GEAR

filenotfounderror

TWO YEARS AGO when “Michael,” an owner of cryptocurrency, contacted Joe Grand to help recover access to about $2 million worth of bitcoin he stored in encrypted format on his computer, Grand turned him down. Michael, who is based in Europe and asked to remain anonymous, stored the cryptocurrency in a password-protected digital wallet. He generated a password using the RoboForm password manager and stored that password in a file encrypted with a tool called TrueCrypt. At some point, that file got corrupted and Michael lost access to the 20-character password he had generated to secure his 43.6 BTC (worth a total of about €4,000, or $5,300, in 2013). Michael used the RoboForm password manager to generate the password but did not store it in his manager. He worried that someone would hack his computer and obtain the password. “At [that] time, I was really paranoid with my security,” he laughs. Grand is a famed hardware hacker who in 2022 helped another crypto wallet owner recover access to $2 million in cryptocurrency he thought he’d lost forever after forgetting the PIN to his Trezor wallet. Since then, dozens of people have contacted Grand to help them recover their treasure. But Grand, known by the hacker handle “Kingpin,” turns down most of them, for various reasons. Grand is an electrical engineer who began hacking computing hardware at age 10 and in 2008 cohosted the Discovery Channel’s Prototype This show. He now consults with companies that build complex digital systems to help them understand how hardware hackers like him might subvert their systems. He cracked the Trezor wallet in 2022 using complex hardware techniques that forced the USB-style wallet to reveal its password. But Michael stored his cryptocurrency in a software-based wallet, which meant none of Grand’s hardware skills were relevant this time. He considered brute-forcing Michael’s password—writing a script to automatically guess millions of possible passwords to find the correct one—but determined this wasn’t feasible. He briefly considered that the RoboForm password manager Michael used to generate his password might have a flaw in the way it generated passwords, which would allow him to guess the password more easily. Grand, however, doubted such a flaw existed. Michael contacted multiple people who specialize in cracking cryptography; they all told him “there’s no chance” of retrieving his money. But last June he approached Grand again, hoping to convince him to help, and this time Grand agreed to give it a try, working with a friend named Bruno in Germany who also hacks digital wallets. MOST POPULAR GEAR How Many Charging Stations Would We Need to Totally Replace Gas Stations? BY AARIAN MARSHALL GEAR Your Bike Tires Are Too Skinny. Riding on Fat, Supple Tires Is Just Better BY JOE RAY GEAR The End of ‘iPhone’ BY CARLTON REID GEAR Spotify Hates Albums. Here’s How to Fix That BY JUSTIN POT Grand and Bruno spent months reverse engineering the version of the RoboForm program that they thought Michael had used in 2013 and found that the pseudo-random number generator used to generate passwords in that version—and subsequent versions until 2015—did indeed have a significant flaw that made the random number generator not so random. The RoboForm program unwisely tied the random passwords it generated to the date and time on the user’s computer—it determined the computer’s date and time, and then generated passwords that were predictable. If you knew the date and time and other parameters, you could compute any password that would have been generated on a certain date and time in the past. If Michael knew the day or general time frame in 2013 when he generated it, as well as the parameters he used to generate the password (for example, the number of characters in the password, including lower- and upper-case letters, figures, and special characters), this would narrow the possible password guesses to a manageable number. Then they could hijack the RoboForm function responsible for checking the date and time on a computer and get it to travel back in time, believing the current date was a day in the 2013 time frame when Michael generated his password. RoboForm would then spit out the same passwords it generated on the days in 2013. There was one problem: Michael couldn’t remember when he created the password. According to the log on his software wallet, Michael moved bitcoin into his wallet for the first time on April 14, 2013. But he couldn’t remember if he generated the password the same day or some time before or after this. So, looking at the parameters of other passwords he generated using RoboForm, Grand and Bruno configured RoboForm to generate 20-character passwords with upper- and lower-case letters, numbers, and eight special characters from March 1 to April 20, 2013. It failed to generate the right password. So Grand and Bruno lengthened the time frame from April 20 to June 1, 2013, using the same parameters. Still no luck. Michael says they kept coming back to him, asking if he was sure about the parameters he’d used. He stuck to his first answer. “They really annoyed me, because who knows what I did 10 years ago,” he recalls. He found other passwords he generated with RoboForm in 2013, and two of them did not use special characters, so Grand and Bruno adjusted. Last November, they reached out to Michael to set up a meeting in person. “I thought, ‘Oh my God, they will ask me again for the settings.” Instead, they revealed that they had finally found the correct password—no special characters. It was generated on May 15, 2013, at 4:10:40 pm GMT. “We ultimately got lucky that our parameters and time range was right. If either of those were wrong, we would have … continued to take guesses/shots in the dark,” Grand says in an email to WIRED. “It would have taken significantly longer to precompute all the possible passwords.” MOST POPULAR GEAR How Many Charging Stations Would We Need to Totally Replace Gas Stations? BY AARIAN MARSHALL GEAR Your Bike Tires Are Too Skinny. Riding on Fat, Supple Tires Is Just Better BY JOE RAY GEAR The End of ‘iPhone’ BY CARLTON REID GEAR Spotify Hates Albums. Here’s How to Fix That BY JUSTIN POT Grand and Bruno created a video to explain the technical details more thoroughly. RoboForm, made by US-based Siber Systems, was one of the first password managers on the market, and currently has more than 6 million users worldwide, according to a company report. In 2015, Siber seemed to fix the RoboForm password manager. In a cursory glance, Grand and Bruno couldn’t find any sign that the pseudo-random number generator in the 2015 version used the computer’s time, which makes them think they removed it to fix the flaw, though Grand says they would need to examine it more thoroughly to be certain. Siber Systems confirmed to WIRED that it did fix the issue with version 7.9.14 of RoboForm, released June 10, 2015, but a spokesperson wouldn’t answer questions about how it did so. In a changelog on the company’s website, it mentions only that Siber programmers made changes to “increase randomness of generated passwords,” but it doesn’t say how they did this. Siber spokesman Simon Davis says that “RoboForm 7 was discontinued in 2017.” Grand says that, without knowing how Siber fixed the issue, attackers may still be able to regenerate passwords generated by versions of RoboForm released before the fix in 2015. He’s also not sure if current versions contain the problem. “I'm still not sure I would trust it without knowing how they actually improved the password generation in more recent versions,” he says. “I'm not sure if RoboForm knew how bad this particular weakness was.” Customers may also still be using passwords that were generated with the early versions of the program before the fix. It doesn’t appear that Siber ever notified customers when it released the fixed version 7.9.14 in 2015 that they should generate new passwords for critical accounts or data. The company didn’t respond to a question about this. If Siber didn’t inform customers, this would mean that anyone like Michael who used RoboForm to generate passwords prior to 2015—and are still using those passwords—may have vulnerable passwords that hackers can regenerate. “We know that most people don't change passwords unless they're prompted to do so,” Grand says. “Out of 935 passwords in my password manager (not RoboForm), 220 of them are from 2015 and earlier, and most of them are [for] sites I still use.” Depending on what the company did to fix the issue in 2015, newer passwords may also be vulnerable. Last November, Grand and Bruno deducted a percentage of bitcoins from Michael’s account for the work they did, then gave him the password to access the rest. The bitcoin was worth $38,000 per coin at the time. Michael waited until it rose to $62,000 per coin and sold some of it. He now has 30 BTC, now worth $3 million, and is waiting for the value to rise to $100,000 per coin. Michael says he was lucky that he lost the password years ago because, otherwise, he would have sold off the bitcoin when it was worth $40,000 a coin and missed out on a greater fortune. “That I lost the password was financially a good thing.”

