Bitcoin Forum

Economy => Speculation => Topic started by: kjlimo on December 22, 2011, 03:05:42 PM



Title: mtgox mobile app error
Post by: kjlimo on December 22, 2011, 03:05:42 PM
Anyone else having mtgox mobile app issues?  It keeps giving me a "no certificate" error.  It doesn't let me login.  Also, my phone is giving a certificate warning on mtgox.com when I use the mobile browser.  Think I can just login that way, or does that sounds like security issues?


Title: Re: mtgox mobile app error
Post by: Mushoz on December 22, 2011, 03:11:27 PM
Sounds like a man-in-the-middle attack to me. Check your computer with a virus and malware scanner, and do the same for other computers in the same network.

Edit: And change your password ASAP if you've already tried logging in on a computer that is known to be safe, on a network that's completely safe. Also, are you getting any other certificate warnings on other sites using SSL encryption (https://)?


Title: Re: mtgox mobile app error
Post by: notme on December 22, 2011, 03:20:45 PM
Anyone else having mtgox mobile app issues?  It keeps giving me a "no certificate" error.  It doesn't let me login.  Also, my phone is giving a certificate warning on mtgox.com when I use the mobile browser.  Think I can just login that way, or does that sounds like security issues?

Do a
ping mtgox.com

What is the IP address?  It should be 72.52.5.67.  If it's not, your DNS has been hijacked.


Title: Re: mtgox mobile app error
Post by: notme on December 22, 2011, 03:23:22 PM
Sounds like a man-in-the-middle attack to me. Check your computer with a virus and malware scanner, and do the same for other computers in the same network.

Edit: And change your password ASAP if you've already tried logging in on a computer that is known to be safe, on a network that's completely safe. Also, are you getting any other certificate warnings on other sites using SSL encryption (https://)?

Let me clarify what you're trying to say so he doesn't screw himself further:

You need to invalidate your keypair for the app.  If you have attempted to log in via the web interface, you will also need to change your password.  Do this from a known safe location where you can verify the ip address you are connecting to is in fact mtgox and the certificates check out.


Title: Re: mtgox mobile app error
Post by: phorensic on December 22, 2011, 03:48:08 PM
MtGox mobile works for me.  Break and then re-pair your device again like said above.


Title: Re: mtgox mobile app error
Post by: kjlimo on December 22, 2011, 04:17:30 PM
This was all done on my phone.  Luckily I didn't try logging in on the browser.  But I tried again (b4 looking at these replies) and the mobile app worked. 

Is hacking smart phones the latest thing?  Would you still recommend I change my PIN or do you this that error could have just been a mtgox short term issue? (That now went away)


Title: Re: mtgox mobile app error
Post by: notme on December 22, 2011, 04:20:55 PM
This was all done on my phone.  Luckily I didn't try logging in on the browser.  But I tried again (b4 looking at these replies) and the mobile app worked. 

Is hacking smart phones the latest thing?  Would you still recommend I change my PIN or do you this that error could have just been a mtgox short term issue? (That now went away)

I would still change the pin.  A certificate error screams mitm attack.


Title: Re: mtgox mobile app error
Post by: kjlimo on December 22, 2011, 04:25:38 PM
K, thanks!


Title: Re: mtgox mobile app error
Post by: Mushoz on December 22, 2011, 06:41:16 PM
This was all done on my phone.  Luckily I didn't try logging in on the browser.  But I tried again (b4 looking at these replies) and the mobile app worked. 

Is hacking smart phones the latest thing?  Would you still recommend I change my PIN or do you this that error could have just been a mtgox short term issue? (That now went away)

They don't have to necessarily have to hack your smart phone. It could be another computer in your network is infected, and a malicious user is using that computer to perform a man-in-the-middle attack using ARP Poison Routing. Your best bet would be to change your password to a safe one over a safe network from a safe computer.


Title: Re: mtgox mobile app error
Post by: GeniuSxBoY on December 22, 2011, 07:18:02 PM
what's the name of the mobile app in the app store?


Title: Re: mtgox mobile app error
Post by: cypherdoc on December 23, 2011, 12:07:50 AM
what's the name of the mobile app in the app store?

OMG, you're back!


Title: Re: mtgox mobile app error
Post by: kjlimo on December 23, 2011, 12:21:02 AM
This was all done on my phone.  Luckily I didn't try logging in on the browser.  But I tried again (b4 looking at these replies) and the mobile app worked. 

Is hacking smart phones the latest thing?  Would you still recommend I change my PIN or do you this that error could have just been a mtgox short term issue? (That now went away)

They don't have to necessarily have to hack your smart phone. It could be another computer in your network is infected, and a malicious user is using that computer to perform a man-in-the-middle attack using ARP Poison Routing. Your best bet would be to change your password to a safe one over a safe network from a safe computer.

In my network?  You mean the sprint network?


Title: Re: mtgox mobile app error
Post by: kjlimo on December 23, 2011, 12:26:52 AM
what's the name of the mobile app in the app store?

The name when I list "my apps" is "Bitcoin by Mtgox mobile"


Title: Re: mtgox mobile app error
Post by: GeniuSxBoY on December 23, 2011, 02:16:11 AM


OMG, you're back!


 I said the same thing about Bitcoin when I saw it hit $4.  ;D