Bitcoin Forum
April 26, 2024, 03:23:41 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 ... 138 »
221  Economy / Speculation / Re: Critical Levels - EW analysis on: June 02, 2015, 01:17:17 PM
Hi Chessnut?

I'm i onto something here?



I dont see what you're trying to say?

You have no idea now chessnut? Wink Your last bullish charts were pretty naive Grin

I said there was no reason why we shouldnt test the upper 1300s. I still do not see good enough reason to be very bearish here.

As for ideas I have plenty to work with but need the local evidence to present its self first.
222  Economy / Speculation / Re: Critical Levels - EW analysis on: June 02, 2015, 06:09:00 AM
Looking for a bottom to form now? How can we confirm a temporary bottom? Going back over $230?

No good trying to catch it, at this rate its aiming a bit deeper over the coming days, it will be slow to turn. Wait for it and see what it does. 1d Macd turnining down, dont wanna fight that without substantial evidence.

223  Economy / Gambling / Re: SatoshiDICE.com - The World's Most Popular Bitcoin Game on: May 31, 2015, 07:40:06 AM
Does anybody know why Satoshi dice keeps lagging and freezing after a roll of the dice? it just says 'processing' without end. It happens on both my accounts on different computers, I have to refresh the page which happens to take a while to load. My internet connection seems fine too.
224  Economy / Speculation / Re: Critical Levels - EW analysis on: May 30, 2015, 01:33:38 PM
I would like to hear your feedback about the current crush and what do you think about the current situation ? Bullish ?

The current crush? crash? I think that the true bottom probably lies in the $80-150 area but weather we reach this year doesnt change that I think in terms of EW that bitcoin will likely see $400-$800 territory again without much trouble in the next year. I am bullish on bitcoin very long term, the larger counts can accommodate the theoretical market caps of 40-400bln and possibly more, although I think that is not up to EW to decide at this point.
225  Economy / Speculation / Re: Critical Levels - EW analysis on: May 30, 2015, 12:54:29 PM
@chessnut, update please.

Seems to be a flat rather than a triangle, not a surprise really as I noted earlier that this could be a flat.

The count is fairly ambiguous as correctives tend to be but the bias is clearly bullish. While the triangle is valid at this stage there is no evidence to say it is not a part of a flat that will correct to the 62% area.



Im waiting a few days for the bears to gently push this toward the 62% fib, then we can look for a potential bottom to form. 1375 is fair game. If so It could produce a strong bullish opportunity.
226  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 30, 2015, 11:42:02 AM
Brain wallet are not such easy to hack.

Quote
Practically everyone who knows about or cares about the BIP process loudly yells at people DO NOT USE BRAINWALLETS. We've seen pretty concrete evidence that users are resistant to good advice in this space, and they are shocked when their favorite quotation is cracked and they lose their coins (But it was 60 characters long! I even added a special character! how is this possible?!), the existing sites promoting this stuff won't use a KDF stronger than SHA256*1 because "users are stupid if they use weak passwords".

Brainwallets.

FOR GODS SAKE. DON'T DO IT. YOU MAY THINK YOU ARE SMART ENOUGH. SO DID EVERYONE ELSE WHO GOT ROBBED. HUMANS ARE NOT A GOOD SOURCE OF ENTROPY.

YOU HAVE A SCHEME? Pfft. THE SPACE OF ALL SCHEMES YOU'RE LIKELY TO HAVE PROBABLY ONLY HAS A FEW BITS OF ENTROPY. RANDOM PHRASE IN A BOOK? THERE ARE ONLY ABOUT 30 BITS OF SENTENCE SELECTION IN A LIBRARY.

OH NO. YOU ARE NOT LISTENING TO ME, ARE YOU?

OH CRAP. YOU THINK THAT "EIGHT CHARACTERS AND ONE FROM EACH CHARACTER CLASS" APPLIES HERE?? WEBSITE SECURITY MIGHT HAVE TO DEAL WITH 1000 ATTEMPTS PER SECOND, BUT SOME DUDE WITH A FPGA FARM IS PROBABLY PRECOMPUTING A BILLION BRAINWALLETS PER SECOND. JUST STOP.

