Bitcoin Forum
May 24, 2024, 06:19:02 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 [98] 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 »
1941  Bitcoin / Bitcoin Discussion / Re: Which side are you on? on: June 21, 2011, 01:40:03 AM
Why only my son is an option there, people can't side with me anymore?  Huh
1942  Bitcoin / Bitcoin Discussion / Re: I'm Kevin, here's my side. on: June 21, 2011, 01:24:47 AM
To defend MagicalTux here. He is french, and the miscommunications are incredible. I used to work with many French,  and they all come off like.. well like MtGox.  Its a combo of language and culture, that make the French seems incredibly obnoxious to Americans when communicating in English.

.02

It's a matter of Latin language structure (French, Spanish, Portuguese, Italian and Romanian) versus Anglo-Saxon (not "Americans" specifically) and you could add Germanic language branch versus those 2... and why not Slav.
Confusions of an old Continent such as Europe.
1943  Bitcoin / Bitcoin Discussion / Re: Someone hacking mybitcoin.com accounts: Proof on: June 21, 2011, 01:06:07 AM
Strange, because everyone who got hit by that jackboot, were hit to very same address and share account info with MtGox. I've several mbc accounts, all of them are untouched, except the one that shared that info.
1944  Bitcoin / Bitcoin Discussion / Re: I'm Kevin, here's my side. on: June 21, 2011, 12:49:55 AM
Kevin 170 x MtGox 131
Who will make the "epic-est" thread?
1945  Bitcoin / Bitcoin Discussion / Re: Someone hacking mybitcoin.com accounts: Proof on: June 21, 2011, 12:42:32 AM
Yeah, everyone who shared his user/pass with MtGox @ Mbc had seen their btc there went up with the wind.

Nothing to do about it, but I hope the thief get touched by your request... let me know how it ended up, so I may try the same to get mine as well.
1946  Bitcoin / Bitcoin Discussion / Re: Is Mt. Gox located in the USA or in Japan? on: June 21, 2011, 12:40:20 AM
Server: USA
Owner: Japan
1947  Bitcoin / Bitcoin Discussion / Re: Public Safety Announcement: On the subject of password security on: June 21, 2011, 12:27:26 AM
Can you PLEASE cut this bull about attempting to blame users?!
Use a 30 char long pass, alpha upper+lower+numeric+symbols... in the day you format your computer and if you forget to backup the text file with it, please, kiss your account goodbye. And don't even try to access wherever you use it from outside home, as obviously you've no clue whatsoever that password is.

Nerds! People have a life! Good security is passive, is simply there, BAD security is anything that has to nag you to be secure.

Besides, MtGox was "hacked" by the only side nerdness can't do nothing about: the HUMAN factor. Wouldn't make a difference other than slow the attacker a bit to use SHA-512 or any other hashing/crypting flavor. As obvious M'Tux had no clue his db was compromised, so the attacker actually had all the time in the World to do whatever he needed to do.
1948  Bitcoin / Bitcoin Discussion / Re: Who would rather see Mt. Gox completely dissolved? on: June 20, 2011, 11:44:09 PM
When, oh God, will we finally have a professional exchange where I can feel free to use the password "password" or "12345" without fear of reprisal?

My pwd was 14 chars long, upper+lower+numeric
anyway, a piece of cake for uncrypt MD5 crypt(pass,known salt) as it seams a miner or some miners probably used their incredible hash power to brutte-force it.

EDIT: To not mention I would probably be safer using "password" for password in any website where the owner isn't distributing dumps of his database than with any flavor of strong password there!
1949  Bitcoin / Bitcoin Discussion / Re: Who would rather see Mt. Gox completely dissolved? on: June 20, 2011, 11:35:32 PM
Nice to see you using Clark Kent's as avatar again, Atlas. Don't know why, but sounds more... you.

For the mtgox to stay or go, I don't give a damn, I registered an account to see how it was and ended up robbed @ mbc (I know my fault, same pwd, blah blah, sue me for trust mtgox, I probably deserve that), never traded there because I never got to understand wtf is "Liberty Reserve" anyway.  Undecided
Their story doesn't seams right, thou and I don't see how they will reverse btc withdraws...
1950  Bitcoin / Bitcoin Discussion / Re: MTGox Is Gone Forever.... ? on: June 20, 2011, 11:20:18 PM
I actually think this will lead Bitcoin to a needed bump.
Its insane deflation was ruining all btc based business, as it was more profitable to simply hold to the bitcoins and wait then to trade with them, now with the speculators scared as hell and away of it, it could be an opportunity to actually create a Bitcoin economy.
1951  Bitcoin / Bitcoin Discussion / Re: Which Bitcoin Exchange Can You Trust? on: June 20, 2011, 11:01:04 PM
Sorry, "Open Source all the way" is simply foolish!
You would get thought code? Maybe, but not quite. Main frame projects do, sidelined projects are normally half-baked with more bugs than you can count.
It also diminishes security (not increases), making it a lottery. By knowing the table structure an attacker by founding an exploitable hole would have quite a fine aim instead of shoot fish from the barrel by attempting to guess which table is which (is it users? accounts? members? the guy is Arab and calls it Al-Accounts? who knows?).
Over Open Source it all relies on the intentions of the one who found the exploitable hole, if is a good fellow will warn about it, otherwise will spread havoc.

