mathematical problem requiring a certain amount of brute-force computation (known as a proof-of-work calculation.) The solution is then broadcast throughout the network, and competition for a new block and its twenty-five-coin reward begins. (There’s a good rundown of the technical aspects of Bitcoin on the Bitcoin wiki; there’s also a wonderfully pellucid explanation of the proof-of-work angle from Paul Bohm, on Quora.)

At first, anyone armed with an ordinary computer could download and run the Bitcoin software and gather (or “mine”) bitcoins. The more computing power you can dedicate to Bitcoin calculations, though, the better your chances of arriving first at each solution. This feature of the system, by design, resulted in a kind of computational arms race that strengthened the network by rewarding increased computing power. Four years into the Bitcoin project, only very powerful, purpose-built machines have enough muscle to keep pace with existing network nodes.

In this way, bitcoins are mined like gold used to be, in quantities that are small relative to the total supply, so that the supply grows slowly. There is an upper limit of twenty-one million new coins built into the software; the last one is projected to be mined in 2140. After that, it is presumed that there will be enough traffic to keep rewards flowing in the form of transaction fees rather than mining new coins. For now, the bitcoins are initially issued to the miners, but are distributed when miners buy things with them or sell them to non-miners (such as jumpy Spanish bank depositors) who desire an alternative currency. The chain of ownership of every bitcoin in circulation is verified and registered with a timestamp on all twenty thousand network nodes. This prevents double spending, since no coin can be exchanged without the authentication of some twenty thousand independent cyber-witnesses. In order to hack the network, you would have to deceive over half of these computers at the same time, a progressively more difficult task and, even today, a very formidable one.

In 2008, Satoshi Nakamoto, the founder of Bitcoin, whose real identity is not known, cleverly combined existing peer-to-peer network technologies, cryptographic techniques, digital signatures, and the potential power of network effects to design and develop the Bitcoin system. Nakamoto was very clearly motivated in this effort by the fallout from the 2008 financial crisis. When the experiment was launched and the first fifty bitcoins (the so-called genesis block) were mined, in January of 2009, he (or she, or they) included this line of text along with the data: “The Times 03/Jan/2009 Chancellor on brink of second bailout for banks.”

Until his disappearance from the Web, around the spring of 2012, Nakamoto was a visible participant on cryptography forums, where he discussed Bitcoin freely, and published a nine-page paper outlining the details of the project. These posts reveal that even in 2008, Nakamoto was able to respond to concerns regarding the scalability of bitcoin with remarkable prescience; he clearly understood the ramp-up of computing power that would be required for producing bitcoins as the system grew.

Only people trying to mine new coins need to run network nodes And at first, most users ran network nodes, but as the network grew beyond a certain point, mining increasingly became the domain of specialists with server farms of specialized hardware.

A casual review of Nakamoto’s various blog posts and bulletin-board comments also confirms that, from the first, Bitcoin was devised as a system for removing the possibility of corruption from the issuance and exchange of currency. Or, to put it another way: rather than trusting in governments, central banks, or other third-party institutions to secure the value of the currency and guarantee transactions, Bitcoin would place its trust in mathematics. At the P2P Foundation, Nakamoto wrote a blog post describing the difference between bitcoin and fiat currency:

[Bitcoin is] completely decentralized, with no central server or trusted parties, because everything is based on crypto proof instead of trust. The root problem with conventional currency is all the trust that’s required to make it work. The central bank must be trusted not to debase the currency, but the history of fiat currencies is full of breaches of that trust. Banks must be trusted to hold our money and transfer it electronically, but they lend it out in waves of credit bubbles with barely a fraction in reserve. We have to trust them with our privacy, trust them not to let identity thieves drain our accounts… With e-currency based on cryptographic proof, without the need to trust a third party middleman, money can be secure and transactions effortless.

* * *

Much of what has been written so far about bitcoins has centered on the perceived dangers of their relative anonymity, the irreversibility of transactions, and on the fact that they can be used for money laundering and for criminal dealings, such as buying drugs on the encrypted Web site Silk Road. This fearmongering is a red herring, and has so far prevented the rational evaluation of the potential benefits and shortcomings of crypto-currency.

Cash is also anonymous; it is also used in money laundering and illegal transactions. Like bitcoins, stolen cash is difficult to recover, and a cash transaction can’t readily be traced back to the source. Nor is there immediate recourse for the reversal of transactions, as with credit-card chargebacks or bank refunds when one’s identity has been stolen. However, I find it difficult to believe that anyone who has written critically of the dangers of bitcoin would prefer an economy where private cash transactions are illegal.

Contrary to hysterical media reports, such as this recent video from the Guardian, the Bitcoin-software community is loosely governed not by wild-eyed kids camping out in half-deserted lofts but by what appears to be a rational and sober group of adult administrators who run the Bitcoin Foundation. This organization was modelled on the Linux Foundation, according to Gavin Andresen, who is currently the Bitcoin Foundation’s chief scientist. As the lead developer for the project, Andresen is paid a salary by the Bitcoin Foundation. He has been involved full-time in Bitcoin since the spring of 2011.

