Bitcoin Forum

Other => Beginners & Help => Topic started by: jamieshelly on August 12, 2011, 03:03:51 PM



Title: mybitcoin hack
Post by: jamieshelly on August 12, 2011, 03:03:51 PM
i've lost some bitcoins in the mybitcoin fiasco, and when i tried to file a claim initially i entered my original address by mistake.
i haven't been reimbursed, and now if i try enter in another address for my previous login details its says my account has a balance of 0.
does that mean its all gone?
what do i do?


Title: Re: mybitcoin hack
Post by: Mad7Scientist on August 12, 2011, 03:17:28 PM
So you sent your money back in to your ewallet?

I guess you'll have to contact the owner because he is the only one who can access it now.


Title: Re: mybitcoin hack
Post by: BookofNick on August 12, 2011, 03:23:40 PM
Same exact thing happened to me. Still no coins in my wallet after almost 4 days. Please let me know how it turns out.


Title: Re: mybitcoin hack
Post by: jamieshelly on August 12, 2011, 03:48:42 PM
So you sent your money back in to your ewallet?

I guess you'll have to contact the owner because he is the only one who can access it now.

any idea how to contact him?


Title: Re: mybitcoin hack
Post by: Mad7Scientist on August 13, 2011, 05:33:50 AM
I saw him in #bitcoin-police a few days ago but that was it.


Title: Re: mybitcoin hack
Post by: Kyt Dotson on August 13, 2011, 06:22:53 AM
After the hack and fall of MyBitcoin, I'm interested in seeing what the underlying "engine" is and how the community might end up working together to make it function better. :)


Title: Re: mybitcoin hack
Post by: Stefanie Andrea on August 13, 2011, 09:07:47 AM
I had about 200 btc in MyBitcoin  :'(


Title: Re: mybitcoin hack
Post by: lenguyenphat on August 13, 2011, 09:56:51 AM
Hard to say ;ucky or not!
As the report, some data has lost!
Lucky or not is that how much btc you lost!
In case of me, i have 3 btc
mybitcoin says i have 2 btc, and return me 0.98 btc
WTF
The ratio 49% they return for you is only appears after you accept the claim!
So you must accept it!


Title: Re: mybitcoin hack
Post by: Stefanie Andrea on August 13, 2011, 10:23:37 AM
I filed a claim.

I had 200 btc
And it told me I had .2btc

What a ripoff  :(


Title: Re: mybitcoin hack
Post by: Lolcust on August 13, 2011, 11:11:03 AM
I'm somewhat annoyed that they will only release the engine "after the claims get processed".

Also, I am very interested as to technical details of the "hack" - because, you know, if it happened because of a vuln in the mybitcoin engine and the vulnerability isn't fixed when the engine gets released, some very rough things might happen as a thousand tiny mybitcoin wannabes rise up and get pwnt.

As for jamieshelly's specific woes, I advise going to #bitcoin-police IRC channel on freenode
They are a swell bunch o fellas.


Title: Re: mybitcoin hack
Post by: Kyt Dotson on August 13, 2011, 06:30:54 PM
I'm somewhat annoyed that they will only release the engine "after the claims get processed".

Also, I am very interested as to technical details of the "hack" - because, you know, if it happened because of a vuln in the mybitcoin engine and the vulnerability isn't fixed when the engine gets released, some very rough things might happen as a thousand tiny mybitcoin wannabes rise up and get pwnt.

As for jamieshelly's specific woes, I advise going to #bitcoin-police IRC channel on freenode
They are a swell bunch o fellas.

I am surprised that they aren't going to release the code until after all the transactions are completed. It seems to me that the concept of a good will gesture happens to be to show some sort of contrition for an issue. Of course, they could be staling in an attempt to determine if the flaw happens to be in the engine (or fix it.) One of the benefits of releasing it with caveat is so that an open source community could pore over it. :)



Title: Re: mybitcoin hack
Post by: Xephan on August 13, 2011, 06:34:50 PM
Of course, they could be staling in an attempt to determine if the flaw happens to be in the engine (or fix it.)

Or to add a working flaw into an unbroken engine ;)


Title: Re: mybitcoin hack
Post by: Kyt Dotson on August 13, 2011, 06:37:14 PM
Of course, they could be staling in an attempt to determine if the flaw happens to be in the engine (or fix it.)

Or to add a working flaw into an unbroken engine ;)


I sure hope not!  :-\


Title: Re: mybitcoin hack
Post by: Stefanie Andrea on August 13, 2011, 10:46:37 PM
That's evil  >:(


Title: Re: mybitcoin hack
Post by: Xephan on August 14, 2011, 06:25:59 AM
Of course, they could be staling in an attempt to determine if the flaw happens to be in the engine (or fix it.)

