Bitcoin Forum
December 03, 2016, 10:10:07 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: « 1 ... 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 [132] 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 »
  Print  
Author Topic: Blockchain.info - Bitcoin Block explorer & Currency Statistics  (Read 414041 times)
piuk
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW
August 20, 2013, 11:15:42 AM
 #2621

My funds were stolen from online wallet. Only single address affected, so seems Blockchain.info wallet has vulnerability in RNG:
https://bitcointalk.org/index.php?topic=277595.0

Important!

I can confirm there is a problem with the RNG used by blockchain.info javascript clients being poorly seeded when initialised in a background webworker task. In some browsers this could lead to duplicate R values being used when signing transactions (Firefox is likely to be particularly vulnerable). This issue effects the transaction signing code only, not the generation of private keys.

Patches have now been deployed, Please ensure you upgrade to the latest version of your Blockchain.info client.

Chrome extension - v2.85
Fixefox extension - v1.97
Mac client - v0.11

Users of the web interface should clear their browsers cache before next login.

Only a handful of addresses are known to be affected thus far. Likely if you have been affected by this problem your coins will have been taken already. All affected users will be refunded in full, please PM me or email help@blockchain.info.

-----

Piuk, please, could your site implement importing password protected private keys according to BIP38? Many people use that for their offline savings and allowing to spend the key directly from blockchain.info would help a lot. Thanks!

BIP38 supported has been added.

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480803007
Hero Member
*
Offline Offline

Posts: 1480803007

View Profile Personal Message (Offline)

Ignore
1480803007
Reply with quote  #2

1480803007
Report to moderator
1480803007
Hero Member
*
Offline Offline

Posts: 1480803007

View Profile Personal Message (Offline)

Ignore
1480803007
Reply with quote  #2

1480803007
Report to moderator
1480803007
Hero Member
*
Offline Offline

Posts: 1480803007

View Profile Personal Message (Offline)

Ignore
1480803007
Reply with quote  #2

1480803007
Report to moderator
dc81
Member
**
Offline Offline

Activity: 84


View Profile WWW
August 20, 2013, 03:29:48 PM
 #2622

not sure if it's b/c of the update, but i haven't been getting boxcar notifications for the past day or so.

List of public bitcoin P2Pool nodes - http://p2pool-nodes.info || Amazon Price Tracker
Tips - 1dc81BVNy688RS2E9iqf8VtJVB4YbQpCs
tom1
Full Member
***
Offline Offline

Activity: 130



View Profile
August 20, 2013, 04:41:18 PM
 #2623

All affected users will be refunded in full, please PM me or email help@blockchain.info.
Great, I'm not affected by this bug but that's an honorable decision!
Just my 2 cents ...

giantdragon
Legendary
*
Offline Offline

Activity: 1414



View Profile
August 20, 2013, 04:57:13 PM
 #2624

Only a handful of addresses are known to be affected thus far. Likely if you have been affected by this problem your coins will have been taken already. All affected users will be refunded in full, please PM me or email help@blockchain.info.
Thank you very much for this decision! I have sent you PM.

truy
Member
**
Offline Offline

Activity: 81


View Profile
August 20, 2013, 08:07:45 PM
 #2625

[...]

Patches have now been deployed, Please ensure you upgrade to the latest version of your Blockchain.info client.

Chrome extension - v2.85
Fixefox extension - v1.97
Mac client - v0.11

[...]

The extension doesn't work for me on Firefox v23 (ubuntu, i686-pc-linux-gnu).
The cube icon is not visible although the addon installs without an error and is correctly listed in the addons dialog.

Customizing the toolbar does not help either.

