when you say withdraw, do you mean like the Redeem option at cex (im sure you don't mean this; this would lock you in at x price point until you sold the hardware, which would be much less liquid then just holding the cex ghs), or do you mean withdrawing from your position (closing it)?

bit-mining also offers ghs, like cex, as well as kss (scrypt ghs) if you meant the later. i just figured you were a speculator because you participated in cex; its not really a miner's market. was suggesting an alternate marketplace that would feel familiar

so who is the go-to trusted escrow provider at the moment? i have need of one, figured John K would still be available when I needed him. all things change.

hope the fella is ok though.

~Green

as i was saying in another thread, the manipulation of the market at cex is too much to manage for the inexperienced trader. unless you put in a bid 5-10% under market and carefully monitor your position, buying in anywhere near market price is a fools game. i understand that anywhere you have mining capacity offered as a security, inevitably the value of the asset will downtrend (due to the ever decreasing value it returns as "dividends"). With that said the speculative rallies cex experiences, while profitable, are purely the machinations of a few whales/early adopters that have found an easy way to generate "much coin"


there are other exchanges, but the closest to cex ive found is bit-mining. tried scrypt.cc and
leaserig. bit-mining kinda feels like old school cex, back before the chatbox. ive been encouraging ppl to check them out; the support staff there is extremely helpful and you see the site owner on the chat alot, you can suggest new features and get by the minute updates on issues. cex is pretty quick on answering tickets, no doubt, but its a little easier to just be able to ask in chat for support (or shoot an email that will actually be answered in a timely fashion) I hope this doesnt change as they grow; but i wouldnt mind a few more market participants

Really enjoying trading the scrypt mining commodity they have (KSs). its a new market and ppl havent figured out the price yet, the volatility is great for swing trading. getting mining payout in litecoin is pretty cool too (they add up much faster!   )


~Green

I would like my btc to my private address
mcnastyfilth (488)

edited my signature

~Green

After the last two huge crashes, I moved my position back to bit-mining. the market is so heavily manipulated @ cex that its almost impossible to apply any typical trading strategy (besides cost averaging on the way down!). the only thing you have is intuition; the damn trollbox is almost as good of a market indicator as the difficulty change.


been trading commodified scrypt (KS/s) over at bit-mining, caught a nice little dip (flash crash, possible order entry error) to exit at a 42% profit (its weird holding ltc, im a btc purist by experience, not by preference).

And that's good eatin.

 they only payout once at night, though, but you get the calculated payout, even if the pool goes down. if you night trade, you have to adjust your strategy a little ( the volume picks up right before/after dividend payout.) not so bad for me, but im a night owl.


I miss my crazy ass cex chatbox though, and the usual denizens (mariaconada, teknik, JDA, aSmallChild, and other peeps)

Come trade with me guys.

~Green

wait nevermind just went live!

hashymine420: they workin on it
axeladr76: Ok.
Important Announcement: KS/LTC and LTC/BTC will be available for trade at 12:00 midnight EST. Enjoy the new trading opportunities!
twistd: woooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooooooooooooooooooooot
pocohontas15: can I also mine LTC?
pocohontas15: with HW i mean
SUPPORT: Yes, you can redirect to our LTC pool, select LTC from the drop down list under the pool button in the header.
tolaria: great just enough time for me to take a last minute piss before the action starts
pocohontas15: ty
Important Announcement: The KS/LTC and LTC/BTC pairs are now available for trading!

Good Shit!

So I noticed a few changes to bit-mining.co...

we have BTC,GHs,LTC and KS(?) balances now in the My Account section

and a new ticker:
KS/LTC: 0.07..

so I'm guessing we are about to have commodified scrypt hashing.. has anyone heard anything about this? A lot of conjecture in chat but its all hot air until I get something official.

Thoughts?

~Green

If so, then .....
ITS ABOUT TIME SOMEONE DID THIS!!!  

anyone? i assumed this would have been answered by now, people are usually quick to chime in on this subforum


maybe if i change the title to "BIGASS LOAN/ NO COLLATERAL" I can get a reply..

relax, we appreciate your contributions to the space, Gage. You are delightfully off your rocker, but your investigative skills (lord knows they are needed in this space) are top notch. Keep it up.

And fuck the trolls.

~Green

Curious, I was wondering what procedure was required to legally and contractually put up a car, or a small piece of land as collateral for a btc loan? are there any lenders that specialize in this area, or would you guys honestly suggest getting a traditional loan on one of the assets in fiat and purchase btc with it? recently got hacked and looking at liquidation/borrowing against some of my physical assets

Appreciated in advance,
~Green

Curious, I was wondering what procedure was required to legally and contractually put up a car, or a small piece of land as collateral for a btc loan? are there any lenders that specialize in this area, or would you guys honestly suggest getting a traditional loan on one of the assets in fiat and purchase btc with it? recently got hacked and looking at liquidation/borrowing against some of my physical assets

Appreciated in advance,
~Green

This is absolutely ancient, but is this still available?

