Bitcoin Forum
June 08, 2024, 03:16:15 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: DEL  (Read 3226 times)
wallydz (OP)
Newbie
*
Offline Offline

Activity: 46
Merit: 0


View Profile
August 22, 2013, 04:56:06 AM
Last edit: February 14, 2014, 03:46:45 PM by wallydz
 #1

DEL
rimbit
Sr. Member
****
Offline Offline

Activity: 353
Merit: 250


Rimbit - No mining, just development


View Profile WWW
August 22, 2013, 05:47:11 AM
 #2

Lets look at the situation...
Someone accessed your account, so how could that have happened?

You either told someone or your PC is compromised.

[ANN] Rimbit --- We removed mining so its just the community and coin --- Click Here
OhShei8e
Legendary
*
Offline Offline

Activity: 1764
Merit: 1059



View Profile
August 22, 2013, 08:50:26 AM
 #3

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

Do you have an API key?
OhShei8e
Legendary
*
Offline Offline

Activity: 1764
Merit: 1059



View Profile
August 22, 2013, 09:01:19 AM
 #4

Update : I just checked that i have the same login in crypto-trade.com / and suddenly their website volume is Volume : 40.57196829 BTC / 4,312.10 USD

It the only way i still repeat my Computer is 100% clean and password is not guessable

You can also attack Linux systems. Most via browser vulnerability. Did you along with Gox open other pages in your browser by using tabs?
OhShei8e
Legendary
*
Offline Offline

Activity: 1764
Merit: 1059



View Profile
August 22, 2013, 09:08:05 AM
 #5

Nop no API and no 2FA for security guess one of 3 sites is compromised and the dude tried the same password on diffrent Market like mtgox and he get lucky any way i keep investigating and fellowing the money maybe i will find out

I wish you good luck. Very annoying, what happened to you. Even if you were uncareful, this is theft. You should also lodge a complaint of an offence.
ardana123
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500



View Profile
August 22, 2013, 11:46:15 AM
 #6

You work IT but you didn't use 2fa auth... Saywhut?
Rampion
Legendary
*
Offline Offline

Activity: 1148
Merit: 1018


View Profile
August 22, 2013, 11:50:39 AM
 #7

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

8 char long? So crackable in a few minutes/hours depending on the setup of the cracker. I never use password of less than 16 characters and upper, lower cases and also symbols (!, $, %, etc.) if its possible.

And being in IT and not using 2 factor auth on a site like MtGox should automatically get you fired from your job. Seriously, what were you thinking about?

Plus, working in IT and reusing passwords instead of using unique, random generated ones by default on ALL sites you use is so retarded you should be banned from the IT industry.

gbl08ma
Sr. Member
****
Offline Offline

Activity: 306
Merit: 250


Donations: http://tny.im/nx


View Profile WWW
August 22, 2013, 02:07:30 PM
 #8

If you used that password on another site or you logged in to a fake Mtgox site thinking it was the real one, no one had to crack anything to get your password.
Next time choose a good password and enable two-factor auth.

Ghostofkobra
Full Member
***
Offline Offline

Activity: 164
Merit: 100



View Profile
August 22, 2013, 02:17:29 PM
 #9

I get so tired about this,

We see money getting stolen from Mt.Gox accounts every week (the ones that posts here far from all do).

In my case the logs (from Mt.Gox) even showed that no one had been logged in at the time of the transfer.

Someone or Mt.Gox has found a way to access accounts and transfer funds out.

And Mt.Gox just stonewalls everything...



What surprises me is that ppl still use Mt.Gox,


but instead people getting ripped off gets told that they are stupid and get the standard banter:
- compromised computer, 2factor auth, fake website, other website with same username and password.....


 

Rampion
Legendary
*
Offline Offline

Activity: 1148
Merit: 1018


View Profile
August 22, 2013, 02:18:18 PM
 #10

I get so tired about this,

We see money getting stolen from Mt.Gox accounts every week (the ones that posts here far from all do).

In my case the logs (from Mt.Gox) even showed that no one had been logged in at the time of the transfer.

Someone or Mt.Gox has found a way to access accounts and transfer funds out.

And Mt.Gox just stonewalls everything...



What surprises me is that ppl still use Mt.Gox,


but instead people getting ripped off gets told that they are stupid and get the standard banter:
- compromised computer, 2factor auth, fake website, other website with same username and password.....


 

troll post of the day

Ghostofkobra
Full Member
***
Offline Offline

Activity: 164
Merit: 100



View Profile
August 22, 2013, 02:36:21 PM
 #11

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

8 char long? So crackable in a few minutes/hours depending on the setup of the cracker. I never use password of less than 16 characters and upper, lower cases and also symbols (!, $, %, etc.) if its possible.

And being in IT and not using 2 factor auth on a site like MtGox should automatically get you fired from your job. Seriously, what were you thinking about?

Plus, working in IT and reusing passwords instead of using unique, random generated ones by default on ALL sites you use is so retarded you should be banned from the IT industry.

It is funny that i wrote this while you called me a troll.  Roll Eyes

You Sir, obviously have no critical thinking and see the world as black and white.


- 16 characters are marginally better than 8 character passwords, both can be cracked in hours or days. Ars Technica article on random passwords
- But it also has to do with pattern, randomness, etc. I can easily make a 8 char password that is better than a 16 char password
- Your point on symbols noted but changing i for ! and S for $ is just as bad.
- Password cracking is only fast if you already have the password database. (which the OP put out a warning for, compromized db's)
- If you try to crack it online by querying the server, 8 random upper lower chars takes months. (and could easily be made impossible by if logins / hour are restricted or with 2 factor auth).

- Your last point is just cruel and hateful and bears no merit on the real world. It belongs in a sand box.

