×
Security

Highly Invasive Backdoors Hidden in Python Obfuscation Packages, Downloaded by 2,348 Developers (arstechnica.com) 50

The senior security editor at Ars Technica writes: Highly invasive malware targeting software developers is once again circulating in Trojanized code libraries, with the latest ones downloaded thousands of times in the last eight months, researchers said Wednesday.

Since January, eight separate developer tools have contained hidden payloads with various nefarious capabilities, security firm Checkmarx reported. The most recent one was released last month under the name "pyobfgood." Like the seven packages that preceded it, pyobfgood posed as a legitimate obfuscation tool that developers could use to deter reverse engineering and tampering with their code. Once executed, it installed a payload, giving the attacker almost complete control of the developerâ(TM)s machine. Capabilities include:


- Exfiltrate detailed host information
- Steal passwords from the Chrome web browser
- Set up a keylogger
- Download files from the victim's system
- Capture screenshots and record both screen and audio
- Render the computer inoperative by ramping up CPU usage, inserting a batch script in the startup directory to shut down the PC, or forcing a BSOD error with a Python script
- Encrypt files, potentially for ransom
- Deactivate Windows Defender and Task Manager
- Execute any command on the compromised host


In all, pyobfgood and the previous seven tools were installed 2,348 times. They targeted developers using the Python programming language... Downloads of the package came primarily from the US (62%), followed by China (12%) and Russia (6%)

Ars Technica concludes that "The never-ending stream of attacks should serve as a cautionary tale underscoring the importance of carefully scrutinizing a package before allowing it to run."
Bitcoin

Coinbase Will Completely Remove Bitcoin SV By January 9 (decrypt.co) 25

Long-time Slashdot reader UnknowingFool writes: Coinbase, America's largest cryptocurrency exchange, has announced they are completely removing all support for Bitcoin SV (BSV) by January 9. All current holders of that cryptocurrency on the exchange will need to withdraw or the assets will be liquidated after that date. Bitcoin SV is not the original Bitcoin but a fork supported by Craig Wright. This removal follows a delisting in 2021 after the cryptocurrency suffered a "51% attack." Since that time clients have not been about to buy or sell Bitcoin SV on the exchange. According to CoinGecko, Bitcoin SV is currently the 53rd biggest digital assets, with a market cap of $967 million.
Bitcoin

Bored Ape Conference Attendees Wake Up With Searing Eye Pain, Vision Loss (404media.co) 115

An anonymous reader quotes a report from 404 Media: Attendees at a conference for Bored Ape NFT owners are reporting waking up in the middle of the night following laser and blacklight-heavy performances with extreme eye pain and vision loss. Yuga Labs, the parent company of Bored Ape Yacht Club, hosted ApeFest in Hong Kong from November 3-5. The event was open to holders of Bored Ape NFTs, a crypto project that peaked in 2021 and recently crashed to a two-year low, costing many investors thousands of dollars.

"I woke up at 04:00 and couldn't see anymore. Had so much pain and my whole skin is burned. Needed to go to the hospital," one attendee posted on the last day of the event. "The doctor told me the uv of the lightning of the stage did it. It has the same effect as sunlight. Still can not see normally.." "Same here for me and +1. I had eyeglasses, so was a bit spared, but skin is burned and +1 had the same degree of issues with eyes," someone replied. "The toilets may have been great, but what happened to our eyeballs last night at #ApeFest?" another attendee wrote, as a follow-up to a photo of him sitting on a toilet with his pants around his ankles in a room bathed in intense blacklights. "Been to lots of concerts, festivals, Burning Man, and never have I ever experienced fucked eyes like this."

Even as they woke up in the middle of the night with blinding eye pain, some attendees still praised the organizers for the event. "Thanks for great apefest logistiscs guys @yugalabs & @BoredApeYC. Incredible event and met plenty of amazing people," one wrote. "Still, as dozens of others, I've almost lost sight this night." They suggested others get their eyes checked like they did, and said their eyes were burned by UV. "To the organisers: For the communication & awareness reasons, it would be fair to put together an official statement with recommendations what to do, as dozens of people you care about were exposed to serious health hazards and lots of suffering," they continued. "You're good guys so it should be easy for you to recognise the seriousness of it." Photos and videos from the event show crowds of young men doing some of the worst moshing I've ever seen to performances and conference rooms soaked in blacklight and lasers. Where in the venue the damage was done is still unclear.
Bored Ape Yacht Club acknowledged the issue in a post early Monday morning: "Apes, we are aware of the eye-related issues that affected some of the attendees of ApeFest and have been proactively reaching out to individuals since yesterday to try and find the potential root causes," the official account tweeted. "Based on our estimates, we believe that much less than 1% of those attending and working the event had these symptoms. While nearly everyone has indicated their symptoms have improved, we encourage anybody who feels them to seek medical attention just in case."
Crime

