Bitcoin Forum
May 04, 2024, 08:13:02 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: 1 2 3 [All]
  Print  
Author Topic: This is why you still shouldn't trust any 3rd party wallets. (Mt. Gox)  (Read 5614 times)
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 12:06:35 PM
Last edit: September 08, 2011, 04:39:36 PM by oOoOo
 #1

EDIT: THIS IS A FISHING ATTEMPT DO NOT FALL FOR IT (like I did Sad )

So, after not logging in on Mt Gox for a couple of weeks, suddenly, out of nowhere, I receive the following email:
Quote
Dear Mt.Gox user,

Your account will be blocked for violating the rules of exchange.
Details:https://www.mgtox.com/users/blocked

Thanks,
The Mt.Gox team

Needless to say, I need to log in in order to access the above link, which I cannot do now.
Fortunately for me, I had the foresight to not store any money on my account (less then 2 USD as far as I remember).
I think this is a good example of why you shouldn't keep your money or BTC on any 3rd party sites, big or small, but rather always keep your coins on a secure device in your possession.

Have a Good Day,
oOo
No Gods or Kings. Only Bitcoin
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714853582
Hero Member
*
Offline Offline

Posts: 1714853582

View Profile Personal Message (Offline)

Ignore
1714853582
Reply with quote  #2

1714853582
Report to moderator
1714853582
Hero Member
*
Offline Offline

Posts: 1714853582

View Profile Personal Message (Offline)

Ignore
1714853582
Reply with quote  #2

1714853582
Report to moderator
MiningBuddy
Hero Member
*****
Offline Offline

Activity: 927
Merit: 1000


฿itcoin ฿itcoin ฿itcoin


View Profile
September 07, 2011, 12:13:46 PM
 #2

That email you received was a phishing attempt to steal your mtgox user details.

Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
September 07, 2011, 12:20:25 PM
 #3

mgtox. Cute.

This is why you should never access critical sites through a link in the mail, and why you should check the URL of critical sites. (Though they probably got your email from the DB leak which was mtgox's fault, so...)

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 12:23:15 PM
 #4

That email you received was a phishing attempt to steal your mtgox user details.


Quote
Wed 07 Sep 2011 06:23:23 AM GMT   Spent   BTC bought: [tid:1315376603939518] 0.28800000 BTC at $7.39902   $2.13092   $0.00208

Yeah... luckily I never reuse passwords...
Vod
Legendary
*
Offline Offline

Activity: 3696
Merit: 3070


Licking my boob since 1970


View Profile WWW
September 07, 2011, 12:38:48 PM
 #5

I think this is a good example of why you shouldn't keep your money or BTC on any 3rd party sites, big or small, but rather always keep your coins on a secure device in your possession.

Many users don't have the technical skills or desire to maintain and secure their own wallet.  Online services like this will always be necessary.

https://nastyscam.com - landing page up     https://vod.fan - advanced image hosting - coming soon!
OGNasty has early onset dementia; keep this in mind when discussing his past actions.
Furyan
Full Member
***
Offline Offline

Activity: 175
Merit: 100



View Profile
September 07, 2011, 12:45:07 PM
 #6



I would like to do an unofficial poll: How many users here also frequent 4chan? Cheesy

(To any who don't get the reference - the above image is a very popular meme on the boards at 4chan.org).

(/thread hijack)
MagicalTux
VIP
Hero Member
*
Offline Offline

Activity: 608
Merit: 501


-


View Profile
September 07, 2011, 12:49:13 PM
 #7

We try to push yubikey usage a lot, to avoid this. That's why we offered more than 1000 free yubikeys so far, and hope people understand that security is not that simple.
BitcoinPorn
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500


Posts: 69


View Profile WWW
September 07, 2011, 12:54:16 PM
 #8

but rather always keep your coins on a secure device in your possession.

Wow, out of all people, if you fall for simple phishing emails, I believe that you need to reevaluate your stance on third parties taking care of your currencies specifically.  You should not be trusted with funds of any kind using a digital medium.

oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 12:58:54 PM
 #9

We try to push yubikey usage a lot, to avoid this. That's why we offered more than 1000 free yubikeys so far, and hope people understand that security is not that simple.
Yes, I realize this is not your fault. And usually I never click links in emails. However, I got this yesterday evening, I was tired and this caught me by surprise and did not look close enough.

