Bitcoin Forum
May 13, 2024, 11:01:34 PM
Welcome,
Guest
. Please
login
or
register
.
News
: Latest Bitcoin Core release:
27.0
[
Torrent
]
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Other
>
Meta
>
My Bitcoin Forum account has been compromised!!
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: My Bitcoin Forum account has been compromised!! (Read 831 times)
Sword Smith
(OP)
Sr. Member
Offline
Activity: 406
Merit: 286
Neptune, Scalable Privacy
My Bitcoin Forum account has been compromised!!
June 07, 2013, 10:21:54 AM
#1
This account seems to have been hacked. Please quote this in another thread so that the attacker cannot
I will update this thread if the attacker does not delete it :/
Do not make any deals with this account until I sign a message saying everything i OK.
Neptune - Post-quantum Scalable Privacy
Unlike traditional banking where clients have only a few account numbers, with Bitcoin people can create an unlimited number of accounts (addresses). This can be used to easily track payments, and it improves anonymity.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
Sword Smith
(OP)
Sr. Member
Offline
Activity: 406
Merit: 286
Neptune, Scalable Privacy
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 10:29:55 AM
#2
Quote from: gweedo on June 07, 2013, 10:26:23 AM
Quote from: Sword Smith on June 07, 2013, 10:21:54 AM
This account seems to have been hacked. Please quote this in another thread so that the attacker cannot
I will update this thread if the attacker does not delete it :/
Do not make any deals with this account until I sign a message saying everything i OK.
WOW a lot of bitcointalk accounts are getting compromised. Theymos 2FA is need!
I got some emails from Yahoo saying my email had been accessed from Russia. And later I got some info about a verified btc-e transaction. All clues point to btc-e imho. Please quote OP in another thread
Neptune - Post-quantum Scalable Privacy
John (John K.)
Global Troll-buster and
Legendary
Offline
Activity: 1288
Merit: 1226
Away on an extended break
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 10:34:41 AM
#3
I banned OP for the time being to stop the spam. I'll ask theymos to look into this, in the meantime CHANGE ALL YOUR PASSWORDS GODDAMNIT.
theymos
Administrator
Legendary
Offline
Activity: 5194
Merit: 12985
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 07:43:29 PM
#4
Quote from: gweedo on June 07, 2013, 10:26:23 AM
WOW a lot of bitcointalk accounts are getting compromised. Theymos 2FA is need!
I think that this attack involves stealing cookies using some weakness in Java, so two-factor authentication wouldn't help here.
1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Mike Christ
aka snapsunny
Legendary
Offline
Activity: 1078
Merit: 1003
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 07:45:49 PM
#5
Java seems to be the center of all hacking attempts related to Bitcoin.
So from now on, words to live by: just don't run Java on any website related to Bitcoin.
Digital Painting, Illustration, Character Art
The 4ner
aka newbitcoinqtuser
Hero Member
Offline
Activity: 602
Merit: 500
R.I.P Silk Road 1.0
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 07:53:14 PM
#6
I have a 50 char password and only ever log in through encrypted VPN's. Hopefully that's enough protectiong.
01BTC10
VIP
Hero Member
Offline
Activity: 756
Merit: 503
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 07:58:02 PM
#7
Quote from: The 4ner on June 07, 2013, 07:53:14 PM
I have a 50 char password and only ever log in through encrypted VPN's. Hopefully that's enough protectiong.
Useless against cookie stealing. Don't click any forum link.
pekv2
Hero Member
Offline
Activity: 770
Merit: 502
Re: My Bitcoin Forum account has been compromised!!
June 07, 2013, 10:15:45 PM
#8
Quote from: theymos on June 07, 2013, 07:43:29 PM
Quote from: gweedo on June 07, 2013, 10:26:23 AM
WOW a lot of bitcointalk accounts are getting compromised. Theymos 2FA is need!
I think that this attack involves stealing cookies using some weakness in Java, so two-factor authentication wouldn't help here.
