Bitcoin services under attack?

[Anonymous]

Today bitcoincharts was defaced and the wiki was hacked/removed. The pools have been ddosed for the past week.

There have been a few threats against bitcoin posted in irc and on this forum.

Tell me I am just  paranoid   

[1715557323]

1715557323

[1715557323]

1715557323

[r2k-in-the-vortex]

Today bitcoincharts was defaced and the wiki was hacked/removed. The pools have been ddosed for the past week.

There have been a few threats against bitcoin posted in irc and on this forum.

Tell me I am just  paranoid   

naah it really looks like some script kiddie is pissed off, even gribble(irc bot) died for a while tho i dont know if it were from natural causes or was it  a murder
can you link the threats on the forum?

[timmmay]

No you're not paranoid.  I've been thinking the same thing.  Bitcoincharts right now just has "out of coins" on it's pages.  Makes me sad!

Nearly every pool has been DDOS'd in the last few days and there are still ongoing communication problems with most of them.

Whoever is doing this must really have something against bitcoin! 

[Anonymous]

http://forum.bitcoin.org/index.php?topic=10553.0

-related to mybitcoin security


http://forum.bitcoin.org/index.php?topic=10728.0

-was posted recently

Im sure everyone knows the pools have been down and recently mt gox was heavily ddosed as well.


UPDATE
http://bitmarket.eu/  is down now.


The funny part is the price of bitcoins on mt gox is almost $9.

 

[HostFat]

The wiki is down also :|

[r2k-in-the-vortex]

eligius us pool is down, eu pool is still up tho

[gongcheng]

How can you be sure that hackers aren't faking the price?

[timmmay]

bitcoincharts is back online in full force it seems

[Anonymous]

bitcoincharts is back online in full force it seems


Good   Thanks to whever is doing it the services around bitcoin will have to harden.

[mennoman]

There were some press-articles in the last days.

[adrian33]

There were some press-articles in the last days.

Anonymous thought they were the cool kids. Look how they react when they are reality challenged.

[mennoman]

There were some press-articles in the last days.

Anonymous thought they were the cool kids. Look how they react when they are reality challenged.

Pardon?

I mean articles about bitcoin in the real media.

[M4v3R]

BitMarket.eu was down due to mail server error, this has nothing to do with DDoS'es... this time . It's already up now.

[timmmay]

Maybe it's all just a bit lot of coincidences!

[NielDLR]

Bitcoinmarket.com seems to have been slow all day. Related? Sometimes not even loading.

[M4v3R]

On the side note, Bitcoin Signature Generator was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:

1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

[galaxyAbstractor]

I just lost 1BTC to mybitcoin because their bitcoind went down while I was sending my payment, and now it keeps telling me that they did not receive anything and it wont be processed anymore.

[r2k-in-the-vortex]

all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

[Alex Beckenham]

all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).

[airdata]

Whoever is doing this must really have something against bitcoin! 

Or they just did the math that if you somehow knocked out 2-3 of the major pools, you would essentially be getting most/all bitcoins w\ enough processing power in your own pool.

[carriun]

If there is enough disruption in the pools for a couple weeks would the difficulty drop?   How much of the total network  hash rate is made up in pools?

[CydeWeys]

all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).

Don't use MyBitcoin?  The whole strength of Bitcoin is that it is 100% decentralized; why give that up?

[M4v3R]

If there is enough disruption in the pools for a couple weeks would the difficulty drop?   How much of the total network  hash rate is made up in pools?

Translation: most of it.

[mennoman]

all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

But sometimes it seems it doesn't work.

[Alex Beckenham]

all bitcoin transactions are recorded in the blockchain, if you sent it on its way then it irrelevant if their client died or not
look your transaction up on http://blockexplorer.com/

It's not irrelevant if you've emailed them about it and received no response from them in 10+ days.

I accidentally duped a 10 BTC transaction to a merchant using mybitcoin.com and am yet to get any response from them (mybitcoin.com, not the merchant).

Don't use MyBitcoin?  The whole strength of Bitcoin is that it is 100% decentralized; why give that up?

Do you mean boycott all merchants that use mybitcoin.com to accept payments?

That will drastically reduce the take-up rate for new bitcoin merchants.

Not every store owner knows how to set up a wallet on their own server.

[grue]

On the side note, Bitcoin Signature Generator was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:

1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

"Havij" is a popular vulnerability scanner. This probably means the attacker is a script kiddie who is bored.

[PabloW]

Maybe it's all just a bit lot of coincidences!

Or you mean Bitcoincidences?

 

[timmmay]

Maybe it's all just a bit lot of coincidences!

Or you mean Bitcoincidences?

 

Hahaha I like this!

[cdhowie]

If there is enough disruption in the pools for a couple weeks would the difficulty drop?

Probably not by much.  People will either switch to another pool or solo mine until the pools come back up.  The network doesn't care if the blocks come from pools or not.

[jerfelix]

On the side note, Bitcoin Signature Generator was subject to an attack a week ago. I got hundrets of new registrations with names like:

Code:

1 UNION ALL SELECT null,null,null,null,null--
999999.9 UNION ALL SELECT 0x31303235343830303536--
/\\../\\../\\../\\../\\../\\../\\../etc/passwd
${@print(md5(acunetix_wvs_security_test))}\\
sample@email.tst\' and sleep(4)=\'
etc.

Attacker's IP was: 124.148.255.198
UA String: "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

"Havij" is a popular vulnerability scanner. This probably means the attacker is a script kiddie who is bored.

Indeed.  If you have a website with a web form, you will be under attack all the time from these things.  People just leave them running day and night, crawling the web, and looking for vulnerabilities.  I've seen normal sites under attack daily from these.

[dacoinminster]

When MtGox got DDOS'd, it was hackers demanding a ransom. I wouldn't be surprised if many pool operators are getting similar demands.

Come to think of it, bitcoin might just be the perfect way to accept a ransom of any kind.