Another factor that is more important than using the same password is to use different login names on all sites.
If the login names cant be matched, the passwords are useless.

RodeoX
Legendary
*
Offline Offline

Activity: 3066
Merit: 1147


The revolution will be monetized!


View Profile
August 22, 2013, 02:42:34 PM
 #12

Bummer man. And I don't blame people for being a victim. Sure you could have additional security, but you are not the bad guy here.

The gospel according to Satoshi - https://bitcoin.org/bitcoin.pdf
Free bitcoin in ? - Stay tuned for this years Bitcoin hunt!
wallydz (OP)
Newbie
*
Offline Offline

Activity: 46
Merit: 0


View Profile
August 22, 2013, 02:48:31 PM
 #13

As i said already before talking about cracking password start ask ( as i useed just one password 3 website bitcoin related) i am just informing you guys to becarful not to make the same mistake as i did nothing else !!!! i dont understand why some people think they are the Super Nerd who know everything?

First thing you have to ask yourself after my post not how stupid i was putting same password on 3 website but which of thos website is compromised !
NO DB no bruteforce i dont imagine some "Hacker" will bruteforce a webinterface to get a random account who he is not even sure to find money
fluidjax
Hero Member
*****
Offline Offline

Activity: 750
Merit: 601



View Profile
August 22, 2013, 07:08:28 PM
 #14

Sorry for your loss.
I must say Bitcoin has taught me some security lessons, now I use a password manager, my passwords are all different and use an neccesarily large number of characters.
Bitcoins are stored in paper wallets that have never seen the internet. I usd to think people like that were paranoid, but now I know better...
Just make sure it can't happen again.
rimbit
Sr. Member
****
Offline Offline

Activity: 353
Merit: 250


Rimbit - No mining, just development


View Profile WWW
August 22, 2013, 08:00:38 PM
 #15

As i said already before talking about cracking password start ask ( as i useed just one password 3 website bitcoin related) i am just informing you guys to becarful not to make the same mistake as i did nothing else !!!! i dont understand why some people think they are the Super Nerd who know everything?

First thing you have to ask yourself after my post not how stupid i was putting same password on 3 website but which of thos website is compromised !
NO DB no bruteforce i dont imagine some "Hacker" will bruteforce a webinterface to get a random account who he is not even sure to find money

I sure hope you find the reason... I still think your system is compromised...

Let us know when you do find the issue  Wink

[ANN] Rimbit --- We removed mining so its just the community and coin --- Click Here
axus
Full Member
***
Offline Offline

Activity: 129
Merit: 100


View Profile
August 22, 2013, 10:20:20 PM
 #16

Which websites?

As i said already before talking about cracking password start ask ( as i useed just one password 3 website bitcoin related) i am just informing you guys to becarful not to make the same mistake as i did nothing else !!!! i dont understand why some people think they are the Super Nerd who know everything?

First thing you have to ask yourself after my post not how stupid i was putting same password on 3 website but which of thos website is compromised !
NO DB no bruteforce i dont imagine some "Hacker" will bruteforce a webinterface to get a random account who he is not even sure to find money
ninjarobot
Hero Member
*****
Offline Offline

Activity: 761
Merit: 500


Mine Silent, Mine Deep


View Profile
August 23, 2013, 01:21:05 AM
 #17

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

8 char long? So crackable in a few minutes/hours depending on the setup of the cracker. I never use password of less than 16 characters and upper, lower cases and also symbols (!, $, %, etc.) if its possible.

And being in IT and not using 2 factor auth on a site like MtGox should automatically get you fired from your job. Seriously, what were you thinking about?

Plus, working in IT and reusing passwords instead of using unique, random generated ones by default on ALL sites you use is so retarded you should be banned from the IT industry.

Well, beats the Bitcoinica crew.

Those guys were using their public API key as the password and did not bother enabling OTP on Gox even though they were handling tens of thousands of customer bitcoins. Some even labeled themselves "Security Expert". Oh, and they didn't think making a backup of customer data was necessary either.

Of course, I turned out to be the bigger fool for banking with them...
byte1
Newbie
*
Offline Offline

Activity: 45
Merit: 0



View Profile
August 24, 2013, 10:59:59 PM
 #18

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

You work in IT and set your password as "bitcointalk" ?
jl2012
Legendary
*
Offline Offline

Activity: 1792
Merit: 1097


View Profile
August 25, 2013, 01:42:25 PM
 #19

I am using Linux , i am IT  so i am pretty sure that the computer is not compromised

The only thing i see possible i did mistake when i started use bitcoin i used same password as bitcointalk

there is no other possible way the password is 8 char long with Upper and lowercase

i can only blame myself that i was not using 2FA but lesson learned i post this that maybe it can help or will help someone in futur

You are using Linux, you are IT, and you are not using 2FA.  Roll Eyes

Donation address: 374iXxS4BuqFHsEwwxUuH3nvJ69Y7Hqur3 (Bitcoin ONLY)
LRDGENPLYrcTRssGoZrsCT1hngaH3BVkM4 (LTC)
PGP: D3CC 1772 8600 5BB8 FF67 3294 C524 2A1A B393 6517
elizzabeth
Newbie
*
Offline Offline

Activity: 3
Merit: 0


View Profile
September 04, 2013, 01:19:08 AM
 #20

The exact same thing happened to me. Is Mtgox responsible for this? How can an unauthorized BTC xfer take place? Mtgox must have control and access to this.

Is there recourse here? My account got hacked, in fact, on the same day, Aug. 22, 2013. BTC were transferred and my account empty the next day!

What is going on here? Should we be contacting lawyers at this point? How can MtGox authorize a transfer out of a personal account??

Anybody have any help or suggestions??
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!