Bitcoin Forum

https://www.reddit.com/r/CryptoCurrency/comments/8clo9b/ian_balina_hacked/
I think that people like Ian Balina understand security issues and do not leave their private keys. And still it happens. You have to be very careful

Ian already explained that how he got hacked. He shouldn't keep the keys in Evernote as it's an online platform. It is always advised to keep keys, passwords in offline version. His ignorance is the fact here to get hacked, another mistake was not to change the recovery email, which he doesn't have control.

Ok this is scary... I have hardware wallet but too lazy to use... guess I need to change my mind now...

Oh really? I didn't know about this.
It will be good leson for everyone
I use Evernote too but don't use for private keys

If you don't use hardware wallet you can give it to me  ;D ;D ;D
And if without jokes of course begin to use! Today Security is very important

The best way is to encrypt your private keys before uploading it to an online platform. Its even better to divide it between two of them.
Though offline saving of private keys is the best but it's very difficult to use.

Not a big fan of the guy, but this is very sad, even if he himself is at fault. This is hard earned crypto money. Will he be able to recover this? Even if they would fine the Kucoin user, is there a way to 'catch' him?

 

I don't know who is this Ian Balina. Is he popular or what his career?
I have read and I have no idea what is that Evernote but that's the major lesson for people who are in crypto. Keeping your private keys on any cloud storage is definitely a bad move.

It's completely his fault to keep his privatekey in the cloud storage which it is not recommeded way to do. So he must try to forgive it just like a charity to the hacker and this gives another good lesson for us never try to save our important data in the cloud storage.

I think it's a bit ironic that someone who is invested that much into crypto is hacked this way. How can you not secure your funds with the highest security possible? Keeping your private keys in Evernote is just down right stupid. I don't even trust my private keys in a password manager which is far more secure than something like Evernote. Just buy a couple of USB thumbsticks, put something like veracrypt on there make a double container with 30 character passwords en put the private keys there. Hide the thumbsticks on different places. Not that this method is bulletproof, nothing is. But I do think this is a far better solution than just saving the keys on an online service and hope for the best. Especially someone like Ian Balina who is a well known person in the crypto world and has a lot of people following him with the knowledge of how crypto wealthy he is. His method is just ignorant and excuse me for saying, but Ian just had it coming for being this ignorant with his funds. Nobody deserves this kind of robbery, but if he did care about his security a bit more it would not have happened.

Apparently he lost about $2M, that's crazy.

But what 's even more crazy is that he encrypted his private keys with passwords that could be reset?

Also, evernote, REALLY?

I agree. Evernote is really very convinient service but not for private keys.
I think he will return (earn again) his money, and this will be a good lesson for all

Honestly, Evernote is very good servise for notes and not only. I using it with plesuare
But of course not for private keys

All people make mistakes. I think maybe he did not encrypt his keys at all
It will be good lesson

That’s pretty reckless.  The guy must have a lot of $$$ in crypto.  I got peanuts and I’m afraid to even use Metamask because I don’t want my keys stored anywhere on or near a computer or cloud. 

Is it possible that this is an imposition so as not to pay taxes? sorry if it is not. a lesson for all of us

And then when you think that some people on youtube will even advise you to email to yourself your seed/keys or keep it somewhere in the clud. When something like this happens it doesn't suck, you are fully resposible for not taking the time to do proper research and keep your private keys offline. Heck even if you encrypt and later upload your encrypted keys could have low amount of characters and make it easy for somebpdy else to brute force.

Im not familiar with Ian but i was a bad issue for him, all of his hardworks of gain are just click by a second. Let us ve safe everyone no one is perfect if we securing all of our secrets. Hope this will not be happened anymore, it will be the lesson for all of us. Keep safe.

Do you believe on this story?
He he IBM technical guy and I guess he know and understand more than many other people in this crypto world about securiy
how can he store his private key on Evernote? lol that's nonsense and smell fishy.
i'm not anti fan of this guy but with huge money like that do you just use only MEW with private key? lol
with my 5 cents ideas that he's lying to avoid taxes

Yes I was surprised when I found out about this story.
I thank tha Ian Balina is more careful in this theme

I think it's posible that he did it for not to pay taxes. Who knows  ;)
But anyway this is a good lesson and reminder to be more careful

I totaly agree with you. The issue of security is very important. Especially when working with crypto currency

With the global use of internet, and various apps and social media sites etc., people have no clue the risk they are putting themselves to. With everything being password conscious, we live in a false sense of security and trust. That said, crypto private keys to be kept on evernote surpasses a realm of bravado or foolhardiness, is difficult to pinpoint. Sounds unbelievable!

Yes it may be that all this is done in order not to pay taxes. And that in the country of Ian Crypto-currency is taxed?

Just think about security be more careful check the place for  private keys  and everything will be fine

If a history of theft of money is true I feel for him
But I will not surprised if this version is boolshit ;)

That is a very expensive lesson to have learned even if he got alot of those tokens for consulting on ICO rather than straight investments. Will it damage his reputation and fees as an advisor though going forward? Sage lesson for us all that you need to take strong measures to guard the passwords and keys for your wallet accounts.

Be safe everyone!

The hack happened to Ian Balina is something fishy. This is because the US Tax on Crypto is already Due this month of April. Maybe he just want to lessen his tax payments on crypto thats why this hack happened.

That's the most tragic that could ever happen to anyone holding that much money in a wallet key that has been exposed. Why did he ever keep his passwords on an online platform.  Keeping password offline is also something that can be forgotten why is why I'm also not confident to it, like bringing a usb where passwords are stores. I could lost that USB as well which is worse. Feel sorry for him.

Yes if this is story is true I feel sorry for him too.
Anyway this is true or not we need to be more careful

Maybe so. And that since April, the currency is taxed? And what kind of activities have taxes been introduced?
I didn't know about this.

So if you said that online and offline do not secure, which one safer ?
Personally, I save my password on archieve , somewhere online so I can access it in anytime and everyone I can and this platform was the most trusted and known service so the possibility to shut down, almost 0%

I don't think that this situation will damage his reputation because he is not security adviser but will see ;)

Of course offline is more safely.
Write a private key on paper, put paper in the safe, drown in the Mariana cavity  ;D ;D

there is a version that the whole story is fake and Ian is simply bent on paying taxes.
This is a believable version, but I did not know that in the US, crypto-currency activity is taxed

Must store all of the seed and private keys on a cold storage device that never been touched by the connection of the internet nor exposed to it, it's pretty easy to backup all wallets away from hot storage devices, hackers can always find their own way to your wallet even if the storage is encrypted as long as it is not restricted to the connection outside unless the criminals are physically present on the location of the storage it is almost impossible to hack someone offline even if the device has some injections of viruses.

It is very unfortunate that such situations happen, people just start investing, and such news discourages all the desire to communicate with the crypto currency