JUST HAD 0.92329 BTC STOLEN - HOW???

[bennybong]

No one I know knows about bitcoin

It isn't about bitcoin, they could have grabbed your btc incidentally when they saw you were involved. No one you know or are in contact with is technical?

No this a fairly new build (PC). ANd I've been isolated completely living on this boat.

[1714799416]

1714799416

[1714799416]

1714799416

[1714799416]

1714799416

[1714799416]

1714799416

[inBitweTrust]

No this a fairly new build (PC). ANd I've been isolated completely living on this boat.

Perhaps we should follow the hackers breadcrumbs...

3lectruM fail. More2come SWX

What version of electrum are you running? Where did you download it from?  Since you are using a SPV client what server did you connect to?

[tokeweed]

No this a fairly new build (PC). ANd I've been isolated completely living on this boat.

Perhaps we should follow the hackers breadcrumbs...

3lectruM fail. More2come SWX

What version of electrum are you running? Where did you download it from?  Since you are using a SPV client what server did you connect to?

No one is willing to give that info in public right now.  It could be an Electrum vulnerability.

[bennybong]

No this a fairly new build (PC). ANd I've been isolated completely living on this boat.

Perhaps we should follow the hackers breadcrumbs...

3lectruM fail. More2come SWX

What version of electrum are you running? Where did you download it from?  Since you are using a SPV client what server did you connect to?

v2.1.1 downloaded from their website and i check the checksums. Server is autconnect.

[johnyj]

A fake Electrum server  

Was your VM machine running when the theft happened?

[bennybong]

A fake Electrum server  

Is that possible? and is elctrum responsible for that at all?

[inBitweTrust]

A fake Electrum server  

Yes, This is a very likely possibility. Do not use auto-connect with SPV clients and select an older trusted server.

Is that possible? and is elctrum responsible for that at all?

Anyone can setup an electrum server. https://github.com/spesmilo/electrum-server/

[johnyj]

A fake Electrum server  

Is that possible? and is elctrum responsible for that at all?

If it is indeed an Electrum bug, then they will compensate you for sure. But I'm not sure what kind of harm a fake server can do, since the signing of the transaction happens locally and no one should have the knowledge of your seed

If your VM machine was not running when the theft happens, then the weakness should be in the seed or private key

[bennybong]

A fake Electrum server  

Yes, This is a very likely possibility. Do not use auto-connect with SPV clients and select an older trusted server.

Fuck I've been screwed so many times. BFL, Avalon, mtGox, 50BTC, blackarrow. Fuck them all. Only got back in to BTC recently after about 4-5 months. I give up.

[SpanishSoldier]

No one I know knows about bitcoin

It isn't about bitcoin, they could have grabbed your btc incidentally when they saw you were involved. No one you know or are in contact with is technical?

No this a fairly new build (PC). ANd I've been isolated completely living on this boat.

Living on a boat ? How u r getting the connectivity ? Is that internet connection reliable ? Are u in a river or in a sea ? Care to share a snap ?

[bennybong]

A fake Electrum server  

Is that possible? and is elctrum responsible for that at all?

If it is indeed an Electrum bug, then they will compensate you for sure. But I'm not sure what kind of harm a fake server can do, since the signing of the transaction happens locally and no one should have the knowledge of your seed

If your VM machine was not running when the theft happens, then the weakness should be in the seed or private key

Well either way I'm fucked. Accepting donations to my sig.. Fuck my dignity. hah

[tokeweed]

A fake Electrum server  

Yes, This is a very likely possibility. Do not use auto-connect with SPV clients and select an older trusted server.

Fuck I've been screwed so many times. BFL, Avalon, mtGox, 50BTC, blackarrow. Fuck them all. Only got back in to BTC recently after about 4-5 months. I give up.

Yeah.  It's just one of those things, you know?  Fate, karma, cause and effect or whatever...  It's probably the whole universe trying to tell you that Bitcoin isn't for you.

[fryarminer]

This is a horrible thread!! Dude sorry about your luck.
I hope the breadcrumbs lead to something.

[fryarminer]

A fake Electrum server  

Yes, This is a very likely possibility. Do not use auto-connect with SPV clients and select an older trusted server.

Fuck I've been screwed so many times. BFL, Avalon, mtGox, 50BTC, blackarrow. Fuck them all. Only got back in to BTC recently after about 4-5 months. I give up.

You got hit by all the above?! Outch.

[inBitweTrust]

A fake Electrum server  

Is that possible? and is elctrum responsible for that at all?

If it is indeed an Electrum bug, then they will compensate you for sure. But I'm not sure what kind of harm a fake server can do, since the signing of the transaction happens locally and no one should have the knowledge of your seed

If your VM machine was not running when the theft happens, then the weakness should be in the seed or private key

Servers technically aren't supposed to be able to steal your bitcoin with electrum as it depends upon SSL for security . But the attacker could have used compromised SSL certs ...

https://www.reddit.com/r/Bitcoin/comments/2feox9/electrum_securityprivacy_model/

[tokeweed]

A fake Electrum server  

Is that possible? and is elctrum responsible for that at all?

If it is indeed an Electrum bug, then they will compensate you for sure. But I'm not sure what kind of harm a fake server can do, since the signing of the transaction happens locally and no one should have the knowledge of your seed

If your VM machine was not running when the theft happens, then the weakness should be in the seed or private key

Well either way I'm fucked. Accepting donations to my sig.. Fuck my dignity. hah

That on the same computer?  The hacker is probably reading this and licking his chops.  

[bennybong]

lol no. fuck no. 

[tokeweed]

lol no. fuck no. 

You have 2 computers on the boat?

[bennybong]

A laptop (with elctrum) and a PC yes. Problem?

[inBitweTrust]

A laptop (with elctrum) and a PC yes. Problem?

Yes, asking for charity is slightly inappropriate under such circumstances because:

1) This all could be an orchestrated ruse to get some free BTC and apparently small amounts of BTC is a big deal to you

2) You really need to secure you computers first and practice better security in general even if you have 2 devices (there could be cross contamination.

I am not assuming anything but that is kinda how it looks when people overtly ask for charity right after being hacked.