Or to add a working flaw into an unbroken engine ;)


I sure hope not!  :-\

The suspicion that it's a scam is always going to be there since it's just too easy to claim that we lost X% of your coins due to a hack. Yet to date it seems that none of the stolen coins were moved, so it sounds like the thief is waiting for attention to die down so nobody will be paying attention when he moves them. Since Bitcoin transfers are quite anonymous, why would an unknown thief be so concerned? Maybe once the coins start moving, we'll know who actually took them?

By the same token, it would imply that there wasn't any alleged flaw in the engine to begin with and this would be quickly discovered if released unaltered to public scrutiny. So I would delay releasing the source, then either inject in a flaw if I can find a technically plausible one OR claim I fixed the problem ;)

Please try not to remember this post when I start a AllYourBitCoin service :D



Title: Re: mybitcoin hack
Post by: crank123 on August 14, 2011, 08:42:31 AM
I have the same problem, fill the claim with my original mybitcoin.com address....

Anyone an idea how i get my bitcoins back?


Title: Re: mybitcoin hack
Post by: NothinG on August 14, 2011, 09:18:44 AM
I have the same problem, fill the claim with my original mybitcoin.com address....

Anyone an idea how i get my bitcoins back?
Smart...


Title: Re: mybitcoin hack
Post by: LoneTrader on August 14, 2011, 12:02:10 PM
One thing I don't get: If the coins were never moved (is that certain?), then wouldn't a simple backup suffice to recover them and move them to a safe place? And even if there were no backups, it's often possible to recover lost files unless the attacker made a conscious effort to overwrite them.

Also, what about adding a sort of blacklist to the client, to make sure that these coins can never be moved in the future until further action is taken?


Title: Re: mybitcoin hack
Post by: NothinG on August 14, 2011, 12:30:24 PM
One thing I don't get: If the coins were never moved (is that certain?), then wouldn't a simple backup suffice to recover them and move them to a safe place? And even if there were no backups, it's often possible to recover lost files unless the attacker made a conscious effort to overwrite them.

Also, what about adding a sort of blacklist to the client, to make sure that these coins can never be moved in the future until further action is taken?
In Windows...when you move a file, there are traces which can be recovered.
In Linux...when you move a file, you're fucked.

Their fault for not having backups.


Title: Re: mybitcoin hack
Post by: LoneTrader on August 14, 2011, 01:18:42 PM
In Linux...when you move a file, you're fucked.

Well, that depends. If it's really valuable, and the data hasn't been overwritten on the disk, you can usually find it by looking for patterns in the raw disk contents.

However, if they left the server running, or even shut it down and rebooted it after the supposed hack, I agree there is little chance the data is still there.


Title: Re: mybitcoin hack
Post by: Mad7Scientist on August 14, 2011, 01:36:54 PM
The wallet wasn't stolen on mybitcoin there was an attack where there were fraudulent deposits which had 1 confirmation. Then the money was withdrawn from mybitcoin using real bitcoins which weren't fraudulent before the 1 confirmation deposits were discovered to be invalid.


Title: Re: mybitcoin hack
Post by: SomeoneWeird on August 14, 2011, 02:33:35 PM
The wallet wasn't stolen on mybitcoin there was an attack where there were fraudulent deposits which had 1 confirmation. Then the money was withdrawn from mybitcoin using real bitcoins which weren't fraudulent before the 1 confirmation deposits were discovered to be invalid.

We think.


Title: Re: mybitcoin hack
Post by: LoneTrader on August 14, 2011, 03:36:16 PM
The wallet wasn't stolen on mybitcoin there was an attack where there were fraudulent deposits which had 1 confirmation. Then the money was withdrawn from mybitcoin using real bitcoins which weren't fraudulent before the 1 confirmation deposits were discovered to be invalid.

Oh, I see. (Sorry, hadn't read the statement on mybitcoin.com.)

In that case, what do people mean when they say the bitcoins have not been moved? Are the withdrawal transactions known?


Title: Re: mybitcoin hack
Post by: Xephan on August 14, 2011, 04:59:08 PM
In Linux...when you move a file, you're fucked.

Their fault for not having backups.

That's not true. Depending on which filesystem they are using, it can be just the same as recovering lost files from a FAT16/32 filesystem (ext2 uses similar mechanism to "delete" files), or a bit more complex requiring parsing filesystem journals and reconstructing from meta data.

In all cases, the most critical step is to stop writing to the disk as soon as the mistake is discovered. Yanking the power is better than a "proper" shutdown in this situation :D