Bitcoin Forum
April 19, 2024, 08:14:00 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2] 3 4 »  All
  Print  
Author Topic: Bitcoin is a magnet for hackers and crooks  (Read 7768 times)
xcooling
Member
**
Offline Offline

Activity: 145
Merit: 10


View Profile
August 01, 2011, 07:59:42 PM
 #21

edit:

Yeah its easy atm for them, but there is still far more money in stealing credit card numbers and personal identities.

Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1713514440
Hero Member
*
Offline Offline

Posts: 1713514440

View Profile Personal Message (Offline)

Ignore
1713514440
Reply with quote  #2

1713514440
Report to moderator
foggyb
Legendary
*
Offline Offline

Activity: 1652
Merit: 1006


View Profile
August 01, 2011, 09:55:41 PM
 #22


Hacking / Scamming has held bitcoin down and stunted it's growth.

Scamming bitcoins could be cool and all... but not when your activities drive their prices from 25-30 each to 13-14 each.

Scamming/hacking did not drive the price to 13$. The free market has decided 13-15$ is a fair price for a bitcoin. Wild speculation drove it to $30.




willphase
Hero Member
*****
Offline Offline

Activity: 767
Merit: 500


View Profile
August 01, 2011, 10:16:30 PM
 #23


Scamming/hacking did not drive the price to 13$. The free market has decided 13-15$ is a fair price for a bitcoin. Wild speculation drove it to $30.


Greed drove the price to $30.

Will

Indemnified
Full Member
***
Offline Offline

Activity: 216
Merit: 100


View Profile
August 01, 2011, 10:22:10 PM
 #24

My main email address has been out there in the public eye for close to a dozen years now.  It has been posted on forums, websites, mailing lists, and even, God help me, USENET.

The throwaway address that leaked out of mtgox gets VASTLY more spam.



This^
Tasty Champa
Member
**
Offline Offline

Activity: 84
Merit: 10


View Profile
August 01, 2011, 11:36:15 PM
 #25

OP, I'm glad you brought this to our attention.
Means we can get free or cheap penetration testing.
Smiley

just post your URL in the forum or your sig,
and state there is a wallet with 0.1BTC in it, if you can get it, it's yours!
I wouldn't lie about it though, they will be sneaky bastards.

could even set up a site directory with bounties in BTC.

It's like an anti-sec dream, super cheap pen testing, thwarting the expensive job seeking vanity driven  hats.

creation and destruction.

May as well make the destroyers skwirm. xD
smoothie
Legendary
*
Offline Offline

Activity: 2492
Merit: 1473


LEALANA Bitcoin Grim Reaper


View Profile
August 02, 2011, 06:00:16 AM
 #26

"Bitcoin is a magnet for hackers and crooks" .... AND BEER AND HOOKERS!!
 Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin Grin

███████████████████████████████████████

            ,╓p@@███████@╗╖,           
        ,p████████████████████N,       
      d█████████████████████████b     
    d██████████████████████████████æ   
  ,████²█████████████████████████████, 
 ,█████  ╙████████████████████╨  █████y
 ██████    `████████████████`    ██████
║██████       Ñ███████████`      ███████
███████         ╩██████Ñ         ███████
███████    ▐▄     ²██╩     a▌    ███████
╢██████    ▐▓█▄          ▄█▓▌    ███████
 ██████    ▐▓▓▓▓▌,     ▄█▓▓▓▌    ██████─
           ▐▓▓▓▓▓▓█,,▄▓▓▓▓▓▓▌          
           ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▌          
    ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓─  
     ²▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓╩    
        ▀▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀       
           ²▀▀▓▓▓▓▓▓▓▓▓▓▓▓▀▀`          
                   ²²²                 
███████████████████████████████████████

. ★☆ WWW.LEALANA.COM        My PGP fingerprint is A764D833.                  History of Monero development Visualization ★☆ .
LEALANA BITCOIN GRIM REAPER SILVER COINS.
 
bitrebel
Sr. Member
****
Offline Offline

Activity: 364
Merit: 251


View Profile
August 02, 2011, 06:05:36 AM
 #27

The problem boils down to this:

Victim: Officer, I want to report a theft.

Officer: What happened?

Victim: Someone stole my bitcoins!

Officer: Your what?

Victim: My BITCOINS!!!!

Officer: Did you have them in your bank account or in your credit card?

Victim: They are not stored in banks or credit cards.

Officer: Then we don't give a rat's ass. Sorry.

Victim: Why won't you do anything?

Officer: We work for Bankers, not you, Fuck Off common Pleb!

Why does Bitrebel have 65+ Ignores?
Because Bitrebel says things that some people do not want YOU to hear.
bitrebel
Sr. Member
****
Offline Offline

Activity: 364
Merit: 251


View Profile
August 02, 2011, 06:59:07 AM
 #28

There is also the WAR ON BITCOINS, you are not considering. It's not just greedy hackers, it's people who want to intentionally destroy bitcoin because they work for the bankers. ALL media, politicians, police, and governments are beholden to the central bankers, so bitcoin does not have many friends in the concrete jungle. Bitcoin is popular among people who value freedom and self responsibility and used by those without fear of computers or immediate persecution. Bitcoin is up again enormous odds and powers in the world. It will only succeed if people can endure the early hardships. Even then, we will continue to be fought against by the system. Bitcoins will NEVER be embraced by the real mainstream, paypal, ebay, bank of america, chase, and safeway or walmart. And maybe those are it's best features yet. One thing is for sure, bitcoin will probably never be for the masses until things change, and maybe bitcoin is supposed to be a large part of that change.

