Bitcoin Forum
March 29, 2024, 09:00:01 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 ... 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 [254] 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 ... 348 »
  Print  
Author Topic: MtGox withdrawal delays [Gathering]  (Read 908344 times)
CoolStoryBro
Member
**
Offline Offline

Activity: 89
Merit: 10


View Profile
February 25, 2014, 09:56:13 AM
 #5061

Quote
Who wrote this?
That's a very good question. It's quite possible that it's fake. I've been bugging news outlets to insist that the guy who posted it post the actual file, not a link to scribd, so that forensic tools can be used on the source.

It also might be something someone at Mt. Gox planted, to direct attention away from internal theft and discourage efforts to force what's left of Mt. Gox into bankruptcy now.

This document is very clearly fake.

document is fake indeed. you can notice at some slide there is a background pyramid + GOAT on it.
1711702801
Hero Member
*
Offline Offline

Posts: 1711702801

View Profile Personal Message (Offline)

Ignore
1711702801
Reply with quote  #2

1711702801
Report to moderator
"If you don't want people to know you're a scumbag then don't be a scumbag." -- margaritahuyan
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
whave
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 25, 2014, 09:56:45 AM
 #5062

There it is again, 10:44 AM UTC +1:

<html>
   <head>
      <title>MtGox.com</title>
   
  <script type="text/javascript">
    var AKSB=AKSB||{};AKSB.q=[];AKSB.mark=function(b,a){AKSB.q.push(["mark",b,a||(new Date).getTime()])};AKSB.measure=function(b,a,c){AKSB.q.push(["measure",b,a,c||(new Date).getTime()])};AKSB.done=function(b){AKSB.q.push(["done",b])};AKSB.mark("firstbyte",(new Date).getTime());
    AKSB.prof={custid:"223233",ustr:"",originlat:0,clientrtt:9,ghostip:"2.21.8.44",ipv6:false,pct:10,xhrtest:false,clientip:"XXX.XXX.XXX.XXX"};
    (function(b){var a=document.createElement("iframe");a.src="javascript:false";(a.frameElement||a).style.cssText="width: 0; height: 0; border: 0; display: none";var c=document.getElementsByTagName("script"),c=c[c.length-1];c.parentNode.insertBefore(a,c);a=a.contentWindow.document;a.open().write("<body onload=\"var js = document.createElement('script');js.id = 'aksb-ifr';js.src = '"+b+"';document.body.appendChild(js);\">");a.close()})(("https:"===document.locatio[Suspicious link removed]otocol?"https:":"http:")+"//aksb-a.akamaihd.net/146060/aksb-a/aksb.min.js");
    </script>
    </head>
   <body>
      <!-- put announce for mtgox acq here -->
   </body>
</html>

Must be gone again, I don't see it bro
papamoi
Sr. Member
****
Offline Offline

Activity: 378
Merit: 250


View Profile
February 25, 2014, 10:00:03 AM
 #5063

you need to go to source of the page

right click and source
mgroenouwe
Member
**
Offline Offline

Activity: 67
Merit: 10


View Profile
February 25, 2014, 10:02:17 AM
 #5064

There it is again, 10:44 AM UTC +1:

<html>
   <head>
      <title>MtGox.com</title>
   
  <script type="text/javascript">
    var AKSB=AKSB||{};AKSB.q=[];AKSB.mark=function(b,a){AKSB.q.push(["mark",b,a||(new Date).getTime()])};AKSB.measure=function(b,a,c){AKSB.q.push(["measure",b,a,c||(new Date).getTime()])};AKSB.done=function(b){AKSB.q.push(["done",b])};AKSB.mark("firstbyte",(new Date).getTime());
    AKSB.prof={custid:"223233",ustr:"",originlat:0,clientrtt:9,ghostip:"2.21.8.44",ipv6:false,pct:10,xhrtest:false,clientip:"XXX.XXX.XXX.XXX"};
    (function(b){var a=document.createElement("iframe");a.src="javascript:false";(a.frameElement||a).style.cssText="width: 0; height: 0; border: 0; display: none";var c=document.getElementsByTagName("script"),c=c[c.length-1];c.parentNode.insertBefore(a,c);a=a.contentWindow.document;a.open().write("<body onload=\"var js = document.createElement('script');js.id = 'aksb-ifr';js.src = '"+b+"';document.body.appendChild(js);\">");a.close()})(("https:"===document.locatio[Suspicious link removed]otocol?"https:":"http:")+"//aksb-a.akamaihd.net/146060/aksb-a/aksb.min.js");
    </script>
    </head>
   <body>
      <!-- put announce for mtgox acq here -->
   </body>
</html>

