FBI struggles to seize 600,000 Bitcoins from alleged Silk Road founder
theguardian.com
theguardian.com
Why would exchange rate affect what percentage of bitcoins 600k are! This is terribly confused thought from the journalist:
600k bitcoins, that's "almost $80m".
$80m! But at current exchange rates that's "just over 5%!".
When sitting there are the actual numbers of bitcoins in his wallet and bitcoins in circulation...
The FBI gave the number denominated in USD, so the journalist had to estimate the true number of BTC. The 600k is almost certainly calculated from that $80m number.
So I'm pretty certain that the $80mil estimate is derived from the actual number of Bitcoins in commission that was logged on SR's server.
Using the freenode/#bitcoin 'gribble' irc bot for some calculations, there are only 45,000 bitcoins or $5Million for sale over $100USD.
donpdonp> bids 100 gribble> There are currently 45669.225 bitcoins demanded at or over 100.0 USD, worth 5307618.93329 USD in total.
Selling the remaining 550,000-odd coins would wipe out the market and net only $6million more.
donpdonp> market sell 600000 gribble> A market order to sell 600000 bitcoins right now would net 11853320.3682 USD and would take the last price down to 0.0100 USD, resulting in an average price of 19.7555 USD/BTC.
DPR has a number of defences available that could render the issue of the wallet moot. Most importantly by denying access to the wallet he has a huge point of leverage, both in settlement and retaining counsel. One of the keys to drug law is seizing all assets so that the defendant has no means of defending themselves.
Perhaps the settlement is no prison time and a $80 million dollar fine. Keep in mind that in order for it to be introduced as evidence a copy must be provided.
They had it one phrasing and then the editor got on their back about no one knowing what 600k BTC means, so they started to add the dollar value, then put it in front but forgot to fix the circulation percentage to make sense.
This isn't unheard of, and they're probably not an idiot.
"An FBI spokesperson said to Hill that the “$80m worth” that Ulbricht had “was held separately and is encrypted”."
You can't "hold" bitcoin wallets. Anyone with the private key can spend the bitcoins without having to have the wallet. It would be funny if someone could transfer bitcoins the FBI "holds" to show them a wallet is not something unique that you can be the only one to have.
Living in San Francisco allowed the feds to pick them up on their lunch hour. Even just hopping the border to Mexico would've required them to get international cooperation and extradite him.
He'd likely be a free man if he were in Croatia or Kazakhstan.
so many precautions
read up on some of the police work the feds did. this guy was careless.Sure, he re-used a few login names but I don't know how many people could've successfully gone without doing that over a 2.5 year period. I think it's more accurate to say he "wasn't perfectly careful" than it is to say he was careless.
The Grugq addresses this issue by recommending that one set up an entire fake persona before doing anything, and then doing all the activities "in character" as that persona. If you stay in character, then even making the types of mistakes DPR made would only lead the authorities to the persona rather than yourself.
Granted, this video didn't exist when DPR made Silk Road...
However, I'm not sure how his academic discussion about OPSEC "pimps an image" for his 0day business -- wouldn't security researchers writing 0days not really need the advice in OPSEC For Hackers since they are still acting legally?
Your own government isn't your only potential enemy.
True story: A friend of mine works for a large defense contractor. He's done a fair amount of foreign travel to support projects on foreign soil. Not clandestine projects, they are fully above board with the cooperation of the host countries, but as Kissinger said, america has no permanent friends or enemies, only interests. (Kissinger's a douche, but he's right about that)
The result of all his work travel is that he's made it onto spear-phishing lists at all kinds of national hacker groups. His employer's IT security has had to put his corporate email address in a special group that gets extra scrutiny because of all the attacks directed specifically at him.
That is the difference between a professional and an amateur. An amateur tries hard to get things done, but doesn't really pay attention to methods or details. A professional knows that methods and details matter more than knowledge... and uses best practices to get things done.
If you're running the worlds largest illegal market place, the primary goal should be security and privacy. He re-used login names by accident, or maybe even just laziness.
A simple way of avoiding the above issue is to have a "personal" computer with personal accounts and activity, and a "work" computer, with work accounts and activity. Never use the work computer at home, and never use the home computer in the same place you use the work one. There's no way to confuse identities or traffic patterns.
