Bitcoin Forum

https://i.imgur.com/NCBsGMt.png?1

Happy April fool everyone!

Forward that to Karpeles.

I received 5 Euro in my paypal and still upset who the hell send me 5 Euro for celebrating April fool  :D

Wish someone could send me those money in my paypal as an april fool! :P

Thats kinda messed up dont you think, they could have gave you something for being a customer.  But anyway yeah april fools was thinking about doing something like that but actually giving bitcoins away.  

hurry up b4 all that money is mined in the next 5 minutes with my quantum switch/on off routine, which routes all the quantum power into one motherboard (this message brought to you by Albatron PX915P)

haha, lol. Guess if you had received that really? ;))

and i didn't knew i have received same mail too.

http://s9.postimg.org/qh75p7h9r/image.png

don't click links in emails. just laugh at the joke, as the true fool is the person that hands over login details to a phishing site

Yes these are phishing malware emails, do not even get involved.

Are you saying i shouldn't have paid that? ...Uh oh. :'(

Have you seen this?

http://www.reddit.com/r/Bitcoin/comments/21wx59/coinbase_emails_and_names_leaked/


It's looks like coinbase emails and user names were leaked via a phishing attack that was pointed out by a researcher to coinbase a month ago and repeatedly ignored by coinbase until now?

That's strange...because I woke up today, checked my coinbase account and it has 732,342 Bitcoins in it, I then called my job, said "Fuck you guys, I quit", went back to sleep and woke up only to reply here.

Good day, good day.

:D Cool story, bro

I heard many people who received that message.

Unfortunately I think there might be some people dumb enough to sign in and let their password stolen.

Coinbase has a PR problem :D

https://dl.dropboxusercontent.com/u/64422931/coinbasehack.jpg

this isn't an April fools joke.  They had been warned about a security vulnerability multiple times by the same guy and refused to act...  http://blog.shubh.am/full-disclosure-coinbase-security/ (http://blog.shubh.am/full-disclosure-coinbase-security/)

Coinbase seems to feel it's a "feature".   ::)

This "feature" is going to cause some serious concerns quickly if it isn't removed.  Just came across this on Twitter today (partial list of Coinbase users and email addresses) http://pastebin.com/RzWipJFb (http://pastebin.com/RzWipJFb)

My email address is public and I didn't get any of these requests or emails..
I'm not sure this is really that big of a deal; it might be spearheaded by a competitor to Coinbase.

Why would this be phishing? The URLs its pointing to is straight on the Coinbase site, over HTTPS too.

https://coinbase.com/transactions/533aa310101a7b619b0001a5

How did they sign emails to be as if they were sent from coinbase too?

The only reason this would be actually dangerous is if the coinbase servers themselves were hacked and were storing passwords...

You can request bitcoin from any email address in the world through coinbase.  If the email address input matches that of a coinbase user you can see their full name associated with that Coinbase account.  This is not good.  Someone could very easily scrape full names/email data/ coinbase account data using this method.

I received that email multiple times to the same email address

I think it's just an April fool joke by someone taking advantage of the the facebook like module that shows users emails on coinbase.

Not a phishing attempt but it is good to be cautious by never clicking a link in any email you weren't expecting.

Most likely someone who wanted to highlight the problem and convince coinbase to fix it, they have known about this issue but didn't consider it a problem.

I just logged in coinbase, and refused 3 requests of payment since I could not afford them.  ::)

I wouldn't have refused the payment... Potentially you could be confirming to the person that requested the payment that you account does exist and it is active. 

It's best to just ignore it completely.

I got the same email and paid up! :)

These payment requests, processed through the Coinbase system, are only a click and 2FA away from executing.  Fortunately, I do not use Coinbase as a wallet. Unfortunately, I and others use them for BTC purchases with fiat so customer bank ACH and credit card data is stored there.

I'm going to leave the bogus requests sitting there and see what Coinbase does about them.  ::)

I also got several emails today from Coinbase.

Is this April Fools or real hack? I didn't click the links, though...

Only email I received from coinbase today was a cancelation of my BTC orders...

No joke

Seems they don't want my money:(

I may have to change exchanges if this happens again.