Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: ziv on February 14, 2012, 07:11:27 AM



Title: BTC-E reported compromised
Post by: ziv on February 14, 2012, 07:11:27 AM
BTC-E reported compromised (http://bitcoinmedia.com/warning-btc-e-compromised/) by Phantomcircuit on bitcoinmedia.

Looks like they do a tiny fraction of BTC exchange volume (http://bitcoincharts.com/charts/volumepie/) but run to pull your money out if you are a customer.


Title: Re: BTC-E reported compromised
Post by: btc-e.com on February 14, 2012, 08:41:33 AM
CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat


Title: Re: BTC-E reported compromised
Post by: btc-e.com on February 14, 2012, 02:02:40 PM
https://btc-e.com/news/59


Title: Re: BTC-E reported compromised
Post by: BadBear on February 14, 2012, 02:27:26 PM
Intersango discussion moved here
https://bitcointalk.org/index.php?topic=63877.0
Don't advertise in others threads please, it's off topic




Title: Re: BTC-E reported compromised
Post by: stcupp on February 14, 2012, 06:48:08 PM
What with Trade Hill closing and this instance those unaware should check out Intersango.com.

We don't advertise much but we are one of the biggest exchanges. We are the 2nd longest running exchange. The longest running exchange not to have been compromised. We have never suffered a hack and we are the only bitcoin exchange owned and operated by core bitcoin developers. We have the most competitive rates especially once considering transfer costs to and from Intersango.com

We operate with honesty, and have absolutely no hidden fees. Our long history confirms this time and time again.

We also have always had excellent and fast support!


EDIT: I mention this mostly due to the fact that Patrick Strateman (known on these forums and IRC as phantomcircuit) has repeatedly found security vulnerabilities like the above mentioned. Having strong developers and security specialists does make a huge difference. The whole reason we created Intersango was because we realized this was Bitcoins biggest problem, reliable exchanges.

Is this new wave of regulations affecting you? Do you still accept Dwolla and Paxum for deposits and withdrawals? It seems like those put an end to Tradehill. I would like an alternative to gox.

On topic segment:  BTC-E seems to have suffered from the same stupidity as Bitscalper. Does no one understand even simple salted MD5? LOL


even salted md5's can easily be cracked

I think the min standard nowadays is using SHA 256 with atleast a 16 byte random salt


Title: Re: BTC-E reported compromised
Post by: btc_artist on February 14, 2012, 06:51:33 PM
even salted md5's can easily be cracked
Not necessarily, that would depend on several factors.

I think the min standard nowadays is using SHA 256 with atleast a 16 byte random salt
Not true.  Using key hardening or key lengthening is much more important than which cryptographic primitive you choose.


Title: Re: BTC-E reported compromised
Post by: RaggedMonk on February 14, 2012, 07:16:39 PM
Lastpass ftw.  I hope the hacker spends days cracking my password and gets my 0.056BTC on deposit  :D