 Show Posts
|
|
Pages: [1]
|
|
1
|
Economy / Economics / Re: MtGox will be open tomorrow at 3:00 GMT [UPD: 0.3% fee for 2 weeks ]
|
on: June 23, 2011, 03:13:40 PM
|
|
Am i hearing this right? peoples accounts that are still pending wont be able to trade opening hours. so when it drops like a brick, a HUGE % cant even get involved yet alone even be able to see if there bitcoins are in the account.
how retarded is mtgox? anyone know where i can find a copy of their TOS agreement, I NEVER remember seeing one. but magical tux posted about it.
|
|
|
|
|
2
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 22, 2011, 03:24:31 PM
|
I am publicly pointing out security issues at the fault of mtgox, that could be used to find out the identities of users, their emails, take control of their finances, bank accounts, their forum account here, their facebook, whatever someone found useful. while mtgox leaves out the hacker had to of cracked the "impossible" salted password for the account that was hijacked and attempted to be emptied.
Nobody said it's impossible to crack unix_md5(). It's a matter of time and it's highly unlikely that if you use a secure password, that someone will crack it in a short time. Read up on bruteforce again, you have already shown your lack of knowledge about that topic in multiple threads now, so please stop talking about it. Yes MtGox's database was leaked. But you can't blame them for lazy users who used a >weak< password and even worse used the very same weak password on multiple sites. LOLOLOL! YOUR SO CAUGHT ON PASSWORDS! YOU DONT NEED PASSWORDS! I JUST NEED YOUR OLDEST NIECES NAME! searched your username on the database. got your email. went to sign in to your email. "oops forgot my password" security question one. some googling and whatnot. so blame people for weak passwords. but should we also blame your niece for saying how awesome her uncle "lefbi" is on her twitter? Edit: also mr security expert, this is the same way people got into sarah palins email on the same email provider and everyone was like LULZ WHY YOU CONDUCT SUCH IMPORTANT STUFF ON CRAPPY EMAIL? of course dude went to jail for posting it on 4chan. also i didnt access your account. but you might not want to have such ">weak<" account recovery questions. |
|
|
|
|
3
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 22, 2011, 12:55:26 PM
|
Duran, I think you upset people because you basically just made threats along the lines of "You disagree with me? Well oh gee your family lives at 165 Lincoln Ave? It sure would be a pity if they all accidentally died."
Def not threatening anyone. i removed the specifics from my original post. maybe a mod should fix the quotes. i mean the infos public but no reason to single anyone out. but you get the idea now. also sorry for cursing and not being more "adult" |
|
|
|
|
4
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 22, 2011, 07:08:45 AM
|
|
to the people saying im a troll and i should be banned, I would love to hear the reasoning behind this.
im a guy with quite a bit invested in mtgox. I am publicly pointing out security issues at the fault of mtgox, that could be used to find out the identities of users, their emails, take control of their finances, bank accounts, their forum account here, their facebook, whatever someone found useful. while mtgox leaves out the hacker had to of cracked the "impossible" salted password for the account that was hijacked and attempted to be emptied.
check it out. other then the coins and mtgoxusd i had in my account, i am not worried, ive changed and secured every account i have and i dont invest more then im willing to risk. so it sucks but my lifes not changing. other people tho. they may not of realized the severity of the database leak. this goes beyond just mtgox. im looking out for others not myself. so reconsider who needs banned, maybe mtgox who just profited off the community at the risk of all their users and totally comprised things bitcoin stands for like anonymity. ban mtgox. not me.
edit: new mtgox email, coincidence?
