Bitcoin Forum
May 06, 2024, 12:30:04 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 [15] 16 17 18 19 20 21 22 »
281  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 19, 2013, 01:38:20 AM
It's like scrambled and backwards, but that's what he emailed me..
282  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 19, 2013, 01:22:06 AM
Hm. Something must have copied wrong.

I don't know, but you can see the transactions here;
https://blockchain.info/address/1CaZEHtxg7g1ECurk5VL2G6zGUBjvD6odn
283  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 19, 2013, 01:12:24 AM
Hm. I was going to delete your post, but yes, that's pretty much how he operates.
284  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 19, 2013, 01:08:24 AM
You have my deepest apologize for the following wall of text, but a lot of people have been asking me questions about this conversation, so without further ado, here it is;

Quote from: DumbFruit
11/16/13
To: admin@glados.cc
Hi Tradefortress,
could you answer a couple quick questions?

1.) When did you first notice that the hot wallet was empty?

2.) How and when did you first realize your Linode administrative account was reset?

3.) Could you post the password reset logs for your Linode administrative console, and tell Linode employees that they may verify them for whoever asks?

4.) Do you have, and could you post, the logs of what the hacker did while he was logged into the Linode administrative console?

5.) Were the logins from 101.0.79.18 into your Linode administrative console, that you posted, the only time the hacker accessed it?

Thank you!
[DumbFruit]

Quote from: TradeFortress
11/16/13
Hi [DumbFruit],

Oct 23th PST time (24th Aus time). A second hack occurred on the Oct 26th (the other 160 BTC).

The compromise was done through compromising multiple of my old email addresses in a chain (compromise one which was the recovery email for another), which led them to lailai625@hotmail.com which received emails forwarded from admin@glados.cc. The attacker was able to reset Linode and Apis networks passwords. Email forwarding was disabled on the 26th (PST, 27th Aus).

I've already posted login logs for Linode on bitcointalk, I've attached logins for apisnetworks which were also reset.

5: Yes, to linode manager. The attacker on the Oct 26th used Lish to skip linode manager and directly shell into the Linode, bypassing 2FA on the manager.

4: The incomplete logs were obtained through lish logview's buffer. The attacker installed mc (midnight commander) and used it to transfer files containing credentials via FTP to 0;15Hd@mastersearching.com:mercedes49@69.85.88.31. From the midnight commander view, the remote server also has another bit.php file not from Inputs. I speculate that this is taken from another service.

3: I do not see where I have access linode password reset logs. I've sent a support ticket to linode requesting such, and authorizing them to provide it to anyone who asks. Ticket ID 2560514

Quote from: DumbFruit
11/16/13

Thank you so much for answering my questions!

How did you find out the Linode Manager password reset if you couldn't access your email? The first time you tried logging in after the hacker you succeeded.

Also, how did the hacker gain access to Linode Manager if it had 2FA on it?

You absolutely need to press charges against the hacker. They would be able to subpoena that hosting provider and find out who was leasing that server, and they would be able to subpoena Mt.Gox to see if the hacker sent the coins there.

The server was American, and the transaction that moved the coins out of the hackers address also originated in the US.

Finally, could you please send signed data that includes what your users owe, how much you've paid out, and have you considered getting a loan to cover the remaining btc shortfall?

Thanks again,
[DumbFruit]

Quote from: TradeFortress
11/16/13

1. The attacker compromised lailai625@hotmail.com which had emails forwarded from admin@glados.cc
2. Linode staff has said the attacker can access lish via without 2FA, which grants them SSH access
3. That server is a compromised server.

Quote from: DumbFruit
11/16/13

How do you know the american server is compromised? Are they liable for the damage that was caused via their server?

I thought you said that the hacker only used lish the second time, that doesn't explain how he got access to the Linode Manager the first time, as shown in your logs, right?

If you don't want to give me any financial data I understand, are you working with anyone to help you help you oversee your operation?

[DumbFruit]

Quote from: TradeFortress
11/16/13

1. It's pretty obvious looking at the site.
2. 2FA wasn't enabled the first time.

Quote from: TradeFortress
11/16/13

Also, re password reset logs:

Support Ticket 2560514 regarding account 'gladoscc' has been updated by 'jstewart'

------------------------------
--------------------
Hello,

Thank you for reaching out to us.  I'm querying our admins to see if it is possible to generate a password reset log.  I will let you know once I have an answer from them.

