Bitcoin Forum
November 16, 2018, 07:32:27 PM *
News: Latest Bitcoin Core release: 0.17.0 [Torrent].
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 4 »  All
  Print  
Author Topic: BitPay.com is online  (Read 8815 times)
BitPay Business Solutions
Hero Member
*****
Offline Offline

Activity: 756
Merit: 500


View Profile WWW
September 16, 2012, 10:20:52 PM
 #1

Posted on our blog

http://blog.bitpay.com/

Quote
Starting around 4:00 pm on Saturday September 15, bitpay.com came under a syn-flood denial-of-service attack.

At no time does it appear that any of bitpays servers or databases were ever compromised. All bitcoins and all funds are fully secure and accounted for.

Bitpay will deploy stronger protection against DDOS attacks, but we expect our service to be down for several days.  We apologize for this inconvenience.

Our site was back online for about 12 hours today. It worked great during the London Conference, then the attacker found a way to defeat our DDOS protection.  

I am still in Europe and Steve is also away.  We have taken the site offline until we can return home and properly deploy new servers.  Or until the attacker gives up and moves on.


BitPay : The World Leader in Bitcoin Business Solutions

https://bitpay.com

Does your website accept bitcoins?
1542396747
Hero Member
*
Offline Offline

Posts: 1542396747

View Profile Personal Message (Offline)

Ignore
1542396747
Reply with quote  #2

1542396747
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1542396747
Hero Member
*
Offline Offline

Posts: 1542396747

View Profile Personal Message (Offline)

Ignore
1542396747
Reply with quote  #2

1542396747
Report to moderator
1542396747
Hero Member
*
Offline Offline

Posts: 1542396747

View Profile Personal Message (Offline)

Ignore
1542396747
Reply with quote  #2

1542396747
Report to moderator
koin
Legendary
*
Offline Offline

Activity: 874
Merit: 1000


View Profile
September 17, 2012, 12:27:23 AM
 #2

I am still in Europe and Steve is also away.

i would think a payment processing business with a thousand merchants relying on them would do better than allow the situation where not even one principal is available to keep the machines running.
jfreak53
Sr. Member
****
Offline Offline

Activity: 297
Merit: 250



View Profile WWW
September 17, 2012, 12:33:57 AM
 #3

How long do you think this will take? Are we talking tomorrow or days? As we count on your servers to process payments we are kind of dead in the water with bitcoins till then unless we pull out manual payments.

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -Benjamin Franklin 1755
█ █ http://www.microthosting.com -- Free reseller web hosting, OpenVZ-XEN-HVM VPS', ATOM Dedicateds!
Littleshop
Legendary
*
Offline Offline

Activity: 1316
Merit: 1000



View Profile WWW
September 17, 2012, 01:11:17 AM
 #4

How long do you think this will take? Are we talking tomorrow or days? As we count on your servers to process payments we are kind of dead in the water with bitcoins till then unless we pull out manual payments.

That is the beauty of bitcoin.  Anyone who wants any of my product can message me here or through my store.  I can take your bitcoin myself and verify the payment. 

It is less convenient and I hope the attackers are know they are damaging bitcoin by making it appear less reliable.   

If Visa/MC is down, I can not take the payment myself without them.   


Steve
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000



View Profile WWW
September 17, 2012, 03:37:15 AM
 #5

How long do you think this will take? Are we talking tomorrow or days? As we count on your servers to process payments we are kind of dead in the water with bitcoins till then unless we pull out manual payments.
This really depends on the attacker at this point…we'll keep trying to bring the site back online and improve our anti-DDOS capabilities as best we can…I expect he'll continue to attack.  There's really nothing else we can do.

(gasteve on IRC) Does your website accept cash? https://bitpay.com
BitPay Business Solutions
Hero Member
*****
Offline Offline

Activity: 756
Merit: 500


View Profile WWW
September 17, 2012, 09:26:52 AM
 #6

We have deployed some additional DDOS protection so https://bitpay.com is back online.  Not all merchants are able to get through the firewall just yet, but we are working with each one.

Email stephen@bitpay.com with any issues.  Steve cannot access PM on this forum so you will not get through unless you email him directly.

If the attacker steps  the attack the site may go down again without warning.

We will be deploying a much more robust system in a few weeks.  But this protection may hold us over until that can come online.

BitPay : The World Leader in Bitcoin Business Solutions

https://bitpay.com

Does your website accept bitcoins?
caveden
Legendary
*
Offline Offline

Activity: 1106
Merit: 1001



View Profile
September 17, 2012, 09:37:29 AM
 #7

Didn't the attacker state his motives? Is it for money, or what?

18rZYyWcafwD86xvLrfuxWG5xEMMWUtVkL
Steve
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000



View Profile WWW
September 17, 2012, 10:37:51 AM
 #8

Didn't the attacker state his motives? Is it for money, or what?
We cannot elaborate on any specific information like this.

