| ▲ | nayuki 6 hours ago |
| The server is getting overloaded, so here's the text for reference: Steal my Bitcoin
0.65 hours without a successful hack
There is a bitcoin key hidden on this server worth about $502.
It is accessible to the PHP user account through the print-flag binary.
This PHP version was selected from before the PHP2SHELL CVEs were released.
First person to get the wallet wins. If you don’t need the money, consider donating it to those who do: givewell.org.
All traffic is logged. This is a known vulnerable machine, so we cannot guarantee privacy. Other attackers may access or monitor activity and data beyond our control. Do not submit anything you want to keep private.
Challenge wallet
Explorer ↗
bc1qlnu5…t3cxqy
0.00625104 BTC
≈ $502.35 USD
stealmybitcoin.com · Terms of participation
|
|
| ▲ | xmcp123 5 hours ago | parent | next [-] |
| Bahaha someone added to the fund. It’s now $1004 |
| |
|
| ▲ | fwlr 6 hours ago | parent | prev | next [-] |
| Great way to inject some price information into the “AI automates exploits at scale” narrative. “AI can now chain complex exploits, it’s point-and-click pwnage, you say? Over or under $500 a pop?” |
| |
| ▲ | snailmailman 5 hours ago | parent | next [-] | | I'm seeing a few comments that say $500 isn't enough, and its not worth it for them to try to hack it.
But if it costs fewer than $500 of tokens in an AI, then it seems like it is? I thought a lot of the claim people are making is that you dont actually need to hack anything you just ask an AI and it does it. The exploitable bug is public and documented. All the pieces are theoretically there, and there are repeated claims that AI is trivializing exploits and its super easy to hack things now. If that were true, and someone can hack the server for less than $500 of tokens, its an easy profit. | |
| ▲ | flir 5 hours ago | parent | prev [-] | | $500 is the value of the prize. We don't know what the price someone will pay for a lottery ticket is. | | |
| ▲ | fwlr 5 hours ago | parent [-] | | It’s not very much information, I agree. Even such scant information, however, is a significant and refreshing improvement on the current state of the narrative. Kudos to the servermaster, I say. |
|
|
|
| ▲ | sscaryterry 4 hours ago | parent | prev | next [-] |
| This could be an interesting bug-bounty type of initiative. Setup a system, lets other dudes at their expense battle for scraps? |
|
| ▲ | zoeysmithe 6 hours ago | parent | prev [-] |
| " All traffic is logged." For $500 he can look in the logs and find all manner of new exploits, or new deviations of the existing ones, he can then sell for thousands. Clever business model lol These projects would be more interesting and ethical if the current and historical logs were instantly put up somewhere public in real-time for anyone to observe. Regardless, I'm guessing the smart hackers aren't going to bother. |
| |