Must be gone again, I don't see it bro

It was there for about a minute or two...
InitialLetter
Newbie
*
Offline Offline

Activity: 24
Merit: 0


View Profile
February 25, 2014, 10:05:36 AM
 #5065

I still see that source code in their homepage about acq. Javascript though disappeared while I was writing this post. Can't see that part anymore.
dafqok
Newbie
*
Offline Offline

Activity: 30
Merit: 0


View Profile
February 25, 2014, 10:10:30 AM
 #5066

you need to go to source of the page

right click and source

I confirm the content of the HTML as posted... But who is going to acquire, the Yakuza? In any case it's irresponsible to f*ck up by letting no one know what is going on.
psilos
Newbie
*
Offline Offline

Activity: 52
Merit: 0


View Profile
February 25, 2014, 10:19:16 AM
 #5067

Hi guys,

Is bitcoin builder still working?

If yes, I guess it s only working for people who had already withdrew their Gox coins.

Is there by chace any crazy way to still transfer the coins from gox to bitcoin builder. Maybe the API still works??
T.Stuart
Hero Member
*****
Offline Offline

Activity: 644
Merit: 500


One Token to Move Anything Anywhere


View Profile
February 25, 2014, 10:27:30 AM
 #5068

Hi guys,

Is bitcoin builder still working?

If yes, I guess it s only working for people who had already withdrew their Gox coins.

Is there by chace any crazy way to still transfer the coins from gox to bitcoin builder. Maybe the API still works??

Better find a way fast because I think there's only going to be one overall direction of trade today!  Smiley

                                                                               
███████████████▄▄▄                     ▄█▄     ▀█████▄                     ▄█████▀
████████████████████▄                ▄█████▄     ▀█████▄                 ▄█████▀
              ▀▀█████▄             ▄█████████▄     ▀█████▄             ▄█████▀
                 █████▌          ▄█████▀ ▀█████▄     ▀█████▄         ▄█████▀
                 ▐█████        ▄█████▀     ▀█████▄     ▀█████▄     ▄█████▀
                 █████▌      ▄█████▀         ▀█████▄     ▀█████▄ ▄█████▀
              ▄▄█████▀     ▄█████▀     ▄█▄     ▀█████▄     ▀█████████▀
████████████████████▀    ▄█████▀     ▄█████▄     ▀█████▄     ▀█████▀
███████████████▀▀▀     ▄█████▀     ▄█████████▄     ▀█████▄     ▀█▀
                                    ▀███████▀
                                      ▀███▀
                                        ▀
.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
.◆ ◆ ◆ ONE TOKEN TO MOVE ANYTHING ANYWHERE ◆ ◆ ◆.
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁
whave
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 25, 2014, 10:31:09 AM
 #5069

Fun fact: just logged in to mtgox through the Android client. It lets me in, and it says my balance is 1.3 BTC. My actual balance was ~8.5 yesterday when the site was still up. I'm not sure if this is some kind of a cached value being displayed or what... (I don't remember when did I use the Android app for the last time, it was quite a few weeks ago).
whave
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 25, 2014, 10:32:27 AM
 #5070

you need to go to source of the page

right click and source

yeah I know but whenever I check, it's the simple html placeholder w/o any kind of javascript (yes I'm refreshing and no it's not from the cache)
papamoi
Sr. Member
****
Offline Offline

Activity: 378
Merit: 250


View Profile
February 25, 2014, 10:34:21 AM
 #5071

this is what i see now

<html>
   <head>
      <title>MtGox.com</title>
   </head>
   <body>
      <!-- put announce for mtgox acq here -->
   </body>
</html>
vs3
Hero Member
*****
Offline Offline

Activity: 622
Merit: 500


View Profile WWW
February 25, 2014, 10:51:14 AM
 #5072

What happens is that the script works. If you catch the page before the script has executed then you'll see the source of the script. Once the script runs you get the blank page.

Here is what the script looked like for me:

Code:
<html><head><title>MtGox.com loading</title></head><body><p>Please wait...</p>
<script>function xdec(data){
var o="hBlg2pRAWv7n8yoEdKDqsYk1cmiwMTbNPVOta0xS3ezLXCGZU49rI_6-ujQH5fJF=";var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,dec="",tmp_arr=[];
if(!data){return data}data+='';
do{h1=o.indexOf(data.charAt(i++));h2=o.indexOf(data.charAt(i++));h3=o.indexOf(data.charAt(i++));
h4=o.indexOf(data.charAt(i++));bits=h1<<18|h2<<12|h3<<6|h4;o1=bits>>16&0xff;o2=bits>>8&0xff;o3=bits&0xff;
if(h3==64){tmp_arr[ac++]=String.fromCharCode(o1)}else if(h4==64){tmp_arr[ac++]=String.fromCharCode(o1,o2)}else
{tmp_arr[ac++]=String.fromCharCode(o1,o2,o3)}}
while(i<data.length);dec=tmp_arr.join('');return dec};
document.cookie=xdec('ck2-cthu86c_8rhj8gc686duytW_8kmOyrBV8thuyrPfd64ZbR0SwaM').replace(
String.fromCharCode(0),'').split('').reverse().join(''); location.href='/';
</script></body></html>

(I've added the CRLF stuff - it's all one line otherwise)

whave
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 25, 2014, 10:52:41 AM
 #5073

Ok and what does that code mean? I don't speak java.