DuplicateDestroyer

**Your submission has been removed because at least 1 submission with the same title has posted on the subreddit recently.** **OP:** RashFormation **Date:** 2023-05-27 10:06:38 **Duplicates:** N | User | Date | Posted... | Similarity | Title :-:|:-:|:-:|:-:|:-:|:-:|:-:|:-: 0 | [/u/RashFormation](https://www.reddit.com/user/RashFormation) | 2023-05-27 08:48:06 | 1 hour(s) before| [100%](https://https://www.reddit.com/r/CryptoMoonShots/comments/13t28hf/gear_5_ギア5_luffys_awakening_30th_may_7pm_utc_0/) | [GEAR 5 - ギア5 | Luffy's Awakening | 30th May 7pm Utc | 0% Tax & Renounced | Bring Anime Season Back!](https://redd.it/13t28hf) I am a bot. If you believe this was sent in error, [please message the subreddit moderators here](https://www.reddit.com/message/compose?to=%2Fr%2FCryptoMoonShots&subject=My+post+has+been+wrongfully+removed&message=My%20post%20has%20been%20wrongfully%20removed%20by%20your%20repost%20bot,%20/u/DuplicateDestroyer. Here%20is%20a%20link%20to%20my%20post : https://redd.it/13t3iwt). **Do not delete your post or moderators won't be able to review it.**