I think Silk Road is proof of just how good Tor is. It can protect you from governments who are trying to find you. It can even protect someone who knows nothing about programming or security.
He definitely thought he was untouchable, a clear sign of an amateur. Even after all the press touting the fact he was running a huge illegal drug market under the FBI's noses, he continued to carry on like he wasn't going to get caught. Even the most low level criminals have a healthy sense of paranoia. Even close calls will make them completely change how they do things.
Even if he took the modest steps you proposed, he could have wiped and then physically destroyed the HD, tossed into a trash bin and flee the country for a few years until things quieted down. I mean, he had plenty of money, in the most secure, untraceable form so it would've been cake to hideout for a few years or forever if need be.
The problem with this approach is that you need to never use the wrong computer for the wrong thing. You can help yourself somewhat by setting up different window colors / desktop backgrounds / etc, but what happens when you go visit your great aunt for thanksgiving and forget to pack both laptops? What happens when your work laptop breaks, and you desperately need to update the site to deal with some issue?
A more reliable approach would be to have one computer with two accounts (or if you like technically sophisticated approaches, use a mandatory ACL system), one for work one for personal things. Set up each account with noticeably different colors / themes, so that you are less likely to accidentally use the wrong account for the wrong thing. If you forget/damage your laptop, you have less of a temptation to use the wrong computer.
I am sure that Truecrypt fans will point out that hidden volumes work equally well, though the extra effort required is something of a stumbling block in my opinion (and I am not a big fan of hidden volumes to begin with).
One PC, two accounts, breaks for some things, like Flash cookies, etc.
The other alternative is running a "clean" VM inside the "dirty" machine. But that's again likely to cause issues.
I guess you want to pick names that have lots of false positives when searching. But of course you can't ping google to check. Is there a known mechanism for this? I guess the old dice + newspaper to pick a phrase?
Maybe I'm too sensitive about this since nobody in the history of the known universe has the same name that my parents picked, so any hits in search engines are never about anyone else. Unique usernames function the same way.
I think that's right. I got my first modem in 1985 and been on the Internet since the start of the 90s. I never re-use user names between sites, frequently delete my accounts and start with fresh ones.
I've started recently using random word generators to generate common words to use as usernames.
Whenever I want a username that isn't associated with any internet persona of mine, I look around on big forums for names and start googling them. I think the best is to find one that's a character in some obscure book/story, and then pick another character from that story - thank Wikipedia for having this type of info for all sorts of things. Best is something odd enough that it isn't likely to be taken already, but still common enough that the search results for it are too noisy to see a few forum posts.
But then, it depends a lot on what you're trying to hide, and who you're trying to hide it from. Keeping bored teenagers on 4chan from finding your home address and keeping whole departments of the FBI from tracking you down are whole different ballgames.
Actually, part of me would like that to catch on for pseudo-anon usernames, so I'm not quite as trackable between accounts.
Ideally I guess I'd come up with a few dozen random name systems, and hop between them for each account... such a hassle.
a) He's Ross "Patsy" Ulbricht
or
b) He wanted to be caught, and set some mighty precedents.
or...
c) He's sloppy.
Maybe he's like me.
There are plenty of countries that would scoff at extraditing him for this simple fact of not having a treaty. Even countries that we do have a treaty with would've locked up extradition in the courts for years because he's facing life imprisonment for making a website and a bunch of other garbage they found on his servers:
http://www.latimes.com/business/la-fi-ulbricht-hearing-20131...
If convicted, Ulbricht could be sentenced to life in prison.
They're also charging him with paying to have someone killed merely based on chat logs. They even said there's no evidence anyone was killed or frankly any evidence at all other than the chat logs.
Let me translate that Russian for you: "We'll trade you Snowden for Poteyev."
For two, there is no extradition treaty between the U.S. and Croatia. For three, the only reason I listed Croatia was because it is so often referenced as a place to flee if the U.S. government is after you:
http://nakedlaw.avvo.com/crime/how-to-rob-a-bank-and-flee-th...
http://www.policymic.com/articles/48417/where-is-edward-snow...
http://www.dailyfinance.com/2013/06/11/best-countries-no-ext...
Hopefully that's enough - I invite you to use Google to decrease the level of your incredulity in regard to Croatia being a haven to hide from the U.S. It might not be the best place but a lot of people seem to think it is.