Why does Bitrebel have 65+ Ignores?
Because Bitrebel says things that some people do not want YOU to hear.
qwk
Donator
Legendary
*
Offline Offline

Activity: 3542
Merit: 3411


Shitcoin Minimalist


View Profile
August 02, 2011, 08:58:39 AM
 #29

Victim: Someone stole my bitcoins!
(...)
Officer: Then we don't give a rat's ass. Sorry.

Just because your regular police officer won't know what a bitcoin is, doesn't mean it's not a criminal offence to steal them and that i can't be prosecuted. You may have a hard time explaining, sure.

Yeah, well, I'm gonna go build my own blockchain. With blackjack and hookers! In fact forget the blockchain.
brandon@sourcewerks
Member
**
Offline Offline

Activity: 62
Merit: 10



View Profile
August 02, 2011, 01:02:09 PM
 #30

Feel like some of the replies in this thread couple programmers with hackers...

Not all programmers need to exploit systems to feel complete.
RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
August 09, 2011, 06:09:04 AM
 #31

It will be interesting to see if the hacking attempts slow down at a parallel rate to the value of the bitcoin.

Check out the first physical bitcoin at http://CoinedBits.com
NothinG
Hero Member
*****
Offline Offline

Activity: 560
Merit: 500



View Profile
August 09, 2011, 06:24:30 AM
 #32

It will be interesting to see if the hacking attempts slow down at a parallel rate to the value of the bitcoin.
or...hackers go further underground and release scripts to the public.

RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
November 16, 2011, 07:43:18 AM
 #33

Just wanted to report for documentation sake that I'm still getting hit with hack attempts. The latest attempt was yesterday someone who speaks good English using a server (118.192.35.57) from China tried over 1,500 various methods to hack into my server.

It's hard to stay ahead of these guys, if they are persistent, they will eventually get in (as evident with the other already hacked bitcoin services).

Here are some of the methods he tried:
  • Tried to access boot information
  • Tried to access file system (ie /etc/passwd)
  • Various SQL injection techniques
  • javascript injection
  • Tried executing system commands with buffer over-runs

It's kinda funny that they never tried to find my wallet.dat file :-)

Check out the first physical bitcoin at http://CoinedBits.com
kjj
Legendary
*
Offline Offline

Activity: 1302
Merit: 1024



View Profile
November 16, 2011, 07:57:06 AM
 #34

Just wanted to report for documentation sake that I'm still getting hit with hack attempts. The latest attempt was yesterday someone who speaks good English using a server (118.192.35.57) from China tried over 1,500 various methods to hack into my server.

It's hard to stay ahead of these guys, if they are persistent, they will eventually get in (as evident with the other already hacked bitcoin services).

Here are some of the methods he tried:
  • Tried to access boot information
  • Tried to access file system (ie /etc/passwd)
  • Various SQL injection techniques
  • javascript injection
  • Tried executing system commands with buffer over-runs

It's kinda funny that they never tried to find my wallet.dat file :-)

What types of attacks were they using?  Just web requests?

I've found that a well configured fail2ban setup has made my logs vastly less annoying to read.

17Np17BSrpnHCZ2pgtiMNnhjnsWJ2TMqq8
I routinely ignore posters with paid advertising in their sigs.  You should too.
RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
November 16, 2011, 08:05:06 AM
 #35

What types of attacks were they using?  Just web requests?
I've found that a well configured fail2ban setup has made my logs vastly less annoying to read.

Yes, all attacks were using HTTP. fail2ban looks pretty good. Thanks.

Check out the first physical bitcoin at http://CoinedBits.com
RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
November 16, 2011, 08:08:25 AM
 #36

One other interesting thing. It looks like he is on a Windows NT machine using IE 6!

I guess he could be spoofing the agent string.

Check out the first physical bitcoin at http://CoinedBits.com
payb.tc
Hero Member
*****
Offline Offline

Activity: 812
Merit: 1000



View Profile
November 16, 2011, 08:32:07 AM
 #37

I guess he could be spoofing the agent string.

i was going to say '118' looks like Australia. which service told you it was China? (other than the IE6 usage Cheesy)
RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
November 16, 2011, 08:38:51 AM
 #38

i was going to say '118' looks like Australia. which service told you it was China? (other than the IE6 usage Cheesy)

You gotta use the Asia Pacific Network whois search to lookup the IP address

http://www.apnic.net/apnic-info/whois_search

Check out the first physical bitcoin at http://CoinedBits.com
RSantana (OP)
Member
**
Offline Offline

Activity: 111
Merit: 10


CoinedBits.com


View Profile WWW
February 24, 2012, 08:08:22 AM
 #39

For anyone who cares or is keeping track. Yesterday I got another 2000 hack attempts. It was mostly injecting harmful scripts into my forms, and random endpoint guessing looking for login pages.

These attempts all came from the Netherlands.

Check out the first physical bitcoin at http://CoinedBits.com
Timo Y
Legendary
*
Offline Offline

Activity: 938
Merit: 1001


bitcoin - the aerogel of money


View Profile
February 24, 2012, 10:45:39 AM
Last edit: February 24, 2012, 05:49:59 PM by Timo Y
 #40

For anyone who cares or is keeping track. Yesterday I got another 2000 hack attempts. It was mostly injecting harmful scripts into my forms, and random endpoint guessing looking for login pages.

These attempts all came from the Netherlands.


The Netherlands was probably just the last link in a proxy chain.

We shouldn't be surprised by this. Bitcoin wallets are perceived as an easy target, and there is no shortage of desperate people in the world with basic hacking skills.

Have you thought about storing your wallets offline and advertising this fact on your site?

GPG ID: FA868D77   bitcoin-otc:forever-d
Pages: « 1 [2] 3 4 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!