NOOOOOOOOOOOO.

Well, now that you have no more Bitcoin I guess we don't have to worry about you using a brainwallet.

https://en.bitcoin.it/wiki/Brainwallet#Low_Entropy

Hehe fun to read, I might have thought twice reading this beforehand. Thankfully I still have most of my bitcoin to worry about.

Thanks for your input Oda.krell

The more I think about it the more I realise how ridiculously insecure it was, but surely the decision to combine passwords in sets of three goes hand in hand with many different ways of combining passwords, an on top of that, doesnt hashing and sweping a brain wallet take some compuation? wouldnt that be an ongoing recomputation every day to sweep wallets? is that billion hashes per second inclusive of that work?

@chessnut


So what was the password?  Since it is compromised now, please tell us, so other people can learn from this mistake as well.

Sorry for your loss.

I would rather not tell, for all I know I might still be using it at some old account I have forgotten about, besides being the key to my hacked brain wallet.

lets say it was about as strong as Clock123Clock123Clock123.....



227  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 30, 2015, 02:08:55 AM
This same password in the form of 'passwordpasswordpassword' was my brain wallet.

Why on earth would you do that?

Clearly because its easy for me to remember, and I was under the impression that the btc talk hacker would have difficulty cracking my password hash and that three combinations of a fairly difficult password was enough on top of that.

Full Disclosure: Im not proud of what I did!
228  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:59:26 PM
you could buy a hardware wallet, that is safer than your password:
https://bitcointalk.org/index.php?topic=899253.0

This is interesting, some nice looking units there. I would like one that I could store a brain wallet on (a proper one!). I have a phobia that my house will burn down (for example) and I will lose all my paper wallets and computer memory with my passwords to my backups etc... I think that is the beauty of a brain wallet, even if you lose everything you still have a chance to get your btc back, and if you make it special to you, maybe your family could  still get the bitcoin if you die.

That sounds bad, but I dont understand how it could get around root access in linux? it is not a simple mission to do anything like that surely??

I'm not an expert on Linux security - but IIRC linux is incredibly well locked down in terms of user privileges - far more so than Windows. As long as you don't run around as a superuser account all day, generally even if malware gets in you should be ok. Not to mention that it is rather rare for malware to target Linux given that it is used by such a small percentage of people. I do think it more likely that the hacker managed to access your coins via working out your password then bruteforcing brain wallets.


I have since generated a stronger brain wallet on my computer and baited it with some btc..... no trouble at all. Ive been using linux for about 8 years now, my dad got me into it, and we havent had a single problem with viruses or any kind of compromise as far as I know. I really dont think my computer is compromised.

I'm sorry to hear that chessnut, it sucks tbh.
It makes me a bit angry & a little deflated to hear stuff like this.
No matter what we do & how well secure we've made our coins people always seem to find a way to steal some.
You've been really unlucky, it could have been any of us.
I don't know what to say apart from I'm sorry for your monetary loss mate, people you can never be 100% secure but please do everything you can to look after your coins, you can't leave any stone unturned.

Yeah, learning the kind of power these guys have to crack passwords is nerve wrecking. I would have thought that it wouldnt be economical to even try when you get to password sizes like the one I was using, even when it is repeated. I dont understand the work it must take to go through billions of combinations, hash them all into private keys, and then rake all those billions of wallets all day long.

I wonder if bitcoin mining technology is making this possible where it wasn't before?



229  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:27:28 PM
Thanks for all the helpful comments guys,

What I find quite ironic though is that Ive left a paper wallet in plain view as my facebook profile picture. It has 0.1btc in it and been there for months with no trouble! I guess that sort of thing might give one the wrong impression about wallet security.

Now the race is on to find my facebook profile  Grin
230  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 01:12:38 PM
Sorry for your loss.

