Bitcoin Forum
May 07, 2024, 01:57:15 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 »  All
  Print  
Author Topic: Why are bitcoin exchange operators so inept?  (Read 4222 times)
P_Shep (OP)
Legendary
*
Offline Offline

Activity: 1795
Merit: 1198


This is not OK.


View Profile
September 05, 2012, 06:58:00 PM
 #1

One hack after another...

It's getting quite tiresome.
1715090235
Hero Member
*
Offline Offline

Posts: 1715090235

View Profile Personal Message (Offline)

Ignore
1715090235
Reply with quote  #2

1715090235
Report to moderator
1715090235
Hero Member
*
Offline Offline

Posts: 1715090235

View Profile Personal Message (Offline)

Ignore
1715090235
Reply with quote  #2

1715090235
Report to moderator
There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin Core, which will follow the rules of the network no matter what miners do. Even if every miner decided to create 1000 bitcoins per block, full nodes would stick to the rules and reject those blocks.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715090235
Hero Member
*
Offline Offline

Posts: 1715090235

View Profile Personal Message (Offline)

Ignore
1715090235
Reply with quote  #2

1715090235
Report to moderator
Etlase2
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000


View Profile
September 05, 2012, 06:59:50 PM
 #2

It's getting hard to believe too.

squid
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
September 05, 2012, 07:01:57 PM
 #3

Wild wild west! :/
smoothie
Legendary
*
Offline Offline

Activity: 2492
Merit: 1473


LEALANA Bitcoin Grim Reaper


View Profile
September 05, 2012, 07:02:35 PM
 #4

One hack after another...

It's getting quite tiresome.

Didn't you know the most profit is produced if you hack your own site or claim a hack happened and then close up shop?

Seems to be a trend. Roll Eyes

███████████████████████████████████████

            ,╓p@@███████@╗╖,           
        ,p████████████████████N,       
      d█████████████████████████b     
    d██████████████████████████████æ   
  ,████²█████████████████████████████, 
 ,█████  ╙████████████████████╨  █████y
 ██████    `████████████████`    ██████
║██████       Ñ███████████`      ███████
███████         ╩██████Ñ         ███████
███████    ▐▄     ²██╩     a▌    ███████
╢██████    ▐▓█▄          ▄█▓▌    ███████
 ██████    ▐▓▓▓▓▌,     ▄█▓▓▓▌    ██████─
           ▐▓▓▓▓▓▓█,,▄▓▓▓▓▓▓▌          
           ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▌          
    ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓─  
     ²▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓╩    
        ▀▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀       
           ²▀▀▓▓▓▓▓▓▓▓▓▓▓▓▀▀`          
                   ²²²                 
███████████████████████████████████████

. ★☆ WWW.LEALANA.COM        My PGP fingerprint is A764D833.                  History of Monero development Visualization ★☆ .
LEALANA BITCOIN GRIM REAPER SILVER COINS.
 
dissipate
Sr. Member
****
Offline Offline

Activity: 288
Merit: 250


View Profile
September 05, 2012, 07:02:47 PM
 #5

It's an economic problem. A startup company wants to reduce costs as much as they can. In the case of Bitcoin exchanges, that means forgoing security audits, insurance and bonding in order to get something out now. The users don't notice security problems because these involve back end processes that they never directly engage with. In any event, these startups are paying the price for cutting corners handling other people's money. And the users are paying the price for leaving significant sums of money in an account that has no auditing and no insurance.
P_Shep (OP)
Legendary
*
Offline Offline

Activity: 1795
Merit: 1198


This is not OK.


View Profile
September 05, 2012, 07:09:39 PM
 #6

It's an economic problem. A startup company wants to reduce costs as much as they can. In the case of Bitcoin exchanges, that means forgoing security audits, insurance and bonding in order to get something out now. The users don't notice security problems because these involve back end processes that they never directly engage with. In any event, these startups are paying the price for cutting corners handling other people's money. And the users are paying the price for leaving significant sums of money in an account that has no auditing and no insurance.

'zactly.

