Bitcoin Forum
May 06, 2024, 11:03:43 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Any technical details on how Instawallet was hacked?  (Read 1043 times)
Fking (OP)
Full Member
***
Offline Offline

Activity: 136
Merit: 100


View Profile
April 08, 2013, 11:16:56 AM
 #1

Do we know anything more than the official statement that their DB was fraudulently accessed?

What was their setup, security wise?
1715036623
Hero Member
*
Offline Offline

Posts: 1715036623

View Profile Personal Message (Offline)

Ignore
1715036623
Reply with quote  #2

1715036623
Report to moderator
1715036623
Hero Member
*
Offline Offline

Posts: 1715036623

View Profile Personal Message (Offline)

Ignore
1715036623
Reply with quote  #2

1715036623
Report to moderator
The block chain is the main innovation of Bitcoin. It is the first distributed timestamping system.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715036623
Hero Member
*
Offline Offline

Posts: 1715036623

View Profile Personal Message (Offline)

Ignore
1715036623
Reply with quote  #2

1715036623
Report to moderator
1715036623
Hero Member
*
Offline Offline

Posts: 1715036623

View Profile Personal Message (Offline)

Ignore
1715036623
Reply with quote  #2

1715036623
Report to moderator
1715036623
Hero Member
*
Offline Offline

Posts: 1715036623

View Profile Personal Message (Offline)

Ignore
1715036623
Reply with quote  #2

1715036623
Report to moderator
jp
Member
**
Offline Offline

Activity: 69
Merit: 10



View Profile WWW
April 09, 2013, 02:36:38 AM
 #2

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.

Helping the world exit the traditional financial system.
DannyHamilton
Legendary
*
Offline Offline

Activity: 3388
Merit: 4623



View Profile
April 09, 2013, 03:34:07 AM
 #3

Do we know anything more than the official statement that their DB was fraudulently accessed?

What was their setup, security wise?

You are assuming they actually were hacked?

 Wink
moni3z
Hero Member
*****
Offline Offline

Activity: 899
Merit: 1002



View Profile
April 09, 2013, 03:35:37 AM
 #4

They claimed the server was compromised and somebody got access to the logs, which helpfully tell you every single url that was accessed, hence all the wallet addresses. Who knows how they did this but there is plenty of ruby on rails exploits

The Google Chrome/gmail thing that indexed all the wallets was a different problem
Tonko
Full Member
***
Offline Offline

Activity: 126
Merit: 100


View Profile
April 09, 2013, 04:19:38 AM
 #5


You are assuming they actually were hacked?

 Wink

Having Ruby programmers around is as good excuse as any.
crazy_rabbit
Legendary
*
Offline Offline

Activity: 1204
Merit: 1001


RUM AND CARROTS: A PIRATE LIFE FOR ME


View Profile
April 09, 2013, 10:36:53 AM
 #6

Social Engineering is my guess. I'm surprised bitcoin millionaires aren't becoming crazy paranoid of anyone new they meet.

more or less retired.
Fuyuki_Wataru
Member
**
Offline Offline

Activity: 167
Merit: 10



View Profile
April 09, 2013, 10:38:58 AM
 #7

What if Instawallet hacked themselves, so they could run off with the money? Wink

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬    delicia | delicia.io    ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Decentralized Global Food Network | World's Only Solution to Food Wastage | Join Whitelist Now, Get 30% Bonus
▬▬▬▬▬▬▬▬▬▬    Whitepaper | Telegram | Medium | Twitter | FB | ANN    ▬▬▬▬▬▬▬▬▬▬
Nicolai
Newbie
*
Offline Offline

Activity: 39
Merit: 0



View Profile
April 09, 2013, 10:54:11 AM
 #8

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.
Yes your wrong. One of the few things we know, is that the "Google index url" problem wasn't a security flaw and couldn't have been used to hack them in any way.
MPOE-PR
Hero Member
*****
Offline Offline

Activity: 756
Merit: 522



View Profile
April 09, 2013, 11:31:29 AM
 #9

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.
Yes your wrong. One of the few things we know, is that the "Google index url" problem wasn't a security flaw and couldn't have been used to hack them in any way.

Who's "we" and why are we that stupid?

Also, does coinbase pay for shilling or just promises to?

My Credentials  | THE BTC Stock Exchange | I have my very own anthology! | Use bitcointa.lk, it's like this one but better.
Fking (OP)
Full Member
***
Offline Offline

Activity: 136
Merit: 100


View Profile
April 12, 2013, 03:36:12 PM
 #10

If they don't give more details about how the DB got stolen, yeah one could assume it was them. But lets see.
Snektor
Newbie
*
Offline Offline

Activity: 2
Merit: 0



View Profile
August 29, 2013, 11:57:14 AM
 #11

since no one talks about it anymore and I cannot start a new topic (newbie or so?):

Any updates about the instawallet hack or was it really a scam? 
I 've heard on the street that it was a scam related to drugproblems and gamblingdebts.
On of their own people 'hacked' the place and took 35000btc. Huh
But ok, just gossip maby, but that's all the info I can get.

Has ANYONE received any bitcoin they claimed? 
After filing my claims I never heard from them again.
No bitcoin, no message why no bitcoin.  Only an automated message with a reference nr.

How can I reach Instawallet, Paytunia or Bitcoincentral?  They don't give an emailadress.
Should I go to France and go to the police to file criminal charges against them?
Has anyone done that already?

It's strange to me that one of the biggest scams in btc recently seems already been forgotten.
Well, I don't forget when someone steals my money!
Boussac
Legendary
*
Offline Offline

Activity: 1220
Merit: 1015


e-ducat.fr


View Profile WWW
August 29, 2013, 03:46:40 PM
 #12

I 've heard on the street that it was a scam related to drugproblems and gamblingdebts.
On of their own people 'hacked' the place and took 35000btc. Huh

Woww

It's strange to me that one of the biggest scams in btc recently seems already been forgotten.
Well, I don't forget when someone steals my money!

Woow again.
If it's that bad, there is not point in even trying to contact them then.
They probably run off to the Virgin Islands or Costa Rica with wife and children.
Evene a life sentence to Gitmo would be too lenient to them.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!