By the way, there was another message by "Satoshi" recently, denying that he was Craig Wright -- and then adding "We are all Satoshi". That last part is obviously something that Satoshi would not have written. I can only think that the hacker is aware that everybody is aware that the account has been compromised, and does not care to pretend anymore.
Sound, sensible analysis as always. Good to have you home, professor.
The problem is that the anti-fork message was
not spoofed and the writing style matches.
http://pastebin.com/Ct5M8fa2Here's a quick technical analysis of the email sent to the bitcoin-dev mailing list today at
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-August/010238.html The email was sent from an anonymous email provider called vistomail.com which gives the appearance of being out of service. However you can see the logins at
https://webmail.vistomail.com/ The vistomail servers are authorised to originate email by their IP address via the SPF DNS records . Satoshi used
satoshi@vistomail.com when first announcing Bitcoin
http://www.metzdowd.com/pipermail/cryptography/2009-January/014994.html From this you can safely conclude
the email did originate from vistomail.com servers and was not spoofed. It does not prove the account was not hacked of course.
Partial headers from the email:
Received: from mail.vistomail.com (vistomail.com [190.97.163.93])
by smtp1.linuxfoundation.org (Postfix) with ESMTP id 2175813F
for <
bitcoin-dev@lists.linuxfoundation.org>;
Sat, 15 Aug 2015 19:00:05 +0000 (UTC)
Received: from DS04 ([190.97.163.93]) by vistomail.com with MailEnable ESMTP;
Sat, 15 Aug 2015 13:51:14 -0500
DNS RECORDS FOLLOW:
vistomail.com descriptive text "v=spf1 include:_spf.google.com ip4:190.97.163.93 ~all"
vistomail.com has address 190.97.163.93
vistomail.com mail is handled by 10 vistomail.com.
The "we are all satoshi" was spoofed and the writing style or expressions didn't match. So the second doesn't invalidate the first.
Additionally, that particular email address is
not known to have been stolen.
Therefore the August message could be legit - it's a very serious risk for BTC. Risk, in the sense that if the proposed fork goes ahead, we'll have Satoshi's second coming after the forkageddon to proclaim Bitcoin is a failure since it failed to protect itself from this kind of attack.