smiley199

I went for below 16k. But i will continue to DCA BTC, ETH, and BNB. I also recently learned about GearBox. I have free claimed GEAR on MEXC that i planned to hold for a long term.

Cyptogon

Yeah I consider the GEAR project as one of the most interesting projects in the crypto space right now. The actual goal of Gearbox is to be integrated with existing and new protocols in an open-source manner and provide leverage across many user bases. Now that it is listed on MEXC, I will buy it and possibly trade it for gains. I heard the CEX is currently having a refer friends-to-win event to share 10,000 USDT worth of GEAR. I wouldn't let go of this opportunity.

samaeeel_

The hottest gem rn is $GEAR! The fact that GEAR has both active and passive liquidity providers, as well as actual traders who can borrow assets to trade, makes me more interested in the token. I trade this token on #MEXC

Adeelahh

You've said it all, I consider the GEAR project as one of the most interesting projects in the crypto space right now. The actual goal of Gearbox is to be integrated with existing and new protocols in an open-source manner and provide leverage across many user bases. Now that it is listed on MEXC, I will buy it and possibly trade it for gains. I heard the CEX is currently having a refer friends-to-win event to share 10,000 USDT worth of GEAR. I wouldn't let go of this opportunity.

Adeelahh

Indeed, I also came across the above project listing announcement on MEXC and other CEX too. GEARBOX protocol, has a flexible, adaptable, and scalable architecture, the new DeFi primitive acts as collateral for different leveraged operations too. I will be trading GEAR on the exchange & refer my friends to Trade to Win a Share of 10,000 USDT worth of GEAR.

Safe_Resolve210

There’s another DeFi protocol which has been harrying some attention recently. It’s “GearBox”. It’s a composable leverage protocol. Gearbox is a generalized leverage protocol that allows users to take leverage in one place and use it across various DeFi protocols and platforms. They recently had their token listed on several exchanges and one of these exchanges, MEXCGlobal is having a deposit event. Depositing a good sum of $GEAR on the exchnage let’s you eligible to win from a prize pool of usdt and mx. It’s something I’m working on getting now🔥

smiley199

GEAR It has got amazing defi features and it is rich in utility. Getting listed today though

JooseBeatz

Dude. PLEASE SELL UR GEAR RIGHT NOW AND GO ALL IN BITCOIN WIT THE MONEY FROM THAT. Bear markets not over. Ur gonna end up payin like $50k for half a Bitcoin by the time bullrun starts and won’t be break even till 2026 or some crazy shit. This is obv hypothetical and head math but def possible if the world stays the way it is, which I believe will actually get worse in the coming years. Unless u just love mining and don’t care how much Bitcoin u have for what ur spending, I would sell ur gear and just buy via cash. U are currently acquiring Bitcoin in the worst way possible and it’s likely to remain the worst way until late 2024/2025

DaddySkates

Meanwhile at Tether: **PUT THOSE PRINTERS IN 6TH GEAR**

VariationAgreeable29

Except GET YOUR ASS IN GEAR

Norbit11

>5TH GEAR WITH NO BRAKES It can end bad :/

Der_Ushi

Yes, please! Crash to 10k and below. I NEED CHEAP MINING GEAR! The cult here on in other places on the interwebs should really fuck off. Stop shilling, sell your coins and let it happen. I need more mining equipment to get in the game big.

