 Show Posts
|
|
Pages: [1]
|
it's lame excuse.. have no hope, but will try to post in this topic.. Thanks for pointing me at it! |
|
|
|
Adam... Please give me some idea what happened to my account with 50.56 btc on it. My login at mtgox is "steve3". Last ticket # is 4659 I'm going to try and make this to the point....
I'd like to first start by saying I for one am hoping that we get to a point in the very near future where we can stop apologizing for the atrocious customer service everyone has been getting for the last month at Mt.Gox.... Since about the same time I started, now that I think of it.
Last week was hell on earth (if earth was our office) and between leaving the office and coming into work the next day, we saw between 1000 new tickets created in a 8 hour period. This is an outrageous number of unique issues to address as a small team. If we were struggling before, we are now suffocating in customer inquiries. Consequently, people are at the end of their nerves with us, response times, and a whole list of other things that have been building up. To make matters worse, when we migrated to the new back end practically all of our tools broke that we were using to pull customer accounts and transaction information. We've been the blind leading the blind for the last few days. So, while getting everything online has been fantastic for people whose transactions have gone smoothly, everyone else who has run into any kind of snag where they need our help has been seemingly left out in dark, naked, in a foreign country, and without any money (metaphorically speaking, of course). We are coming for you.
We bulk "solved" thousands of tickets two days ago because we couldn't tell real problems vs. probably resolved problems but we are hoping to hear back from everyone whose issue is outstanding. Please do not take it as a slap in the face if your issue hasn't been touched, and we've marked your issue as "solved". Reply back and it will open, and we will get to it. Towards the end of today we were starting to get our tools back, and are now getting some visibility into these issues that are outstanding. Also, in the mean time I've been working on how to streamline our customer inquiries so we can get back to you faster. I/we are embarrassed, and humbly ask for more of your patience (in what has proved to be almost infinite patience, I might add), in getting to your important issues. So much for "to the point" I guess.... feel free to take advantage of this post to vent frustrations, outstanding issues or whatever you need to.
I just wanted to say to the thousand or so "WHY AREN'T YOU ANSWERING" emails, we're here and although it's not good enough, are doing our best.
|
|
|
|
How many people have TradeHill hired to advertise their Exchange. If someone stole from me, I'd be upset, but I wouldn't advertise for a competitor. MagicalTux can be reached on IRC. Did you try that?
Full disclosure: As of today I've made 0.01 USD from advertising Trade Hill. That said, I am quite disturbed by the large number of threads accusing mtgox of "STEALING" when there is some sort of technical glitch and absolutely no evidence of malice on the part of mtgox's operators. People need to be very careful of making this sort of accusation; as it reflects badly on YOU, not mtgox. What I should do and how I should react? I also thought it was a glitch, untill later found my account was locked, password changed, balance nullified. AND MOST IMPORTANT - NO __ANY__ ANSWER FROM __ANYONE__ FROM MTGOX! |
|
|
|
Same problem can not get in my account this is getting very old. They need a number where we can call and talk to a person. THIS SUCKS
Why? They need to steal your money. They do not need phone number for that. They can just lock your account and take your money. |
|
|
|
And how to deal with it? Who thinks that?
We need to spread a word about crooks at mtgox.com and that's it. you can't sue them, you can't harm them physically. So just learn from own mistakes and try to warn new users. |
|
|
|
So.. What I think is going on - mtgox lost quite a bit of coins due their error and now try to recouple these with stealing money from smallish and new accounts!
Be careful before you state your single opinion (keyword=think) as an "official" statement. I'd revise your subject. I know they are stole these. "think" is related to only small part where I am trying to come up with meaningful explanation why. If you do not like this explanation, how about this one - they simply could do this just to steal fortune and purposefully exposed their DB to "explain" why their users lost their coins. |
|
|
|
So back in June 15th I bought some coins from guy on #bitcoin-otc and decided to sell these on mtgox. I successfully transferred my 50.56 btc to freshly generated address - http://blockexplorer.com/address/18Pu9zLDzviyzjMFvH4NMZjpHiq5JrgiYUAfter about and hour I wanted to check if coins were deposited to account and to my surprise mtgox.com was telling me that password is incorrect. I did not use email during registration but I did wrote down password and I am 100% sure it was correct one. I did write at info@mtgox.com several emails and so far I seen only auto responses. I thought my account was hacked due leaked database with passwords (although, while password is not long, but it is not from any possible dictionary). I strated waiting until they fix their system. The only thing I did not like, one fellow member from this forum pointed that my account was marked as "locked" at their database - http://forum.bitcoin.org/index.php?topic=19221.msg264466#msg264466two days ago I went through "reclaiming" process and got access to mtgox.com. Although my balance page was empty (not that I was seeing 0.00 or my 50.56 there, but simply empty). And history did not contain any transactions or logs besides me creating account and loggin in. I wrote to info@mtgox.com with details on transaction I sent - again, no reply as usual. And today - bam, I can not login to my account again! (password was written down and very complex). So.. What I think is going on - mtgox lost quite a bit of coins due their error and now try to recouple these with stealing money from smallish and new accounts! Beware, never ever leave anything in mtgox, if you absolutelly need to - do trades in small amounts, or better - use tradehill.com! MTGOX STEALING MONEY! |
|
|
|
|
Does it registered in Japan at all =)) It could be pure virtual company which will disappear at some point.
|
|
|
|
You guys are late to the party.