It seems others have/had this problem too:
https://github.com/blockchain/My-Wallet-Firefox-Extension/issues/1
https://addons.mozilla.org/en-US/firefox/addon/my-wallet/reviews/482352/
http://www.reddit.com/r/Bitcoin/comments/17fs03/blockchaininfo_firefox_extension_now_available/c852tq1
VTC
Member
**
Offline Offline

Activity: 73



View Profile
August 21, 2013, 05:46:07 PM
 #2626

showing an error in my console for https://blockchain.info/wallet/
GET https://blockchain.info/Resources/wallet/jquery.min.map 404 (Not Found)
not sure if this file is important
daemondazz
Sr. Member
****
Offline Offline

Activity: 280



View Profile
August 26, 2013, 05:10:57 AM
 #2627

bitcoind seems to be stuck at block 254257 (latest as I write this is 254274 according to mine)

Computers, Amateur Radio, Electronics, Aviation - 1dazzrAbMqNu6cUwh2dtYckNygG7jKs8S
scribe
Sr. Member
****
Offline Offline

Activity: 295



View Profile WWW
August 26, 2013, 06:52:38 AM
 #2628

Annoying niggle in the Android app - clicking the transaction has in the transaction popup sends you to an address with https:/ instead of https:// - which for me defaults to a Google search instead.

Also can't see an obvious way to see which address a transaction went to, but might just need coffee.

Lastly, I used to be able to add a label to an address by choosing the transaction - is this still possible? I get the impression the "add note" button adds a public note instead?


blocknois.es Bitcoin music label. ~ New release: This Is Art

Read: Bitcoin Life | Wear: FUTUREECONOMY
minimalB
Donator
Hero Member
*
Offline Offline

Activity: 627


View Profile
August 27, 2013, 08:20:24 AM
 #2629

Hi,

I can't login to blockchain.info/wallet using 2FA (google authenticator)

I've checked http://blockchain.info/time for server time and it looks like it is about 35sec ahead.

My time is synced with European time server and appears to be correct - I've checked several devices and all display the same timing.

Does anyone else have this problem?
b!z
Legendary
*
Offline Offline

Activity: 1330



View Profile
August 27, 2013, 10:32:37 AM
 #2630

Hi,

I can't login to blockchain.info/wallet using 2FA (google authenticator)

I've checked http://blockchain.info/time for server time and it looks like it is about 35sec ahead.

My time is synced with European time server and appears to be correct - I've checked several devices and all display the same timing.

Does anyone else have this problem?


Same problem here. I am not receiving any emails from blockchain.info and I am unable to access my account since I cannot complete the 2FA challenge.

I hope piuk fixes this soon.
willphase
Hero Member
*****
Offline Offline

Activity: 770


View Profile
August 27, 2013, 10:41:08 AM
 #2631

Hi,

I can't login to blockchain.info/wallet using 2FA (google authenticator)

I've checked http://blockchain.info/time for server time and it looks like it is about 35sec ahead.

My time is synced with European time server and appears to be correct - I've checked several devices and all display the same timing.

Does anyone else have this problem?


I've noticed this too - the secret is to type the code in as fast as you can after it appears on your GA... it's not ideal but it works

Will

2weiX
Legendary
*
Offline Offline

Activity: 1638


View Profile
August 27, 2013, 10:42:04 AM
 #2632

I don't get the emails to authorize my login location.
help?
willphase
Hero Member
*****
Offline Offline

Activity: 770


View Profile
August 27, 2013, 10:47:31 AM
 #2633

I don't get the emails to authorize my login location.
help?

You only get the emails if you use your wallet nickname - if you enter your wallet id then it should just work, unless you have specifically enabled IP lock in which case you need to login from that IP.

You can look up your wallet id by looking back in any of your emails - it's a long letter/number combination with dashes a bit like this:

a1a42652-0de0-4a14-9d1c-7ed30ecea224

Will

b!z
Legendary
*
Offline Offline

Activity: 1330



View Profile
August 27, 2013, 11:01:06 AM
 #2634

I don't get the emails to authorize my login location.
help?

You only get the emails if you use your wallet nickname - if you enter your wallet id then it should just work, unless you have specifically enabled IP lock in which case you need to login from that IP.