KORENKLYDE

[GEAR UP ON ETHERIUM BEFORE JUNE/JULY ](https://www.coindesk.com/ethereum-improvement-proposal-1559-london-hard-fork)

ThorsHammer8888

This worked for SafeMoon in NY.... Buy BTC on Coinbase or Cash App or any other exchange 1. Make account on TrustWallet (iOS, Android) (Save for later) 2. Enable BNB and BNB Smart Chain on TrustWallet ([Guide here](https://community.trustwallet.com/t/how-to-add-or-remove-a-coin/896)) (Top right of screen, hit the settings button then find BNB Smart Chain and BNB, add them) 3. Register on [KuCoin.com](https://www.kucoin.com/ucenter/signup?rcode=rJ3UEAD) 1. **Get your BTC Wallet Address for step 5.1** 4. In Coinbase or CashApp go to **Send** your Bitcoin ([Guide here](https://help.coinbase.com/en/coinbase/trading-and-funding/sending-or-receiving-cryptocurrency/how-do-i-send-digital-currency-to-another-wallet.html)) 1. Enter your BTC address from KuCoin ([Guide here](https://support.kucoin.plus/hc/en-us/articles/900002595503-Deposit-FAQ)) 2. Send BTC to [KuCoin.com](https://www.kucoin.com/ucenter/signup?rcode=rJ3UEAD) from Coinbase*Might have to wait 20-60 min for your coins to appear here after you send them* 3. **ON** [**KUCOIN.com**](https://www.kucoin.com/ucenter/signup?rcode=rJ3UEAD) 1. Move BTC to Trading Account ([Guide here](https://www.youtube.com/watch?v=9FUWGGUJAgc)) 2. Trade BTC to BNB (Go to Trade -> Spot Trading, Search BNB/BTC) 3. *Create a Trading Password (so you can trade and do this part) Also, 2 Factor Authentication, SMS/Email (3 types)* 4. Click **Market** in the BUY column, enter however much BTC you want to convert to BNB (I selected Max) 5. Boom you've now traded your BTC for BNB. 4. Move BNB to Main Account from Trading Account (Remember we did this step in reverse with moving BTC to our Trading Account) 5. Withdraw BNB from KuCoin ([Guide here](https://support.kucoin.plus/hc/en-us/articles/360014898013-How-to-Make-a-Withdrawal-on-KuCoin-#:~:text=Log%20in%20to%20your%20KuCoin,token%20you%20want%20to%20withdraw)) to your TrustWallet BNB address ([Guide here](https://community.trustwallet.com/t/how-to-get-bnb-on-smart-chain-wallet/69496)) 5. **Open** TrustWallet*Might have to wait 20-60 min for your coins to appear here after you send them* 1. Go to DEX and **SWAP** your **BNB** for **Smart Chain**\*-- Android Users can skip 6.1.1 and 6.1.2 steps ------\* 1. **If you're on iOS \*** you’ll need to Enable the DApp Browser (to access Pancake Swap and trade your BNB Smart Chain for SafeMoon) 2. Follow this guide: [https://community.trustwallet.com/t/how-to-use-the-dapp-browser-on-ios/69390](https://community.trustwallet.com/t/how-to-use-the-dapp-browser-on-ios/69390) (Close TrustWallet and restart phone if Safari can’t find the Trust app, I had to close all Safari tabs too) 2. Inside the **TrustWallet Browser**, find **Pancake Swap** 3. Open Pancake Swap and click “**Connect**” (top right of screen) 4. Select TrustWallet and it’ll auto connect since you’re opening it **WITHIN** the TrustWallet DApp browser 5. We need to add SafeMoon into our Pancake Swap.. 6. STILL INSIDE PANCAKE SWAP: Go to **Trade -> Exchange** 1. In the **TO** box, hit **Select Currency** 2. Paste this “**0x8076c74c5e3f5852037f31ff0093eeb8c8add8d3**” without quotes(It’s the Safemoon address) ([You can verify this address here](https://bscscan.com/token/0x8076c74c5e3f5852037f31ff0093eeb8c8add8d3) and on Safemoon.xyz) 3. Click (Add) to pin it to Pancake Swap 4. Now you can exchange your **BNB** for Safemoon. 5. NOTE: There’s a GEAR icon, click it and type **in 12% i**nto the box. Without this your transaction will MOST LIKELY FAIL. 6. Please allow up to 1 hour to see your funds magically appear in your TrustWallet. Screenshot attached. What I mean by magically appear is there's no progress window like on Coinbase, the funds will appear if you've done this correctly.