Bitcoin Forum

Economy => Service Discussion => Topic started by: ReCat on September 25, 2013, 07:38:19 PM



Title: Are Blockchain.info Passwords Compromized if you get an email?
Post by: ReCat on September 25, 2013, 07:38:19 PM
Recently, I have recieved the following email from blockchain.info.

https://i.imgur.com/0ev8lzA.png

Does this mean that someone tried to login, but they got the WRONG password?

Or does that mean that someone tried to login and they got the RIGHT PASSWORD and then were denied by BlockChain.info because of suspicious activity?
I know that google does this. Quite often when I login to my Gmail from a tor exit node, as well as inputs.io. But does Blockchain.info do this?

It's a DEAD IMPORTANT detail that Blockchain.info doesn't make clear! Is my password compromised or not?!


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: cp1 on September 25, 2013, 07:46:06 PM
Too many people have gotten their coins stolen from blockchain's wallet.  You should just bite the bullet and set one up on your computer.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: vm1990 on September 25, 2013, 07:50:11 PM
i assume being as it says ATTEMPT that they have not gained access to your account, if i where you and had any worth while amount of bitcoin in there id either strengthen the password or move the coins out as it seems someone is trying to get into peoples accounts


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: ReCat on September 25, 2013, 07:51:54 PM
Too many people have gotten their coins stolen from blockchain's wallet.  You should just bite the bullet and set one up on your computer.

I have one, it's just that running the bitcoin-qt client takes forever to sync the blockchain, and its extremely inconvinient to use.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: vm1990 on September 25, 2013, 07:52:42 PM
blockchain.info is going up and down looks like either a bruteforce attack thats to heavy and acting more of a ddos or admins are trying to sort the problems out...


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: vm1990 on September 25, 2013, 07:53:57 PM
Too many people have gotten their coins stolen from blockchain's wallet.  You should just bite the bullet and set one up on your computer.

I have one, it's just that running the bitcoin-qt client takes forever to sync the blockchain, and its extremely inconvinient to use.

if your password is pretty secure i wouldn't worry to much about it.... also wheres the email sent from make sure its not some spam email that takes you to a cloned website...


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: ReCat on September 25, 2013, 07:57:24 PM
Too many people have gotten their coins stolen from blockchain's wallet.  You should just bite the bullet and set one up on your computer.

I have one, it's just that running the bitcoin-qt client takes forever to sync the blockchain, and its extremely inconvinient to use.

if your password is pretty secure i wouldn't worry to much about it.... also wheres the email sent from make sure its not some spam email that takes you to a cloned website...

Yeah. Gmail notifies me if it's coming from a fake server.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: vm1990 on September 25, 2013, 08:09:19 PM
just typed in the ip address and its a TOR exit node...


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: grue on September 25, 2013, 08:28:30 PM
just typed in the ip address and its a TOR exit node...
Plus the user-agent shows it's a python (brute forcing?) script :p


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: IncreaseMyT on September 25, 2013, 08:33:59 PM
I have a blockchain wallet, do you think it is safer to store in Bitcoin QT?

Have 2 way on it.

Checked mine and it was fine.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: vm1990 on September 25, 2013, 09:34:23 PM
I have a blockchain wallet, do you think it is safer to store in Bitcoin QT?

Have 2 way on it.

Checked mine and it was fine.

if your using a good password then you should be fine. i would strongly suggest using bitcoin qt if you know you can keep your wallet safe


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: IncreaseMyT on September 25, 2013, 09:36:13 PM
Ok good idea, I have Bit QT setup, just haven't started using it yet.

I am on a mac, so with the firewall I have it probably is the safest way.

Thank You


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: cp1 on September 25, 2013, 09:42:40 PM
You can use electrum if you don't want to download the blockchain.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: IncreaseMyT on September 25, 2013, 09:47:53 PM
I already downloaded it, took me 4 days, I just hadn't used it yet.  I am afraid to add too many wallets its hard to keep up with all the pass phrases.  Once I become more comfortable I will have multiple wallets for sure :)

I sent like 35 in Bit to the BitQT just as trial, it is at 5 unconfirmed so it only took me 30 minutes.

Now that I am familiar with it I am trying to get my clients to use it :)  We will see how it goes...


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: ReCat on September 26, 2013, 01:15:15 AM
You can use electrum if you don't want to download the blockchain.

I wasn't able to import my vanity address to electrum. >.<


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: cp1 on September 26, 2013, 03:11:00 AM
I wasn't able to import my vanity address to electrum. >.<

I don't know if there's a way with the GUI but you should be able to use importprivkey in the console at least.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: piuk on September 26, 2013, 12:35:58 PM
Does this mean that someone tried to login, but they got the WRONG password?

Or does that mean that someone tried to login and they got the RIGHT PASSWORD and then were denied by BlockChain.info because of suspicious activity?
I know that google does this. Quite often when I login to my Gmail from a tor exit node, as well as inputs.io. But does Blockchain.info do this?

It's a DEAD IMPORTANT detail that Blockchain.info doesn't make clear! Is my password compromised or not?!

It means someone opened your wallet login page from an unknown browser. It doesn't mean someone has the right or wrong password, they were denied from trying any password.

Your alias is the same as your bitcointalk username which means anyone can visit http://blockchain.info/wallet/ReCat and you will receive "authorisation required" email. Changing your alias to something more obscure should prevent you receiving any more of these emails.



Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: marcovaldo on September 26, 2013, 02:33:39 PM
No, nothing is compromised. It is normal.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: ReCat on September 26, 2013, 03:10:51 PM
Does this mean that someone tried to login, but they got the WRONG password?

Or does that mean that someone tried to login and they got the RIGHT PASSWORD and then were denied by BlockChain.info because of suspicious activity?
I know that google does this. Quite often when I login to my Gmail from a tor exit node, as well as inputs.io. But does Blockchain.info do this?

It's a DEAD IMPORTANT detail that Blockchain.info doesn't make clear! Is my password compromised or not?!

It means someone opened your wallet login page from an unknown browser. It doesn't mean someone has the right or wrong password, they were denied from trying any password.

Your alias is the same as your bitcointalk username which means anyone can visit http://blockchain.info/wallet/ReCat and you will receive "authorisation required" email. Changing your alias to something more obscure should prevent you receiving any more of these emails.



Thanks. Good post, gets right to the point.

Anyways, Someone from the UK with a 10.8.5 macbook is trolling me. Stawp. :P


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: Joe200 on September 26, 2013, 06:45:10 PM
Too many people have gotten their coins stolen from blockchain's wallet.  You should just bite the bullet and set one up on your computer.

Like who? Links please.


Title: Re: Are Blockchain.info Passwords Compromized if you get an email?
Post by: dartharthas on September 26, 2013, 06:51:07 PM
piuk why have you been ignoring my attempts (https://bitcointalk.org/index.php?topic=290353.msg3108986#msg3108986) at contacting you regarding 5 BTC getting lost in BlockChain's Shared Send?