Don't give me silly articles. I am an American who has lived in Croatia and I'm pretty familiar with how the average Croatian views the United States, and I am pretty confident in my experience that they would have no problem handing him over even without a formal treaty. There is literally no reason to not do it.
You don't see them extraditing Snowden, do you? Regardless, despite your lack of tact you claim to know more about Croatia than I do and you dismiss web citations that claim to know more than you so it's pointless to discuss further.
If you did, you would find the last one points to this PDF on the US Dept of State Website: http://www.state.gov/documents/organization/71600.pdf which is CHAPTER 209--EXTRADITION of CRIMES AND CRIMINAL PROCEDURE.
That lists Yugoslavia which isn't even a country anymore, but has a note
\1\ For the successor States of Yugoslavia, inquire of the Treaty Office of the United States Department of State.
Croatia is a successor States of Yugoslavia, however, I originally ignored that because I thought I'd have to contact the State Department. Then I decided to see if that info is published. Alright, Lets check out the Treaty Office of the United States Department of State.
Here's the Treaties in Force list.
http://www.state.gov/documents/organization/202293.pdf
Under Croatia it lists
JUDICIAL ASSISTANCE CROATIA — INVESTMENT Agreement on enhancing cooperation in preventing and combating serious crime. Signed at Washington February 16, 2011. Entered into force August 19, 2011. TIAS
That's pretty vague, but there is some agreement there.
http://daily.tportal.hr/211771/Ukrainian-hacker-wanted-in-US...
http://www.croatiantimes.com/news/General_News/2012-08-31/29...
American and Croatian police have worked together to arrest Ukrainian hacker Sergei Litvinenko in Croatia, reports Croatian radiotelevision.
Litvinenko was wanted by US federal police for fraud he had committed in the United States. The federal courts had issued a warrant for his arrest and he was caught in Croatia earlier this week.
There is literally no reason why they wouldn't extradite such a highly valued criminal to the US, formal treaty or not. The ties between the two countries are too strong.
If USA wants you in Croatia or virtually any Balkan or third world country not slaved to China /Russia, you will be placed in a private FBI jet in no time.
Living in San Francisco might have allowed him in hide in plain sight. Who is going to suspect a 20-somthing year old who lives in San Fran of running a multi million dollar drug business. He doesn't attract attention to himself, especially from his family and friends who are most likely to report any suspicious behavior of his to authorities. If he moved overseas and started buying mansions in cash, a red flag somewhere might have gone off. His family might start asking questions he didn't have the answers to. After all, the unabomber was only caught because of the suspicions of his sister in law and brother.
He might have thought of himself as immune to being found out, so it didn't occur to him to move. He was content where he was, and just stayed. Getting caught didn't even come to mind, because he was so confident in himself. He obviously was confident.
You actually have to convert them to cash first.
And that process becomes increasingly more difficult as you go from selling 1 to 10 to 100 to 1000 BTC.
At each step you lose more and more of your anonymity and safety...
Because you can't open up a MtGox account and offer 10k BTC to then cash out anonymously, nor create a localbitcoins account and use meatspace for this large amount without possibly getting robbed or killed.
Not to mention some of those transactions can be traced back via the chainblock after-the-fact, creating more problems for you as now the FEDs know it's SR related.
And that even does not bring up the fact that large transactions can easily cause BTC prices to go down dramatically, since the majority of upticks are based on small transactions that are fraudulently gaming the system.
I imagine DPR basically had little to no money and a lot of BitCoins he could not sell.
My guess would be that if he had this type of btc, he'd begin to work on establishing reliable, trustworthy in-person communicants to perform his big transfers. Perhaps another reason why SF was an important place for him to be. It'd also be intelligent to bring some muscle along to the transfer.
>Not to mention some of those transactions can be traced back via the chainblock after-the-fact, creating more problems for you as now the FEDs know it's SR related.
Obviously, all bitcoins obtained from this type of activity should automatically go through a thorough, trustworthy mixer, perhaps even one that the btc owner wrote himself.
In small countries with no culture of westerners living there long term he'd stand out like a sore thumb. In dictatorial countries they'd think he was a CIA operative and be tailed. Oh, and upon capture he'd be beaten until he told them every little secret, bitcoin passwords included.