MtGox's whole user database was compromised.
Since the database has been leaked I will prove it to you:
steve3, you are the customer #52107
Your password hash: !$1$7u9tG3ex$KkKOgkgdJTknIARmG3SBS1
The password has been hashed with FreeBSD salted MD5. It is a tough cookie but not unbreakable.
The salting prevents time-memory trade off (Rainbow Tables), so a dedicated cracker should crack every each one of them individually.
As long as your password is complex and long enough, it will resist cracking by bruteforcing.
Interestingly it seems that your account steve3 were locked back then.
Cheers,
So it is locked, not stolen? How I can check if this password hash = to my password? Is there any online resource to get this type of hash from my password? If it is locked - at least money should be there and I have slight chance.. But when I tried claims.mtgox.com they just told that password incorrect, which I am sure I did correct. |
|
|
|
The Mt.Gox Account recovery service has now started, please go to https://claim.mtgox.comand enter as many data (bank name of deposits or withdraws, last account balance, ...) as you have in order to claim your account. And please, include lowercase and uppercase letters as well as some numbers and symbols. And just to make sure, make it 15-20 characters long. Heh... Here is what I got - The password for this account is invalid, or this account is not currently under claim process. Password is 101% valid (well, at least it exact to one I used to register). So here it go - mtgox.com just trying to scam people away to cover their asses. |
|
|
|
CSRF is a fake...In my opinion...  I think in that way exchange covers their own impotance to prevent attacks... I didn`t use any site at 16-40 14/06/2011 during hard DDoS attack, but my 13.4 BTC was successfully stolen... So Mark says the same things everytime: "transaction was made from your account with the correct login/password, we are not responce for this" Of course with correct!!! How It could be with incorrect? :facepalm: At least he says something to you. I still do not know what happened to my account at all. I simply can not login and no body answered during last week on any of my tickets =( |
|
|
|
what do you mean you closed your browser... do you think maybe someone accessed it and found that mt gox was already logged in and stole it?
this seems most likely...
I meant - there was CSRF vulnerability on mtgox.com. In order to exploit it - I had to have active session and visit some site with exploit. But I shutdown laptop and did not visit any websites. So CSRF is not my case. Looks like some one got hands on their DB with all balances and passwords etc. You also could simply have a key logger on your system. i am pretty good about security. +nod32 did not find anything. so I highly doubt it was from my side. Just read http://forum.bitcoin.org/index.php?topic=18050 topic. So many accounts had changed password/email. This is definitely something bigger then just random local computers hacked. Plus - mtgox did not answer my ticket after 6 days! I'd say they have huge issue and lost all their coins or are close to it. |
|
|
|
what do you mean you closed your browser... do you think maybe someone accessed it and found that mt gox was already logged in and stole it?
this seems most likely...
I meant - there was CSRF vulnerability on mtgox.com. In order to exploit it - I had to have active session and visit some site with exploit. But I shutdown laptop and did not visit any websites. So CSRF is not my case. Looks like some one got hands on their DB with all balances and passwords etc. |
|
|
|
http://forum.bitcoin.org/index.php?topic=19221.0in short: did not reuse password. did not use email during registration, instead wrote down login/password to keepass. brand new mtgox.com account. funded it with 50.56 and after 3-4 hours unable to login to site. it could not be hacked from email, since email was not used during registration. no trojans found and computer was offline. did not visit any websites in between so recent CSRF issue did not affect me.
|
|
|
|
Unable to post in to this topic http://forum.bitcoin.org/index.php?topic=18858.0;all so will post here. I exchanged some my WMZ to BTC on #bitcoin-otc with decent exchange rate. I tried to cash out it to dwolla, created account on mtgox.com and sent coins to it. I had to go to work so I closed browser and came back to mtgox.com after 3-4 hours and found I am unable to loggin - it says that login/password invalid. I know about recent CSRF attacks - I was offline, so I could not visit site with exploit. My account was brand new, so no hackers could get to it so quick. I did not use email in mtgox.com but I wrote down login/password so I am sure I am using correct one. I sent 50.56 to http://blockexplorer.com/address/18Pu9zLDzviyzjMFvH4NMZjpHiq5JrgiYU address. Looks like they are gone, so somehow hacker was able to get into this account and looks like mtgox.com db was really hacked! Probably hacker tries to slowly withdraw all money, but $1000 daily limit do not allow it to do quickly so he targets smaller accounts. mtgox login: steve3 btc address used to fund mtgox.com account 18Pu9zLDzviyzjMFvH4NMZjpHiq5JrgiYU amount - 50.56 I wrote several times to mtgox.com support via info@ email and via support widget on their site - nothing =( So bewared. I think it's time for tradehill.com and better and more secure websites. |
|
|
|
|