FTX Founder Sam Bankman-Fried Found Guilty of Fraud (yahoo.com) 135

Slashdot readers schwit1 and Another Random Kiwi share the breaking news that FTX founder Sam Bankman-Fried has been found guilty of fraud. From the Associated Press: FTX founder Sam Bankman-Fried's spectacular rise and fall in the cryptocurrency industry -- a journey that included his testimony before Congress, a Super Bowl advertisement and dreams of a future run for president -- hit a new bottom Thursday when a New York jury convicted him of fraud in a scheme that cheated customers and investors of at least $10 billion. After the monthlong trial, jurors rejected Bankman-Fried's claim during four days on the witness stand in Manhattan federal court that he never committed fraud or meant to cheat customers before FTX, once the world's second-largest crypto exchange, collapsed into bankruptcy a year ago.

"His crimes caught up to him. His crimes have been exposed," Assistant U.S. Attorney Danielle Sassoon told the jury of the onetime billionaire just before they were read the law by Judge Lewis A. Kaplan and began deliberations. Sassoon said Bankman-Fried turned his customers' accounts into his "personal piggy bank" as up to $14 billion disappeared. [...] U.S. Attorney Damian Williams told reporters after the verdict that Bankman-Fried "perpetrated one of the biggest financial frauds in American history, a multibillion dollar scheme designed to make him the king of crypto." "But here's the thing: The cryptocurrency industry might be new. The players like Sam Bankman-Fried might be new. This kind of fraud, this kind of corruption is as old as time and we have no patience for it," he said.

The Courts

Sam Bankman-Fried Testifies, Says He 'Skimmed Over' FTX Terms of Service (arstechnica.com) 49

An anonymous reader quotes a report from Ars Technica: Sam Bankman-Fried took the stand in his criminal trial today in an attempt to avoid decades in prison for alleged fraud at cryptocurrency exchange FTX and its affiliate Alameda Research. [...] Some of the alleged fraud relates to how Alameda borrowed money from FTX. In testimony today, "Bankman-Fried said he believed that under FTX's terms of service, sister firm Alameda was allowed in many circumstances to borrow funds from the exchange," the WSJ wrote. Bankman-Fried reportedly said the terms of service were written by FTX lawyers and that he only "skimmed" certain parts. "I read parts in depth. Parts I skimmed over," Bankman-Fried reportedly said after [U.S. District Judge Lewis Kaplan] asked if he read the entire terms of service document.

Sassoon asked Bankman-Fried if he had "any conversations with lawyers about Alameda spending customer money that was deposited into FTX bank accounts," according to Bloomberg's live coverage. "I don't recall any conversations that were contemporaneous and phrased that way," Bankman-Fried answered. "I had so many conversations with lawyers later when we were trying to reconcile things in November 2022," Bankman-Fried also said. "There were conversations around Alameda being used as a payment processor, a payment agent for FTX. I frankly don't recall conversations with lawyers or otherwise about the usage of the funds or the North Dimension accounts." North Dimension was an Alameda subsidiary. The Securities and Exchange Commission has alleged that "Bankman-Fried directed FTX to have customers send funds to North Dimension in an effort to hide the fact that the funds were being sent to an account controlled by Alameda." [...]

In an overview of the alleged crimes, the indictment said Bankman-Fried "misappropriated and embezzled FTX customer deposits and used billions of dollars in stolen funds... to enrich himself; to support the operations of FTX; to fund speculative venture investments; to help fund over a hundred million dollars in campaign contributions to Democrats and Republicans to seek to influence cryptocurrency regulation; and to pay for Alameda's operating costs." He was also accused of making "false and fraudulent statements and representations to FTX's investors and Alameda's lenders."
SBF's legal team decided that he would take the stand in his own defense -- a risky decision by legal observers as he will have to face cross-examination from federal prosecutors. In a rather unusual move, Judge Kaplan sent the jury home for a day to conduct a hearing on whether certain parts of Bankman-Fried's testimony are admissible.