It might be that the hackers have used the forum to get this kinda information.
But on the other hand if it was not related to the forum hack, it could happen easily if you used the same password elsewhere.
What browser did you use and does it have plugins installed or toolbars ?
If so are you sure they can not be used as keyloggers ?
In any case the btc is gone forever, and there is nothing anyone can do about it.
 

Thx mate,

I have used the password elsewhere, but I think it was secure up until the hack.

Im using mozilla firefox. Never had troubles with it before. On firefox Im using FVD speed Dial. Java and adobe are installed on my computer for things like multibit and youtube etc.... Im not computer savy so no im not sure anything cant be used as key loggers but I have developed trust in Linux systems. Is that wrong?

It's not about Linux.
It could be a malicious website you have visited running a malicious script.
That script could do many things, one of them is to install a backdoor to your system.

You should always scan links you are uncertain of with virustotal.com
And even then, you are still not 100% safe.

That sounds bad, but I dont understand how it could get around root access in linux? it is not a simple mission to do anything like that surely??
231  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 01:06:28 PM
Sorry for your loss.

It might be that the hackers have used the forum to get this kinda information.
But on the other hand if it was not related to the forum hack, it could happen easily if you used the same password elsewhere.
What browser did you use and does it have plugins installed or toolbars ?
If so are you sure they can not be used as keyloggers ?
In any case the btc is gone forever, and there is nothing anyone can do about it.
 

Thx mate,

I have used the password elsewhere, but I think it was secure up until the hack.

Im using mozilla firefox. Never had troubles with it before. On firefox Im using FVD speed Dial. Java and adobe are installed on my computer for things like multibit and youtube etc.... Im not computer savy so no im not sure anything cant be used as key loggers but I have developed trust in Linux systems. Is that wrong?
232  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 12:53:45 PM
Can I ask why you used bitaddress.org to create an address instead of creating one in Bitcoin Core?

Also, it doesn't seem like the usual brainwallet hack.
So it must either be that your PC is compromised, bitaddress is compromised or the forum hacker(s).

I lean towards the first case scenario.

I didnt know that you can use bitcoin core to generate brain wallets. Im interested in that.

Im also worried that my computer is compromised, but I have made some bait wallets with some btc in them in a similar fashion and so far nothing. I have another brain wallet generated on bitaddress.com from a few months back which is uncompromised too.

233  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 12:43:47 PM
I am sorry you lost so much bitcoins, but you should have immediately changed your brainwallet after the site went offline.

After all cracking brain wallets is easy if you have a the right "dictionary". Let's say the hacker managed to crack 50% of all easy to crack bitcointalk passwords and put them in his "dictionary". Then he tried different possibilities of all the passwords:

cracked: password
try: passwordpwassword, PASSWORDPASSWORD, passwordpasswordpassword, passwordpasswordpasswordpassword, password1password2password3, etc.


I am sure you are not the only one who lost some bitcoins this way.

Don't use the same password twice. Don't use a similar passwords.

Thanks.

I guess this must have been the case, although it still seems so unlikely to me that people would even try this while there are so many possible combinations of passwords.
234  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 12:38:46 PM
When generating a brain wallet, you MUST use something like DICEWARE and have at least 96 bits of entropy. Only then will you be "safe".

Your password had very low entropy - it was just a matter of time. Repeating words in patterns does NOTHING against an attack.

Password123 and the same repeated 10x is worthless.

I know that Password123 is literally worthless, but are you saying that a stronger password such as YankeeDoodle123 is useless too? surely a password like YankeeDoodle123YankeeDoodle123YankeeDoodle123 would be very unlikely to be hacked?? and three times the password would mean at least 3x the difficulty to hack no? if hackers need to combine every password in multiples of three they must be doing 3x the work (which is already a lot in the case of YankeeDoodle123!?)
235  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 12:25:12 PM
@OP I have one more question:

Did you not change your forum password after the hack?
Theymos made it clear that it is better to change your password to be on the safe side.

I did change my password asap after the hack.

After the forum hack or your wallet hack?
If it was after the forum hack, then why didn't you change your wallet password as well?

