frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

QuickEditVideo: Local-only video editing with WebCodecs API

https://quickeditvideo.com/
1•maxloh•3m ago•1 comments

A Brief Look at the Mathematics of Structure Packing

https://sayansivakumaran.com/posts/2025/9/math-struct-packing/
1•sivakusayan•6m ago•1 comments

Norway eyes 200-250 MW floating nuclear reactors to power industry

https://interestingengineering.com/energy/norway-eyes-floating-200-250-mw-nuclear-reactors-to-pow...
1•PaulHoule•6m ago•0 comments

How to Do Great Work

https://paulgraham.com/greatwork.html
1•ananddtyagi•7m ago•0 comments

My First App, Notify

https://notify.pingie.com
1•simplytoast•8m ago•0 comments

Show HN: Domain Name generator and brand name generator Namegator.net

https://namegator.net/
2•egldmila•9m ago•0 comments

MAGA declares war on the property tax

https://www.urbanproxima.com/p/maga-declares-war-on-the-property
2•viajante1882•10m ago•1 comments

PocketFast: Multi-tenant PocketBase SaaS deployment automation tool

https://github.com/idea2547/PocketFast
1•thunderbong•12m ago•0 comments

Zorro 2 IDE Interface for Amiga 2000/3000/4000

https://github.com/LIV2/RIPPLE-IDE
1•doener•16m ago•0 comments

Ask HN: Which Characters Were AGI? HAL, KITT, or Data?

1•tiahura•16m ago•0 comments

New home for your dead side projects? We launched an auction for digital assets

https://akshen.com
1•sOwl_•21m ago•1 comments

Where are all the trillion dollar biotechs?

https://www.ladanuzhna.xyz/writing/trillion-dollar-biotechs
1•harporoeder•21m ago•0 comments

The crawl before the fall of referrals: AI's impact on content providers

https://blog.cloudflare.com/ai-search-crawl-refer-ratio-on-radar/
3•ashvardanian•21m ago•0 comments

What Does AI Do?

https://joecooper.me/blog/gptprimer/
2•teddyh•22m ago•0 comments

Bash Username $PS1 Command Injection

https://kallus.org/blog_bash_username_ps1_command_injection.html
1•bkallus•22m ago•1 comments

Why "teach everyone to code" has become a dead-end slogan

https://hamishcampbell.com/why-teach-everyone-to-code-has-become-a-dead-end-slogan/
1•mkesper•23m ago•0 comments

Show HN: Feox Server, a Rust based, drop-in replacement for Redis

https://github.com/mehrantsi/feox-server
2•mehrant•25m ago•0 comments

Why I Use Debian

https://blog.liw.fi/posts/2025/why-debian/
4•naves•25m ago•1 comments

Territorial Markings as a Predictor of Driver Aggression and Road Rage (2008)

https://onlinelibrary.wiley.com/doi/abs/10.1111/j.1559-1816.2008.00364.x?prevSearch=allfield%3A%2...
8•bookofjoe•28m ago•1 comments

The compounding effect of incremental improvements

https://recodelabs.github.io/increments/
1•mberg•29m ago•1 comments

Prompt-my-client-react – Add AI-powered text gen to your React app in minutes

https://www.npmjs.com/package/prompt-my-client-react
1•rajanlagah•32m ago•0 comments

Show HN: Public chat rooms with ephemeral chat and anonymous signup

https://phispr.space/
2•bnkamalesh•35m ago•0 comments

EAS-Decoder A program to decode Emergency Alerts

https://github.com/VariousTurtle/EAS-Decoder
2•VariousTurtle•35m ago•0 comments

Thunk: Build Rust program to support Windows XP, Vista and more

https://github.com/felixmaker/thunk
2•chirsz•36m ago•0 comments

Leading genocide scholars organization says Israel is commiting genocide in Gaza

https://apnews.com/article/genocide-scholars-israel-gaza-war-9b24a48075b1d150b9bba8a8ae911cd2
6•artninja1988•39m ago•2 comments