During his testimony, Bankman-Fried discussed various aspects of the case, including FTX's terms of service, loans from Alameda to him and other executives, a hack into FTX, and his use of the encrypted messaging service Signal. Live paywall-free updates of the trial are available here.
IT

They Cracked the Code To a Locked USB Drive Worth $235 Million in Bitcoin. Then It Got Weird. (wired.com) 61

Unciphered, a Seattle-based startup, claims to have cracked the seemingly unbreakable encryption of IronKey S200, a decade-old USB thumb drive. By exploiting an undisclosed vulnerability in the device, the company says it can bypass the drive's feature that erases its contents after 10 incorrect password attempts. The breakthrough came within a day of receiving a test device, suggesting that the firm's hacking technique, powered by high-performance computing, could have far-reaching implications.

The startup's focus is not just technological; it's after a specific IronKey that holds 7,002 bitcoins, valued at roughly $235 million, stored in a Swiss bank vault. The device belongs to Stefan Thomas, a Swiss crypto entrepreneur, who has forgotten the password and has only two password attempts left before losing access to his fortune. Unciphered believes its hacking capabilities could unlock Thomas' crypto vault and is preparing to reach out to him to offer its services. The only problem: Thomas doesn't seem to want their help. Wired: Earlier this month, not long after performing their USB-decrypting demonstration for me, Unciphered reached out to Thomas through a mutual associate who could vouch for the company's new IronKey-unlocking abilities and offer assistance. The call didn't even get as far as discussing Unciphered's commission or fee before Thomas politely declined. Thomas had already made a "handshake deal" with two other cracking teams a year earlier, he explained. In an effort to prevent the two teams from competing, he had offered each a portion of the proceeds if either one could unlock the drive. And he remains committed, even a year later, to giving those teams more time to work on the problem before he brings in anyone else -- even though neither of the teams has shown any sign of pulling off the decryption trick that Unciphered has already accomplished.

That has left Unciphered in a strange situation: It holds what is potentially one of the most valuable lockpicking tools in the cryptocurrency world, but with no lock to pick. "We cracked the IronKey," says Nick Fedoroff, Unciphered's director of operations. "Now we have to crack Stefan. This is turning out to be the hardest part." In an email to WIRED, Thomas confirmed that he had turned down Unciphered's offer to unlock his encrypted fortune. "I have already been working with a different set of experts on the recovery so I'm no longer free to negotiate with someone new," Thomas wrote. "It's possible that the current team could decide to subcontract Unciphered if they feel that's the best option. We'll have to wait and see." In past interviews, Thomas has said that his 7,002 bitcoins were left over from a payment he received for making a video titled "What is Bitcoin?" that published on YouTube in early 2011, when a bitcoin was worth less than a dollar. Later that year, he told WIRED that he'd inadvertently erased two backup copies of the wallet that held those thousands of coins, and then lost the piece of paper with the password to decrypt the third copy, stored on the IronKey. By then, his lost coins were worth close to $140,000.

Bitcoin

Bitcoin Blasts Past $33,000 As Optimism For BTC Spot ETF Surges (decrypt.co) 79

Bitcoin has surged past $33,000 per coin on Monday, rising nearly 11% in 24 hours. According to CoinGecko, the coin is up more than 17% in the past seven days. Decrypt reports: Bulls have flooded the space as talk about a spot Bitcoin ETF has investors hopeful that the long-awaited crypto product will soon get approval from the U.S. Securities and Exchange Commission. A Monday CoinShares report showed that institutional investors are pouring money into the space; JPMorgan analysts said last week that a spot Bitcoin ETF could be approved by Christmas.

High-profile investment firms that have applied to the SEC for a spot ETF are fine tuning their applications in the hope that the regulator will give them the green light. Investors have been hungry for a spot Bitcoin ETF for the best part of a decade but Wall Street's biggest regulator experts say has denied applications for such a product, mostly citing the potential for market manipulation as one of the main reasons.

But analysts are now more optimistic than ever before: BlackRock, world's biggest fund manager, applied for a Bitcoin ETF of its own. Not long after, manager Grayscale scored a victory against the SEC when a federal judge sided with the firm over its application to convert its flagship Bitcoin fund into an ETF.