Ekk, if this is the case, by damned people need to start locking down their browsers. Easy way for mozilla is cookie monster.
https://addons.mozilla.org/en-US/firefox/addon/cookie-monster/
I'm not being self centered, but my browser is a fortress. Nothing normally that usually gets through a default browser, mine is setup to block. Tons of about:config settings, cookies, noscript,requestpolicy,mvps hosts,adblock with malware blocking list and others, I've got a ton of crap to long to list in here and be ot.
[edit]
btw, as noted in the other thread, I've got java uninstalled too
[/edit]
Need to get a point across to new comers & even old timers about browser security, some how. A browser can be a double doorway to your computer, letting things roll in then out.
Block cookies and only allow cookies you trust for a certain time.
Edit:
Seriously, need a security section here
The 4ner
aka newbitcoinqtuser
Hero Member
Offline
Activity: 602
Merit: 500
R.I.P Silk Road 1.0
Re: My Bitcoin Forum account has been compromised!!
June 08, 2013, 01:02:55 AM
#9
Damn. Well I do use Ghostery as well and have an app called cookie that also blocks cookies and deletes cookies every 5 minutes while browsing.
MysteryMiner
Legendary
Offline
Activity: 1470
Merit: 1029
Show middle finger to system and then destroy it!
Re: My Bitcoin Forum account has been compromised!!
June 08, 2013, 03:02:10 AM
#10
Quote from: The 4ner on June 07, 2013, 07:53:14 PM
I have a 50 char password and only ever log in through encrypted VPN's. Hopefully that's enough protectiong.
VPN will make MITM attack easier by VPN operator. Bitcointalk already uses SSL to protect the contents of communication to Bitcointalk server, including specific urls and cookies.
bc1q59y5jp2rrwgxuekc8kjk6s8k2es73uawprre4j
Maged
Legendary
Offline
Activity: 1204
Merit: 1015
Re: My Bitcoin Forum account has been compromised!!
June 08, 2013, 06:06:47 AM
#11
Say, does the session cookie need to be accessible through JavaScript? If not, we could make the cookies H
ttpOnly
.
Like my posts? Donate!
1Maged
VeZqDtU4Jh5BdgvHpcWk9dXFzZY8
D35TR0Y3R
Member
Offline
Activity: 112
Merit: 10
Re: My Bitcoin Forum account has been compromised!!
June 08, 2013, 06:10:39 AM
#12
Quote from: Maged on June 08, 2013, 06:06:47 AM
Say, does the session cookie need to be accessible through JavaScript? If not, we could make the cookies H
ttpOnly
.
Java malware will steal the cookies through the browser's storage directories.
Update: Hi everyone, just to let you guys know that I hacked this account and removed all the negative trust, I've dealt with that scumbag hacker-wannabe extortionist I rooted his fucking machine and stole every last bitcent. I will be in contact with those that he has defrauded and you will be reimbursed fully BM-2D8oHJRsGqH82FDAC2eTEtVmeN7TAVmNBP the1 trojan
MysteryMiner
Legendary
Offline
Activity: 1470
Merit: 1029
Show middle finger to system and then destroy it!
Re: My Bitcoin Forum account has been compromised!!
June 08, 2013, 08:04:18 PM
#13
Quote from: D35TR0Y3R on June 08, 2013, 06:10:39 AM
Quote from: Maged on June 08, 2013, 06:06:47 AM
Say, does the session cookie need to be accessible through JavaScript? If not, we could make the cookies H
ttpOnly
.
Java malware will steal the cookies through the browser's storage directories.
Malware can do anything. Don't run malware on your computer. Period.
Specify time to stay logged in when logging in. Log out your forum profile when leaving forum. Useless cookie is not delicious.
bc1q59y5jp2rrwgxuekc8kjk6s8k2es73uawprre4j
Pages: [
1
]
Print
Bitcoin Forum
>
Other
>
Meta
>
My Bitcoin Forum account has been compromised!!
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...