-snip-

As such, you should change your password here and anywhere else you used that same password. You should disable your secret question and assume that the attacker now knows your answer to your secret question. You should prepare to receive phishing emails at your forum email address.

-snip-

Well, silly me, I should have changed it. But having received that email saying the hacker probably only had a hash of my password I thought it would be fine since the brain wallet was furthermore in the form of passwordpasswordpassword. The address was emptied just hours after I deposited the funds. I had deposited 0.1btc beforehand without trouble. spooky.
236  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:54:49 AM
@OP I have one more question:

Did you not change your forum password after the hack?
Theymos made it clear that it is better to change your password to be on the safe side.

I did change my password asap after the hack.
237  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:35:19 AM
There is also a chance it was bitaddress.org that was compromised but Ive never had that trouble before.

You used the live version of bitaddress or did you download the github repository and created your address from that?
Also, did you scan your PC for keyloggers, trojans, etc?
[/quote]

I used the live version of bitaddress. Im not very computer savy, I dont know how to tell if I have key loggers on my computer. I am using Ubuntu 14.04, be that as it may. Ive never had trouble on linux (except possibly this occasion)

That sucks, I hope you didn't have all of your bitcoin in that one wallet, though obviously 12 bitcoin is a hell of a lot to lose anyway

Bitcointalk should probably use 2fa to protect the users, I can't see much reason not to offer it at least.

Its wasnt too much of my total btc worth, but plenty enough to make me cringe.  Angry I was thinking of buying a new laptop but Im not feeling that rich any more.
238  Bitcoin / Bitcoin Discussion / Re: Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:17:56 AM
And how he found that this address is yours?


He must have hacked my bitcoin talk password, like most of us, and tried many combinations to produce my private key.

Sorry to hear that.
I don't understand exactly how that happened to you, what information did you have on your bitcointalk account that helped them hack your brain wallet?

It is the number one reason why bitcoin hasn't taken off as we all hope, security is much harder to perfect than almost everyone thinks

I received an email from bitcoin talk that the hacker who brought bitcoin talk for a few days could have stolen my password hash amongst other things. This same password in the form of 'passwordpasswordpassword' was my brain wallet. Its a pretty random password, I dont believe it was brute force hacked. Im really baffled, I think it must have been the bitcoin talk hacker targeting me. There is also a chance it was bitaddress.org that was compromised but Ive never had that trouble before.
239  Bitcoin / Bitcoin Discussion / Brain Wallet hacked, suspect bitcoin talk hackers. on: May 29, 2015, 11:00:18 AM
Hi everyone,

This serves as another lesson to make your brain wallets silly hard to hack.

My Brain wallet, in the form of example123example123example123 (example123 was my bitcoin talk password,) was hacked resulting in the loss of 12btc I had freshly put in there. Before I noticed it was hacked I sent another 7btc there and luckily got it out before the hacker did.

This was my brain wallet 17z2uppQS9fyag5KtbQ6KNiCBrNSL1z64r

This is the Hackers wallet, with the funds in it at the time of writing 153h8BH61rQgfyujZjJqjQNSsRK2Hsaf3A


The community might take interest in this address as the hackers of bitcoin talk are prime suspects.

Its crazy, is this guy lucky or is it really that easy to hack brain wallets??

Take care!
240  Economy / Service Discussion / Re: "Public Note" on blockchain? on: May 27, 2015, 11:37:33 AM
It's a blockchain.info thing as far as I know , since I didn't see it somewhere else .
"Public notes are embeddable short messages during the transaction. An example of a public note can be seen below"
"You can embed a public note when doing a transaction with Blockchain.info. Simply input your message in the column below when sending a transaction."
CHeck the link below for more informations (screeshots included) : https://blockchain.info/fr/wallet/website-faq

Oh I see, thanks. The message service is only accessible to blockchain.info wallets. I guess that means the message must have come from OKcoin. Still a bit creepy to me, I dont want random people sending to my address. Why would Okcoin I wonder?
Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 ... 138 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!