Bitcoin

US Wants To Officially Treat Crypto Anonymity Services As Suspected Money Launderers (wired.com) 54

An anonymous reader quotes a report from Wired: Hamas' attacks against Israel on October 7 have shifted the geopolitical landscape and triggered a looming Israeli ground assault in the Gaza Strip. Now the ripple effects are reaching the cryptocurrency industry, where they've become the United States Department of the Treasury's rallying cry for a crackdown on cryptocurrency anonymity services. The US Treasury's Financial Crimes Enforcement Network (FinCEN) [on October 19th] released a set of proposed rules that would designate foreign cryptocurrency "mixers" -- services that blend users' digital funds to offer more anonymity and make them harder to trace -- as money laundering tools that pose a threat to national security and would thus face new sanctions and regulations. The new rules, if adopted following a 90-day period of public comment and debate, would potentially represent the broadest restrictions imposed yet on the mixing services and could make it far harder for cryptocurrency holders to put their money through the services before cashing it out at a US cryptocurrency exchange, or even at a foreign exchange that accepts US customers.

While the proposed rules were almost certainly in the works long before October 7, the Treasury's announcement tied the push for a change in policy directly to the use of cryptocurrency by Hamas and militant groups in Gaza. "The Treasury Department is aggressively combatting illicit use of all aspects of the CVC ecosystem by terrorist groups," Wally Adeyemo, deputy secretary of the Treasury, wrote in a statement, using the term "CVC" to mean convertible virtual currency. Adeyemo says that this includes Hamas and Palestinian Islamic Jihad, a militant group that often aligns with Hamas, which Israel blamed for an explosion at a hospital in Gaza earlier this week.

Cryptocurrency mixers have existed almost as long as Bitcoin itself. They offer to take in a user's cryptocurrency, blend it with that of other users, and return the funds so that they are harder to follow from their origin to destination on blockchains, which generally record every transaction in full public view. The Treasury's rule change would designate those cryptocurrency-mixing services -- or at least the majority of them that are based outside the US -- as a "primary money laundering concern." They would thus be considered a threat to US national security as defined by section 311 of the Patriot Act, a section of the law designed to restrict how domestic financial institutions interact with potential sources of terrorist financing. The rule change would mean that US financial services, as well foreign ones with US customers -- including cryptocurrency exchanges -- would have to go through extra record-keeping and reporting requirements for funds that have touched a foreign cryptocurrency mixer, and it might even allow the Treasury to block US exchanges from handling those funds.
"We've never seen anything like this before," says Ari Redbord, the head of global policy for TRM Labs, a blockchain analysis firm. Redbord notes that the rule change isn't proposing a blanket ban on foreign mixing services, only new rules for interacting with them. "The reality, however, is that 311 actions oftentimes have a sort of name-and-shame effect, where people are just not wanting to engage with these platforms out of fear of being caught up in money laundering or other type of illicit activity."

"I think the challenge for regulators is, how do we thread the needle between stopping illicit actors from using these platforms but at the same time allow regular users to enable some degree of privacy?" Redbord added. "I think the concern is that this could very much be throwing the baby out with the bathwater."
Bitcoin

California Law Limits Bitcoin ATM Transactions to $1,000 to Thwart Scammers (msn.com) 37

One 80-year-old retired teacher in Los Angeles lost $69,000 in bitcoin to scammers. And 46,000 people lost over $1 billion to crypto scams since 2021 (according to America's Federal Trade Commission).

Now the Los Angeles Times reports California's new moves against scammers using bitcoin ATMs, with a bill one representative says "is about ensuring that people who have been frauded in our communities don't continue to watch our state step aside when we know that these are real problems that are happening." Starting in January, California will limit cryptocurrency ATM transactions to $1,000 per day per person under Senate Bill 401, which Gov. Gavin Newsom signed into law. Some bitcoin ATM machines advertise limits as high as $50,000... Victims of bitcoin ATM scams say limiting the transactions will give people more time to figure out they're being tricked and prevent them from using large amounts of cash to buy cryptocurrency.

But crypto ATM operators say the new laws will harm their industry and the small businesses they pay to rent space for the machines. There are more than 3,200 bitcoin ATMs in California, according to Coin ATM Radar, a site that tracks the machines' locations. "This bill fails to adequately address how to crack down on fraud, and instead takes a punitive path focused on a specific technology that will shudder the industry and hurt consumers, while doing nothing to stop bad actors," said Charles Belle, executive director of the Blockchain Advocacy Coalition...