Fortunately I am somewhat experienced in security and could prevent my e-mail and other accounts from being compromised. But just to be completely sure, I am now going to change all my passwords on all bitcoin related sites. (to a 20+ digit one!)

While I have none other to blame but me, this should still be a warning to everyone out there!
.
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 01:08:40 PM
 #10

but rather always keep your coins on a secure device in your possession.

Wow, out of all people, if you fall for simple phishing emails, I believe that you need to reevaluate your stance on third parties taking care of your currencies specifically.  You should not be trusted with funds of any kind using a digital medium.
It's always easy to point fingers and troll like that. But mistakes happen and I fully admit my error. You should not feel so secure, you think you are an "expert" and something like this will NEVER happen to you, prepare for a rude awakening one day.

I'd also like to point out that I did in fact prevent any significant damage by using an intelligent password scheme!

But I guess you are just trolling...
aq
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 01:11:12 PM
 #11

We try to push yubikey usage a lot, to avoid this. That's why we offered more than 1000 free yubikeys so far, and hope people understand that security is not that simple.
How does the yubikey help in this case? I mean once the phishing site has the username, password and one yubikey code they can still login to the real mtgox.
MiningBuddy
Hero Member
*****
Offline Offline

Activity: 927
Merit: 1000


฿itcoin ฿itcoin ฿itcoin


View Profile
September 07, 2011, 01:13:41 PM
 #12

How does the yubikey help in this case? I mean once the phishing site has the username, password and one yubikey code they can still login to the real mtgox.
That is simply not true.

BitcoinPorn
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500


Posts: 69


View Profile WWW
September 07, 2011, 01:21:24 PM
 #13

But I guess you are just trolling...
You guessed wrong.  I do not claim to be an expert, I am giving you specifically pretty sound advice here.  Don't trust yourself when it comes to these emails claiming to be from Mt. Gox at all, if you know the situations surrounding Gox and still chose to check into that email, well 'they got ya!'

Be harder on yourself, change passwords often, use different passwords, don't click on links directly from emails, easy enough basic rules that if you aren't following, just bow yourself out at this point, because if the focus on security is coming down to you keeping an eye on your own wallet, well, see this thread for how that turns out when you can't follow basic rules.

See this thread to get a clearer definition of the most misused word on these forums since "scammer"

Quote
"I think this is a good example of why you shouldn't keep your money or BTC on any 3rd party sites, big or small, but rather always keep your coins on a secure device in your possession."

Please, quit trying to troll Mt. Gox and those who enjoy third party wallet services here when clearly this is user error.

sadpandatech
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500



View Profile
September 07, 2011, 01:35:57 PM
 #14

EDIT: THIS IS A FISHING ATTEMPT DO NOT FALL FOR IT (like I did Sad )

So, after not logging in on Mt Gox for a couple of weeks, suddenly, out of nowhere, I receive the following email:
Quote
Dear Mt.Gox user,

Your account will be blocked for violating the rules of exchange.
Details:https://www.mgtox.com/users/blocked

Thanks,
The Mt.Gox team

Needless to say, I need to log in in order to access the above link, which I cannot do now.
Fortunately for me, I had the foresight to not store any money on my account (less then 2 USD as far as I remember).
I think this is a good example of why you shouldn't keep your money or BTC on any 3rd party sites, big or small, but rather always keep your coins on a secure device in your possession.

Have a Good Day,
oOo


Heya m8, in order to keep from quoting little tidbits from each poster I will just reply to you here.

There is one glaring problem everyone has missed so far. Details:https://www.mgtox.com/users/blocked

  That is why we don't use links in emails. If you clicked there and put in your login details then the phisher's have it now.
EVERYONE that was on the orig leaked list should have chnaged their email they were using as well. And all others should take a little bit of time to learn about phishing in general and that it is most certainly not limited to Gox users being targets. Every bank, online financial site, stock site, etc etc has phising emails sent out to look like them in the hopes of someone not knowing to never clicky clicky in them. Check the header, check the links.(mouse over will show its usually differnt than what is displayed)

On a side note, it gives us another dirty Phishers DB to fill up with bogus info. ;p *whips out the 45GB user/pass dict and gets to work