I have edited my previous post because I made an accusation in error.

I had a considerable conversation with the administrator of bit-mining.co. after going over the details of the intrusion, and being informed of the security features behind the scenes, I no longer suspect that my account details were compromised. There was a mis communication during our emails which I based my accusation off of that was not correct; After being presented with the facts i can concur that bit-mining.co was not the vector of compromise. so, i will man up and face the music.

I humbly apologize for my false accusation, demontn. I hope you accept it, and I sincerely wish the best for you and your service. besides this unfortunate incident, i honestly enjoyed your exchange. you have fair pricing and, now that we have spoken, decent customer service.

~Green

so my search continues...

I have edited my previous post because I made an accusation in error.

I had a considerable conversation with the administrator of bit-mining.co. after going over the details of the intrusion, and being informed of the security features behind the scenes, I no longer suspect that my account details were compromised. There was a mis communication during our emails which I based my accusation off of that was not correct; After being presented with the facts i can concur that bit-mining.co was not the vector of compromise. so, i will man up and face the music.

I humbly apologize for my false accusation, demontn. I hope you accept it, and I sincerely wish the best for you and your service. besides this unfortunate incident, i honestly enjoyed your exchange. you have fair pricing and, now the we have spoken, decent customer service.

~Green

So I guess that it was btce. i apologize to you guys for not listening.

the reason i ask about the ip is that i have strong reason to believe the perpetrator resides in this area. it would make a lot of sense of an isp in this area to be the isp that first relayed the transaction, but i want to be sure i understand how all this works first.

Question guys, if im trying to follow some stolen coins to their final destination, can i find the initial transaction and follow the unspent outputs to the destination wallet?


and finally:

 i notice the tx was "relayed by ip" 76.10.140.37 . is it most likely that the transaction physically originated in/near the area that this ip resides?

thanks in advance guys, any info you can provide is absolutely clutch.

totally agree, now i know.

but, i dont use the same password for all my bitcoin related activities. i use many different ones.

let me clarify, only the exchanges i use for trading have this password. i utilize a variety of different passwords. lbc, mtgoox, btistamp, here, are all unique passwords, because i use them very infrequently.

i dont believe i was keylogged, again, no other services were compromised. keylogger would get more than one password, correct? id be looking at total account compromise across the board, not just a single user/pass pair compromised (which seems to be the case).

i have never accessed these accounts except at my home terminal.

rofl, why is everyone else so quick to assume that email caused this? I have 2 fa on my gmail with an android device. like, what about this makes poeple believe my email was compromised? gmail doesnt indicate that, and the sensitive information/lack off cleanup suggest that entry to my email was never gained.

There is more important shit in my email than the credentials for 7 btc. Why nothing else disturbed? The whole argument for my email being compromised rests on the fact that in order to access my bitmining.co account,  my password was suppsedly reset, and that reset password was accessed from the only place it could, my inbox (the self same 2fa'd gmail account with an even more complex password).

The takeaway:
The only way that my bit-mining.co account was compromised was if my email was compromised.so if my email wasnt compromised, someone is lying to me.

the guy had the password to get into the account. this was his last stop.
1)....but instead he resets it.
2)....then uses technomancy (accessing my gmail) to get the new password,
3)....deletes all the password reset messages to cover his tracks (LEAVING 4 sell/withdrawal/login notifications in the process, he didnt see those in the inbox apparently), all to:
4) to then to break into my account with the newly generated password.

and, not being able to figure out the withdrawal system at bitmining (your cat could figure this out), attempted only 2 times to withdraw the balance after spending some of it for more ghs? which he sold at the lowest possible price? which, amazingly, he was so inept he put his btc address in an input field designed for a btc amount?

should have taken the fuckin password and skipped to step 4, dont you think? this guy fought the gmail dragon/put malware/phished/cookiestole/i could give two fucks when he already has the username and pass?

now does that scenario seem more likely, or this:

password reset never happened?

i wrote:
so, the attacker reset my password, utilized the reset to gain access to my account (got into my email), did the series of trades/withdrawal attempts, then, after they finished, as a final action, they reset the password again a second time? this is the sequence of events i have gleaned from our communications.