Law enforcement has cracked down on unlicensed crypto ATMs, but it can be tough for consumers to tell how serious the industry is about addressing the concerns. In 2020, a Yorba Linda man pleaded guilty to charges of operating unlicensed bitcoin ATMs and failing to maintain an anti-money-laundering program even though he knew criminals were using the funds. The illegal business, known as Herocoin, allowed people to buy and sell bitcoin in transactions of up to $25,000 and charged a fee of up to 25%.

So there's also provisions in the law against exorbitant fees: The new law also bars bitcoin ATM operators from collecting fees higher than $5 or 15% of the transaction, whichever is greater, starting in 2025. Legislative staff members visited a crypto kiosk in Sacramento and found markups as high as 33% on some digital assets when they compared the prices at which cryptocurrency is bought and sold. Typically, a crypto ATM charges fees between 12% and 25% over the value of the digital asset, according to a legislative analysis...

Another law would by July 2025 require digital financial asset businesses to obtain a license from the California Department of Financial Protection and Innovation.

Bitcoin

Inside a $30 Million Cash-for-Bitcoin Laundering Ring In New York (404media.co) 34

404 Media (working with Court Watch) reports on a $30 Million cash-for-Bitcoin laundering ring operating in the heart of New York For years, a gang operating in New York allegedly offered a cash-for-Bitcoin service that generated at least $30 million, with men standing on street corners with plastic shopping bags full of money, drive-by pickups, and hundreds of thousands of dollars laid out on tables, according to court records.

The records provide rare insight into an often unseen part of the criminal underworld: how hackers and drug traffickers convert their Bitcoin into cash outside of the online Bitcoin exchanges that ordinary people use. Rather than turning to sites like Coinbase, which often collaborate with and provide records to law enforcement if required, some criminals use underground, in-real-life Bitcoin exchanges like this gang which are allegedly criminal entities in their own right.

In a long spanning investigation by the FBI involving a confidential source and undercover agents, one member of the crew said "that at least some of his clients made money by selling drugs, that his wealthiest clients were hackers, and that he had made approximately $30 million over the prior three years through the exchange of cash for virtual currency," the court records read.

Thanks to user Slash_Account_Dot for sharing the news.
Bitcoin

SEC Drops Claims Against Two Ripple Labs Execs (reuters.com) 4

An anonymous reader quotes a report from Reuters: The U.S. Securities and Exchange Commission dropped claims against two Ripple Labs executives in its lawsuit alleging the blockchain company violated U.S. securities law, according to a court filing in New York on Thursday. The agency said in court papers it is dropping claims that Ripple Chief Executive Brad Garlinghouse and co-founder Chris Larsen aided and abetted sales of the cryptocurrency XRP which a judge has found amounted to unregistered sales of securities.

In its December 2020 lawsuit, the SEC accused Ripple of illegally raising more than $1.3 billion in an unregistered securities offering by selling XRP. U.S. District Judge Analisa Torres in Manhattan granted Ripple a partial win in the case in July, finding that sales of XRP on public exchanges were not unregistered securities offerings. Torres subsequently rejected a request by the SEC to appeal that ruling. She also ruled partly in the SEC's favor, saying the agency had shown the company's $728.9 million of XRP sales to hedge funds and other sophisticated buyers had violated the law.

Garlinghouse and Larsen, who have harshly criticized the SEC throughout the case, issued lengthy statements accusing the agency of a political agenda to, in Larsen's words, "suffocate crypto in America." "Instead of looking for the criminals stealing customer funds on offshore exchanges that were courting political favor, the SEC went after the good guys," Garlinghouse said, an apparent reference to Sam Bankman-Fried, founder of crypto exchange FTX. The agency said in its papers that the next step in the case is for both sides to present to the judge on what the appropriate penalty is for Ripple.

Bitcoin

Binance.US Halts Direct Dollar Withdrawals (coindesk.com) 31

Sandali Handagama reports via CoinDesk: Binance.US users can no longer withdraw dollars directly from the platform after the exchange updated its terms of use on Monday. "In the event that customers wish to withdraw U.S. dollar funds from their account, they may do so by converting U.S. dollar funds to stablecoin or other digital assets, which can subsequently be withdrawn," the email said.

In early June, the firm suspended dollar deposits, saying the U.S. Securities and Exchange Commission's (SEC) "extremely aggressive and intimidating tactics" against the crypto industry had left banking partners reluctant to engage with the sector. In the same message, Binance.US warned customers that its banking partners were preparing to pause dollar withdrawals as early as June 13.

