MtGox, Secure?

[BitPorium]

So, is MtGoX really secure? My account was kindly hijacked and emptied of $500, thankfully I pulled the bulk out earlier. But how could this happen? I have no malware of any kind on my system, and my password is 12 characters long, Whats up with that? This totally sucks.

[TheMoneyStorm]

Here's a bump

[Ricochet]

All the recent hijackings are making me nervous. 

[BitPorium]

so, its not isolated? this is very interesing

[TheMoneyStorm]

So, is MtGoX really secure? My account was kindly hijacked and emptied of $500, thankfully I pulled the bulk out earlier. But how could this happen? I have no malware of any kind on my system, and my password is 12 characters long, Whats up with that? This totally sucks.

Did you find out what happened yet?

[BitPorium]

So, is MtGoX really secure? My account was kindly hijacked and emptied of $500, thankfully I pulled the bulk out earlier. But how could this happen? I have no malware of any kind on my system, and my password is 12 characters long, Whats up with that? This totally sucks.

Did you find out what happened yet?

I emailed them but I am still waiting on a response. its a little ridiculous.

[TheMoneyStorm]

I emailed them but I am still waiting on a response. its a little ridiculous.

I was gonna transfer some coins to MtGox yesterday, until I read this. Now I'm not real sure
I want to use them.

I hope you hear back soon.

[BitPorium]

I emailed them but I am still waiting on a response. its a little ridiculous.

I was gonna transfer some coins to MtGox yesterday, until I read this. Now I'm not real sure
I want to use them.

I hope you hear back soon.

What I have done is when I send coins I put them to sell ASAP and then pull all the money out right away. I think that is the best way for me.

[bitcoinTrader]

Do you see anything in account history?

[smackdaddy]

I just noticed the Mt. Gox's login works by submitting the username and password, unencrypted (well, it posted to an SSL site, but the password is in clear text in the URL).

That makes me very uncomfortable. It makes me suspect the site has not been well coded. I feel like there is a high probability that mtgox is compromised to some degree.

[anatolikostis]

Today after massive DDoS somebody has stolled all my coins ...Coins has gone

06/14/11 16:20   Withdraw BTC   1NLtQgDhn7tR4SMyGWLr9bihLuFh6SCMX2 (this is the address of hacker!!!)


 

I`ve emailed support...


WTF!!!!

[BitPorium]

Here is my significant other: 1JHqaJ2xhj18zFgYtgSf7VYx1G4QJ8u92P

[chungenhung]

no its not.
It says that my IP has been blocked due to multiple login attemps from the same IP address, when I tried to login for the first time for the day.
Tried this on multiple locations, got the same result.

[rx5yt]

how many bitcoins if you dont mind me asking.  just curious as to how this may effect the market if anything

[haydent]

yes this isnt the first time ive read about it here.

everyone should be using a secure password,

for the really paranoid, or if you're dealing in large figures consider:

as mentioned shifting btc in and out as need be is a way to protect them and its 'free' and 'fast'


as for usd i would consider withdrawing them in and out as need via liberty reserve (its fast but there are fees 2% to withdraw) or dwolla, a bit slower but only 25c to withdraw


ultimately this is an issue that could make or brake an exchange, and core to its survival.

as i mentioned in another thread, it seems ironic that many of us would have more money in mtgox than in our bank accounts yet with less security login checks.

[MagicalTux]

Hi,

Please direct issues regarding security (such as those) to admin@mtgox.com

We will enforce more secure passwords on Mt.Gox (refuse simple ones) and add the ability to set a withdraw password.


Mark

[haydent]

sounds good. 

[anatolikostis]

Hi, Please direct issues regarding security (such as those) to admin@mtgox.com
We will enforce more secure passwords on Mt.Gox (refuse simple ones) and add the ability to set a withdraw password.
Mark

Well, Mark...


Just tell us first what kind of "marked bitcoins" you mentioned (this is the part of your answer to my postbox at anatoliy-pravo@net.lg.ua about my stolen 13.4 btc during DDoS at 06/14/11 16:20):

We have however marked your 13.4 bitcoins and will be tracking those over the network. If someone deposits those funds on Mt.Gox, we will know immediatly.
Thanks,
Mark

Satoshi will be suprised  

Do you cherish your reputation? It seems to be not...I`ll tell my friends, they`ll tell other...Lets see how long mtgox.com will go on...

I`m going to make a new more interesting topic about this nice exchange...


 

[aceman1011]

Not secure! My friend lost over $1000 after someone hacked his account using multithreaded brute force. Blame lulzsec. Use tradehill instead, it is much more secure. MtGox has multiple SQLi vulnerabilities...

[haydent]

there's no way they woudn't be hashing, its a entusiast built site, not a corporation one...