You are wrong, my password was not compromised. Anyway, if you have proof that someone gained access to my account, then why didn't you stop it, especially when the IP address was from the Ukraine? You will never become mainstream if users are required to use Yubikey and it's just a matter of time before another hack.
They have no idea where you live, and plenty of MtGox users use proxies and/or Tor, which makes the IP address essentially useless information. Speaking as someone who had their account hacked, I suggest you reconsider your statement that your password was not compromised. I thought that too, but it turned out I had unknowingly fallen for a phishing scam. Your password being compromised is a lot more likely than MtGox being hacked. If they were hacked, as they were in July, both we and they would know. |
|
|
|
o.O
Why isn't it a good place to discuss MtGox account related questions? I never go look at the MtGox forums, but I had helpful information to provide regarding this case. Isn't that what a forum is all about?
This is by far the best place for something like this to keep people alert to the issues. I didn't even know about this phishing thing until I read this, so point taken.  Well, in that case, I will discuss this sort of thing here. I think FlipPro just meant not to post in the general discussion section, which he was correct on. Glad my posting this helped inform someone else! |
|
|
|
|
Joined (back after hiatus). Glad to see merged mining. Question: The website states that you charge only a fee for conversion of BTC to PayPal, implying that you do not charge for conversion of NMC to BTC, but the latter is not stated outright, and I wanted to double check. Do you, or do you use an exchange that does, charge a fee for that conversion?
|
|
|
|
Please get a Yubikey, that would have prevented this. And sorry, I didn't mean to sound like a prick in my first post, but honestly this isn't the best place to post for MTGOX Account related questions nor should we encourage it as a community. If you ever need help with anything MTGOX related (including getting a Yubikey for your account) go to there support page here https://support.mtgox.com/homeThanks for the tip! I honestly wasn't sure where to post it. I will do it there next time. |
|
|
|
A "hash" is actually 2 SHA-256 hashing operations so. Bitcoin hash = SHA-256(SHA-256(blockheader including nonce) A Gigahash = 1 billion hashes. To perform one bitcoin hash on an AMD GPU takes about 3500 ALU operations. There is no direct conversion between FLOPS (floating point operations per second) and hashes because hashes involve integer operations (whole number math) and FLOPS involving obviously floating point math. Any claim of Bticoin is x flops is simply an aproximation of the potential floating point power as the Btitcoin network uses 0.00 FLOPS. Various sites come up with an estimate by on the number of FLOPS per hash by looking at how "fast" average hardware is on each. Example: AMD 5870 (stock clocks) ~ 700MH/s ~ 2700 GLOPS (single precision) ~ 5340 GFLOPS (double precision) http://en.wikipedia.org/wiki/Comparison_of_AMD_graphics_processing_units#PCIe_.28HD_5xxx.29Using that you can get an estimated relationship between hashes and flops and then use networks hashing rate to estimate network's potential in TFLOPS. A HD 5870 puts out ~380 MH/s with stock clocks, not ~700. Where did you get that number from? Yes, you can get a relationship, though it varies card-to-card. My suggestion would be to find the relationships for the 5870, 5850, and 5830, as I suspect those are the most common mining cards, though I could be wrong, and average those together. Then you can use the network hash rate to find the approximate FLOPS as stated above. |
|
|
|
One other thing I would do as well if you suspect that they had access to your gmail account is to check the filtering/forwarding settings for anything suspicious.
Did that, nothing suspicious. Thanks for the tip! |
|
|
|
No need to feel stupid, imho. Everyone has clicked on one of those damn things. Most people are just to proud to admit it. ;p
Being too proud to admit it is only one step away from being too proud to rectify it. And the latter is truly dangerous. |
|
|
|
oh wow... so they managed to get someone with that. :\
Yup. Man, do I feel stupid... First time I've ever fallen prey to that sort of thing. Ah well, losses were minor; it ended much better than it could have. Good catch, Rassah. Yea, change your gox password and of course your email password. Do the email first. I'd probably go as far as just making a new email acct and changing that too for Gox.
Only good advice I can give you, since you use peerblock and tor, is of course to make sure to use them that 100% of the time. And, never respond to emails. Any time you get an email informing you to do something go to the site directly and not via the email itself. I'm suspicious of ANY email I get these days. The guys phishing spend a lot more time than they used to mkaing it look as legit as possible. Another option, depending on how strong your mail client is, would be to block ALL emails except those that originate from the mail host of the service/site you are using that email for. And here, I am not sure off hand which mail services check the source to rule out spoofed headers. So, check those headers, always. =)
Cheers
Alright, thank you for the advice. I must have just not been paying attention... Usually I do check the headers, but apparently not this time... I suppose I'm also used to seeing phishing scams written in bad English. Seems Bitcoin at least has a higher class of phishers. The link in that email just takes you to something like mlgox.ni or something, instead of MtGox.com. Just standard phishing email with an address that looks legit if you don't look too close. Someone else was complaining about how they almost fell for it because they couldn't quite make out the url on their small mobile phone screen.