So good old USA was better and SF is probably the best way for a guy "acting weird" and staying online all the time to hide. He should have retired a year ago. It's a like playing in a casino, you're bound to lose long term
It does however look like you have a pretty big list to work with: https://en.wikipedia.org/wiki/Extradition_law_in_the_United_...
http://overlapmaps.com/print.php?defaultZoom=2&defaultLat=39...
I happen to be from Croatia and currently live in a less then touristy part of central America and guess what? While us western white folks aren't exactly saturating the local landscape, there are more than enough travelers/students/business people from the US and other Anglo countries here long term for us not really get considered that big of a deal.
Same rules apply to many other places I've been. There's lots of travel happening in the world these days and foreigners in developing countries are hardly a big wonder.
Ulbricht could have easily moved to a dozen different countries in central america, south america or eastern europe and southeast asia and comfortably stayed anonymous in any of them.
Given there are so many independently wealthy people living in San Francisco, it must have its charm.
Edit: Edited city
You think so? One of my college professors was jailed in Kazakhstan because he neglected to bribe one of the customs workers on his way out of the country. That professor had grown up in Kazakhstan and still managed to get screwed over by the government there -- even after he was released, he could not get his money back, as the authorities had "lost" it.
The reality is that there are benefits to living in a developed country, even the USA. I can understand why he would not have wanted to leave even though he was running SR, even with the risks of being caught.
You think Croatia or Kazakhstan don't have anti drug laws? You think they have stricter rules about police, law enforcement, or picking people up off the streets? You think those countries have nicer prisons and less corrupt judges and cops than USA?
It's not just cash. It's political favours, foreign aid, trade deals, international bodies etc.
my bets would be either Yugoslavia
Well that country doesn't exist any more, it broke up. Some of the former Yugoslavia are in the European Union (Croatia, Slovenia). The rest want it. "Oh sorry, we can't let you in/let you in the eurozone/let you in schengen until you abide by international law and extradite these people!". This has happened before, with war crimes, and generals in the Yugoslav wars.
"You'd think" is often true when "you'd be correct to think" isn't.
Survivor Bias.
The criminals that do all of the obvious smart things are much less likely to get arrested. The ones that do get arrested, are disproportionately the ones that did something not-smart. The the larger the quantity and (not-)quality of their mis-steps, the more likely they are to be the one you read about for being arrested.
Living in SF seems like a fairly reasonable mistake--it's simple confidence that you won't be caught.
Some of their mistakes may go unnoticed for a long period of time, but in the long run, just one mistake is all it takes for everything to come undone.
* dirty
* traffic
* a great deal of self-important wannabes
* _astronomical_ cost of living compared to "less desirable" environs like Denver, Omaha, Salt Lake, Dallas, or other large mid/mountain west localities
* family unfriendliness, as the chic "millennial" crowd despises children
* bad politics that impact everyday life (gun ownership, etc.) and high tax rates
and there are many other reasons to _not_ want to be in one of those hotspots.
Surprising as it may seem to some of you, there are cool and interesting people everywhere.
(The last actually fits in (b), but for a different attitude than the others.)
And the person in question is at least of the generation, and arguably of the attitude referred to in those other than the last, so its a pretty unconvincing list of why you'd think that person wouldn't want to live there.
The subject of the article obviously was at least semi-content living in SF, as he definitely had the means to depart if he wanted to do so. My list is meant more as a general reply to "why wouldn't someone want to live in one of those places?" It may just be my background of living in several different places, but personally I have a difficult time grasping why people assume that LA, SF, NY, or Chicago are the only reasonable places to live.
And, places do not have to be dirty, crowded, or high-traffic just because a lot of people want to live there. If things are designed reasonably and the populous behaves reasonably, traffic should continue to flow, there should be adequate personal space, and thoroughfares and public places should be clean and satisfactory.
No man is an island. The people you surround yourself with matter.
I agree that dependent on the level of immersion necessary, serious improv practitioners may find places that aren't the cities you listed restrictive, but there are well-attended improv troupes in other areas.
This I agree with wholeheartedly, which is why, despite having grown up in California, I'm not currently living there and have no plans to move back in the terribly near future.
However, I think all of the other things in your list can also be found nearly everywhere. It all depends on your perspective and your desires.
For what it's worth, from someone who has a great deal of experience living in many different cities, including San Francisco, it's a perfectly serviceable place to live. It is slightly inflated at the moment due to the tech demand, but not by much; otherwise the price reflects the value.
