Bitcoin Forum

Wow, these DDOS types are really persistant. It seriously sucks though- DDOS is becoming a real problem for our nascent economy.

Ya this is pretty rough :(

I hope some other exchanges get going.

I wonder who the parties involved are, and what the whole strategy is here.

Anyone know what LTC is at right now ? :)

Many LTC pools are still experiencing issues as well... The price is staying very stable, at least.

I think it's a sign that we need more crypto exchanges. There's certainly enough room in the market for more of them. It'll be harder to DDOS 100 exchanges than 3 or 4 of them.

They need to increase their defense budget. btc-e.com makes hundreds of k profit per month from taking 2% of each side of the trade, so it baffles me how they can't afford to defend against these attacks. Same for mtgox x 10.

It does suck but it also means altcoins are worth enough for someone with competing interests to spend time and energy attacking.... quite flattering if you think about it :)

I don't think your right about that actually. They are def making money, and BTC-E has put a lot of time and effort into DDOS protection, even MtGox has, but the DDOSers are still at it.

Yes, i notice new DDOS protection on BTC-e even just yesterday.

I was on btc-e chat jsut before it went down.  btc-e support had just said that vircurex was HACKED, not DDOS.

really? OUCH>

yes it is really bad i was mining on litecoinpool.org and it when down did not realize for 7 hours that is a waste of time and e forte  

Ozcoin doesn't seem to be responding, either.

Yeah i know they are def making money, that's whole point of my post. Spend some of those profits on better DDOS protection. Do the math on how much is traded on these exchanges per month, with that much profit I would expect less of these downtimes.

Are you sure about that, there was someone spamming btc-e was hacked but I didn't see anyone from support say that  :-\

Yeah, how would support even know if Vircurex was hacked?

well, I got to say BTC-E is real resilient when it comes to dealing with DDOS.  Couple of seconds and they're back in business.  Props to the people at btc-e.

Any update on confirming if Vircurex was hacked?

Both russian exchange operators, so maybe in contact with eachother?  that's what i figured.
Or btc-e could just dislike vircurex of course.

I offered them DDoS protection that would suit their needs a few days ago but they declined.

+1??

Vircurex has a thread here: https://bitcointalk.org/index.php?topic=49383.new#new

They announced they were down and having datacenter trouble. So it should be nothing to worry about. Just persistant DDOS.

BTC-E dev says they didn't say anything about Vircurex hacked, so thats just FUD.

Phew. Facts.

I ain't trollin - i saw the statement from btc-e support that vircurex was a hack myself.  But I'm glad it was wrong.

I would decline services from someone with 37 posts, too.  In fact, I'd probably decline services from myself, just based on my forum postings alone.  Do you have some kind of credentials in this field?

Its the governments and bankers doing the DDOS attacks, acting under from the instructions of the Bilderberg group as they can't stop the masses abandoning their fiat money system :D

From the mtgox announcement
http://www.bitcoinrumors.com/2013/04/04/mtgox-announcement-on-ddos-attack/

"Why has Mt.Gox become the target of a DDoS attack?
..
Abuse the system for profit.
 Attackers wait until the price of Bitcoins reaches a certain value, sell, destabilize the exchange, wait for everybody to panic-sell their Bitcoins, wait for the price to drop to a certain amount, then stop the attack and start buying as much as they can. Repeat this two or three times like we saw over the past few days and they profit."

I speculate that the attackers are targeting vircurex and btc-e for the same reason. They would have placed low bids, attacked, then when the attacks stop there will be panic selling, their bids will scoop up the coins cheap, when prices return to normal in a few days they'll sell making a profit. They'll then use part of their profit to attack again in a while, and keep doing this as long as they make a profit.

To neutralize this, as soon as the exchanges reopen people can cancel their asks and place bids. This will slow the selling, and so reduce the attackers' profit. Without a profit they won't do this again. I pledge the following, for three days after the exchanges reopen I will:

1) Cancel my asks.

2) Place bids with my bitcoins already on the exchange.

3) Send in more bitcoins from my wallet, and place more bids.

The DDoS attacks are a western finance industry phenomena!

It seems that its possibly a middle east based attack on all western financial institutions - they probably don't know the difference between bitcoin and wall st. Its just a shame bitcoin infrastructure isn't built linka normal banking one!

Read about it on a security website earlier today - wish I could find the link!

I don't think they have anything like the volume of BTCE/MTGOX but it has been a steady little exchange just overwhelmed by a rush. 

It also seems very secure with yubikey authorisation too.

Maybe they are targeting all those alt-coins that had their prices sky-rocket the last few days. This does not look good for some of the alt-coins  :-\

BTC-E have an account on here? :O
Never knew when offering DDoS protection I had to link my BTC-E profile!
Yes, in fact, I have multiple testimonials and have a few servers along with hardware firewalls.

I guarantee you that CloudFlare's protection is better than anything you could offer man. :p

Cloudflare is useless, Freenet or Tor would be prevent this easily, and they wouldn't have to pay $1000/mth for pro DDOS protection. Eventually all the exchanges will have to be on Freenet or something similar

reasons to trust any exchange?  any accountability?  like legally?

isn't there a post in the newbs thats says TRUST NO ONE...?


can i get some reasons why i should trust who with storing any amount of my coins while trading?  it seems like pretty much anybody could run an exchange, and anybody could do it totally anonymously, and also disappear and make a great heist anonymously.  am I wrong?  please enlighten me on these concerns

Enlightenment: you make a lot more $$$$ running a legit business for years than you do scamming people for a few weeks/months.

Do you think they will hit bitcointalk too?

Running an exchange over cjdns, tor or i2p would help mitigate a DDOS attack I think. Have a public facing normal internet site that just proxies to the alt-network site. This would be a little slower (although it's pretty good on cjdns). If the public network site get's DDOS'd bring up another since it's quick to do a proxy - and users can use the alt-network site if they really need to trade.

Downsides are people don't trust sites on alt-networks but that's mainly anonymous people setting up exchanges that are untrusted I think. Other downsides are it limits users if it's only accessible via the alt network.

Are you sure? They will suspend you if you receive a 5Gbps HTTP flood.

+1

I neither believe nor disbelieve what you're saying. Can we get some explanation for either side of this "discussion" as I'm curious. I do not even know how anti-DDOS would work...

PM me, this is no place for a discussion on anti-ddos.

http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet

Spamhaus was getting pounded by 300Gps DDoS from all directions as they were pinging DNS servers to add to the dos. This almost broke a Tier 1 backbone. This is not going to get any easier best solution is torrify your exchange, or put it on Freenet/i2p whenever the anti ddos protection fails as a temporary backup for customers.

Also helps to use Silk Road methods to prevent slowloris attacks and slowDoS like encoding all images to base64.

Best part is Tor costs $0.00 instead of thousands per month in DDoS protection

But the problem is that the regular internet users, don't know this things, so if the crypto currencies are going to work, they need mass adoption, this doesn't help.

If they can figure out bitcoin they can figure out Tor or a p2p app. Otherwise the only exchanges that will exist are gigantic monopolies who can afford a million dollars for Tier-1 bandwidth