Actually the breach @ MtGox was all about letting more people than desirable to have a look in his code, ending up with his db spread over the web.
1952  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 09:20:11 PM
You're taking things out of context. That reply wasn't for you, but to TraderTimm who seams to believe my previous statement about the oddity of 10 blocks to be solved in a row was some hack attempt.

Also I found amusing your attempts to degenerate all my arguments to your wishful thinking based on a single spot I might get wrong. Yet what proves coins leaving MtGox is the outstanding enormous amount of transactions at that time entering the blockchain.
1953  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 08:56:06 PM
Proof of hack attempt?!  Shocked

You guys need to chill out, this isn't hacking allover the place.
Just a strange variance, that's it, and it happened during a heavy load of transactions... but, hey, maybe they connected K to the btc network to go on a test run...  Roll Eyes
1954  Other / Off-topic / Re: Security?! on: June 20, 2011, 08:04:50 PM
Some good points. ala MtGox? Smiley

Actually lately we'd 3 major attacks, 2 of them million dollars "secure", PSN and SEGA, and MtGox.
All failed in the same (cheap) spot: HUMAN SIDE.
1955  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 07:45:29 PM
Solving the blocks that way may had been a way to use an eventual surplus on computing power from the bitcoin network.

If you notice the two to the left, they look like at the normal block solving heartbeat.
During the attack you've 2 blocks being generated simultaneously, than 3 (at least, the amount of trades cover it up) and in the end 5.
At the same time it looks like party time in the transactions entering the blockchain. This denotes a co-relationship between demand and supply.

May things happened in that time frame worthing a look at, being obviously the most urgent MtGox's issue.
1956  Other / Off-topic / Security?! on: June 20, 2011, 07:35:28 PM
Want to know the weakest link on your computer? That's you. Yes, you, not exactly you as you but you as human. The human part...

For starters put one thing on your brain: There's no such thing as electronic security! Electronics provides surveillance, not security.
If you've a cam filming someone being murdered, the only thing the cam does is that: Tells you what happened. Will change nothing for the murdered guy, unless you believe in heaven and ghosts smiling at court-house.
Whereas a human officer would try to use his psychological abilities to demote the murder from doing it. Doesn't mean he will succeed, but might and that makes a whole difference.

In fact you can run a system with plain-text passwords and users with passwords as simple as 123 (well...maybe not this much) and still look like the ultimate safe heaven, as you can run the top edge electronic "security" system and have it as secure as a toy box. It all relies in one thing: how much did you weighted the human factor?

«Hey! I use SHA512 password hashing!» So?!... It will just slow an eventual attacker from know what they're, not prevent him from doing so, specially if you've no clue that your db has been compromised.

In fact your security is reversely proportional to how many people has access to it. If you've something you run alone, you're 100x safer than if you've 100 co-admins.
Add injury to the sorrow, comes auditing. Many of them are who's in need of an audit and by adding auditors you add an unknown human party to access your system.

Whereas machine security is somehow linear, hole/exploit/virus, humans are random, they argue over something and one may not care to how many innocent people he may hurt to get to the other.

My advice here, for those interested in security is to weight as much as possible the human contact with your system. Do not forget to look for holes in the machine, but don't go by create a crater in the human side to fill a tiny hole in the machine!
1957  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 07:08:16 PM
Block production does not go up because there are more transactions pending.  Unless you think the hash rate of the network suddenly shot up at the exact moment of the heist?

It's just chance that five were made close to each other.  If one miner accepted all of the transactions that happened around the disaster, then they were all in the first block, the following four were completely redundant.

There's a limit of transactions a block can contain I know you can solve empty blocks, but the spike on demand created a spike on supply.
This is actually an unforeseen event, would be interesting, when the dust settles, to study this behavior and its influence in the blocks generated on. I would believe in "chance" if it was 2 or 3, but I count there 10 blocks during the attack and then the 2 following solved blocks appears to be what it does regularly.
1958  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 06:33:34 PM
Q1: Most likely
Q2: Probably not, MtGox was just one exchange, the others will hold its value for a while. My best guess would be a meeting point around 6~7, depends on how long they can stand the inflated btc value.
1959  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 06:25:08 PM
Looking at that piece from the blockchain my best guess would be it to be depleted or nearly depleted and replacing bitcoins with phoony coins to run in fractional-reserve-like for a while in an attempt to restore the lost income.
Due to the confidence lost this is most likely to fail. Time will tell...

Sorry if this doesn't cheer you up guys, keep in mind this is ONLY a theory. And if nothing else helps, maybe they sell Prozac at SR.
1960  Bitcoin / Bitcoin Discussion / Re: Connecting a few dots on: June 20, 2011, 06:11:12 PM
I'm not betting, this is an apocalyptic hypothesis, but still sustainable by the available data.
And no, I'll NOT be happy if I'm right. Being a pessimistic I'm used to be happy when I'm wrong.

Just by looking at the monitor, I can count 10 blocks solved (maybe more, they're hiding under the trade dots) during the attack. This means the blockchain was on fire with so many transactions going on. And the blockchain doesn't move because there was a trade at MtGox, it moves because someone was inputing a huge load of transactions to it.
Pages: « 1 ... 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 [98] 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!