Regards,
James
--------------------------------------------------

Please use https://manager.linode.com/support/ticket/2560514 to respond to this ticket.

Thank you,
Linode.com

Quote from: DumbFruit
11/16/13

Thanks, that clears up alot.

Regarding the coins you owe me (DumbFruit), if you send me 500 bitcoins to me before the end of the day (17th Australian time) I would be willing to forgive the remaining 455btc.

With the ever increasing value of BTC, I think that seems reasonable.

I can send and receive btc an address I used to deposit into Inputs.io if you want me to prove it's me.

[DumbFruit]

Quote from: DumbFruit
11/16/13

Well, if you want to make a different offer, you know where I am.

Thank you for your answers,
[DumbFruit]

Quote from: TradeFortress
11/17/13

Hi [DumbFruit],

I can offer you 100% of the amount if we re-denominate the balance in USD from the date you deposited. This is valid for 24 hours.

Quote from: DumbFruit
11/17/13

It looks like it was around $102.00.
102/500=.204
955*.204=194
 
Make it an even 200 and we have an agreement. (Given the crazy fluctuations in price.)
[BTC address here.]
[DumbFruit]

Quote from: DumbFruit
11/17/13

Hi TradeFortress,
I’m concerned about your lack of response.
If you don’t like the numbers I used, then lets use the numbers that were accurate when you made the proposal. At 2:40am, Eastern Standard time, the price of btc was less than $470.00 each.
The moment I sent the btc to Inputs.io, the price was $103.00.
 
103/470 = 0.2191
0.2191*955= 209.28723404
 
You made the proposal at 11/17 at 2:40am East Standard time. It is currently 11/17, 9:50pm Eastern Standard time. Less than 24 hours, so I am within your deadline.
 
I accept your proposal exactly as you put it forward with no modifications. Please honor your word.
I’m sorry for being impatient, I know you have a lot on your plate.
 
Thank you,
[DumbFruit]
 
Price of btc when I deposited to Inputs.io;
http://bitcoincharts.com/charts/mtgoxUSD#rg2zczsg2013-8-10zeg2013-08-10ztgSzm1g10zm2g25zv
Price of btc when you made the proposal;
http://bitcoincharts.com/charts/mtgoxUSD#rg2zczsg2013-11-16zeg2013-11-16ztgSzm1g10zm2g25zv
My transaction into Inputs.io;

The address that you can send the btc to, that was used to deposit to Inputs.io;


Quote from: DumbFruit
11/17/13

Come on, you chose to do the transaction while the price was at a peak, long after I agreed to the transaction. You also chose the Mt.Gox exchange price which is the highest. That is completely unfair.

I specificially said "209.28723404" or "200".

[DumbFruit]

Quote from: TradeFortress
11/17/13

Hi [DumbFruit],

Our offer was "I can offer you 100% of the amount if we re-denominate the balance in USD from the date you deposited. This is valid for 24 hours." which we both agree to. Bitcoin is simply the method we use to transfer, so logically the amount would be based on when the transaction is made. (Same thing if you buy something priced in Euros with a USD credit card, not when you add something to the shopping cart).
The price of when you sent to Inputs.io was $103 (using mtgox)
The current spot price of BTCUSD on Mtgox is $564

103/564=0.1826
0.1826*955=174.383

Payment:
Please see the TXID 72c77cd3de9e34f0c4a1520fdba0ffab10354d5975ab99a54c1ff0c7084adac2

Quote from: TradeFortress
11/17/13

Hi,

If you do not wish for me to use mtgox, why would you use mtgox yourself?

Quote from: DumbFruit
11/17/13

It's not that you used Mt.Gox, it's that you did everything you could to cheat me out of 25btc, which is not what I agreed upon.
I trusted you for 955btc, and I'm willing to forgive 755btc, why are you now cheating me out of 25btc?

[DumbFruit]

Quote from: DumbFruit
12:08 AM

Don't do this, please send the other 25btc I specifically agreed to.

[DumbFruit]

Quote from: DumbFruit
12:19 AM

I'm willing to forgive a debt that is worth $422,800,
why are you cheating me out $14,000?

Please send another 25 btc to the address given.
[DumbFruit]

Quote from: TradeFortress
12:19 AM

Hi [DumbFruit],

If you do not agree please return the funds to the address it came from.

