Show HN: Bitcoin Challenge. Try to steal a plain text private key you can use
There's a real Bitcoin private key (worth $20) in plaintext at app.redactsure.com. You can copy it, paste it, delete it, move it around - full control. But you can't see the actual characters or extract them.
The challenge: Break the protection and take the Bitcoin. First person wins, challenge ends.
Details: - Requires email verification (prevents abuse, no account needed) - 15 minute time limit per session - Currently US only for the demo (latency) - Verify the Bitcoin is real: https://redactsure.com/bitcoinchallenge
Technical approach: - Cloud-hosted browser with real time NER model - Webpages are unmodified - Think of it as selective invisibility for sensitive data. You can interact with it normally, just can't see or extract it
Looking for feedback on edge cases in the hiding/protection algorithm. Happy to answer questions about the implementation.
Anyways. Thanks for the feedback! I'll be back when I add a patch.
I might be back up today if you want another shot.
I had no idea evil tester website had so many tools throughout it!
Why? That's not how security works.
It's not traditional security testing. I want you to break the hiding algorithm which requires no security knowledge other than copy paste and typing.
The private key is in plain text on the instance you can copy and paste it or delete it anywhere you like.