you see, i remember coming to the terminal, seeing the commotion about a huge buy sell, then refreshing and seeing that small account balance before i attempted to withdraw (dont see my withdrawal attempts). when i hit the trade tab again, i was logged out, then my pass didnt work. that would indicate the password was reset (the second time i guess) while i was actively in chat.
so this was happening while i was near my terminal?
he already had the password.. why did this guy reset it to get a new one?
and why lock me out of my account he was cool enough to leave me access to all the other accounts he compromised..

none of the other accounts compromised had password resets applied. he knew the password on earlier incursions (btce,cex,havelock) but needed to reset the password on my account here to get in? he had the credentials already... why risk locking the account? also, i cant seem to find a record of any of the password reset emails in my spam, trash, inbox, anywhere. How many password reset requests were issued? why wasnt the account locked in the initial series of password reset attempts, like the second time? also, if my email was compromised, the attacker neglected to delete the havelock trade notifications and btce login notifications yet deleted all the password reset emails (which would have been quite numerous, else it would have meant it was locked due to multiple attempts).

are you absolutely sure that the attacker gained entry via a password reset? i think this is a red herring.

no other service i have accessed in the last 5 days (lbc/gox/stamp) that doesnt share a common password with this incident was affected. all those accounts with different passwords ( accessed from the same compromised pc, using the same compromised email) are completely unaffected.

i strongly urge you to continue investigation into the possibility my credentials were compromised on your end.

thoughts?

i

response:

Well, I can't answer all those questions for you, as I don't know what the hacker was thinking. However, I can attempt to make guesses, and maybe from them and any other information you may be aware of, you can determine what makes sense.

"so, the attacker reset my password, utilized the reset to gain access to my account (got into my email), did the series of trades/withdrawal attempts, then, after they finished, as a final action, they reset the password again a second time? this is the sequence of events i have gleaned from our communications."

Not entirely true. They attempted MANY password resets - so many, so close together, that our server's mail queue became too full and stopped sending mails to your email at all. Not sure what the point of this was.

"you see, i remember coming to the terminal, seeing the commotion about a huge buy sell, then refreshing and seeing that small account balance before i attempted to withdraw (dont see my withdrawal attempts). when i hit the trade tab again, i was logged out, then my pass didnt work. that would indicate the password was reset (the second time i guess) while i was actively in chat."

That, or your session had expired. Seems like an awful big coincidence that your session would expire just as this is occurring, however.

"he already had the password. why did this guy reset it to get a new one?"

Not sure. My original thought was that he first gained access to your email, and knew somehow beforehand that you were a bit-mining user. So, he went to reset your password, and, since he was in  a rush (he somehow knew you were at the terminal as you say, perhaps), reset it a whole ton of times since our password resets sometimes take some time to get to your email. He got the password, deleted all the messages (explaining why you don't see any password reset emails in your inbox now), accessed your account, conducted the trades, possibly out of spite, or in some roundabout way to enrich himself, and finally logged out of the account.

This theory is reasonable, but still doesn't support some of the facts. Specifically, (A) that there were no oddly-priced orders placed just before the transaction so the hacker could enrich himself, (B) that your other accounts were accessed... presumably with no password resets (because you can still access the accounts with your old password), and (C) that the hacker attempted to withdraw BTC, suggesting he is unfamiliar with our system. Also, you claim that your gmail had 2 step security placed on it, which renders that type of hack fairly unlikely.

My other theory, which seems to hold a bit more water (I have developed it a bit more since yesterday, so bear with me), is that the hacker somehow got the password to your btc-e account, logged in, and didn't see any balance. However, he saw your chat username mcnastyfilth (I checked the BTC-E chat archive, you that indeed seems to be your name there: http://trollboxarchive.com/search.php?search_type=username&search=mcnastyfilth) . With this username he accessed your Cex.io account. When there was no balance in either of these, he noticed from the cex.io chat log that you mentioned Bit-Mining & Havelock. He drained your havelock account, attempted to drain your Bit-Mining account, and when he couldn't, decided to just destroy it out of spite instead.

Honestly, id take btce and cex.io off the list. I havent used my btce account in at least 6 months, it wasnt carrying a balance. had been using cex.io, but again low balance. if the compromise was inter exchange, there would be little financial incentive to take my particular account in those cases. the high value accounts were bit-mining.co and havelock (in that order). These have activity. But for the last week, pretty much the sole site ive been accessing has been bit-mining. which has been under maintenance roughly half that time.



this has to be the dumbest fucking thief in the land. deletes over 10 password reset emails to cover his tracks, and leaves fraudulent login notifications and trade notification sitting in the inbox. that seems highly illogical.

given the lack of timestamps, ive asked bit-mining.co to provide a chronology of the intrusion. i still haven't been told definitively how the hacker got into my account. waiting for a response from them.