比特幣密碼困境：11年無法存取43.6個BTC

數位錢包提供了一種儲存加密貨幣的便捷方式，但失去存取權限可能是一個重大挫折，特別是當涉及大量資金時。

An anonymous cryptocurrency owner has regained access to their Bitcoin (BTC) wallet containing 43.6 BTC, valued at around $3 million, after losing the password for 11 years.

一位匿名加密貨幣所有者在丟失密碼 11 年後重新獲得了其比特幣 (BTC) 錢包，其中包含 43.6 BTC，價值約 300 萬美元。

According to a report by CoinDesk, the owner had utilized a password generator called Roboform to create a complex password for their Bitcoin wallet. However, a critical flaw in the older version of Roboform used by the owner compromised this approach.

根據 CoinDesk 的一份報告，該錢包的所有者使用了名為 Roboform 的密碼產生器為其比特幣錢包創建了一個複雜的密碼。然而，所有者使用的舊版 Roboform 中的一個嚴重缺陷損害了這種方法。

While password generators are generally recommended for enhanced security, the specific version used by the owner exhibited a determinism, meaning it could recreate the same password given identical conditions.

雖然通常建議使用密碼產生器來增強安全性，但所有者使用的特定版本表現出確定性，這意味著它可以在相同的條件下重新建立相同的密碼。

Ironically, the owner’s heightened security concerns during the password creation contributed to the situation. Fearing unauthorized access through their computer, the owner opted not to store the password electronically alongside the encrypted wallet file.

諷刺的是，所有者在密碼創建過程中高度的安全顧慮導致了這種情況。由於擔心電腦遭到未經授權的訪問，所有者選擇不將密碼與加密的錢包檔案一起以電子方式儲存。

Unfortunately, this also meant the password wasn’t preserved elsewhere, leaving them no way to regain access.

不幸的是，這也意味著密碼沒有保存在其他地方，使他們無法重新獲得存取權限。

As explained in a YouTube video, the owner’s predicament remained unresolved for several years until they learned about electrical engineer Joe Grand, also known online as “Kingpin.”

正如 YouTube 影片中所解釋的那樣，業主的困境多年來一直沒有得到解決，直到他們了解到電氣工程師喬·格蘭德（Joe Grand），他在網上也被稱為“Kingpin”。

In 2022, Grand garnered recognition within the cryptocurrency community for successfully assisting another individual in recovering access to a lost $2 million crypto holding. The owner, recognizing Grand’s expertise, contacted him for assistance.

2022 年，Grand 因成功協助另一個人找回遺失的 200 萬美元加密貨幣而獲得了加密貨幣社群的認可。業主認識到格蘭德的專業知識，聯繫他尋求協助。

After accepting the case, Grand meticulously analyzed the situation. He identified the vulnerability in the outdated Roboform software and formulated a strategy to exploit it.

格朗接案後，仔細分析了情況。他發現了過時的 Roboform 軟體中的漏洞，並制定了利用該漏洞的策略。

In a perfect scenario, password generators produce unique outputs for each request. However, the flaw in Roboform allowed Grand, through trial and error, to essentially rewind time to 2013, the year the password was created.

在完美的情況下，密碼產生器會為每個請求產生唯一的輸出。然而，Roboform 中的缺陷使得 Grand 透過反覆試驗，基本上將時間倒回至 2013 年，也就是密碼創建的那一年。

Grand wasn’t alone in this endeavor. He collaborated with a colleague, Bruno, to generate potential passwords within the narrowed timeframe created by the time manipulation.

格蘭德並不是唯一一個這樣做的人。他與同事布魯諾合作，在時間操縱造成的狹窄時間範圍內產生了潛在的密碼。

This meticulous approach, coupled with a degree of luck as Grand himself admitted, ultimately yielded success. By recreating the specific conditions under which the original password was generated, they were able to crack the code and unlock the Bitcoin wallet.

這種細緻的方法，再加上格蘭德自己承認的某種程度的運氣，最終取得了成功。透過重新創建生成原始密碼的特定條件，他們能夠破解代碼並解鎖比特幣錢包。

We are on twitter, follow us to connect with us :- @TimesTabloid1

我們在 Twitter 上，關注我們即可與我們聯繫：- @TimesTabloid1

— TimesTabloid (@TimesTabloid1) July 15, 2023

- TimesTabloid (@TimesTabloid1) 2023 年 7 月 15 日

This incident serves as a valuable reminder of the importance of robust password management practices. While password generators offer a layer of security, it’s crucial to ensure they utilize entirely random outputs and implement secure storage solutions for the generated passwords.

這事件提醒我們，健全的密碼管理實務非常重要。雖然密碼產生器提供了一層安全性，但確保它們利用完全隨機的輸出並為產生的密碼實施安全儲存解決方案至關重要。

For users who may possess older versions of password management software, this case highlights the potential risks and underscores the importance of updating to current versions that address such vulnerabilities.

對於可能擁有舊版密碼管理軟體的使用者來說，此案例凸顯了潛在風險，並強調了更新到解決此類漏洞的當前版本的重要性。

Follow us on Twitter, Facebook, Telegram, and Google News

在 Twitter、Facebook、Telegram 和 Google 新聞上關注我們