Edit;  Just saw your edit. :/  Not your fault just gotta be more careful. Could we please change the title to reflect that this is 'New Phish email faking Mtgox Blocked User Alert'

If you're not excited by the idea of being an early adopter 'now', then you should come back in three or four years and either tell us "Told you it'd never work!" or join what should, by then, be a much more stable and easier-to-use system.
- GA

It is being worked on by smart people.  -DamienBlack
The_Duke
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


Lead Core BitKitty Developer


View Profile
September 07, 2011, 01:42:45 PM
 #15



I would like to do an unofficial poll: How many users here also frequent 4chanthe internet? Cheesy

(To any who don't get the reference - the above image is a very popular meme on the boards at 4chan.org the internet).

(/thread hijack)

/fixed.

The *real* reason why you shouldn't trust 3rd party wallets, including MtGox, is of course that at any moment in time, the host can decide to take off with your money and there's nothing you, or anyone else, can do against it.

NOT a member of the so called ''Bitcoin Foundation''. Choose Independence!

Donate to the BitKitty Foundation instead! -> 1Fd4yLneGmxRHnPi6WCMC2hAMzaWvDePF9 <-
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 01:55:09 PM
 #16


A 20+ digit password would provide no better protection.  Nobody cracked your password.  You gave it to the thief.  Not trying to slam you just hopefully illustrating that password length of complexity wouldn't have changed this situation.  If anything overly long and complex passwords mean you are more likely to share passwords and thus compromise multiple accounts.


I, of course, realize this. This incident was not a failure of awareness, it was a failure of attention!

(...) clearly this is user error.

I never claimed anything but.
Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
September 07, 2011, 01:56:51 PM
 #17

There is one glaring problem everyone has missed so far. Details:https://www.mgtox.com/users/blocked
Everyone noticed it, and I mentioned it explicitly.

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
sadpandatech
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500



View Profile
September 07, 2011, 02:03:40 PM
Last edit: September 07, 2011, 11:39:07 PM by sadpandatech
 #18

There is one glaring problem everyone has missed so far. Details:https://www.mgtox.com/users/blocked
Everyone noticed it, and I mentioned it explicitly.


So you did, *sips some more coffee*. If that had been a link I woulda clicked on it as I had not noticed you used the mgtox. *is ashamed at his poor observational skills*












If you're not excited by the idea of being an early adopter 'now', then you should come back in three or four years and either tell us "Told you it'd never work!" or join what should, by then, be a much more stable and easier-to-use system.
- GA

It is being worked on by smart people.  -DamienBlack
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 02:07:35 PM
 #19

There is one glaring problem everyone has missed so far. Details:https://www.mgtox.com/users/blocked
Everyone noticed it, and I mentioned it explicitly.


So you did, *sips some more coffee*. If that had been a link I woulda clicked on it has I had not noticed you used the mgtox. *is ashamed at his poor observational skills*

It was a link. I did click.
Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:13:53 PM
 #20

Dame another hack of Mt. Gox
Message on my mail with account blocked at 3:15 Pm

My bitcoins seem to be stolen!
Please take imidiate action

Dear Febuz,

There has been a withdraw from your Mt.Gox account:

Transaction reference: 1e68bbc8-2a64-42ee-b11c-
ea4c62557a63
Date: 2011-09-07 14:06:28 GMT


Kind regards,
Edwin
sadpandatech
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500



View Profile
September 07, 2011, 02:14:24 PM
 #21

There is one glaring problem everyone has missed so far. Details:https://www.mgtox.com/users/blocked
Everyone noticed it, and I mentioned it explicitly.


So you did, *sips some more coffee*. If that had been a link I woulda clicked on it has I had not noticed you used the mgtox. *is ashamed at his poor observational skills*

It was a link. I did click.


Ayee :/  It happens. Were you able to log into the real MtGox site and change your password? If not contact Tux and ask him if he can lock the acct or help you recover it.

