Bitcoin Forum
May 06, 2024, 03:18:33 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 [6] 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 »
101  Economy / Service Discussion / Re: Public STATEMENT Regarding Bitcoinica account hack at MtGox on: July 27, 2012, 06:20:55 PM
The goals of BOSS are:


1. Set a standard expectation regarding security and operating procedures.
2. Eliminate, reduce and mitigate losses due to theft or corporate wrongdoing
3. Eliminate, reduce and mitigate losses due to customer action or fraud.
4. Ensure the most up to date security mechanisms are in place.

The fiat financial world is heavily regulated because they had to learn all their lessons the hard way. We don't need to. We should simply apply the lessons here and make BTC a far better product.

Are you going to set up the agile and scrum?
102  Economy / Service Discussion / Re: Public STATEMENT Regarding Bitcoinica account hack at MtGox on: July 26, 2012, 02:21:45 PM
Is this an accurate timeline?

ZhouTong builds a valuable commodity, which transacts large quantities of pseudo-money.
Security conscious users probe the Bitcoinica system and find it vulnerable.
ZhouTong was warned about some weaknesses but defends his design decissions instead of looking to improve security.
Bitcoinica is cracked and a large amount of funds are moved out of Bitcoinica.
Dust settles then Bitcoinica's MtGox account gets cracked.
2 exchanges and 1 uninvolved company partner up and provide suggestive accusations which point at ZhouTong as the culprit.
Still, nobody mentions where the coins travel or sit.

The attack could have been carried out without ZhouTong being aware that a compromise had occurred. It's possible an attacker had unnoticed access for a long period of time in order to collect information and to plan the theft. If the attack occured without ZhouTong having been a colaberator in the heist, then a large group of people are spending a lot of time pointing a finger in his direction. So far we have only seen a lot of hype and only one flimsey connection of ZhouTong's involvement. The information was presented in order to frame ZhouTong in a suggestive manner which portrays him as a criminal. You are trying cases in the court of public opinion, this is very unprofessional even if it weren't slanderous.

Did the current owners of Bitcoinica do a security audit before they got financially involved in the company?
103  Bitcoin / Bitcoin Discussion / Re: an example of high-profile chip-level backdoor on: July 25, 2012, 11:40:46 AM
Option ROMs are why INT19 traps are disabled by default in most BIOSes. Wonder if the next hardware spying system will be a cheap RAID card with its own BIOS.

Why? its already integrated in the northbridge, has its own embedded cpu, but uses the same bios chip as the rest of the system. See the last PDF I linked above.
Right but for remote activation you would need to use the built in ethernet port, I would think, and if there is a separate NIC installed you would have to attack from a different angle. So the attack could instead originate from an expansion card.

EFI BIOS has it's own network stack and it's operation is undetected by the system. The EFI BIOS can reflash itself without the owners knowledge. It's for this reason the LinuxBIOS Project was created, now Coreboot.

FOSDEM 2007 LinuxBios:
http://www.youtube.com/watch?v=tjS985UQjHg
104  Economy / Computer hardware / Re: [WTS] PCIE extender cables (6)1x->16x and (2)16x->16x 6BTC for the lot on: July 24, 2012, 11:49:50 PM
Are they powered, with a molex connector?
105  Bitcoin / Bitcoin Technical Support / Re: The color scheme has been changed to Windows 7 Basic, FFFFUUUUUU!!! on: July 24, 2012, 04:45:50 PM
The Mozilla devs are trying to kill off Firefox userbase cause they know it's toast.
106  Other / Off-topic / Re: Bitcoin - Magic Computer Money on: July 24, 2012, 05:33:04 AM
Only if Derren Brown designs it like the Inside Your Mind Waking Dead game.
107  Other / Off-topic / Re: Windows infection: please help a security newbie on: July 24, 2012, 05:03:38 AM
Well, there are both benefits and disadvantages to using Linux. Linux does have malware, rootkits, worms, trojans, privilage escalation, vulnerabilities. The benefits of Linux are that the majority of the malware attacks always start in user space, the disadvantage is tools are not well discussed so newbies can acquire improved security. Often, security questions are met with responses like, "Your on Linux now, stop worrying, there is no malware here, just move along...". Little do they know, there question was being answered by a Blackhat, who isn't interested in helping to reduce his ability to pwn your box. Because of this atmosphere that "Linux is immune", it makes detecting an infection or security threat much harder for a newb than it is in Windows.
Ask yourself this, If a rootkit/worm/trojan/keylogger were running in your Linux system, how would I find it? Now see how many people will teach you how to look for the signs.
While Linux is better at default security than Windows, the length of time an infection will go undiscovered by a newb on Linux will be much longer, if infected.
108  Other / Off-topic / Re: 5000 posts and only a year later on: July 23, 2012, 03:25:38 PM
13.69 posts a day doesn't show how smart you are.
Solving this will: √1+2√1+3√1+4

Happy 5000th  Tongue
109  Other / Off-topic / Re: Received a strange phonecall today.... on: July 23, 2012, 03:05:54 PM
Maltego is one scary bunch of java code. I wonder if Maltego links identities to Bitcoin addresses?
110  Other / Politics & Society / Re: Guns on: July 23, 2012, 11:55:00 AM
Quote from: Schleicher
It's too late now for any restriction to have any effect on the crime statistics. At least in the USA and neighboring countries. There are simply too many guns floating around.
Laws prohibiting guns do not affect crime. Rulers, knowing they are tyranical and willing to impose any law that suits their need, need to ban weapons to prevent rebellion.
Quote from: Schleicher
You can only reduce the number of accidents, for example with a mandantory gun safety training.
This is provided for in the constitution, A well regulated state malitia, if used as was meant, would provide a large training caricculum that would instill safety.