One of my goals is to put myself in a situation to live comfortably on the North Shore of Oahu in the future, because that's where I want to be.
I've always had a pull away, out into a large unpopulated area and it makes complete sense that some people have the opposite. The hustle and bustle can have it's allure and with that many different people around, things are always interesting. It's night that gets me. I love stepping out into a clearing on a star filled night with no noise besides the bugs and my own feet in the leaves.
Good criminal spends his time preparing for when he gets caught.
You're talking out of your ass. As a person who was born in Croatia and lived there for almost 25 years I can tell you that Croatia has been extraditing people left and right for years now.
I don't know what kind of lawless country you're imagining, but in reality Croatia is subject to EU laws, cooperates with lots of international institutions, has very strict anti-drug laws and there is no way an international criminal of DPR's profile would ever be safe there. I've seen my friends go down and get criminal records over a few grams of weed... DPR would have someone knocking on his door as soon as his cover was blown.
Ex-soviet countries would be a much safer bet as they don't seem to want to cooperate with US authorities (Snowden et al). Central America might also be a good bet, but then you risk getting killed by the cartels for undermining their business model, if they ever find out who you are.
This still applies. Of course it would just make them that much more pissed at you since they had to do more paperwork to nab you.
I mentioned this in a reply below, but I'm an American who lived in Croatia for a little over a year. I lived there with a few other Americans. I'm not sure if any of this is true, but we were told Croatia has very strict anti-drug laws. We were told that if we were caught with any amount of drugs whatsoever we would be instantly deported, no questions asked. I wasn't sure if it was a "you better not do it" exaggeration warning or it was truth. Either way, once a police officer stopped a few other Americans I was living with on the street out of the blue and flat out asked them if they were carrying any drugs. I wasn't with them at the time, I only heard the story when they got home. They were obvious foreigners because they were speaking English to each other while walking down the street. I believe the officer also checked everyone's IDs and the papers we had to carry that showed we registered our address with the local police. Yes, as foreigners staying in Croatia we had to register with the local police.
I'm pretty sure he wasn't relying on his physical location to protect him.
[1] http://www.dailytelegraph.com.au/news/nsw/ross-william-ulbri...
Both narcotics trafficking and murder-for-hire are things for which the US has been known to send armed agents -- or actual military -- into foreign countries without coordination with the local government to capture people to be brought back to the US for trial.
> Even just hopping the border to Mexico would've required them to get international cooperation and extradite him.
No, it wouldn't. See, e.g., United States v. Alvarez-Machain, 504 U.S. 655 (1992)
For a currency to be so secure that a state cannot seize it from a citizen is unprecedented.
It will be fascinating to see how this plays out.
I have another curiosity about the FBI's intent to seize his bitcoins- is it fair to seize all of them? If half of these bitcoins were earned while bitcoins were only worth 1/10 of current value, should only 10% of that half be seized? This might be arguable in court.
I'm fairly sure there must be precedent for this. It's not like Bitcoin is the only currency that undergoes inflation...
You mean "deflation"? ;)
The nice thing about BTCs (aside from anonymity) is that you can always subdivide to tiny increments.
If you don't trust me (or my Finance degree), then google and read the paper of the Bitcoin creator, where he/she/they outlined the economics benefits of Bitcoin. Sorry, can't link to the paper myself.
That's what inflating in value means. Not all inflation is of the general level of prices of goods; you can have asset price inflation, or cost inflation, or in this case, Bitcoin value inflation.
because the supply has a hard upper bound
It's appreciating because demand is increasing faster than supply. The future limit may be driving that demand, but it's certainly not the whole reason, since not all currencies with such an upper bound are this successful.
You're using "inflation" to mean exactly the opposite of what economists usually use the term "inflation" to mean. Bitcoin is experiencing deflation because the value of each bitcoin is increasing.
When people - including economists - just say inflation, that's just an abbreviation for "inflation [of the general level of prices]", out if they're Austrian, "inflation [of the money supply]".
But even if this type of inflation is more commonly discussed, that doesn't mean it's the only, and economists also talk about types (e.g. asset value inflation).
Now, notice I didn't write that Bitcoin is an "inflationary currency", but that it's inflating in value. That's because the former term refers to the first kind of inflation I wrote above, when I'm talking about another.
