Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: Anonymous on May 31, 2011, 09:09:23 AM



Title: Bitcoin services under attack?
Post by: Anonymous on May 31, 2011, 09:09:23 AM
Today bitcoincharts was defaced and the wiki was hacked/removed. The pools have been ddosed for the past week.

There have been a few threats against bitcoin posted in irc and on this forum.

Tell me I am just  paranoid   :)


Title: Re: Bitcoin services under attack?
Post by: r2k-in-the-vortex on May 31, 2011, 09:17:54 AM
Today bitcoincharts was defaced and the wiki was hacked/removed. The pools have been ddosed for the past week.

There have been a few threats against bitcoin posted in irc and on this forum.

Tell me I am just  paranoid   :)

naah it really looks like some script kiddie is pissed off, even gribble(irc bot) died for a while tho i dont know if it were from natural causes or was it  a murder
can you link the threats on the forum?


Title: Re: Bitcoin services under attack?
Post by: timmmay on May 31, 2011, 09:36:36 AM
No you're not paranoid.  I've been thinking the same thing.  Bitcoincharts right now just has "out of coins" on it's pages.  Makes me sad!

Nearly every pool has been DDOS'd in the last few days and there are still ongoing communication problems with most of them.

Whoever is doing this must really have something against bitcoin! 


Title: Re: Bitcoin services under attack?
Post by: Anonymous on May 31, 2011, 09:37:05 AM
http://forum.bitcoin.org/index.php?topic=10553.0 (http://forum.bitcoin.org/index.php?topic=10553.0)

-related to mybitcoin security


http://forum.bitcoin.org/index.php?topic=10728.0

-was posted recently

Im sure everyone knows the pools have been down and recently mt gox was heavily ddosed as well.


UPDATE
http://bitmarket.eu/  is down now.


The funny part is the price of bitcoins on mt gox is almost $9.

 :D


Title: Re: Bitcoin services under attack?
Post by: HostFat on May 31, 2011, 09:39:27 AM
The wiki is down also :|


Title: Re: Bitcoin services under attack?
Post by: r2k-in-the-vortex on May 31, 2011, 09:45:54 AM
eligius us pool is down, eu pool is still up tho


Title: Re: Bitcoin services under attack?
Post by: gongcheng on May 31, 2011, 09:55:47 AM
How can you be sure that hackers aren't faking the price?


Title: Re: Bitcoin services under attack?
Post by: timmmay on May 31, 2011, 09:58:03 AM
bitcoincharts is back online in full force it seems


Title: Re: Bitcoin services under attack?
Post by: Anonymous on May 31, 2011, 10:03:41 AM
bitcoincharts is back online in full force it seems


Good :)  Thanks to whever is doing it the services around bitcoin will have to harden.


Title: Re: Bitcoin services under attack?
Post by: mennoman on May 31, 2011, 10:06:23 AM
There were some press-articles in the last days.


Title: Re: Bitcoin services under attack?
Post by: adrian33 on May 31, 2011, 10:37:15 AM
There were some press-articles in the last days.

Anonymous thought they were the cool kids. Look how they react when they are reality challenged.


Title: Re: Bitcoin services under attack?
Post by: mennoman on May 31, 2011, 10:44:42 AM
There were some press-articles in the last days.

Anonymous thought they were the cool kids. Look how they react when they are reality challenged.
Pardon?

I mean articles about bitcoin in the real media.


Title: Re: Bitcoin services under attack?
Post by: M4v3R on May 31, 2011, 11:04:34 AM
BitMarket.eu was down due to mail server error, this has nothing to do with DDoS'es... this time :). It's already up now.


Title: Re: Bitcoin services under attack?
Post by: timmmay on May 31, 2011, 11:10:55 AM
Maybe it's all just a bit lot of coincidences!


Title: Re: Bitcoin services under attack?
Post by: NielDLR on May 31, 2011, 11:39:54 AM
Bitcoinmarket.com seems to have been slow all day. Related? Sometimes not even loading.


Title: Re: Bitcoin services under attack?
Post by: M4v3R on May 31, 2011, 11:44:55 AM
On the side note, Bitcoin Signature Generator (http://bc.x14.eu) was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:
1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"


Title: Re: Bitcoin services under attack?
Post by: galaxyAbstractor on May 31, 2011, 12:14:43 PM
I just lost 1BTC to mybitcoin because their bitcoind went down while I was sending my payment, and now it keeps telling me that they did not receive anything and it wont be processed anymore.