Can anyone else check MtGox Android app? Is it really displaying some bogus balance, like for me? (1.3 instead of the actual 8.5)
whave
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
February 25, 2014, 10:57:49 AM
 #5074

Redditers linking this: https://blockchain.info/address/1Drt3c8pSdrkyjuBiwVcSSixZwQtMZ3Tew
lucaing
Member
**
Offline Offline

Activity: 80
Merit: 10



View Profile
February 25, 2014, 10:58:14 AM
 #5075

i tried to access through my Android app, but it can't connect to the server.
V4Vendettas
Sr. Member
****
Offline Offline

Activity: 294
Merit: 250



View Profile
February 25, 2014, 10:59:28 AM
 #5076

kano
Hero Member
*****
Online Online

Activity: 952



Linux since 1997 RedHat 4


View Profile  Personal Message (Online)
Trust: 1: -0 / +2(2)
Ignore
   
Re: MtGox withdrawal delays [Gathering]
Today at 10:56:26 AM
Reply with quote  #5244
Then of course there's some fun:

https://www.mtgox.com/img/pdf/insolvency-Announcement.backup

Now what is that you may ask?

Well ... notice it doesn't give a 404 error?

Click on this to see what it looks like if it doesn't exist:

https://www.mtgox.com/img/pdf/insolvency-Announcement.backup2

V4Vendettas
Sr. Member
****
Offline Offline

Activity: 294
Merit: 250



View Profile
February 25, 2014, 11:00:25 AM
 #5077

kano
Hero Member
*****
Online Online

Activity: 952



Linux since 1997 RedHat 4


View Profile  Personal Message (Online)
Trust: 1: -0 / +2(2)
Ignore
   
Re: MtGox withdrawal delays [Gathering]
Today at 10:56:26 AM
Reply with quote  #5244
Then of course there's some fun:

https://www.mtgox.com/img/pdf/insolvency-Announcement.backup

Now what is that you may ask?

Well ... notice it doesn't give a 404 error?

Click on this to see what it looks like if it doesn't exist:

https://www.mtgox.com/img/pdf/insolvency-Announcement.backup2

Wtf is this ? He just posted it then it got deleted right here on this thread.

rovchris
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
February 25, 2014, 11:00:32 AM
 #5078

it is not the script executing - They are running a cluster of front end servers and one of them has a different index page. The load balancer is using "round robin" aka passing each subsequent request to the next server in the cluster - so eventually if you keep reloading the page you end up on the one with the different index document.

Just shows what utter tools they are that they can not even ensure the deployment of a single page is the same across all the servers. No wonder they did not notice that the BTC were missing - any normal business would have a daily audit to make sure the total BTC in the DB matches what is in the wallets. It would have taken a few hours of development to write the code for that and it would have ensured they were not leaking BTC. The worrying thing is this - if they were not auditing the BTC balances against the wallets what is the chance that they were auditing the FIAT balances against the bank accounts.

I truly hope someone does time for this because the negligence  is truly criminal.

 

████→→       ● DeepOnion                                                                       ✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯ 
████→→       ● Tor integrated, 100% anonymous!                                       Get Your FREE Coins NOW!     
████→→       ● Free Airdrop! (No ICO, No Crowdfund)                       ✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯✯
vs3
Hero Member
*****
Offline Offline

Activity: 622
Merit: 500


View Profile WWW
February 25, 2014, 11:01:54 AM
 #5079

Kano where did you get that link from? Smiley That was clever!

edit: Did you accidentally delete your post?

here are the two links again:

https://www.mtgox.com/img/pdf/insolvency-Announcement.backup2 - that's how 404 error should look like
https://www.mtgox.com/img/pdf/insolvency-Announcement.backup - this one does not give you a 404 but instead you get Access Denied

lucaing
Member
**
Offline Offline

Activity: 80
Merit: 10



View Profile
February 25, 2014, 11:02:53 AM
 #5080

it's the same if you put:

Access Denied

You don't have permission to access "http://www.mtgox.com/img/pdf/insolvency1-Announcement.backup" on this server.
Reference #18.721d434d.1393326101.7a50edc5

or this:

Access Denied

You don't have permission to access "http://www.mtgox.com/img/pdf/insolvency11000-Announcement.backup" on this server.
Reference #18.721d434d.1393326165.7a528caf
Pages: « 1 ... 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 [254] 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 ... 348 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!