Best regards.

Quote from: DumbFruit
12:21 AM

I do not agree, but you owe me 955btc, so I'm not sending anything back. If you send me another 25btc, then the remaining debt is forgiven.

[DumbFruit]

Quote from: TradeFortress
12:25 AM

Hi [DumbFruit],

Please see the TXID 10d0a9e8d166267b3045b8d107b300cb722334cdb85f845eac9eba40b21cece1

I trust that this matter is settled.

Quote from:  DumbFruit
Yes, completely settled. You owe me nothing, and I wish you the best. I'm glad I can put this whole mess behind me and move on.

[DumbFruit]
285  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 18, 2013, 04:42:00 PM
I contacted him at admin@glados.cc
TradeFortress does not respond to propositions he doesn't like. He doesn't give you a reason why.
I had to let him know that I would consider a proposal from him, and then he got back to me with an offer. (Long story short.)

Another person called it a "Pyrrhic victory", and I don't think I could put it any better than that. The question right now is, "How do I want to be screwed over?"

I think that had I waited longer there was a possibility that I could have received a higher proportion of my balance, and while I think there is no case to be made that TradeFortress has acted criminally, he has been demonstrably incompetent on several occasions, and so I decided to get out ASAP.

Your mileage may vary.
286  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 18, 2013, 01:32:34 PM
Hey dwdoc, if you want to give me some contact information, I can post it at the head of the OP so that people can find you easily. Unless you're planning on going it alone, which will be costly.

I did not have to present any identification because I had TradeFortress deposit into an address that I used to deposit to Inputs.io.
If you still have the private keys to those old addresses, that could be an excellent way to get your coins back without the need of identification.
287  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 18, 2013, 06:02:38 AM
Well, after some haggling I was able to settle with TradeFortress for 199.383xbt. While it's a pretty terrible outcome, at least I can put this mess behind me, and hopefully preserve my purchasing power in the face of the volatile bitcoin market.
I'll continue to update this thread, but any legal action will have to come from another party, as I no longer have any stake in the matter.

These were the transactions;
e1ec1cb240ba9eac5e845fb8cd342372cb00b307d1b845307b2666d1e8a9d010
c2da4a08c7f01f4ca599ab75594d3510abffa0db0f52a1c4f0349eded37cc772

Perhaps as a result of this deal TradeFortress can offer a better proportion of your deposits back.
288  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 17, 2013, 02:36:03 AM
Quote from: TradeFortress
Oct 23th PST time (24th Aus time). A second hack occurred on the Oct 26th (the other 160 BTC).

The compromise was done through compromising multiple of my old email addresses in a chain (compromise one which was the recovery email for another), which led them to lailai625@hotmail.com which received emails forwarded from admin@glados.cc. The attacker was able to reset Linode and Apis networks passwords. Email forwarding was disabled on the 26th (PST, 27th Aus).

I've already posted login logs for Linode on bitcointalk, I've attached logins for apisnetworks which were also reset.

5: Yes, to linode manager. The attacker on the Oct 26th used Lish to skip linode manager and directly shell into the Linode, bypassing 2FA on the manager.

4: The incomplete logs were obtained through lish logview's buffer. The attacker installed mc (midnight commander) and used it to transfer files containing credentials via FTP to 0;15Hd@mastersearching.com:mercedes49@69.85.88.31. From the midnight commander view, the remote server also has another bit.php file not from Inputs. I speculate that this is taken from another service.

3: I do not see where I have access linode password reset logs. I've sent a support ticket to linode requesting such, and authorizing them to provide it to anyone who asks. Ticket ID 2560514

It's a lot to digest... I'll update my opening post tomorrow.
289  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 17, 2013, 02:14:32 AM
Woe he just answered all my questions fairly quickly and thoroughly in an email! This is exciting!
Will update shortly.

Maybe he just responds better to direct and specific questions...
290  Bitcoin / Legal / CoinLenders Lawsuit on: November 17, 2013, 02:08:00 AM
Update: Since I have settled with TradeFortress for 199.383 bitcoins, I no longer have any standing in a case against him. If someone wants to take over, then please let me know and I'll point people in your direction.


With TradeFortress' alarming lack of transparency and direction, coupled with his highly suspicious actions surrounding the alleged hack on October 23rd, I've decided that I want to start legal proceedings against him.