Like the Linux Foundation, the Bitcoin Foundation is funded mainly through grants made by for-profit companies, such as the Mt. Gox exchange, Bitinstant, and CoinLab, who depend on the stability and continued maintenance of the underlying open-source code.

“The Linux Foundation provides a bit of a center for Linux, and to pay the lead developer, Linus Torvalds, so that he can do nothing but concentrate on the kernel,” Andresen said. “It’s a tricky thing, once you get to be a certain size as an open-source project, how do you sustain yourself? Linux is the most successful open-source project in the world, so we thought it would make sense to use that as a model.”

Gavin Andresen is one of the few people in the world who are known to have corresponded directly with Satoshi Nakamoto. (Joshua Davis tried to track him down for The New Yorker in 2011.) When I said I’d like to know more about Nakamoto, Andresen burst out laughing.

“So would I!” His laughter had a credibly rueful edge to it.

He was active on the bitcoin forums through December of 2011. He told me he was going to get busy, and then he stopped posting on the forums. A few months later, he disappeared, and as far as I know nobody has heard from him since then.

Whenever I corresponded with him, it was always on Bitcoin forums or e-mail, we never even real-time text chatted. He was always very businesslike, no personal details, always strictly about the project.

Indeed, a casual review of Nakamoto’s writings online reveals him to be unfailingly cool and collected; the only time I noticed him becoming a little heated was in a few forum posts in December of 2010, when WikiLeaks supporters began soliciting bitcoin donations for WikiLeaks. Nakamoto rejected the idea unequivocally. According to Andresen,

Satoshi just felt the project was still too small to take that much attention. He didn’t want WikiLeaks to jump in at that point, and they didn’t… but a year later they did, and it was fine. I think people realized once I got invited to speak at the C.I.A. that there was no kind of hiding. They, whoever “they” are, already knew about this project. Satoshi was obviously a lot more private, and more worried about what government would do than I am.

I asked Andresen to explain to me the degree to which he and his colleagues are worried about government interference in Bitcoin.

I think if the U.S. government decided that Bitcoin was a bad thing and told me, “Stop doing what you’re doing,” I’d stop doing what I’m doing, quite frankly. But that wouldn’t be very effective, because there are people all over the world who could pick up and reimplement it, for example in different programming languages; if you browse the Bitcoin forums you’ve seen the enormous chaos and energy there. There’s all sorts of people doing all sorts of things—many of them crazy things that will never succeed, but some of those will be the next big things in Bitcoin.

As it happens, a few days ago, the Financial Crimes Enforcement Network (FinCEN), the federal agency that enforces laws against money laundering, announced new guidelines requiring certain “virtual currency” trading entities to register as Money Services Businesses (M.S.B.s). Though the Bitcoin Foundation’s general counsel, Patrick Murck, was somewhat critical of the new guidelines, this move went a certain distance toward calming Bitcoin speculators and others who’d been worried that the government would take more drastic steps against the mining, transfer, and exchange of bitcoins. Andresen is among those who sees the new FinCEN guidelines as a positive development.

In my opinion, the FinCEN guidance is fantastic news: it gives Bitcoin users and businesses clear rules on how they will or won’t be regulated. It is great for ordinary users, because FinCEN said that using bitcoins to buy products or services is perfectly legal. And, long-term, it is great for businesses, because they now know how FinCEN will classify them and what regulations they must obey here in the U.S.

That said, it might cause problems for some smaller U.S. bitcoin-based businesses, who might have been hoping that they wouldn’t be regulated at all. The bigger bitcoin businesses have been anticipating this for a while, so I don’t think it will affect them.

But what about new government regulations that may arise down the road: making it illegal to accept bitcoins as payment, for instance, or outlawing or regulating the exchanges? It might not be so difficult to shut Bitcoin down, and that has to be producing a lot of downward pressure on more widespread acceptance, I suggested.

If you’re asking me what I would expect to happen… I would expect that some country or another will try to do that. You have the same kinds of arguments about the Internet and the free flow of information across the world. And we’ve seen countries like China, that try to either ban the Internet or restrict it. I don’t think you can just hop on the Internet in North Korea.

Nope.

So I’d expect some countries that really want to control their currency, to control transactions, to do the same with bitcoin. The question is whether really big countries—like the United States or France or Russia—decide to do that or not. I don’t think anybody really knows.

* * *

A confluence of key factors is responsible for the current spike in bitcoin values—the situation in Cyprus and the recent FinCEN announcement are widely thought to be among them. But perhaps a more important development is that a number of high-profile online businesses, among them WordPress, Reddit, Namecheap, and Mega, have recently begun accepting bitcoins in payment for their services. There are now many thousands of individuals and businesses already doing business in bitcoins. At bitcoinstore.com, you can buy electronics—including cameras, musical instruments, blood-pressure monitors, and computers—using just bitcoins. There are bitcoin-only casinos, like SatoshiBet, and a bitcoin-based Intrade-style prediction market called Bets of Bitcoin. The infrastructure for implementing the storage and exchange of bitcoins, too, is exploding: vendors, exchanges, facilitators of in-hand trades, dealers in bitcoin debit cards. There are systems for producing “paper wallets” that you can print out for the safe storage of bitcoins, and secure e-wallets for those with a tendency to misplace papers.