The Steve Ballmer Interview

https://www.acquired.fm/episodes/the-steve-ballmer-interview
3•naves•41m ago•1 comments

Apple Demands Suppliers Switch to Robotics for Manufacturing

https://www.macrumors.com/2025/09/01/apple-demanding-suppliers-switch-to-robotics/
4•MBCook•42m ago•0 comments

'Scan your face' laws for the web are having unexpected consequences

https://www.washingtonpost.com/technology/2025/08/31/age-verification-uk-porn-sites/
3•perihelions•43m ago•0 comments

Show HN: woomarks, transfer your Pocket links to this app or self-host it

https://woomarks.com
3•earlyriser•44m ago•0 comments

Show HN: Data Logic Stof

https://docs.stof.dev
1•cj_cummings•44m ago•0 comments
Open in hackernews

Probability of typing a wrong Bitcoin address

https://www.johndcook.com/blog/2025/08/28/wrong-address/
60•ibobev•3d ago

Comments

hleszek•3d ago
The only thing that matters is the checksum, because who cares if the destination address is not currently in the blockchain. It is obviously possible to send BTC to a new address which is not already there.
Kranar•3d ago
Yeah this is a fairly poor article by an otherwise amazing blogger.

With that said the point stands that the likelihood of sending bitcoin to an unintended address due to a typo is very small. It's not as small as the article suggests, but it's still basically impossible (about 1 in 4.3 billion for a single character typo).

Perhaps the irony is that if you do happen to send bitcoin to an unintended address, you have a much greater chance of recovering it if that address belongs to a real person and is in use. If the address is not in use, then for all intents and purposes that bitcoin is lost forever.

pcthrowaway•3d ago
There is functionally no chance of sending it to an address which is in use by accident.

The chance is about as high as the chance of generating the keys for a new wallet address and finding it has already been in use.

extraduder_ire•3d ago
Since bitcoin "addresses" are just public key hashes, is there any way for them to even be "in the blockchain" without sending them a payment?
yieldcrv•2d ago
No, it is just a namespace, and you can predict addresses that you control but haven’t generated yet

Or send to one that nobody has the key for

Additionally, you can prove you have the key completely offline if you want, which can suffice for collateral or pose authorizations

Most of these features of Bitcoin have been abstracted away for user friendliness, but are still accessible

if you know you know, solved problems (ratified protocols and standards) since 2012 or so

Scoundreller•2d ago
I can never understand why signing authorizations offline never took off.

If I can physically see the inputs and outputs, it doesn’t take much to have a pretty good idea that it’s not bidirectonally compromising the cold wallet machine before sneakerneting them back and forth on a printed QR code.

I think armory wallet was the big thing for this? It’s been a while.

Meanwhile the best approach people commonly have today is a “hard wallet” that plugs into a usb port (yuck!)

yieldcrv•2d ago
yeah its a lost art, and everyone’s/wallet’s default reliance on clearnet remote RPC basically kills all privacy

I hope this doesnt become like email, where self hosting everything winds up blacklisting you in various ways

chatmasta•2d ago
I wonder how much BTC has been sent to addresses that have no corresponding private key. Is it even possible to get that data? I guess not, by the nature of the thing…
tromp•2d ago
In the alternative Mimblewimble protocol, there is no possibility of this happening, as not only the sender, but also the receiver has to sign for a transfer of funds.
juujian•3d ago
Are people typing Bitcoin addresses by hand? Aren't they far more likely to c&p a spoofed Bitcoin address?
johnisgood•3d ago
People use this against cryptocurrencies. It should be an argument against stupidity instead. You get a confirmation popup as well asking if you are sure about the address in many wallets.
giancarlostoro•3d ago
Even when I copy and paste, I triple check the beginning and end of the addresses shown.
johnisgood•3d ago
Same. I triple check the beginning and the end. Just like I am supposed to when handling money. In cases of many cryptocurrencies, you should focus more on the last characters instead of the first. In terms of Bitcoin, it usually begins with "bc1" (yes, depends) and ends with whatever. Triple check either way. Sometimes I would clear my clipboard and copy paste anew.
mr_mitm•3d ago
Generating an evil wallet where the last six characters or so match the original is probably feasible. I heard of this being done to SSH host keys. Someone invented randomart images to make it easier for humans to compare binary strings [1], but I'm not sure how well they fare against similar attacks.