|
|
|
|
|
5
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 21, 2011, 11:15:32 PM
|
stuff he said
ok check it if salted hashes are so hard to break and such a nonissue. think. hacker took database. took control of major bitcoin holders account. to do that, he needed the password, if i had 400k bitcoins best believe theyve been to the site in 2 months. so he cracked the password of his choosing. yeah cracking salts takes a while. but getting $xx,xxx is pretty motivating if u have an idea where to look. for example. i know this is terrible of me to post but im sure hes been hit. [deleted by poster] has more posts on this forum then anyone. safe to say he prolly does some shit with bitcoins right? well i looked up his name in the now public db. [deleted by poster] a google seach of his email brings up this. [deleted by poster] i bet he used the same pw somewhere. best believe i wasnt the first person to think of this. i picked the highest profile person i could and theres his info. not salted. i didnt post the cracked password and hopefully hes changed everything. if not, hes screwed. mtgox's fault. so since your not worried at all. i found your account. how many coins and mtgoxusd u got in there? [deleted by poster] is your dwolla, liberty reserve or bank accounts connected to your gmail? notice your address comes up in google searches? your billing address? your facebook connected? is your security question what color ur dog is with old sparky on your facebook? |
|
|
|
|
6
|
Economy / Economics / Re: MtGox claim site online
|
on: June 21, 2011, 10:01:58 PM
|
so because all the hashed passwords and emails were leaked. mtgox is going to authenticate accounts through emails...by entering the old password. and a new password...
soooo fucking stupid. you realized that this was only step one, did you? There is a second step where you have to provide further prove that you are the legit owner of the account you claim. even lulzier is bitcoin is a community of people who mine by decoding hashes. nobody is decoding hashes. someone with a killer mining set up could rainbow table the shit out of any encryption. md5 encryptions can be easily cracked by morons via sites like md5decrypter.co.uk and the freebsdmd5 hashes by process's like this http://hansatan.com/?d=jtrguidegood luck. the unsalted simple md5() from the leaked list are dead accounts, where nobody logged in for months. also good luck for trying to crack the ~60000 unix_md5() hashes, with ~60000 different salts. that requires you to generate 60000 different rainbowtables...very effective, lol. just because these people didnt have current mtgox accounts doesnt mean there not in danger even if they have NOTHING in there mtgox. all their online accounts are at risk. also considering one major account sell drove the price to fucking zero and the sold off like 400,000 coins. so it could be VERY effective to only take over a few accounts. i dont see why people try to downplay this. also i worded part wrong, but none the less a good mining setup, would still make the perfect hash decryption machine. and with email access one could obtain all the information mtgox wants us to use as proof of the account. |
|
|
|
|
7
|
Economy / Economics / Re: MtGox claim site online
|
on: June 21, 2011, 06:44:54 PM
|
so because all the hashed passwords and emails were leaked. mtgox is going to authenticate accounts through emails...by entering the old password. and a new password... soooo fucking stupid. This goes far beyond, one account, a measly $1k, and a user database. this is means anyone who used the same password for their email could have the passwords to other accounts recovered to the email without knowing the original. so get access to the email. find where they have accounts. paypal, bitmarket, banks, this forum, their mining sites, dating sites, dwolla, liberty reserve, everything. they might of sent a an ecrypted zip of their wallet to themselves via their email. they might of had a very important conversation with someone. money pak numbers in emails. endless possibilities. amazon accounts, ebay, godaddy, ect ect ect. this spiderwebs out. even lulzier is bitcoin is a community of people who mine by decoding hashes. someone with a killer mining set up could rainbow table the shit out of any encryption. md5 encryptions can be easily cracked by morons via sites like md5decrypter.co.uk and the freebsdmd5 hashes by process's like this http://hansatan.com/?d=jtrguideSo theyre going to dictate the price at 17.50 when the exchange comes back. who values this shit at $17 right now? someone bought a fuckload for penny each. and were supposed to buy at $17.50. i mean thats all fine and dandy for everyone getting out of bitcoins, but thats no good for the market in general. mtgox is a buncha fuckups who lost lots of people alot of money, set back a revolution and wont take responsibility for handing out the database to an auditor for reasons unknown. i know what auditors do, no reason for him to have emails and logins. fucking morons down at mtgox have fucked up big time. They really need to pay for all damages and fuck off the internet. |