(gasteve on IRC) Does your website accept cash? https://bitpay.com
Steve
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000



View Profile WWW
September 17, 2012, 11:04:22 AM
 #9

Here are a couple additional things to note:
- bit-pay.com no longer bounces to bitpay.com (we'll re-enable it when I have more time)
- http://bitpay.com no longer redirects to https://bitpay.com (again, I'll re-enable when I have more time) …you have to go directly to https://bitpay.com

Also, one of the issues that this has created for us is that the old SSL client certificate based method of API authentication no longer works (due to the anti-DDOS proxying of connections).  We were planning to keep that method active until all merchants had a chance to migrate.  Unfortunately we've not yet had a chance to upgrade all shopping cart plugins to use the new API key based method of authentication.  If you're using one of our shopping carts and are unable to process a checkout, send me a private message.

(gasteve on IRC) Does your website accept cash? https://bitpay.com
QuantumKiwi
Sr. Member
****
Offline Offline

Activity: 322
Merit: 250



View Profile WWW
September 17, 2012, 01:31:34 PM
 #10

Im getting an invalid invoice error with my WHMCS api?

Regards,
Staff @ QuantumKiwi

Starting your own website?
CLOUD Hosting from $4.95/0.05BTC!
jfreak53
Sr. Member
****
Offline Offline

Activity: 297
Merit: 250



View Profile WWW
September 17, 2012, 02:16:45 PM
 #11

I'm getting the same thing, have been all day. I think it's with the API, I emailed steve and still waiting for a response back.

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -Benjamin Franklin 1755
█ █ http://www.microthosting.com -- Free reseller web hosting, OpenVZ-XEN-HVM VPS', ATOM Dedicateds!
euchreplayer
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
September 17, 2012, 09:54:24 PM
 #12

I too am getting an error when the customer is trying to checkout.  I am guessing the API has to be updated.  Steve could you please post/let us know when and how we should update our api.  I might have a really old one as it is directing me to bit-pay.com/checkout
Thanks
jfreak53
Sr. Member
****
Offline Offline

Activity: 297
Merit: 250



View Profile WWW
September 17, 2012, 10:17:19 PM
 #13

The redirect you can actually fix yourself in the php library file, under the curl class. I did this awhile ago as the updated WHMCS module wasn't on the site. But I have had this fix for awhile now and it is still giving me the invoice error. So it probably is the API as the original module is kind of old.

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -Benjamin Franklin 1755
█ █ http://www.microthosting.com -- Free reseller web hosting, OpenVZ-XEN-HVM VPS', ATOM Dedicateds!
jfreak53
Sr. Member
****
Offline Offline

Activity: 297
Merit: 250



View Profile WWW
September 17, 2012, 10:39:32 PM
 #14

I have a question, is Bitpay still doing ACH transfers out on a daily basis? Or are these also suspended during the attack? As I have a lot of cash in there right now that need's to be transferred out at the end of the day :S

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -Benjamin Franklin 1755
█ █ http://www.microthosting.com -- Free reseller web hosting, OpenVZ-XEN-HVM VPS', ATOM Dedicateds!
malevolent
can into space
Staff
Legendary
*
Offline Offline

Activity: 2072
Merit: 1025



View Profile
September 17, 2012, 10:53:39 PM
 #15

Didn't the attacker state his motives? Is it for money, or what?

He asked for 1k BTC.
BitPay Business Solutions
Hero Member
*****
Offline Offline

Activity: 756
Merit: 500


View Profile WWW
September 17, 2012, 11:00:06 PM
 #16

I have a question, is Bitpay still doing ACH transfers out on a daily basis? Or are these also suspended during the attack? As I have a lot of cash in there right now that need's to be transferred out at the end of the day :S

ACH transfers are not interrupted.  All funds are fully accounted for and banks are just fine.

BitPay : The World Leader in Bitcoin Business Solutions

https://bitpay.com

Does your website accept bitcoins?
lenny_
Legendary
*
Offline Offline

Activity: 1050
Merit: 1000


DARKNETMARKETS.COM


View Profile WWW
September 17, 2012, 11:16:06 PM
 #17

Didn't the attacker state his motives? Is it for money, or what?

He asked for 1k BTC.

Any source?

DARKNET MARKETS >> https://DARKNETMARKETS.COM
malevolent
can into space
Staff
Legendary
*
Offline Offline

Activity: 2072
Merit: 1025



View Profile
September 17, 2012, 11:24:23 PM
 #18

Didn't the attacker state his motives? Is it for money, or what?

He asked for 1k BTC.

Any source?

Got this but saw it elsewhere too where I can't remember now
http://bitcoinmagazine.net/walletbit-under-ddos-1000btc-demanded/
lenny_
Legendary
*
Offline Offline

Activity: 1050
Merit: 1000


DARKNETMARKETS.COM


View Profile WWW
September 17, 2012, 11:28:24 PM
 #19

It's about WalletBit (which is already back online), not about BitPay, mate.

DARKNET MARKETS >> https://DARKNETMARKETS.COM
malevolent
can into space
Staff
Legendary
*
Offline Offline

Activity: 2072
Merit: 1025



View Profile
September 17, 2012, 11:51:36 PM
 #20

It's about WalletBit (which is already back online), not about BitPay, mate.

Sorry! I think I should go to sleep now  Embarrassed

But tbh I wouldn't be surprised if this was not the same person / group of people.

Especially given recent DDoS ''offers'' in the marketplace.
Pages: [1] 2 3 4 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!