[1] https://bytes.zone/posts/what-is-the-randomart-image-for/

pants2•3d ago
I have been targeted by scammers who generated wallet addresses with 15 of the same characters.
johnisgood•3d ago
I am sure it is, but oh well. You always have to be careful about money.
bigfishrunning•3d ago
People are stupid, and there's no way around that. If bitcoin can't protect stupid people against themselves, then that's a pretty major flaw.
BobAliceInATree•3d ago
No number of confirmation dialogs going to help anyone in determining that their 27+ digit address is mistyped.
johnisgood•3d ago
Copy paste, and triple check the first and last 4 characters.
pants2•3d ago
Not good enough, scammers will make copycat look-alike addresses that have the same first ~7 and last ~7 characters.
johtso•3d ago
What about something like VisualHostKey but for the bitcoin address?
johnisgood•2d ago
I doubt that would help much. People should clear their clipboard, and copy & paste, then double check the whole thing, or at least the first and last few characters.
johnisgood•3d ago
What does this mean in practice though? If you need to be certain, make sure you copy the right address.
charcircuit•3d ago
Bad actors can easily pregenerate adresses that mach those ahead of time.
nullc•2d ago
Bad advice scammers/malware have huge tables of addresses they've generated that agree in the first N and last N characters. If a user is going to compare a subset they should make an effort to make it be an unpredictable subset.
wslh•3d ago
Shameless plug: we created an OSS "Clipboard Firewall" for Windows [1] to protect against those attacks but feel free to fork it.

[1] https://github.com/CoinFabrik/ClipboardShield

alexslobodnik•3d ago
There's a reason folks in ethereum use ENS. It supports BTC / Solana addresses too.
OutOfHere•3d ago
Scan a displayed QR code of the address whenever possible.
euLh7SM5HDFY•3d ago
Isn't that actually worse option? I mean, I don't know about BTC but there are multiple instances of attacks with fake QR codes placed over parking meters. And last time I was looking for QR code generator for some random website the first one I found one "looked to be working", but actually quietly replaced the URL with own link shortening service.
gucci-on-fleek•3d ago
> there are multiple instances of attacks with fake QR codes placed over parking meters.

Sure, but if someone can change your QR code, they could change the address just as easily. With websites you can see if the URL looks like something legitimate, so URLs are slightly better, but Bitcoin addresses are just a long random string, so being able to see the address wouldn't actually help anything.

OutOfHere•3d ago
> Isn't that actually worse option?

When done correctly by a payment processor, the receiver's QR code for a Bitcoin payment varies for every transaction. It completely eliminates the risk of mistyping it. Granted, malware could replace it, but replacing it is a lot harder than replacing a simple address.

nullc•3d ago
> Each is at least 20 bytes (160 bits) long, with at least 4 bytes (32 bits) of checksum.

Not quite. More modern addresses have 30 bit checksums (so not at least 32 bits!), but rather than being a truncated cryptographic hash the check digits are a BCH code that guarantees any 4 or fewer substitution or transposition errors will always be detected (or 5 bitflips IIRC)... along with one in a billion or better detection of other kinds of errors.

So although the newer formats provides somewhat less protection against wildly incorrect, the protection against likely errors is much greater. The newer addresses are also case insensitive which was the biggest source of transcription errors in most contexts before.

Beyond being better for real errors the use of a error correction code also makes it impossible to intentionally generate 'fragile' addresses where there does exist a one character typo which is a valid address. It also makes it practical for wallet software to highlight the position of a likely typo, which can greatly speed things up when fixing a mistake. (The spec strenuously cautions against correcting errors, because any correction undermines detection strength).