Why did I use an unconventional type of inflation? Is because while it's technically true that the general level of prices in Bitcoins is deflating, I don't think that's very relevant when almost no product sets its prices in that currency, nor will any economy thus experience any deflation due to it.
At least for now, Bitcoin is more like an asset than a currency, therefore it makes sense to speak of its value inflating, just like we do for other assets.
What I think you really meant to say was: "increasing in both value and supply". And that would be right.
So when Anna Schwartz wrote her paper "Asset Price Inflation and Monetary Policy" where she talks about the "assets whose prices have escalated", she actually means the value of the assets went down? I think you've just invented new economic theory.
An asset price inflation is an escalation of their prices, much like a Bitcoin value inflation is an escalation of its value.
What I think you really meant to say was: "increasing
Why do you think the word "inflation" was chosen in the first place? What does it mean to inflating something?
The money supply of bitcoins is inflationary because bitcoins are still being made.
The purchasing power of bitcoins is deflationary because its buying power has historically increased (making other goods decrease in their bitcoin price over time.)
Since the deflationary element has predominated in the years since its creation however, it is more sensible to call it "deflationary" in the whole.
If my illegal activity generates 1 bitcoin which, 2.5 years later is worth 10 bitcoins, all 10 bitcoins can be seized since they all originated from the original seizable piece of property.
Were this not the case and only the orignial result of an illegal transaction could be seized those running illegal operations would be able to profit from their crimes by simply converting one type of property into another that could increase in value. For example, if you sold 20,000,000 in drugs and purchased 20,000,000 in stock, it does not make sense that, once your property is seized, you can keep the increase in value between when you broke the law and when you got caught. This would make crime much more profitable which is the opposite goal of the seizure laws.
Paying into a mortgage as the same effect. As you pay back a mortgage you acquire equity in the property. The government would then be able to seize your equity in the house, meaning they could sell the property and after paying back the remainder of the mortgage keep the difference.
In this case I much prefer them to take the house, because it's significantly less valuable.
I wasn't suggesting any kind of money laundering.
burying bitcoin can be done with a flowerpot.
As mentioned in the article, even after acquiring the wallet file, the FBI is still unable to perform transactions with that BTC. There's no bank they can order to transfer it into their account, no briefcase full of cash they can deposit, etc. As I understand it, the only way they're able to deprive Ulbricht of them is by not letting him keep a copy of the file. With the "brain wallet" strategy (not sure how viable that really is), they wouldn't even have been able to get this far.
Just from a redundancy standpoint you don't want one copy of your wallet in one location as it could get corrupted or destroyed in a disaster.
And honestly, when it comes to America and drugs, I'm pretty sure that they have the legal authority to seize and sell the router at the coffee shop computer they traced him to once.
edit: humorous typo.
There are MANY examples of this, so yes. However, it usually applies to the wealthy, so they most probably have better legal representation.
The obvious way would be ambiguity about the final fate of his bitcoins, and centuries' worth of hacker legends about the lost treasure of the Dread Pirate Roberts.
It is amazing to think that in a few hundreds years, quite possibly, bitcoin/a bitcoin derivative could be the "global" currency, and this wallet could actually be a lost treasure among people. Sometimes it's easy to think we're just in the here and now, but we are making history, we're in the future's past.
I imagine that turning over the bitcoins will be a condition of the near inevitable plea bargain.
Particularly given the potential capital sentence, I'm pretty sure he's lawyers -- expensive or not -- will recommend taking a plea if one is offered. Whether or not he'll take it is a different story.
Perhaps that's because they easily RICO the possessions of almost all defendants.
Yes ... if no backups exist.
Also, surely a backup exists. What is an effective way to backup the wallet so that it can survive decades of prison time? Particularly if a trustworthy friend does not exist?
A piece of paper: http://bitcoinpaperwallet.com/
You should only print it from a secure system though.
They would need to break the encryption first though.
- Deliberate invalidation: "sweeping" is the process of transferring all funds from a wallet into another one. If the owner ever gets access to some private computer time and one of his wallet backups, he can empty everything into a new address - one where the private key is stored in an undisclosed location, even his brain. Anyone with access to the wallet file in question in this article would do well to sweep it into a new address now.