Bitcoin

Why the US Government Has $5 Billion in Bitcoin (wsj.com) 34

The U.S. government is one of the world's biggest holders of bitcoin, but unlike other crypto whales, it doesn't care if the digital currency goes up or down in value. From a report: That is because Uncle Sam's stash of some 200,000 bitcoin was seized from cybercriminals and darknet markets. It is primarily offline in encrypted, password-protected storage devices known as hardware wallets that are controlled by the Justice Department, the Internal Revenue Service or another agency. What the federal government does with its bitcoin has long been a topic of interest among crypto traders because any sale could potentially swing prices or cause other ripple effects in the $1 trillion digital-asset market.

The U.S. has been notoriously slow to convert its stash of bitcoin into dollars. It isn't HODLing, crypto parlance for "holding on for dear life" and never intending to sell. Nor is it waiting for bitcoin to go "to the moon" so it can sell its holdings for a hefty profit. Rather, that big pile of bitcoin is more a byproduct of a lengthy legal process than strategic planning. "We don't play the market. We basically are set by the timing in our process," said Jarod Koopman, executive director of the IRS's cyber and forensics services section, which oversees all activities focused on cybercrimes.

Bitcoin

FTX Thief Cashes Out Millions During Bankman-Fried Trial (bbc.com) 30

An anonymous reader quotes a report from the BBC: A thief who stole more than $470 million in cryptocurrency when FTX crashed is trying to cash it out while the exchange's founder is on trial. Sam Bankman-Fried's high-profile court case began last week. The former crypto mogul denies fraud. After lying dormant for nine months, experts say $20 million of the stolen stash is being laundered into traditional money every day. New analysis shows how the mystery thief is trying to hide their tracks. [...] On the day FTX collapsed, hundreds of millions of dollars of cryptocurrency controlled by the exchange were stolen by an unidentified thief that is believed to still have control of the funds. No one knows how the thief -- or thieves -- was able to get digital keys to FTX crypto wallets, but it is thought it was either an insider or a hacker who was able to steal the information. The criminal moved 9,500 Ethereum coins, then worth $15.5 million, from a wallet belonging to FTX, to a new wallet. Over the next few hours, hundreds of other cryptoassets were taken from the company's wallets, in transactions eventually totaling $477 million.

According to researchers from Elliptic, a cryptocurrency investigation firm, the thief lost more than $100 million in the weeks following the hack as some was frozen or lost in processing fees as they frantically moved the funds around to evade capture. But by December around $70 million was successfully sent to a cryptocurrency mixer -- a criminal service used to launder Bitcoin, making it difficult to trace. [...] Although mixers make it difficult to trace Bitcoin, Elliptic was able to follow a small amount of the funds -- $4 million -- that was sent to an exchange. The rest of the stolen FTX stash -- around $230 million -- remained untouched until 30 September -- the weekend before Mr Bankman-Fried's trial began. Nearly every day since then chunks worth millions have been sent to a mixer for laundering and then presumably cashing out. Elliptic has been able to trace $54 million of Bitcoin being sent to the Sinbad mixer after which the trail has gone cold for now.
"Crypto launderers have been known to wait for years to move and cash out assets once public attention has dissipated, but in this case they have begun to move just as the world's attention is once again directed towards FTX and the events of November 2022," said Tom Robinson, Elliptic's co-founder.
Bitcoin

Across US, Chinese Bitcoin Mines Draw National Security Scrutiny (cryptotimes.io) 23

According to the New York Times, Chinese-owned bitcoin mining operations in the United States are causing security concerns due to their proximity to important sites and the potential for cyber threats. The Crypto Times reports: There are some mining facilities close to critical sites such as Microsoft data center for Pentagon's Air Force nuclear's missile base in Wyoming USA. Officials in U.S. fear Chinese espionage activities at these places. These mining operations began after China banned bitcoin mining in 2021. These individuals sometimes maintain connections with the Chinese Communist Party or state-owned companies which may be kept concealed through multiple layers of companies.

Texas has turned out to be a haven for Chinese-linked Bitcoin mining, with some US states having restrictions but Texas offers incentives. This might pose a threat to the power grid or essential infrastructure. A new concern has recently been raised in a report related to a potential cyber strike on the US infrastructure by China in case a major conflict arose.

Bitcoin

NChain's CEO 'Departs', Claims Evidence Craig Wright Manipulated Bitcoin Creation Documents (forbes.com) 46

Bitcoin creator Satoshi Nakamoto may or may not be businessman Craig Wright, who in 2015 founded the blockchain-tech company nChain.