And as hleszek's comment says, existing addresses don't help, generally addresses should not be reused-- they're not accounts, reusing addresses doesn't make the system work better. Early on in Bitcoin's life people created a scheme for shortened addresses where you used truncated addresses that were unmapped to the first user of that prefix. This obviously bad idea ran into immediate spoofing problems, and people quickly learned better.

> but address typos are not a major concern.

Yeah though malware that substitutes addresses in clipboards and copying the WRONG address are both real risks.

What you also might have heard is advice about _Ethereum_, which in spite of being created long after Bitcoin has addresses with no meaningful checksum and which has caused quite significant losses. (There is an optional very weak checksum using mixed case hex, but AFAICT it's not widely used).

Deuter8•3d ago
Early on in Bitcoin's life, Satoshi had a clear plan for increasing blocksize as necessary, but you went and screwed that up with your buddies. Hope it was worth it for you per$onally. OGs will never forget.
skeezyboy•3d ago
Tell Satoshi hes a numpty. How could he not forsee the issues inherent in his design?
bloatedGoat•3d ago
Source?

In any case, a fork of Bitcoin with bigger blocks has existed for years and the market doesn't prefer it despite all the big names and companies hyping it up at the time of the split.

Satoshi left Bitcoin so there wouldn't be an appeal to authority so maybe your argument isn't as strong as you think it is.

pcthrowaway•3d ago
> Source?

GGP was CTO of Blockstream (https://blog.blockstream.com/en-blockstream-bids-farewell-to...)

nullc•2d ago
What an interesting flashback-- as of the last three days I'm starting to see again this sort of strange offtopic harassment following me around the internet.

In any case, what Satoshi remarks were you referring to? Perhaps his last related to the subject?

> Piling every proof-of-work quorum system in the world into one dataset doesn't scale. [...] Bitcoin users might get increasingly tyrannical about limiting the size of the chain so it's easy for lots of users and small devices

https://bitcointalk.org/index.php?topic=1790.msg28917#msg289...

I stopped working on some Bitcoin seven years ago after being burned out by harassment, threats, and an a literal trillion dollars worth hateful of vexatious litigation eating up my time. After all that I'm not intimidated by you. I reject your absurd accusations, but if they were true by this time you have only yourself to blame. If whatever you thought should have been done was doable and valuable, why didn't you do it and why isn't anyone using it? I certainly didn't stop you.

jakupovic•1d ago
Lol, tell it how it is. Mofos trying to blame their inactions on others and if that's not enough then talk shit.
Deuter8•3h ago
Good.

True, I've done nothing, but that's still a lot less damage than you have done. I only wish you had been as lazy.

We will never forget the censorship and gas-lighting that you orchestrated. You did stop good people from making positive change in the world. I won't appeal to your conscience - I don't believe it's there - so I'll settle for hoping that you are hounded rather than haunted for the rest of your life. You deserve that much and more.

skeezyboy•3d ago
sounds very usable. who made it, a sadist?
anonfordays•2d ago
Reminds me lf that dev that sent $100k worth of coins to the wrong smart contract address and was never able to get them back.
Scoundreller•2d ago
Lots of examples, but you thinking of this one?

https://www.reddit.com/r/ethereum/comments/6ettq5/statement_...

Was $13m at the time, 8y ago. US$288m today.

Stevvo•2d ago
You are far more likely to paste the wrong address than to type it. When dealing with multiple wallets and recipients it's an easy mistake.
kkfx•2d ago
Hum, set aside anything who TYPE a BTC (or any crypto) address instead of mere copy/autoscanning it?
jrm4•2d ago
As someone who does follow cryptocurrency and still remains hopeful and optimistic that it can do good in this world (I know, I know) -- what a weird little article to pop up at this time. I had to double-check the date, because this is like a 5-10 year old type of issue, especially for BITCOIN as opposed to other cryptocurrencies.