Title: Re: Bitcoin services under attack?
Post by: r2k-in-the-vortex on May 31, 2011, 12:36:38 PM
all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/


Title: Re: Bitcoin services under attack?
Post by: Alex Beckenham on May 31, 2011, 12:39:48 PM
all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).


Title: Re: Bitcoin services under attack?
Post by: airdata on May 31, 2011, 12:40:02 PM


Whoever is doing this must really have something against bitcoin! 

Or they just did the math that if you somehow knocked out 2-3 of the major pools, you would essentially be getting most/all bitcoins w\ enough processing power in your own pool.


Title: Re: Bitcoin services under attack?
Post by: carriun on May 31, 2011, 12:46:35 PM
If there is enough disruption in the pools for a couple weeks would the difficulty drop?   How much of the total network  hash rate is made up in pools?


Title: Re: Bitcoin services under attack?
Post by: CydeWeys on May 31, 2011, 01:27:01 PM
all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).


Don't use MyBitcoin?  The whole strength of Bitcoin is that it is 100% decentralized; why give that up?


Title: Re: Bitcoin services under attack?
Post by: M4v3R on May 31, 2011, 02:19:47 PM
If there is enough disruption in the pools for a couple weeks would the difficulty drop?   How much of the total network  hash rate is made up in pools?


http://chart.googleapis.com/chart?chs=350x200&chd=t:40.23,0.92,12.62,32.33,2.68,11.22&cht=p&chf=bg,s,00000000&chl=deepbit|bitcoins.lc|btcguild|other|Eligius|btcmine

Translation: most of it.


Title: Re: Bitcoin services under attack?
Post by: mennoman on May 31, 2011, 02:32:42 PM
all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/
But sometimes it seems it doesn't work.


Title: Re: Bitcoin services under attack?
Post by: Alex Beckenham on May 31, 2011, 02:57:51 PM
all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).


Don't use MyBitcoin?  The whole strength of Bitcoin is that it is 100% decentralized; why give that up?

Do you mean boycott all merchants that use mybitcoin.com to accept payments?

That will drastically reduce the take-up rate for new bitcoin merchants.

Not every store owner knows how to set up a wallet on their own server.


Title: Re: Bitcoin services under attack?
Post by: grue on May 31, 2011, 04:17:40 PM
On the side note, Bitcoin Signature Generator (http://bc.x14.eu) was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:
1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

"Havij" is a popular vulnerability scanner. This probably means the attacker is a script kiddie who is bored.


Title: Re: Bitcoin services under attack?
Post by: PabloW on June 01, 2011, 02:58:23 AM
Maybe it's all just a bit lot of coincidences!


Or you mean Bitcoincidences?

 ;D


Title: Re: Bitcoin services under attack?
Post by: timmmay on June 01, 2011, 03:14:49 AM
Maybe it's all just a bit lot of coincidences!


Or you mean Bitcoincidences?

 ;D

Hahaha I like this!


Title: Re: Bitcoin services under attack?
Post by: cdhowie on June 01, 2011, 04:03:03 AM
If there is enough disruption in the pools for a couple weeks would the difficulty drop?
Probably not by much.  People will either switch to another pool or solo mine until the pools come back up.  The network doesn't care if the blocks come from pools or not.


Title: Re: Bitcoin services under attack?
Post by: jerfelix on June 01, 2011, 08:50:40 AM
On the side note, Bitcoin Signature Generator (http://bc.x14.eu) was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:
1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

"Havij" is a popular vulnerability scanner. This probably means the attacker is a script kiddie who is bored.

Indeed.  If you have a website with a web form, you will be under attack all the time from these things.  People just leave them running day and night, crawling the web, and looking for vulnerabilities.  I've seen normal sites under attack daily from these.


Title: Re: Bitcoin services under attack?
Post by: dacoinminster on June 01, 2011, 02:26:18 PM
When MtGox got DDOS'd, it was hackers demanding a ransom. I wouldn't be surprised if many pool operators are getting similar demands.

Come to think of it, bitcoin might just be the perfect way to accept a ransom of any kind.