At this time, it seems that a class action lawsuit would be most appropriate, but I am open to the idea of pressing criminal charges.

If anyone in this forum knows of a good lawyer that could handle this case competently and at a competitive price, please let me know. If you have any other relevant information or advice, kindly post it below.
291  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 17, 2013, 01:55:23 AM
I have emailed and called around a half a dozen lawyers, but I will make a new thread there as well. The main reason I wanted to post it here is I think it's one of the most likely places I can find other Americans that can join me in the litigation.

Edit: https://bitcointalk.org/index.php?topic=336217.new#new

Edit: I can no longer pursue a civil suit, as his debt with me has been settled.
292  Economy / Service Announcements / Re: Inputs.io | Instant Payments, Offchain API, Secure Wallet, 235k+ BTC transferred on: November 17, 2013, 01:27:15 AM
Edit: Nevermind about the questions, he sent me an email addressing them very thoroughly. Will update my thread.

i told you guys: have a line to him ~ what do you want me to do? LOL  Cool

On the off chance you're not trolling... I would love for you to give me his contact information. Otherwise, could you have him answer these questions?

1.) When did you first notice that the hot wallet was empty?

2.) How and when did you first realize your Linode administrative account was reset?

3.) Could you post the password reset logs for your Linode administrative console, and tell Linode employees that they may verify them for whoever asks?

4.) Do you have, and could you post, the logs of what the hacker did while he was logged into the Linode administrative console?

5.) Were the logins from 101.0.79.18 into your Linode administrative console, that you posted, the only time the hacker accessed it?
293  Economy / Lending / Re: CoinLenders Script :: Bitcoin Bank (Borrow+Deposit) Software :: Demo Available on: November 17, 2013, 12:58:43 AM
Update: He just answered all of my questions in an email to me. I'm very impressed with the thoroughness of the responses. Will update my thread on the subject shortly...

TradeFortress;
1.) When did you first notice that the hot wallet was empty?

2.) How and when did you first realize your Linode administrative account was reset?

3.) Could you post the password reset logs for your Linode administrative console, and tell Linode employees that they may verify them for whoever asks?

4.) Do you have, and could you post, the logs of what the hacker did while he was logged into the Linode administrative console?

5.) Were the logins from 101.0.79.18 into your Linode administrative console, that you posted, the only time the hacker accessed it?


Good news for the ones involved in the lawsuit, bad news for the rest of us.

This all of a sudden became a race between depositors to get a hold of the coins.
That is the situation, and an awful way to handle what's going on. If TradeFortress comes clean and starts working with all of us, it would save me a headache, and the outcome would be more equitable.
294  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 17, 2013, 12:55:01 AM
I suppose proof is elusive. However, the fact that the post came from his account, and that he was collecting coins from people into it, suggests that he controls it. Does it not? Maybe I'm missing something.
Oh I see, sorry I hadn't looked much into it. I could also post the address that I had transferred to when I transferred into Inputs.io, if we could get enough of those addresses we could start to paint a clearer picture.
Why not?

It seems like the consensus in the community is that legal action and requesting transparency is a hindrance to TradeFortress, but if what he did was an honest mistake, then he has everything to gain by getting a third party to oversee what he's doing.
It would help him avoid mistakes, insulate him from legal action, and ease the doubts of his creditors.

He doesn't have to trust me and do everything I request to the letter, but he should at least be willing to have a civilized discussion, and be willing to answer some basic questions.

But anyway, I have some questions for TradeFortress;
1.) When did you first notice that the hot wallet was empty?

2.) How and when did you first realize your Linode administrative account was reset?

3.) Could you post the password reset logs for your Linode administrative console, and tell Linode employees that they may verify them for whoever asks?

4.) Do you have, and could you post, the logs of what the hacker did while he was logged into the Linode administrative console?

5.) Were the logins from 101.0.79.18 into your Linode administrative console, that you posted, the only time the hacker accessed it?
295  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 16, 2013, 08:55:36 PM
Here's a suggestion to DumbFruit: You could append to the OP of this thread any addresses with money that's confirmed to belong to TradeFortress, so we also have an approximate record of the BTC he does have.
How would I prove that they are TradeFortress' coins?

