Bitcoin Forum
May 07, 2024, 10:37:21 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1]
  Print  
Author Topic: Gridlane VPS - They Will Steal your Wallet.Dat file  (Read 1587 times)
moriartybitcoin (OP)
Hero Member
*****
Offline Offline

Activity: 560
Merit: 500

★777Coin.com★ Fun BTC Casino!


View Profile
December 12, 2013, 08:23:21 PM
 #1

WARNING!!!

I've been using Gridlane.com for some of my websites (BitPlastic.com debit card, BitLaunder.com bitcoin laundering and BitFiverr.com micro gigs), and I have multiple different (separate, compartamentalized, and unconnected) accounts with gridlane.

On *EACH* account, my wallet.dat file was stolen, almost simultaneously.  No evidence whatsoever of a hacker or outside breach.  No login by ssh or root.  The wallet was just emptied - POOF, gone.

We never store client funds in hot wallets on the server, so they only got chump change (less than 1 btc in total).  Nevertheless, we had to move our entire network off Gridlane and onto dedicated servers, which was a real hassle.

Just wanted to warn everyone here about Gridlane.  Any webhosting company which accepts bitcoin is, in my view, automatically under suspicion because the incentive to rip off a customers' wallet.dat is just so high.  If you run a website which accepts bitcoin, and especially if you hold client funds online in a hot wallet, you had better be 100% sure about your hosting company!  And if you get mysteriously hacked, that's the FIRST (not the last) place where suspicion should fall. 

As much as I love bitcoin, I am forced to switch to a non-bitcoin accepting hosting company. 

Be careful ...

Dr. Michael Moriarty, owner of the Bitcoin Network

PS: This is why we never store client funds in hot wallets, ever.  We run bitcoind and incoming deposits credit automatically, but the wallets are flushed every minute to offline cold wallets, and withdrawals are processed manually from the cold wallets.  This means withdrawals from our sites take a little longer (2-3 hrs on average), but there is NO WAY for a hacker to steal client funds, as happened to bitfloor and inputs.io and many others

1715078241
Hero Member
*
Offline Offline

Posts: 1715078241

View Profile Personal Message (Offline)

Ignore
1715078241
Reply with quote  #2

1715078241
Report to moderator
1715078241
Hero Member
*
Offline Offline

Posts: 1715078241

View Profile Personal Message (Offline)

Ignore
1715078241
Reply with quote  #2

1715078241
Report to moderator
1715078241
Hero Member
*
Offline Offline

Posts: 1715078241

View Profile Personal Message (Offline)

Ignore
1715078241
Reply with quote  #2

1715078241
Report to moderator
"In a nutshell, the network works like a distributed timestamp server, stamping the first transaction to spend a coin. It takes advantage of the nature of information being easy to spread but hard to stifle." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
franky1
Legendary
*
Offline Offline

Activity: 4214
Merit: 4475



View Profile
December 12, 2013, 08:27:15 PM
 #2

this is why its best to not use a hosting providor that specialises in bitcoins. as they are more then likely to know how important the wallet.dat file is, and thus be tempted to access it.

it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.

I DO NOT TRADE OR ACT AS ESCROW ON THIS FORUM EVER.
Please do your own research & respect what is written here as both opinion & information gleaned from experience. many people replying with insults but no on-topic content substance, automatically are 'facepalmed' and yawned at
moriartybitcoin (OP)
Hero Member
*****
Offline Offline

Activity: 560
Merit: 500

★777Coin.com★ Fun BTC Casino!


View Profile
December 12, 2013, 08:40:22 PM
 #3

100% agreed. We switched to a non-bitcoin accepting hosting company.

Real shame, because it's so much easier to pay for hosting with btc ...

anyone know if superbithost.com is legit, or had any bad experiences with them?

oxxymoronn
Member
**
Offline Offline

Activity: 84
Merit: 10

.


View Profile
December 12, 2013, 09:43:41 PM
 #4

Thank god it was only chump change man, you learned a pretty good lesson for relatively cheap compared to what could of happened..

So many thieves in this industry... it's a little bit depressing.
Atruk
Hero Member
*****
Offline Offline

Activity: 700
Merit: 500



View Profile
December 13, 2013, 01:09:07 PM
 #5

this is why its best to not use a hosting providor that specialises in bitcoins. as they are more then likely to know how important the wallet.dat file is, and thus be tempted to access it.

it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.

Counterpoint: Linode. In spite of not accepting Bitcoin they have been attached in some way to many of Bitcoin's biggest hacks. If you want to run any hot wallet. Even one that keeps coins for a mere minute before shuttling them away to cold storage, you require control down to the iron.

dave111223
Legendary
*
Offline Offline

Activity: 1190
Merit: 1001


View Profile WWW
December 13, 2013, 02:12:26 PM
 #6

Better to host the hot wallet on your own machine at your physical location.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!