logoalt Hacker News

nayuki • yesterday at 9:09 PM • 4 replies • view on HN

The server is getting overloaded, so here's the text for reference:

    Steal my Bitcoin
    0.65 hours without a successful hack
    
    There is a bitcoin key hidden on this server worth about $502.
    
    It is accessible to the PHP user account through the print-flag binary.
    
    This PHP version was selected from before the PHP2SHELL CVEs were released.
    
    First person to get the wallet wins. If you don’t need the money, consider donating it to those who do: givewell.org.
    
    All traffic is logged. This is a known vulnerable machine, so we cannot guarantee privacy. Other attackers may access or monitor activity and data beyond our control. Do not submit anything you want to keep private.
    Challenge wallet
    Explorer ↗
    
    bc1qlnu5…t3cxqy
    
    0.00625104 BTC
    
    ≈ $502.35 USD
    stealmybitcoin.com · Terms of participation

Replies

xmcp123 • yesterday at 10:20 PM

Bahaha someone added to the fund. It’s now $1004

➕ show 4 replies
fwlr • yesterday at 9:38 PM

Great way to inject some price information into the “AI automates exploits at scale” narrative. “AI can now chain complex exploits, it’s point-and-click pwnage, you say? Over or under $500 a pop?”

➕ show 2 replies
sscaryterry • yesterday at 10:46 PM

This could be an interesting bug-bounty type of initiative. Setup a system, lets other dudes at their expense battle for scraps?

zoeysmithe • yesterday at 9:27 PM

" All traffic is logged."

For $500 he can look in the logs and find all manner of new exploits, or new deviations of the existing ones, he can then sell for thousands. Clever business model lol

These projects would be more interesting and ethical if the current and historical logs were instantly put up somewhere public in real-time for anyone to observe.

Regardless, I'm guessing the smart hackers aren't going to bother.

➕ show 2 replies