Vast quanties of Ineptitude.
repentance
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000


View Profile
September 05, 2012, 07:58:05 PM
 #7

It's an economic problem. A startup company wants to reduce costs as much as they can. In the case of Bitcoin exchanges, that means forgoing security audits, insurance and bonding in order to get something out now. The users don't notice security problems because these involve back end processes that they never directly engage with. In any event, these startups are paying the price for cutting corners handling other people's money. And the users are paying the price for leaving significant sums of money in an account that has no auditing and no insurance.

Pretty much this.  Most Bitcoin start-ups are launched on the smell of an oily rag.  If they're moderately successful, any profits they're making are chewed up by rapid growth so they never have the money to invest in infrastructure unless they seek outside funds for that purpose.  Most people also probably grossly under-estimate the amount of fraud and intrusion attempts they'll have to deal with as well.

Users need to accept the inherent risk in leaving funds on exchanges, and especially those which are doing everything as cheaply as possible or making compromises for convenience because their business has grown and they can't afford to hire additional staff.

All I can say is that this is Bitcoin. I don't believe it until I see six confirmations.
bbit
Legendary
*
Offline Offline

Activity: 1330
Merit: 1000


Bitcoin


View Profile
September 05, 2012, 07:59:40 PM
 #8

Clearly there is money to be made in setting up a scam! we are all in the wrong business!!!


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
      BITCOIN SPORTSBOOK     
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █               
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀




  CASINO  ●  DICE  ●  POKER   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
   24 hour Customer Support   

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
bbit
Legendary
*
Offline Offline

Activity: 1330
Merit: 1000


Bitcoin


View Profile
September 05, 2012, 08:00:02 PM
 #9

One hack after another...

It's getting quite tiresome.

Didn't you know the most profit is produced if you hack your own site or claim a hack happened and then close up shop?

Seems to be a trend. Roll Eyes
this ^^


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
      BITCOIN SPORTSBOOK     
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █               
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀




  CASINO  ●  DICE  ●  POKER   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
   24 hour Customer Support   

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
Elwar
Legendary
*
Offline Offline

Activity: 3598
Merit: 2386


Viva Ut Vivas


View Profile WWW
September 05, 2012, 08:02:27 PM
 #10

Best thing for these folks (or anyone for that matter) to do is keep your Bitcoins safe by sending them to my wallet. Then just send me an e-mail letting me know how much was deposited for safe keeping.

My wallet is secure. Honest.


Address in the sig. Better safe than sorry!

First seastead company actually selling sea homes: Ocean Builders https://ocean.builders  Of course we accept bitcoin.
bbit
Legendary
*
Offline Offline

Activity: 1330
Merit: 1000


Bitcoin


View Profile
September 05, 2012, 08:03:36 PM
 #11

Best thing for these folks (or anyone for that matter) to do is keep your Bitcoins safe by sending them to my wallet. Then just send me an e-mail letting me know how much was deposited for safe keeping.

My wallet is secure. Honest.


Address in the sig. Better safe than sorry!

lol'd don't be surprise if some moron does send you their bitcoins! lol


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
      BITCOIN SPORTSBOOK     
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █               
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀




  CASINO  ●  DICE  ●  POKER   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
   24 hour Customer Support   

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
Herodes
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000


View Profile
September 05, 2012, 08:09:37 PM
 #12

It's an economic problem. A startup company wants to reduce costs as much as they can. In the case of Bitcoin exchanges, that means forgoing security audits, insurance and bonding in order to get something out now. The users don't notice security problems because these involve back end processes that they never directly engage with. In any event, these startups are paying the price for cutting corners handling other people's money. And the users are paying the price for leaving significant sums of money in an account that has no auditing and no insurance.

Good points, but is seems like some losses occur due to sheer stupidty, for example not having good backup routines for offsite storage, having the majority of coins in cold storage and so on.

Besides, it's hard for users to know whether the 'hack' is because there's actually a break in, or if it's a rogue operator.
ElectricMucus
Legendary
*
Offline Offline

Activity: 1666
Merit: 1057


Marketing manager - GO MP


View Profile WWW
September 05, 2012, 08:11:32 PM
 #13

One hack after another...

It's getting quite tiresome.

Didn't you know the most profit is produced if you hack your own site or claim a hack happened and then close up shop?