But nChain's recently-departed CEO Christen Ager-Hanssen's thinks Wright is not Satoshi — and that's just the beginning. According to Forbes Ager-Hanssen went as far as "to leak emails suggesting former gambling billionaire Calvin Ayre, who has heavily backed the company doesn't believe Wright, nChain's chief scientist, is Satoshi Nakamoto.

The alleged email from Ayre begins by citing Wright's "litigation disaster"...' I have been operating under the assumption that you and Ramona have the keys and that you were simply pretending not to have them as part of some strategy that you have trapped yourself in. But now that we are looking at a situation where continuing to deny you have them ruins your life and damages your supporters, I am forced to make a tough decision... There is zero reason to continue to pretend you do not have the keys if you really have them... So either you are a moron for intentionally losing this case, or you are a moron for actually not having the keys... either way, I am not following you over the cliff...
But Ager-Hanssen also shared some thoughts of his own: I can confirm I have departed from nChain Global as its Group CEO with immediate effect after reporting several serious issues to the board of nChain Group including what I believe is a conspiracy to defraud nChain shareholders orchestrated by a significant shareholder. I also had concerns about the ultimate beneficiary shareholder and the real people behind DW Discovery fund registered in Cayman. The chairman also took instructions from shadow directors which I didn't accept.

I have also reported that I have found compelling evidence that Dr Craig Wright has manipulated documents with the aim to deceive the court he is Satoshi. I'm today myself convinced that Dr Craig Wright is NOT Satoshi and I'm persuaded he will lose all his legal battles. The board didn't take action and my job becomes clearly untenable. One of the things I recommended the Chairman of the board was to sack Dr Craig Wright.

I feel sorry for all the great people that work in the company but I don't want to be part of something I clearly don't believe in. #faketoshi

Forbes also notes an X (Twitter) account calling itself "Satoshi Nakamoto" with the handle @Satoshi has posted for the first time since 2018 — though X's community notes feature added: "This isn't the real Satoshi Nakamoto, creator of bitcoin. Its an account related to Craig Wright, who claims to be Satoshi with no material proof."

Thanks to long-time Slashdot reader UnknowingFool for sharing the news.
Crime

Federal Judge Gives Man 8-Year Sentence For Running Unlicensed Bitcoin Exchange (apnews.com) 78

Ian Freeman, a New Hampshire man in his 40s, has been sentenced to eight years in prison for running an unlicensed bitcoin exchange business. He will also be fined at least $40,000, although the exact amount still has to be determined in a hearing. The Associated Press reports: Ian Freeman was taken away in handcuffs following his sentencing in U.S. District Court in Concord. Prosecutors said Freeman, a libertarian activist and radio show host, created a business that catered to fraudsters who targeted elderly women with romance scams, serving as "the final step in permanently separating the victims from their money." Freeman, who is in his 40s, said in court he did not believe he broke the law. He said he was trying to get people to adopt bitcoin. He said there were times he detected fraud and protected many potential scam victims. He apologized for not being able to help them all. "I don't want people to be taken advantage of," said Freeman, who said he cooperated with law enforcement to help some people get their money back.

Freeman said he devised a series of questions for customers, including whether a third party was putting them up to their transactions or if they were under duress. Some victims lied about their circumstances, he said. Freeman also said he didn't learn about scam victims until he saw their stories in the news. "It didn't matter how strict I was or how many questions I asked," he said. After a two-week trial, he was convicted of eight charges in December, although his conviction on a money laundering charge was later overturned by the judge. The prosecution is appealing it to the 1st Circuit Court of Appeals.

Freeman was sentenced on the remaining charges, which include operating an unlicensed money transmitting business and conspiracy to commit money laundering and wire fraud. Freeman's lawyers said they planned to appeal and asked that he remain free on bail for now, but U.S. District Court Judge Joseph LaPlante didn't allow it. The sentencing guidelines called for much longer term, ranging from about 17 years to nearly 22 years in prison.

Government

White House Could Force Cloud Companies To Disclose AI Customers (semafor.com) 44

The White House is considering requiring cloud computing firms to report some information about their customers to the U.S. government, Semafor reported Friday, citing people familiar with an upcoming executive order on AI. From the report: The provision would direct the Commerce Department to write rules forcing cloud companies like Microsoft, Google, and Amazon to disclose when a customer purchases computing resources beyond a certain threshold. The order hasn't been finalized and specifics of it could still change. Similar "know-your-customer" policies already exist in the banking sector to prevent money laundering and other illegal activities, such as the law mandating firms to report cash transactions exceeding $10,000.