The physical bitcoins illustrating most every bitcoin story on the Web are available for purchase, too. They are called Casascius coins, and they are sold by Mike Caldwell through his Web site, casascius.com. These coins contain a private key on a card embedded in the coin and sealed with a tamper-evident hologram.

Caldwell, who lives in Utah, owns a payroll-software business and has about thirty employees. He is not affiliated with the Bitcoin Foundation—he is simply an interested and highly informed participant in the bitcoin market. The name Casascius came from the acronym for “call a spade a spade,” with a vaguely Latinized suffix. The widely adopted Bitcoin motto often appears on Casascius coins: “Vires In Numeris,” which is a rough translation into Latin of the English phrase “strength in numbers.” He is a strong believer in the future of Bitcoin, and has been investing in the currency for a long time. He told me, “After the first crash”—in June of 2011—“there was a panic; people heard that one Web site had been hacked, and erroneously assumed that Bitcoin was a failure. I bought all the way down.”

But Caldwell also thinks the road ahead is likely to be a bumpy one.

I believe Bitcoin will have hiccups and issues in the future… scalability limits. And there will be bugs, and times where people experience delays getting their transactions confirmed. These will cause temporary crises of confidence as the developers team up to solve the various issues. But Bitcoin will also evolve and move past them. The day that Hollywood succeeds in using technology to stomp out the music and movie pirates on the Internet, that’s when they’ll stomp out Bitcoin. I think most people know Hollywood will never win. Bitcoin will always win in the long game.

Caldwell used to mine coins himself, but gave it up eventually: “I considered the maintenance too high in opportunity cost for me personally,” he told me. I asked him what, as an ordinary Bitcoin participant, he thought of the new FinCEN regulations. Are they the thin end of the wedge in terms of government interference? How does the “guidance” affect today’s bitcoin miners in practical terms? Will they all have to register as M.S.B.s? He doesn’t regard it as a threat yet.

Since mining yields pocket change for most, even if it were technically a violation of the way FinCEN sees the law, mining without registering would be like “laundering” a twenty-dollar bill by taking it to the grocery store and asking for two tens… it’s hardly worth the resources for anyone to care about it, no matter how illegal they decide it should be.

Where he does see an issue, however, is in the anonymity that is prized by bitcoin adherents.

Mining produces bitcoins that are extremely anonymous. The most anonymous bitcoins you can get, system-wide, are ones you mined yourself. The mined coins have no origin, no history, no nothing. They just appear out of thin air.

This anonymity becomes particularly problematic, from a regulator’s viewpoint, in the context of criminal activity—for example, hacking attacks that succeed in robbing people of their bitcoins:

We will see many more “man in the middle” attacks, and they will cause disruption; there will be times when it becomes possible to hack into a site or get in the middle of a transaction and hijack the payment address, causing people to send an irreversible payment to a criminal instead of who they thought they’d sent it to. Imagine getting a fake but realistic-looking invoice in the postal mail from a real vendor everyone pays (let’s use the electric company for my example), and you are tricked into sending the payment to a criminal’s P.O. box or mailing address. This doesn’t happen much today, because the criminal’s address would attract law enforcement, and so would their depository bank account. But with bitcoin, an address has no identifying quality and is unseizable, so criminals will do this and get away with it, and people are going to learn the hard way that they have to be vigilant about this.

Caldwell’s political views with respect to Bitcoin are connected, like Nakamoto’s, with a belief in the potential value of cryptography. “Until now, society has underutilized cryptography. If people accept it more broadly, cryptography can facilitate many things: the exchange of money, transparent elections, transparent government.”

The common picture of bitcoin users has been that they’re all long-haired anarchists, libertarians, and weirdos who would do away with government entirely, if they could. But in response to a question about his politics, Mike Caldwell had this to say:

I am not an anarchist; I believe in the rule of law and a civilized society. But I also believe that unchecked power is a threat to the common good, and that anything that the public can do to challenge that power is a benefit to society. As an individual, if you accept bitcoin in exchange for your goods or your work, that is a vote for economic fairness.

So is bitcoin going to save the global economy, or is it today’s answer to seventeenth-century tulip mania? Gavin Andresen offered a word of caution.

I still tell people that Bitcoin is an experiment: only invest time or money you can afford to lose, because Bitcoin is still an experiment. The longer it keeps going in the face of volatility and technical glitches happening, the more we’ll know.

But trust takes time.

The Future of Bitcoin : The New Yorker.

Incoming search terms:

  • simon lang it

Can a DDoS Break the Internet?

Quote

can 2 Can a DDoS Break the Internet?Recently, a massive distributed denial of service attack that was intended to take anti-spam organization Spamhaus offline has been reported on. The attack was described as “internet-threatening,” elaborating further that the attack, peaking at more than 300 gigabits per second, “is the kind of scale that threatens the core routers that join the Internet’s disparate networks.”

Some called into question these assessments.

Can a DDoS Break the Internet? | DFI News.