Hey friend, exact same thing happened to me! I lost about 270 BTC. Account email and password were changed. MtGox has done nothing about it, closed my support ticket with no resolution. I was not victim of phishing, this was a straight up hack. Probably more to come, I would recommend that people get out of MtGox asap.
That really sucks man. It's a lot of money lost. Just like you, Mt.Gox did nothing when I opened a ticket. I've gone back to TradeHill. Mt. Gox seems to be such a huge target and they don't seem to take security that seriously. It's probably better for the community if we use other exchanges more heavily. We don't need a monopoly in trading. Particularly one that is lax in security. That could threaten the stability of bitcoin.
|
|
|
Hi Shakaru-
We've done a number of deals together and never had a problem. Don't know what that guy is on about.
Anyway, I'll pick up your EVGA 580 Classifieds. I've got some time off from work for the next two months and want to set up a bad ass rig for some serious gaming during this down time. Seems like the 580 Classified's can overclock like mad. It would be a perfect setup.
These are the air cooled versions, right? If so, I can give you $2250 for the four of them. Let me know if that works for you. I can pick them up tonight.
|
|
|
After going through all of my accounts, it appears that my accounts on the following sites were compromised: - Mt. Gox
- Slush
- Ozcoin
- Mt. Red
- Bitclockers
- Deepbit
- Bitcoins.lc
If a pool was the source of leaked password, then I would expect it to be from one of the above. I would recommend checking your accounts and changing passwords for any of these pools.
|
|
|
Using the same password in multiple places is Your mistake. Probably Poll got hacked first. Or maybe dishonest pool operator took your bitcoins. Or maybe the password was sniffed from the pool because of lack or improperly implemented SSL. This is possible even if You system is 100% secure and malware free. Most windows computers today run by non-expert users are infected with one or another malware because of user error.
Lastpass is not 100% secure. Where is the guarantee that the lastpass does not keep all the passords provided? Better use KeePass software on Your computer to generate, store and backup the passwords.
Yubikey is overkill. If You computer and MtGox are safe, there is no need for one. If MtGox are hacked and database are accessed, the coins can be stolen anyway. I would love to have the key in my disposal just to play around with it, but I feel safe and know I'm safe without yubikey, because I take all precautions to keep all my coins safe on my computer and know how such things are done.
I would agree that a Yukibey isn't necessary. It would have protected me in this case, but just not doing stupid things like sharing passwords across accounts would have helped. I don't do a lot of withdrawals, so using the Yubikey wouldn't be that much of an issue. I'll probably pick one up. $18 for a Yubikey could have saved me $700 of losses. Hope the guy who did this encounters some nasty bad karma
|
|
|
Tough luck, amazingrando! Would you care to reveal the pools you were using, so that other users of those pools can be on high alert, check their payout addresses, change their passwords, etc?
I have accounts on almost every pool. The first pool I got a notice of a wallet change was deepbit. Then slush, btcguild, and bitclockers. I am going through accounts right now to see what others were compromised
|
|
|
amazingrando my friend! I am so sorry to hear that!
The person probably GOT your password from one of the pools you use. Most pools use mysql and they are really easy to do an injection attack and gain access - it's either that or a dishonest pool admin.
Either way those are far more likely to be true than MTGox being hacked.
I thought the same thing. The only reason I thought it might be Mt. Gox being hacked (besides other people having the same issue) is that the first change to any of my accounts was at Mt. Gox. Accessing my pool accounts came afterward.
|
|
|
IP address the hacker used:
196.200.102.6
|
|
|
A Yubikey may be worth all your bitcoins. Get one and use it. At least for withdrawals.
I made two critical mistakes: 1) leaving btc in Mt Gox as opposed to my encrypted wallet, 2) being lazy about sharing passwords. You are right, though, I should have had a Yubikey. Mt. Gox really should have some form of two factor authentication beyond the yubikey.
|
|
|
A few hours ago, someone was able to get into my Mt. Gox account, change the password and change the wallet address. I have not be able to log in yet, but I assume that the a**hole that accessed my account took out my 225 btc that was in there.
