|
Title: inputs.io security issue? Post by: gaston909 on November 04, 2013, 08:23:57 PM Big fan of inputs.io and dont want to cause a scene but heard a few reports of missing coins recently -
http://www.reddit.com/r/Bitcoin/comments/1pw46j/someone_just_transferred_0095_from_my_inputsio/ Any news on this TF? Title: Re: inputs.io security issue? Post by: The 4ner on November 04, 2013, 08:39:59 PM Damn that's a serious issue. I'm glad I have a 0 balance in my Inputs.io account.
Hopefully this issue gets resolved soon because I will be needing it in the very near future. :-\ Title: Re: inputs.io security issue? Post by: InwardContour on November 04, 2013, 08:51:52 PM very worried about this. i just saw this on reddit. please, TF, update us as soon as possible. my balances all appeared to be intact this morning but i won't be able to check until tonight.
Title: Re: inputs.io security issue? Post by: coinpr0n on November 04, 2013, 09:06:30 PM inputs is working for me. i think it probably has something to do with using the same password across multiple sites...
Title: Re: inputs.io security issue? Post by: InwardContour on November 04, 2013, 09:11:20 PM inputs is working for me. i think it probably has something to do with using the same password across multiple sites... based on the info that's going around, i don't think so. this may be an internal compromise. Title: Re: inputs.io security issue? Post by: dserrano5 on November 04, 2013, 09:12:20 PM inputs is working for me. i think it probably has something to do with using the same password across multiple sites... The JustDice inputs.io wallet has been emptied despite having 2FA and GPG enabled. It's not as simple as same password. Title: Re: inputs.io security issue? Post by: favdesu on November 04, 2013, 09:14:57 PM The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. Everyone who has lost money will be fully reimbursed. Title: Re: inputs.io security issue? Post by: BarkinTree on November 04, 2013, 09:28:56 PM oh no! i'm glad he will reimburse, but this makes me very worried for the future of inputs.io..... details please!!!
Title: Re: inputs.io security issue? Post by: Injust on November 04, 2013, 09:35:02 PM TradeFortress has given an update on this issue at https://bitcointalk.org/index.php?topic=248803.msg3482410#msg3482410.
The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled. Everyone who has lost money will be fully reimbursed. Title: Re: inputs.io security issue? Post by: lucaspm98 on November 04, 2013, 09:38:32 PM Yup just had a problem with this yesterday. First someone logged into my inputs account and tried to send my BTC away but they sent me an email that a different IP was trying to send from my account. Then they hacked my email, but luckily I had deleted the email and was online the entire time so I could change all my passwords. Hopefully they can get this resolved for everyone else.
Title: Re: inputs.io security issue? Post by: gaston909 on November 04, 2013, 09:40:11 PM Stealing is wrong.
Title: Re: inputs.io security issue? Post by: The 4ner on November 04, 2013, 09:42:18 PM Reimbursement of money ins't the golden solution. Yes, that's a plus. But what matters most here is what caused the coin theft in the first place.
We need TF to ensure the security of the site so that this doesn't happen ever. Title: Re: inputs.io security issue? Post by: BarkinTree on November 04, 2013, 09:51:40 PM Reimbursement of money ins't the golden solution. Yes, that's a plus. But what matters most here is what caused the coin theft in the first place. exactly. because i am glad he will cover the losses, but if thousands of coins get stolen in a hack, he may not have the funds to reimburse. i wonder how much is kept in cold/offline wallets in the case of a hack?We need TF to ensure the security of the site so that this doesn't happen ever. Title: Re: inputs.io security issue? Post by: waqas on November 05, 2013, 10:37:07 AM its a very serious issue he must look at this now doing good work but suddenly this happen its very strange
Title: Re: inputs.io security issue? Post by: ReBoRn on November 05, 2013, 02:07:38 PM The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. Everyone who has lost money will be fully reimbursed. good news I was very upset lost very little but very important for me :) Title: Re: inputs.io security issue? Post by: js1985 on November 06, 2013, 12:22:30 PM Sending has failed. The hot pocket may be empty. We have being notified of this.
well withdrawing doesn't work Title: Re: inputs.io security issue? Post by: bakada on November 06, 2013, 01:19:38 PM ...
Title: Re: inputs.io security issue? Post by: The 4ner on November 06, 2013, 02:54:16 PM That's not good! -.-
Title: Re: inputs.io security issue? Post by: The 4ner on November 06, 2013, 03:15:08 PM I am still able to receive transactions. Haven't tried to send yet. I'll let you know if it works (or not). Receive transactions how? From CoinLenders to Inputs.io? Title: Re: inputs.io security issue? Post by: MAbtc on November 06, 2013, 06:09:00 PM .....So no movement on this? No update, I mean, about what actually happened and how much BTC were lost in total? Seems there are still issues. Hope this does not end up snowballing. I have some BTC stuck on Inputs because of transaction limit setting, but it sounds like I may not be able to retrieve it anyway.
Title: Re: inputs.io security issue? Post by: The 4ner on November 07, 2013, 03:36:06 PM https://blockchain.info/address/1EMztWbGCBBrUAHquVeNjWpJKcB8gBzAFx
Tis where our coins have gone :-\ Title: Re: inputs.io security issue? Post by: ReBoRn on November 07, 2013, 10:36:58 PM I have some coins backs from support of inputs thanks to them even just very few
Title: Re: inputs.io security issue? Post by: Cosmorph on November 08, 2013, 07:07:07 AM My account appears not to have been comprised but I can't send any coin due to the "Sending has failed. The hot pocket may be empty. We have being notified of this." issue. Anyone know when this is going to get fixed?
Title: Re: inputs.io security issue? Post by: favdesu on November 08, 2013, 07:37:10 AM My account appears not to have been comprised but I can't send any coin due to the "Sending has failed. The hot pocket may be empty. We have being notified of this." issue. Anyone know when this is going to get fixed? good morning. Title: Re: inputs.io security issue? Post by: bbit on November 08, 2013, 07:53:09 AM My account appears not to have been comprised but I can't send any coin due to the "Sending has failed. The hot pocket may be empty. We have being notified of this." issue. Anyone know when this is going to get fixed? All the bitcoins are gone, what don't you understand about that? It was taken thru the bitcoind and not the api like first thought. This ^^ Title: Re: inputs.io security issue? Post by: The 4ner on November 08, 2013, 03:09:22 PM My account appears not to have been comprised but I can't send any coin due to the "Sending has failed. The hot pocket may be empty. We have being notified of this." issue. Anyone know when this is going to get fixed? good morning. (sigh) :-\ Title: Re: inputs.io security issue? Post by: MAbtc on November 08, 2013, 07:33:42 PM Looks like the coins have been recently washed. What a fiasco this has been. Sorry to all involved. I'm especially sorry that I advertised for TF.
|