Quote from: grntbdev
One thing I don't understand is the idea many Americans have that having guns would protect them from the government. The government has more weapons, more powerful weapons (atomic bombs for that matter), more people, more skilled people, and just more access to resources. Just having a rifle would not do much good in vs. government scenarios.
It's the law of large numbers. 400,000 military soldiers patroling the USA v. 200 million constitutionally angry citizens, organized and carrying muzzle loaders, who wins. The constitutionally angry citizens.
Your nuclear comment is just retarded.

Quote from: grntbdev
Weren't tanks sent in at Waco?
Yes. But the tanks were being operated by Delta Force Commandos sent in by the Clinton White House.
Not one surviving member was charged for the deaths of the raiding officers. Even though the Dividians did nothing wrong, they couldn't beat the best of the best militry unit in existence. Why? They didn't think their government would reach to that level to eliminate them. Several unarmed women and 24 children hiding in a 1 foot thick concrete reinforced bunker were killed by a Delta Force demolition charge designed to breach and kill. They legally purchased their weapons and were selling them legally, it wasn't guns that were the target, it was their religion.

The Gun Control Act was the first successful attack on the Constitution to limit guns in America. Criminals are already in the government, they are the ones trying to take our guns, a mob rule.
The Constitution doesn't discriminate on free men,
Who can own guns? All
But evil men will discriminate for control,
Then what happens to America? Fall
An armed populace will make it very difficult for there to be any group to gain an unfair advantage.
111  Other / Off-topic / Re: Hacker going to demonstrate open source tool to crack Hashes with speed of 154 B on: July 23, 2012, 10:21:04 AM
You can download it if you want to check it out.
https://www.cryptohaze.com/
http://sourceforge.net/projects/cryptohaze/files/Cryptohaze-Combined/
112  Other / Off-topic / Re: Hacker going to demonstrate open source tool to crack Hashes with speed of 154 B on: July 23, 2012, 04:12:13 AM
If we truly understood physics, there would be an anti-gravity vehicle in everyones backyard. Cheesy
According to Boyd Bushmen, retired senior engineer for Lockheed>Martin, there are 8 fundamental forces and we barely understand 5 of them.
113  Other / Off-topic / Re: Hacker going to demonstrate open source tool to crack Hashes with speed of 154 B on: July 23, 2012, 03:50:19 AM
Well, a distributed cracker is only limited by the size of the cluster, the larger the cluster the less billions of years it would take. An intelligently redesigned oclvanitygen could reduce those billions of years even more. Cheesy

Edit:
Actual years rounded down to 1434 Quattuordecillion years for one core of a 5850. Now just need to figure out how many cores I will need... Cheesy
114  Other / Off-topic / Re: Hacker going to demonstrate open source tool to crack Hashes with speed of 154 B on: July 23, 2012, 03:43:35 AM
Why, I can't put 8 or 9 characters into oclvanitygen and generate all possible addresses and their private keys?
115  Other / Off-topic / Re: How do you win Bitcoin? on: July 23, 2012, 03:40:29 AM
Casino method.

1 InsertBitcoin if success, then goto 2; if not, scroll message, InsertBitcoinHere
2 Pull handle if success then goto 3
3 SeePlums if success then goto 4; if not, then goto 5
4 YouWinAllBTC
5 TryAgain

Pretty basic  Grin
116  Other / Off-topic / Re: Hacker going to demonstrate open source tool to crack Hashes with speed of 154 B on: July 23, 2012, 03:04:12 AM
I just thought of why this could be dangerous:

The distributed/cluster version of OCLvanitygen would be able to get the private key of any BTC address.
117  Alternate cryptocurrencies / Mining (Altcoins) / Re: [Hacked]P2Pmining.com-Hybrid P2Pool-NO FEE!!!-LTC/NMC/IXC/I0C/DEV on: July 23, 2012, 02:57:37 AM
He can't hide his tracks by formatting, all of the data is still present. Wiping is a different story, but I don't know what access he would need for wiping.
118  Bitcoin / Mining support / Re: Looking for a stable router to buy. on: July 23, 2012, 02:39:16 AM
Quote
The title of the presentation, "How to Hack Millions of Routers," gives a clear indication of the scale of the potential issues. Popular router models from Netgear, Linksys, and Belkin were found to be vulnerable, including models used for Verizon's FIOS and DSL services, as were widely-used third-party firmwares such as DD-WRT and OpenWrt. About half the routers tested did not appear to be vulnerable.
http://arstechnica.com/security/2010/07/millions-of-soho-routers-vulnerable-to-new-version-of-old-attack/
Tested vulnerable routers:
https://spreadsheets.google.com/pub?key=0Aupu_01ythaUdGZINXQ5Vi16X3hXb3VPYkszNXM0YXc

Quote
pfSense includes two built in methods of protection against DNS rebinding attacks.
http://doc.pfsense.org/index.php/DNS_Rebinding_Protections
119  Other / Off-topic / Re: What USB Flash drive do you all use? on: July 23, 2012, 02:24:42 AM
http://www.ehow.com/how_6882017_remove-u3-sandisk-cruzer-titanium.html
120  Other / Off-topic / Re: Windows infection: please help a security newbie on: July 23, 2012, 02:19:59 AM
Probably installed javascript into the profile of Firefox, you may need to create a new profile.
Pages: « 1 2 3 4 5 [6] 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!