Yeah, I thought it was a Japanese TLD. Or, to put it more accurately, I didn't think.... And then it redirected to the main site, so I didn't think much of it... Thank you all for your excellent advice! It's wonderful to find the cause of this so quickly. It is quite refreshing to be back to these forums, one of the few places on the internet where you can expect civil, intelligent replies. |
|
|
|
I hope you didn't choose tobecome a "MtGox Verified User" a few days ago Oh damn. That would be it. I thought that was a strange email. Had just been getting back into Bitcoins, hadn't yet read the forums, thought it was some verification program because my account had been inactive for awhile. I probably did indeed click the link in that email. Seemed to take me to their actual website. Well, I'm at least glad they only got about a dollar worth of BTC. What nature of hack was that, and should changing my password be enough? |
|
|
|
Just because you have an antivirus application installed does not mean you don't have a virus! I'd throw several scanners at it (Malwarebytes included) to see if it finds anything.
Ran a full scan with Malwarebytes and ESET. Found nothing out of the ordinary. (Flagged some files in Metasploit install directory and the Ufasoft bitcoin miner, none of which were actual viruses) ha! Whoever hacked you is a major idiot. Rather than waiting for more money, they withdrew your 0.3 BTC and alerted you to their presence  Yeah, I agree, it wasn't a good move. Lucky me. Why is this on the main discussion section?
Should have guarded your account better, moving on..
I must say I'm not entirely sure what the point of your post was. I put it in the general section because I wasn't sure where to put it, as I stated in the first post. If you can tell me where I should have put it, please do so, but just saying that it's in the wrong section doesn't help me much; I'm afraid I'm not psychic. I obviously didn't guard my account well enough, as it was hacked, and that is why I came for advice on how to guard it better. If you have any tips, they would be much appreciated. |
|
|
|
its just weird the money would sit there for 4 months and then disappear shortly after you come back. My gut tells me you got 'sniffed' somehow.
Certainly possible. If so, what steps should I take to prevent it happening again, other than changing my password, which I've already done? My computer is on wireless, but I live essentially in the middle of nowhere; no one else lives within my wireless range, and I would certainly know if anyone got close enough to access it. |
|
|
|
Did you have the same money sitting on it while you were away? Just seems strange, if so, that it would have sat there and then get snatched after you come back.
Sounds like you are taking appropriate steps. I assume you have an email that is used just for Gox and it is/was using a different password from your Gox account?
Yes, I did have it on my account, probably for about four months. It was minimal and I'd never bothered to withdraw it. My email is not used for solely Mt.Gox, but it has and always has had a different password and two-step verification, so I doubt it's been hacked. (And it's a Gmail account, not hosted locally, so as secure as Google's servers are) |
|
|
|
|
My MtGox account was hacked about two hours ago this morning. Password is secure, computer uninfected. (Password changed immediately) MtGox shows a large number of support requests. Is this just my account or is something larger going on? Luckily, I didn't lose much, but I certainly would rather not have. The bitcoins were sent to address 1ffaB9W2hj2pzp9djKupFfsaNn1L215FE. Not likely that it will ever be used again, but I thought it prudent to keep record.
So, two questions. I was away from Bitcoin for awhile and have just come back, so I'm somewhat unfamiliar with the much-changed MtGox. Is it possible for me to somehow recover my Bitcoins, and if not, what security steps do I need to take to prevent this happening again, assuming the problem was on my end? My computer is firewalled and virus-protected. My password was alphanumeric, random, and long enough to make brute forcing astronomically unlikely. I use Peerblock and Tor, though not one-hundred-percent of the time. Any tips?
Oh, and I'm sorry if this is in the wrong forum; I wasn't entirely sure where to put it.
EDIT: Thanks to some helpful users, this problem has been solved. Turns out I just behaved stupidly and fell for a phishing scam. Thank you to everyone for your excellent help!
|
|
|
|
Ubuntu is linux, this download is for Windows.
Wow, my brain must have been on vacation that day. On the page linked earlier ( this), click the "Downloads" button above the list of files and under "Download Source", click "Download .tar.gz". On Ubuntu, right click the .tar.gz file and click "Extract here". After you have installed OpenCL, pyOpenCL, and wxPython (just Google for these, they should be well documented), open up a terminal window, navigate to the directory where you extracted the source, and run "guiminer.py". Hope that works alright.  |
|
|
|
Download GUIMiner here, start a new CUDA or OpenCL miner (see which works best), connect to a pool such as BTCGuild. |
|
|
|
GUIminer is quite easy to use/setup
Yep, I would also advocate GUIMiner, and as for pools, BTCGuild. Easy, no percentage cut (except transaction fees), popular. |
|
|
|
The stuff on Wikipedia is not always 100% true. Those older PCI-E 1.0 boards mostly have older nvidia and VIA chipsets that are not compatible with newer PCI-E 2.0 cards.
Yeah, but Wikipedia is nearly as accurate as the Encyclopedia Britannica, so I generally trust it, especially on fairly common topics. Wikipedia did specifically state "most", so I think you're probably correct. |
|
|
|
shit is gonna hit the fan this weekend and you don't want to be stuck with worthless bitcois
Would you mind specifying exactly what is going to go wrong? |
|
|
|
Come on, doesn't anybody want this? |
|
|
|
You're not running a 69xx series card, are you? As I said, it's because of the drivers that the 69xx series cards use. I recommend you take a look at some power consumtion benchmarks of a Sempron 140 before you comment.
Apparently I should, the Sempron 140 uses much more power at full load than I previously stated. I still think his PSU would be fine, though. |
|
|
|
|
Show Posts