Recommend you delete those numbers around the info because now we know you copied and pasted this from wikipedia
Who copied what from wikipedia?
296  Economy / Lending / Re: CoinLenders Script :: Bitcoin Bank (Borrow+Deposit) Software :: Demo Available on: November 16, 2013, 12:09:52 AM
What, do you think they shouldn't get anything for them, gaston?
297  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 15, 2013, 09:09:01 PM
1.) Did he? I certainly didn't hear that in the interview everyone's talking about.
Yep, his profile showed "28", he's obviously changed it now.

2.) I think there was a cold wallet, wasn't there? There were other cases where the hot wallet had to be refilled before withdraws could be processed.
If there was, not a dime worth of Coinlenders depositor's coins were in it.

5.) Maybe he wasn't really sure the extent of the theft and if it could be easily absorbed.
More likely that he wanted to get as much depositors in to pay off old debt (Ponzi scheme), but it didn't work out when the price of btc skyrocketed and a ton of people started withdrawing.
Evidence suggests that's exactly what he was doing for more than two weeks after the hack.

6.) That's scary, but why disclose it to a bunch of people threatening to sue you?
I wasn't threatening to sue him at all until after I read his last "update".

7.) Why would he? So they can arrest him for running afoul of thousands of regulations? So they can beat up a bunch of third parties in a failed attempt to track down the BTC?
Because it's the best chance of recovering the coins. Not reporting the theft isn't going to protect him from regulatory problems.

10.) I think the idea is their collateral (AM) is devalued, the borrower's investments didn't work out, AND they can't buy the BTC to repay the loan. I don't think they were just shorting BTC.
It was TradeFortress' responsibility to select loans according the the criterion that he laid out to us, the creditors. Low risk, fully covered by collateral (115%), resistant to exchange rate fluctuations, and/or the debtor is highly trusted with a long history.

He failed, and now we're suppose to just sit back and trust him while he handles default, and we need to just be happy with the answers he deigns to pass our way.
298  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 15, 2013, 06:51:09 PM
I understand your concern, but if we just let this keep going like it is the trail is going to get colder, and the coins are going to get further out of reach as prices rise long-term.
Hopefully we'll see a correction in the Bitcoin market, but we can't rely on chance, and we can't rely on TradeFortress for a number of reasons..

1.) He lied about his age.
2.) He lied about his security measures. (There was no cold wallet.)
3.) He didn't have 2FA on his email, despite telling everyone to use 2FA.
4.) He was using Linode despite it being hacked previously.
5.) He allowed people to deposit into Inputs.io after the hack and then paid older users with the funds. (Embezzlement.)
6.) He refuses to disclose any information on his operations.
7.) He refuses to report the theft of over $1,000,000 worth of bitcoins to law enforcement.
8.) He wont listen to or consider any solutions proposed by his creditors.
9.) Even though his site was stolen from almost a month ago, he has not formulated any short term or long term plans to compensate his users that he can present openly.
10.) He's told us that his debtors are being crushed by the bitcoin exchange rate despite assuring us that he would not lend money to investors that have anything but minor exposure to exchange rate fluctuations.

Many users have told him exactly what he needs to do in order to restore faith with his creditors. He has done exactly none of those things.
299  Economy / Lending / Re: CoinLenders Script :: Bitcoin Bank (Borrow+Deposit) Software :: Demo Available on: November 15, 2013, 04:54:39 PM
I fear nobody will get to see their money at all if TF is brought to a class-action lawsuit (How the hell would it be settled?) and any remaining funds are seized, and even if it's purely out of spite, they'll be just in to increase their losses.
Not necessarily. Having access to subpoena and debt collecting agencies would be a great help...

As an example; The hacker or TradeFortress himself could have sent the btc to Mt.Gox thinking he could speculate on the price rise. We have absolutely no way of knowing right now because Mt.Gox employees wont even talk to us.

Not to mention all of the information TradeFortress refuses to disclose and the mountain of suspicious activity surrounding his actions over the past month..

I have no problem working with TradeFortress, but he has shown absolutely no interest in the idea.
300  Economy / Service Discussion / Re: CoinLenders, Inputs.io, Tradefortress (HACK) on: November 15, 2013, 11:52:48 AM
Where are you getting the 6000 BTC amount from? Link please.
That is how much btc has been reported to me that was deposited into CoinLenders.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 [15] 16 17 18 19 20 21 22 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!