The 2FA for Blockchain is just a "gimmick" and prevents only to steal your funds using your password. If someone got access to your private keys, he does not need to log in into Blockchain at all.

Even when you imported private keys from paper wallet, anyone with the access to private keys can ANYTIME transfer the funds from that address.

If your password is trivial (like less than 10 alphanums with both case), one can restore your private keys from your AES encrypted backup of Blockchain info.

Uff, bitcoincharts.com are no longer working, too. Expired domain? Ughh?

Not sure if just trolling .. or not understanding how change in Bitcoin works ?

You can use Custom send where you can specify the change address. You can use mine if not satisfied with that supplied by blockchain.info ;-).

Satoshi private holdings are protected using ECDSA crypto, not SHA256, which is used just for proof of work.

Yes. The SHA256 should be uniform, so the first bit is zero with 1/2 probability, both first 2 bits with probability 1/4 and so on. So the share is of difficulty 1 with probability 1/(2^32).

Most likely the attacker had (HAS?) access to your e-mail account associated with BitStamp. He then performed password reset and obtained new password from your compromised e-mail account. Change your e-mail password immediately to something more strong.

Please, contact Piuk (the owner of BlockChain.info) for assistance. Its important to find out the way how the BTCs left your account.

Sorry to hear that. If the funds leaved MtGox (through BTC withdrawal, I guess), there is probably no way MtGox or police could help you.

My account was target of similar attack about 2 weeks ago. The attacker (originating from China based IP) requested password recovery on my MtGox account, hijacked my e-mail account, so that message about this did not get into my mailbox and he could change my password without me noticing that.

LUCKILY for me, I tried to login several hours later after this attack. And I could not. I alarmed MtGox support and they helped me to resolve the situation, and in fact, save my funds. MtGox freezes withdrawals for 24 hours after e-mail and/or password change.

The problem was my e-mail account, which was leaked during mid 2011 MtGox database hack. This e-mail account had weak password (at least to nowadays standards), so it may become known to some hacker group. I was not realizing the security implications of using insecure e-mail address.

Of course, first thing I did, after securing my e-mail again, was to activate Google Authenticator on MtGox account. Now I can, hopefully, sleep better again.

If somebody knows your private keys, he can transfer your BTC without the need to login to blockchain.

- did you import the keys from other wallet?
- do you have strong (both case, digits, symbols, 10+ chars) main password?

I would not use paper wallet with unencrypted private keys. You never know who will look at these papers, who may copy them, etc.

Yes. But, actually, they do not need to sieze at all. They can authoritatively request information about selected users. And MtGox will have to comply and supply this information, silently.

I am not blaming this on MtGox .. just everyone be sure to realize this.

Well, just all wait till the day MtGox get hacked (again) or seized by government. Suddenly, all those Bitcoin addresses used to fund/withdraw will be cleanly linked to your ID, photo, bank account, postal address. Nice.

  

Watch out for the security of the e-mail address you use in blockchain.info's wallet.

Regardless of 2FA, if you sent your backup to compromised e-mail and your password is weak enough so the attacker (has months to do it) can crack it, all your private keys are exposed. He does not need to logon to blockchain.info to empty your wallet there! The dark net is full of broken e-mails and someone may be monitoring them automatically.

Sorry for a bit OT question, but why hasn't been BIP0038 officially implemented into bitaddress.org? In the Github, there is finalized version (2.5 if I recall correctly) for more than month, which works pretty fine.

Also, working from saved HTML on disc with disconnected network is always a bit safer.

Found more info here: https://bitcointalk.org/index.php?topic=206732.msg2166562#msg2166562

Currently, there is a network flood of very small transactions of 0.0000025 BTC being sent to new created addresses - thousands of them so far - from 1JwSSubhmg6iPtRjtyqhUYYH7bZg3Lfy1T address.

To me, it seems like these transactions will not have enough fee and will not be mined, thus not increasing the blockchain size. However, how about the size of miners pool - will it affect them somehow?

Or is this a promotional act for the "bigger than 5400 satoshi" upcoming change? ;-)

What conversion rate will they use for WMX? Base on what? MtGox? ;-)

No. The price is stable as all poor souls locked with FIAT in MtGox try to buy BTC a get the hell out of MtGox ASAP. And Mr. Karpeles' silence just worsens this.

And no, there are not many options left. International wire is quite expensive, SEPA takes several weeks to finish. So many just buy BTC as soon as it lowers a bit. Thats what you call "stability".

I am afraid the trading engine has been stopped.

Piuk - any chance to start to support BIP38 - https://en.bitcoin.it/wiki/BIP_0038 - password protected private keys to be IMPORTED into Blockchain Wallet?