|
|
|
|
8
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 21, 2011, 05:07:33 PM
|
This goes far beyond, one account, a measly $1k, and a user database. this is means anyone who used the same password for their email could have the passwords to other accounts recovered to the email without knowing the original. so get access to the email. find where they have accounts. paypal, bitmarket, banks, this forum, their mining sites, dating sites, dwolla, liberty reserve, everything. they might of sent a an ecrypted zip of their wallet to themselves via their email. they might of had a very important conversation with someone. money pak numbers in emails. endless possibilities. amazon accounts, ebay, godaddy, ect ect ect. this spiderwebs out. even lulzier is bitcoin is a community of people who mine by decoding hashes. someone with a killer mining set up could rainbow table the shit out of any encryption. md5 encryptions can be easily cracked by morons via sites like md5decrypter.co.uk and the freebsdmd5 hashes by process's like this http://hansatan.com/?d=jtrguideSo theyre going to dictate the price at 17.50 when the exchange comes back. who values this shit at $17 right now? someone bought a fuckload for penny each. and were supposed to buy at $17.50. i mean thats all fine and dandy for everyone getting out of bitcoins, but thats no good for the market in general. mtgox is a buncha fuckups who lost lots of people alot of money, set back a revolution and wont take responsibility for handing out the database to an auditor for reasons unknown. i know what auditors do, no reason for him to have emails and logins. fucking morons down at mtgox have fucked up big time. |
|
|
|
|
9
|
Economy / Trading Discussion / Re: MTGOX claim site is up
|
on: June 21, 2011, 04:57:14 PM
|
|
so because all the hashed passwords and emails were leaked. mtgox is going to authenticate accounts through emails...by entering the old password. and a new password...
then gives the option of adding additional information. like dwolla which would be most common, which u sign in from your email. whoose password recovery works through email. so if someone had access to the account becuase the mtgox password is the same as the email which is common. they could find emails from dwolla, do a password recovery to the email. and viola a malicious attack on personal mtgox accounts.
soooo fucking stupid.
Edit: i am wanting to see if my mtgox has been emptied. cant wait ::thumbs up:: thanks mtgox!
|
|
|
|
|
10
|
Economy / Marketplace / Re: Bitcoin is not used as money anymore
|
on: May 13, 2011, 12:28:55 AM
|
|
the reason its not used as currency to its full potential is because the value varies day to day so greatly. even having a feature that keeps its value even with a national currency wouldnt account for value changes that come afterwards. the real obvious market advantages of using bitcoin were also recently discarded on the forum(things that would benefit from anonymity, and untaxable nature) which is currently working as the hub for all bitcoin use.
basicly until the markets more stable theres not enough incentive for merchants and large stores to pick up on it. no one can really say what a bitcoin is worth. as for mtgox trades, bitcoin is amazing from an investment point of view. the fluctuating market and drastic dips and spikes. low cost fees of transfers and trading, unlike other markets.
it will catch on merchant wise and the market will stabilize. just give it time.
|
|
|
|
|
15
|
Bitcoin / Development & Technical Discussion / explanation wanted!!!!!!
|
on: May 11, 2011, 01:45:34 AM
|
|
now im ignorant to running a p2p currency. so if the answer is nothing weird. my apologies for even bringing it up. but being invested i deserve a answer and couldnt find anything using search.
Now in very vague terms i was looking at the code sending and receiving from the client. and i seen it connect to giraffe.heliacal.net . i thought hmm strange. went to it and found it to be connect to the personal site of some dude who codes and whatnot. turns out its the personal site of Laszlo Hanyecz. one the creators found of the main page. Now im under the impression that bitcoin was decentralized and ran from users computers. why does it need to go to any website yet alone a strangely named blank directory of one of the creators personal sites?
now this has only connected to his site once so far and ive checked about 10,000+ codes.
does this comprimise its decentralized nature? why would it connect to that site?
tl;dr - wut giraffe.heliacal.net do?
|
|
|
|
|
