Show HN: Steal My Bitcoin(stealmybitcoin.com)
578 points by cloudlandsdev 1 day ago | 398 comments
tl;dr: A server hosts a $500 Bitcoin wallet accessible via a `print-flag` binary under the PHP user account, challenging anyone to steal it. The PHP version predates the PHP2SHELL CVEs, hinting at the intended attack vector. The winner keeps the funds or is encouraged to donate to GiveWell.
HN Discussion:
  • ↑The challenge going unclaimed proves AI/LLM exploit hype is overblown and false
  • ↑People claiming to have exploits are making excuses rather than demonstrating them
  • ↓The setup is actually not vulnerable to PHP2SHELL CVEs, making it an unfair test
  • ~Not participating is rational due to honeypot risk and low payout vs. exploit value
  • •Author providing updates on infrastructure challenges and traffic handling