比特币密码困境：11年无法访问43.6个BTC

数字钱包提供了一种存储加密货币的便捷方式，但失去访问权限可能是一个重大挫折，尤其是涉及大量资金时。

An anonymous cryptocurrency owner has regained access to their Bitcoin (BTC) wallet containing 43.6 BTC, valued at around $3 million, after losing the password for 11 years.

一位匿名加密货币所有者在丢失密码 11 年后重新获得了其比特币 (BTC) 钱包，其中包含 43.6 BTC，价值约 300 万美元。

According to a report by CoinDesk, the owner had utilized a password generator called Roboform to create a complex password for their Bitcoin wallet. However, a critical flaw in the older version of Roboform used by the owner compromised this approach.

根据 CoinDesk 的一份报告，该钱包的所有者使用了名为 Roboform 的密码生成器为其比特币钱包创建了一个复杂的密码。然而，所有者使用的旧版 Roboform 中的一个严重缺陷损害了这种方法。

While password generators are generally recommended for enhanced security, the specific version used by the owner exhibited a determinism, meaning it could recreate the same password given identical conditions.

虽然通常建议使用密码生成器来增强安全性，但所有者使用的特定版本表现出确定性，这意味着它可以在相同的条件下重新创建相同的密码。

Ironically, the owner’s heightened security concerns during the password creation contributed to the situation. Fearing unauthorized access through their computer, the owner opted not to store the password electronically alongside the encrypted wallet file.

具有讽刺意味的是，所有者在密码创建过程中高度的安全顾虑导致了这种情况。由于担心计算机遭到未经授权的访问，所有者选择不将密码与加密的钱包文件一起以电子方式存储。

Unfortunately, this also meant the password wasn’t preserved elsewhere, leaving them no way to regain access.

不幸的是，这也意味着密码没有保存在其他地方，使他们无法重新获得访问权限。

As explained in a YouTube video, the owner’s predicament remained unresolved for several years until they learned about electrical engineer Joe Grand, also known online as “Kingpin.”

正如 YouTube 视频中所解释的那样，业主的困境多年来一直没有得到解决，直到他们了解到电气工程师乔·格兰德（Joe Grand），他在网上也被称为“Kingpin”。

In 2022, Grand garnered recognition within the cryptocurrency community for successfully assisting another individual in recovering access to a lost $2 million crypto holding. The owner, recognizing Grand’s expertise, contacted him for assistance.

2022 年，Grand 因成功协助另一个人找回丢失的 200 万美元加密货币而获得了加密货币社区的认可。业主认识到格兰德的专业知识，联系他寻求帮助。

After accepting the case, Grand meticulously analyzed the situation. He identified the vulnerability in the outdated Roboform software and formulated a strategy to exploit it.

格朗接案后，仔细分析了情况。他发现了过时的 Roboform 软件中的漏洞，并制定了利用该漏洞的策略。

In a perfect scenario, password generators produce unique outputs for each request. However, the flaw in Roboform allowed Grand, through trial and error, to essentially rewind time to 2013, the year the password was created.

在完美的情况下，密码生成器会为每个请求生成唯一的输出。然而，Roboform 中的缺陷使得 Grand 通过反复试验，基本上将时间倒回至 2013 年，即密码创建的那一年。

Grand wasn’t alone in this endeavor. He collaborated with a colleague, Bruno, to generate potential passwords within the narrowed timeframe created by the time manipulation.

格兰德并不是唯一一个这样做的人。他与同事布鲁诺合作，在时间操纵造成的狭窄时间范围内生成了潜在的密码。

This meticulous approach, coupled with a degree of luck as Grand himself admitted, ultimately yielded success. By recreating the specific conditions under which the original password was generated, they were able to crack the code and unlock the Bitcoin wallet.

这种细致的方法，再加上格兰德自己承认的一定程度的运气，最终取得了成功。通过重新创建生成原始密码的特定条件，他们能够破解代码并解锁比特币钱包。

We are on twitter, follow us to connect with us :- @TimesTabloid1

我们在 Twitter 上，关注我们即可与我们联系：- @TimesTabloid1

— TimesTabloid (@TimesTabloid1) July 15, 2023

- TimesTabloid (@TimesTabloid1) 2023 年 7 月 15 日

This incident serves as a valuable reminder of the importance of robust password management practices. While password generators offer a layer of security, it’s crucial to ensure they utilize entirely random outputs and implement secure storage solutions for the generated passwords.

这一事件提醒我们，健全的密码管理实践非常重要。虽然密码生成器提供了一层安全性，但确保它们利用完全随机的输出并为生成的密码实施安全存储解决方案至关重要。

For users who may possess older versions of password management software, this case highlights the potential risks and underscores the importance of updating to current versions that address such vulnerabilities.

对于可能拥有旧版本密码管理软件的用户来说，此案例凸显了潜在风险，并强调了更新到解决此类漏洞的当前版本的重要性。

Follow us on Twitter, Facebook, Telegram, and Google News

在 Twitter、Facebook、Telegram 和 Google 新闻上关注我们