Seems to be a trend. Roll Eyes

this, million times over.
greyhawk
Hero Member
*****
Offline Offline

Activity: 938
Merit: 1009


View Profile
September 05, 2012, 08:26:54 PM
 #14

Best thing for these folks (or anyone for that matter) to do is keep your Bitcoins safe by sending them to my wallet. Then just send me an e-mail letting me know how much was deposited for safe keeping.

My wallet is secure. Honest.


Address in the sig. Better safe than sorry!

This offer is rated AA in Harnettopia.
dissipate
Sr. Member
****
Offline Offline

Activity: 288
Merit: 250


View Profile
September 05, 2012, 08:52:23 PM
 #15

It's an economic problem. A startup company wants to reduce costs as much as they can. In the case of Bitcoin exchanges, that means forgoing security audits, insurance and bonding in order to get something out now. The users don't notice security problems because these involve back end processes that they never directly engage with. In any event, these startups are paying the price for cutting corners handling other people's money. And the users are paying the price for leaving significant sums of money in an account that has no auditing and no insurance.

Good points, but is seems like some losses occur due to sheer stupidty, for example not having good backup routines for offsite storage, having the majority of coins in cold storage and so on.

Besides, it's hard for users to know whether the 'hack' is because there's actually a break in, or if it's a rogue operator.

That's why you need auditing and insurance. Stupidity happens, that's a fact. But if you have audits to protect against stupidity in the first place and then insurance to pay out if stupidity still occurs, then that solves the problem (for the most part).

In this case, if Bitfloor had a respectable auditor, probably one of the first questions they would ask is: 'where all the Bitcoins are stored?'. If the reply was 'on this unencrypted hard drive over here...' then the auditor catches that problem right away. No process is 100% foolproof, but these exchanges can do a hell of a lot better than what they are doing now which is just skimping on costs and duping customers into making large deposits on their unaudited, uninsured platforms.
Gaff
Hero Member
*****
Offline Offline

Activity: 924
Merit: 502


View Profile
September 06, 2012, 06:41:57 AM
 #16

Re: Why are bitcoin exchange operators so inept?

Because from the outside good security is indistinguishable from bad security...

until they get hacked of course!
markm
Legendary
*
Offline Offline

Activity: 2940
Merit: 1090



View Profile WWW
September 06, 2012, 08:56:42 AM
 #17

The users are not blameless, provide something really secure and the vast majority of them will not use it.

They don't care about security until after they lose their coins. Until then they just want total convenience, the easier a hacker can get their coins the easier it is for them too, for example a password easy to brute-force is also easy to remember, and having to use a GPG encrypted message to order things done with your coins is not worth the few thousand coins at risk... until those coins go missing...

-MarkM-

Browser-launched Crossfire client now online (select CrossCiv server for Galactic  Milieu)
Free website hosting with PHP, MySQL etc: http://hosting.knotwork.com/
rebuilder
Legendary
*
Offline Offline

Activity: 1615
Merit: 1000



View Profile
September 06, 2012, 09:02:19 AM
 #18

I'm starting to think any company offering wallet services needs to have a large stash of BTC in cold storage. Enough to pay for any user funds lost, set aside solely for that purpose.

Selling out to advertisers shows you respect neither yourself nor the rest of us.
---------------------------------------------------------------
Too many low-quality posts? Mods not keeping things clean enough? Self-moderated threads let you keep signature spammers and trolls out!
galambo
Sr. Member
****
Offline Offline

Activity: 966
Merit: 311



View Profile
September 06, 2012, 12:00:27 PM
 #19

1) open exchange
2) sweep all deposits into bitcoin savings and trust (pirate bonds)
3) ...
P_Shep (OP)
Legendary
*
Offline Offline

Activity: 1795
Merit: 1198


This is not OK.


View Profile
September 06, 2012, 05:52:53 PM
 #20

The users are not blameless, provide something really secure and the vast majority of them will not use it.

They don't care about security until after they lose their coins. Until then they just want total convenience, the easier a hacker can get their coins the easier it is for them too, for example a password easy to brute-force is also easy to remember, and having to use a GPG encrypted message to order things done with your coins is not worth the few thousand coins at risk... until those coins go missing...

-MarkM-


Well that would result in the user losing their own coins, which is their own damn fault, not the exchange losing everything.
Pages: [1] 2 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!