- The reference client creates 100 addresses at a time and stores their keys in a file. New addresses are used by default for "change." Change is another subject entirely, but the end result is that yes, you do need to keep updating your backups every 100 transactions or so. This has the nice effect of helping anonymity and passively invalidating that file you forgot about, and the not-so-nice effect of being annoying. Some other clients have different behavior.
Isn't this totally false? He could have easily made backups of the wallet and even given copies of it to others. I'd expect there's a whole bunch of ways that these bitcoins could still get spent?
If he stored the bitcoins in a single address, and he has the private key stashed somewhere, then even if the wallet file is deleted, it can be retrieved. This is how bitcoin works, if you have the ECDSA private key of a bitcoin address, you can spend those bitcoins without having the need for a wallet :)
(Of course, there's no way this could happen since we don't know what private keys are stored in Ross' head. Also this is based on the efficient market hypothesis and real world results have other complecting factors.)
The other question is then whether the FBI would then liquidate the coins via an exchange, or just sit on them.
Not true; anyone who sells something for bitcoins creates some amount of intrinsic demand. Silk Road did, and was probably by far the biggest generator of such demand, but not the only one.
People think dollars have value because they're accepted by other people because other people think they have value.
You accept your paycheck in whatever currency you accept it in and believe it has value because you have faith that other people will accept that currency for whatever goods and services you want. It all works as long as everyone believes the currency will keep having value in the future. Bitcoins are no different. As long as a group of people believe they have value in the future, and will be accepted as payment for goods and services, they will continue to have value.
- you can make indefinite copies of your locked wallet so TLA basically can't confiscate it
- you can protect your wallet with a secret (passphrase and/or a key) so that they can't unlock it
- you can distribute the secret among several people using one of the secret sharing protocols
- or hide it steganographically in an ordinary file while the TLA in question still can't prove it's there
From a strictly technical PoV, the concept of having several copies of the wallet, all equivalent, where whichever is spent first cancels the others, is very interesting and novel. It has a funny quantum physics vibe, too.
I do however agree that an actual amendment is unlikely.
I was looking at it from a more general PoV than simply DPR's fate: the practical need for the judicial power to be able to seize stuff is threatened by the 5th. There must be many people in the system who badly want to carve password rendition out of the 5th's no-self-incrimination protections.
Coming back to DPR's case, given the political importance of the case (it's about sovereign states' ability to police Internet on their own turf), I don't think the central problem is to recover the BTC600K as actual dollars. And I don't even know whether they could easily and legally sell them off, would they get the keys. The problem is as follows: if there are copies of those wallets, if they're spent from one of those copies, feds will look like fools powerless to confiscate millions of dollars from an imprisoned and convicted guy.
The journalist said "don't worry, feds have seized the wallets, they won't be spent". That's almost comically false, but that's telling as (conservative) wishful thinking: if only this was true, then no major social/legal adjustments would be necessary to cope with the emergence of crypto-currencies.
You can't possibly trust any company with this kind of service. This is something you need to [learn how to] build yourself.
The concept of "deadman's switch" has an implicit component of "trust no one", IMHO.
That's a good point. However, the Swiss made a lot of money offering comparable services for many years. (Numbered bank accounts.) Also, there's a big difference between simply building such a service and having such a service that is well tested and reliably and securely hosted. It's also a relatively simple matter to test such a service with a small amount of money.
Such services seem highly valuable, but may require practical homomorphic encryption/computation schemes to be themselves practical.
I'm wondering if that conversation has come up among management at FBI and what the outcome has been.
That they are even trying to exchange the Bitcoins for USD is, at least in my mind, U.S. governmental approval of Bitcoins.
If a drug dealer settled all his transaction in baseball cards, the FBI would of course confiscate them.
Whether or not the FBI wants to seize it and spend it in some way, or just to seize it so it can't be spent by DPR or anyone anymore is up for debate. I'm not actually sure what the laws are regarding money or possessions seized from criminals over there.
Ugh, no. Having the file means you can transfer out the bitcoins. Anyone having the file can transfer out the bitcoins, so the FBI securing that wallet doesn't lock down those bitcoins.
The FBI cannot properly "seize" the bitcoins unless they use the wallet to transfer the coins to a fresh address they make and control. And I'm not sure that traditional seizure laws allow that, because AFAIK we've never had this scenario before.
[1] Obligatory XKCD http://xkcd.com/538/
It's naive to think that if the FBI want the private key they don't have legal ways of pressing you to hand it over.