You can look up your wallet id by looking back in any of your emails - it's a long letter/number combination with dashes a bit like this:

a1a42652-0de0-4a14-9d1c-7ed30ecea224

Will

I'm not getting 2FA emails, so this isn't helpful. Is there not a way for me to download the wallet.aes.json without 2FA?
b!z
Legendary
*
Offline Offline

Activity: 1330



View Profile
August 27, 2013, 02:38:26 PM
 #2635

I'm receiving emails from the support system, and a notice that my account has been locked after my 5 failed login attempts: but still not 2FA emails.
shawshankinmate37927
Hero Member
*****
Offline Offline

Activity: 854


Bitcoin: The People's Bailout


View Profile
August 28, 2013, 02:10:12 AM
 #2636

I'm receiving emails from the support system, and a notice that my account has been locked after my 5 failed login attempts: but still not 2FA emails.

I'm not receiving 2FA e-mails either.

"It is well enough that people of the nation do not understand our banking and monetary system, for if they did, I believe there would be a revolution before tomorrow morning."   - Henry Ford
b!z
Legendary
*
Offline Offline

Activity: 1330



View Profile
August 28, 2013, 09:49:18 AM
 #2637

I'm receiving emails from the support system, and a notice that my account has been locked after my 5 failed login attempts: but still not 2FA emails.

I'm not receiving 2FA e-mails either.

It's working now for me. I've learned that it's very important to make frequent backups Smiley
shawshankinmate37927
Hero Member
*****
Offline Offline

Activity: 854


Bitcoin: The People's Bailout


View Profile
August 28, 2013, 02:03:22 PM
 #2638

I'm receiving emails from the support system, and a notice that my account has been locked after my 5 failed login attempts: but still not 2FA emails.

I'm not receiving 2FA e-mails either.

Almost 12 hours later and I'm still unable to log in to my 2FA protected wallet because I'm not getting the 2FA e-mails.  Also, no response to the PM I sent piuk about 12 hours ago....

"It is well enough that people of the nation do not understand our banking and monetary system, for if they did, I believe there would be a revolution before tomorrow morning."   - Henry Ford
Lohoris
Hero Member
*****
Offline Offline

Activity: 616


Bitgoblin


View Profile
August 28, 2013, 08:34:53 PM
 #2639

And would this explain why I recieved an SMS text from Blockchain 3 minutes before the theft?
For this situation, it would be super-useful to have a "panic-lock" feature, that allowed you to "one click – no questions asked" to lock your account for a set period of time (say, 12h).

Sure, you would kind of risk denial of service, but if your wallet id is already compromised, you're going to lose your wallet anyway sooner or later.

This is quite silly, someone will make a script and perma lock people out of their wallets. A better solution would be that if you have a static IP, or can access it through a static IP (your own VPN for example) to just IP lock your wallet.
As I said, you would be able to lock the account if you had the account id.
If you have the account id you already have access to the encrypted wallet, so someone locking your account is the least of your problems.


1LohorisJie8bGGG7X4dCS9MAVsTEbzrhu
DefaultTrust is very BAD.
Otoh
Donator
Legendary
*
Offline Offline

Activity: 1918



View Profile
August 29, 2013, 09:16:12 AM
 #2640

I'm unable to 'import directly' private keys to my wallet atm, I've tried with desktop Firefox & on Chrome, this used to work fine but now pressing the Import Directly button doesn't work at all, I haven't tried the sweep option as it's not what I need so don't know if that is broken also or not, any help appreciated.

The correct address shows up & it's balance in the warning window but clicking Import Directly does nothing, the address isn't already in my wallet btw, it's a newly generated vanity one.

Tried on a different computer & still not working, I hope this feature hasn't been disabled just because some ppl don't follow the warning & import insecure shared private keys - if so pse make the warning stronger & re-enable it as it is an extremely useful & necessary feature of the wallets, many thanks.

Node40.com is a leader in DASH hosting, dedicated exclusively to fully managed masternode hosting. Professional, organized, and responsive. I have many dozens of nodes with them.    
BTC = $c²     BTC = 1otohotohMoQoxHuxLBveQiZcV3Pji3Tc      DASH, Digital Cash = www.dash.org   
   CHARITY | MY REP | DICE
Pages: « 1 ... 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 [132] 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!