In this case, the rules are intended to create a system that would allow the U.S. government to identify potential AI threats ahead of time, particularly those coming from entities in foreign countries. If a company in the Middle East began building a powerful large language model using Amazon Web Services, for example, the reporting requirement would theoretically give American authorities an early warning about it. The policy proposal represents a potential step toward treating computing power -- or the technical capacity AI systems need to perform tasks -- like a national resource. Mining Bitcoin, developing video games, and running AI models like ChatGPT all require large amounts of compute.

The Almighty Buck

95% of NFTs May Now Be Worthless (businessinsider.com) 178

An anonymous reader shares a news story: A report by dappGambl based on data provided by NFT Scan and CoinMarketCap showed that out of 73,257 NFT collections the researchers looked at, 69,795 of them, or slightly over 95%, had a market cap of zero ether. By their estimates, almost 23 million people hold these worthless assets. "This daunting reality should serve as a sobering check on the euphoria that has often surrounded the NFT space," the researchers said. "Amid stories of digital art pieces selling for millions and overnight success stories, it is easy to overlook the fact that the market is fraught with pitfalls and potential losses."

NFTs are digital representations of art or collectibles tied to a blockchain, typically ethereum, and each one has a unique signature that cannot be duplicated. In 2021 and 2022, the NFT market saw a huge bull run, at one point leading to $2.8 billion in monthly trading volume. During that time, popular collections such as Bored Apes and CryptoPunks were selling for millions of dollars, and celebrities such as Stephen Curry and Snoop Dogg participated in the hype. The boom coincided with cryptocurrency's peak when bitcoin was trading close to $70,000. On Wednesday, the price of the crypto hovered just above $27,000. dappGambl's study shows 79% of all NFT collections currently remain unsold, and the surplus of supply over demand has created a buyer's market that isn't doing anything to revive enthusiasm.

The Courts

Textbook Publishers Sue Shadow Library LibGen For Copyright Infringement (theregister.com) 30

A group of publishers in the U.S. have filed a lawsuit against the "notorious" online database Library Genesis (Libgen), a website known for providing free access to scientific papers and books. The lawsuit accuses Libgen of facilitating the unauthorized distribution of copyrighted academic materials. The Register reports: The suit, filed in a New York federal court [PDF], asks for a legal order "requiring the transfer of the Libgen domain names to plaintiffs or, at plaintiffs' election, canceling or deleting the Libgen domain names," with the idea of frustrating visitors -- mostly students -- believed to number in their millions. The filing said that according to similarweb.com, the sites collectively were visited by 9 million people from the U.S. each month from March to May 2023. The suit alleges that several of the Libgen websites solicit "donations" from users. "These solicitations are in English and seek payments only in Bitcoin or [Monero]." It adds: "one Libgen Site reports that it has raised $182,540 from donations since January 1, 2023."

The publishers also claim the people who run LibGen -- named in the suit as Does 1-50 and whom it says "are believed to reside outside of the United States at unknown foreign locations" -- derive "revenue from interstate or international commerce, including through advertisements." It goes on to add: "Defendants compete directly with Plaintiffs by distributing infringing copies of their works for free, displacing legitimate sales. When a consumer obtains Plaintiffs' works from the Libgen Sites instead of through legitimate channels, no remuneration is provided to Plaintiffs or their authors for the substantial investments they have made to create and publish the works."

The textbook publishers claim that "through social media and from their peers, students are bombarded with messages to use the Libgen Sites instead of paying for legal copies of textbooks" -- thus depriving the publishers and the authors they represent of their income. The suit also asks for damages without detailing an amount, although it asks for "an accounting and disgorgement of Defendants' profits, gains, and advantages realized from their unlawful conduct." The complaint claims the ads are in English and for various "U.S. products, such as browser extensions and online games". The suit adds that some "also appear to be phishing attempts, which can result in users downloading a virus or other malicious program onto their computers."

The lawsuit also calls out Google and "other intermediaries," U.S. companies it claims help LibGen "conduct their unlawful operations" -- "NameCheap for domain registration services, Cloudflare for proxy services, and Google for search engine services." It goes on to include a screenshot of Google's "knowledge panel," which it says "describes Libgen as a site [that] enables free access to content that is otherwise paywalled or not digitized elsewhere."

Slashdot Top Deals