The reference client (I's not mentioned which wallet software) uses hundreds of thousands of rounds of key stretching, enough that on a GPU you're only getting a few attempts at the key. Might irritate them enough to crack out a good sized farm.
The interesting part is if he does have a backup, and if he does access the funds in there for his legal defense. Would his attorney consider that money to be tainted, and thus refuse to accept it?
Edit: I am not a lawyer.
1) Your password is "ITotallyKilledThoseTwentyPeople", e.g. the password contains testimonial evidence. This can probably be circumvented by allowing the defendant to enter their password privately.
2) Your lawyer successfully argues that the very admission of knowing the password to a thing is testimonial. In other words, let's say the feds find an encrypted hard drive labelled "child pornography" under the couch at your apartment. If your argument is that a friend left it there, and the feds can't prove otherwise, then the very act of decrypting that drive would be an admission that it's yours, and hence a violation of the fifth.
It'll be interesting to see where law settles in this area. One thing that seems certain: if the gov't can prove you know a password, they can force you to use it (assuming use is possible without disclosure).
(This is relevant due to the fifth amendment to the constitution. In many cases, turning over a password or combination is considered self incrimination and thus cannot be compelled by the state.)
Surely you can make copies of your wallet and keep them in various secure locations?
It's scary to see how clueless mainstream journalists are, as soon as they touch a subject we're mildly knowledgeable about. Imagine the amount of BS they spread when talking about complex stuff such as macro-economics...
Basically as long as the money can't be spent for whatever reason it is effectively seized.
I don't think the NSA is going to care about spending a few 10's of millions of dollars on custom bitcoin hashing hardware. Unless people don't think the NSA can outdo some fly-by-night ASIC developers.
If the US government is truly concerned about bitcoin, it won't survive long.
If they did amass a large volume of bitcoins and dumped them on the market the market would drop but like every other drop it would probably be temporary as people love buying cheap BTC when the market crashes (look at the crash after DPR was arrested, bounced back in hours).
They actually can. Generation speed is not adjusted real time, but only every few days. If you generate a mass very fast you can go over it. (And in fact historically it's always been over the expected number.)
That much power will let them mess around with what transactions get accepted, but that's an entirely separate issue. 51% attack is child's play at this point. What do you do against an adversary that publishes 500 different block chains designed to be easily confused with the 'correct' chain?
Saying "The Bureau is in a position equivalent to having seized a safe belonging to a suspect with no idea of the combination – and no hope of forcing it open any other way." is completely incorrect.
Not so much. Everyone might have a clue, but their words could be mangled and/or placed in entirely the wrong context by clueless editors.
Not some subtle but plain simple. Like using personal email to register on forums and promote SR and recruit people.
Using stackoverflow with personal email, again... Yes they are not some solid evidences, but made the FBIs life, to get the guy, much easier. You might say that it's easy for me to point out those mistakes but they are so basic and it's not that he was running some Nigerian type of scam, he must have been way more careful.
Or keep messages about the 'murder-for-hire'. Yeah it's rather obvious that no one got hired but good luck explaining this negotiation tactics to the judge. Plus he mentions $80k for other 'murder-for-hire'. I'm really curious how the thing with this 'murder' will end up. I mean he could have just simply deleted them just in case. It's not FB that it would stay forever...
At that time it was probably nothing more than a side-project destinded to die off in 6 months.
This may work for a typical startup, but Ross was foolish enough to apply this advice to a criminal enterprise.
pg's answer was that it was in no way worth the risk, there are lots of other things you can try without the large risk of ending up in jail.
Certainly something like this would have a big effect on the BitCoin market. I'm interested to see what happens in the future.
But if someone got their hands on them and performed a huge laundry so that everyone has tainted coin history, then you might be ok.
A simple encrypted wallet would have the same level of security...
If he has a copy and they can't get the keys, this seizure is meaningless. If he doesn't have a copy, or they can get the keys, the story changes.
EDIT: I mean exploting this bug: https://github.com/bitcoin/bitcoin/issues/2838
Wallets use a cryptographic key derivation function, this is against a plain text and configurable password. This would only be an issue if the wallet was loaded into the old version of the software at the time they attacked.
So Ross, how about you tell us the password and instead of 14 life sentences you get only 20 years?