Stupidly I also used the same password for a few of my pool accounts, which the hacker has since hijacked.
Has anyone else had a problem today?
Even if you haven't, be sure you're using a strong password and not using the same password among sites.
|
|
|
Can you provide a test IP and bandwidth test file for download?
|
|
|
These look like pretty good deals.
Is there an option for unmetered bandwidth or something higher than 10TB/month?
|
|
|
Added a note that I can take other forms of payment besides BTC.
|
|
|
Updated: No longer for sale I am selling a 5970 in like-new condition. This is a spare that I no longer need. Works perfectly and looks like new. If you have any trouble when you first get it, you can return it to me for a refund. I've done a lot of trades on the forums - just search for my username and you'll find them. Asking 99 btc plus 3 btc for USPS Priority Mail shipping. International shipping would be actual cost. FYI, I can also take Dwolla, MtGox USD, and Amazon Payments.
|
|
|
How badly do people want this to be a scam? Are we turning on one of our own now?
|
|
|
rph is advertising his boards at ~1$ per MH, but not for sell... My design is DIY; it's $1/MH if you build it at home with hobby techniques and don't have to pay someone to license the design, populate and solder the board, test/debug it, etc. A fully assembled/tested miner w/ 1-2 45nm FPGAs is going to cost more than that. A fully assembled/tested miner w/ 100 45nm FPGAs can cost less than that. -rph Hi rph. Sent you a PM a while back. Very interested to know if you'll be sharing/selling your DIY guide. Interested in putting together a 50-100 FPGA cluster myself. It would a very fun project.
|
|
|
Received the GPUs today - just as described. Arrived safely. Expect they will test out just fine.
|
|
|
They have fully converted now to PPS and retroactively applied it back to block 148 without notice: http://forum.polmine.pl/index.php?topic=759.msg7200#msg7200Google translated version: After long debates, hard struggle, and considering all the pros and cons - it has been decided as follows:
0) thanks to a fruitful search for blocks in the last few days - there is a unique opportunity to transition to the PPS and see what such a settlement can give us
1) one of these series in the vicinity of 26-11-2011, we charge even after the old
2) a second from the vicinity of 28-11-2011, we charge after the new
3) introducing the PPS from block 148 (the amount in the statistics of this block is the same for "The BTC" and "The PPS")
4) does not charge any fees / percentages due to the introduction of PPS
5) payments and transfers will be unlocked
6) depending on the situation and stock in the treasury of the mine, the PPS will remain free as possible. If the situation demands it may be a small percentage will be introduced to improve the safety of the mine.
7) The amounts are calculated according to the PPS, however, if payment is made after falling block. If everything will be played, then a few days go on quite onlineowy PPS
VERY IMPORTANT ISSUE IS TO INFORM WHO DA PPS FREE INTRODUCTION Dissemination of information on the introduction of PPS will be very helpful in the further development of the mine and contribute to the maintenance of the PPS on polmine.pl
We'll see what comes out of everything. wait, observe and act! I had 24.23 btc in earnings from several lucky prop rounds recently. Polmine disabled any payouts and changed all earnings of earlier blocks to PPS. My new payout: 9.11 btc. No notice, no option to keep what you earned. They kept the 15 btc difference between my prop and PPS earnings (and the same for other members) to fund their PPS buffer, without users' consent. DO NOT MINE ON THIS POOL. In the future, who knows what they will do with your earnings without telling you.
|
|
|
That's a lot of hyperbole. I guess time will tell.
Meanwhile, if you're wanting your pre-order back, I would take them up on the offer for a refund.
|
|
|
I had already planned to meet up with shakaru to get a couple of heatsinks: https://bitcointalk.org/index.php?topic=51857.0He had one on hand that he was using for testing that I picked up when I was down there on Friday. I know the external version has been out for a bit, but didn't know that anyone had the internal version. Even the storagereview.com review was only a preview and just posted on 11/17. If anyone wants me to run some benchmarks on it, I can do that and post the results here.
|
|
|
|