If you're not excited by the idea of being an early adopter 'now', then you should come back in three or four years and either tell us "Told you it'd never work!" or join what should, by then, be a much more stable and easier-to-use system.
- GA

It is being worked on by smart people.  -DamienBlack
Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:16:36 PM
 #22

Get this thief! Mt. Gox you owe me these BTC... beware of lawsuits, security hacked again

Wed 07 Sep 2011 02:06:28 PM GMT    Withdraw    Bitcoin withdraw to 1B5enUXe6WAMKSXPRFZRbVLqbyM4eFY8So    0.08946000 BTC    0.00000000 BTC
Wed 07 Sep 2011 02:06:14 PM GMT    Fee    BTC bought: [tid:1315404374902777] 0.09000000 BTC at $6.91999 (0.6% fee)    0.00054000 BTC    0.08946000 BTC
Wed 07 Sep 2011 02:06:14 PM GMT    In    BTC bought: [tid:1315404374902777] 0.09000000 BTC at $6.91999    0.09000000 BTC    0.09000000 BTC
Wed 07 Sep 2011 02:05:40 PM GMT    Withdraw    Bitcoin withdraw to 15VQSCzhhfdgdDPsNt7y6aQCRA21LaZ8Kh    9.27910000 BTC    0.0000
MiningBuddy
Hero Member
*****
Offline Offline

Activity: 927
Merit: 1000


฿itcoin ฿itcoin ฿itcoin


View Profile
September 07, 2011, 02:20:20 PM
 #23

Get this thief! Mt. Gox you owe me these BTC... beware of lawsuits, security hacked again

Wed 07 Sep 2011 02:06:28 PM GMT    Withdraw    Bitcoin withdraw to 1B5enUXe6WAMKSXPRFZRbVLqbyM4eFY8So    0.08946000 BTC    0.00000000 BTC
Wed 07 Sep 2011 02:06:14 PM GMT    Fee    BTC bought: [tid:1315404374902777] 0.09000000 BTC at $6.91999 (0.6% fee)    0.00054000 BTC    0.08946000 BTC
Wed 07 Sep 2011 02:06:14 PM GMT    In    BTC bought: [tid:1315404374902777] 0.09000000 BTC at $6.91999    0.09000000 BTC    0.09000000 BTC
Wed 07 Sep 2011 02:05:40 PM GMT    Withdraw    Bitcoin withdraw to 15VQSCzhhfdgdDPsNt7y6aQCRA21LaZ8Kh    9.27910000 BTC    0.0000
If you fall for a phishing email and loose your funds how is that in any way shape or form mtgox's fault and why should they rectify your wrong doing?

Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:21:27 PM
 #24


Mail forwards to...
http://www.mtgax.tk/users/blocked

But bitcoins were stolen before I saw they phise for the password over there
Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:26:25 PM
 #25

MiningBuddy, I did not fall for phising.
My account was comprised without my intervention I was inactive with my account and on the market, thank you for your immidiate reaction. This seems to me as a serious hack my password was like hH49afr&*** complex but maybe not complex enough

[Querying whois.dot.tk]
[whois.dot.tk]
   
   Rights restricted by copyright. See
   http://www.dot.tk/en/pageF00.html

   Domain name:
      MTGAX.TK

   Organisation:
      BV Dot TK
      Dot TK administrator
      P.O. Box 11774
      1001 GT  Amsterdam
      Netherlands
      Phone: +31 20 5315725
      Fax: +31 20 5315721
      E-mail: abuse: abuse@dot.tk, copyright infringement: copyright@dot.tk

   Domain Nameservers:
      NS01.DOT.TK
      NS02.DOT.TK
      NS03.DOT.TK
      NS04.DOT.TK
Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:28:33 PM
 #26

Just send this message to take out this mtgax.tk account
--------------
Dear dot.tk administrator,

The account http://www.mtgax.tk/users/blocked
is currenlty used for Phising.
And is involved in theft of my money a few minutes ago.

Kind Regards,

hmongotaku
Full Member
***
Offline Offline

Activity: 168
Merit: 100


View Profile WWW
September 07, 2011, 02:31:50 PM
 #27

they been fishing/scamming 2 weeks prior to this with www.mtgox.tk, you gotta watch your links better bro, or read the forums.

Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 02:36:24 PM
 #28

Oke, thank you, that explains could explain why, but.... Thanks brother. Though this pisses me off. And Mt.gox enabled this to happen, I have time enough to work this out and will find a legion to fight Mt.Gox opens space for better exchanges.

www.mtgox.com must have been comprised earlier otherwise they would not be able to phise for my password.
If this is true, mtgox is responsible
mtgox should have warned me about this incidence.
I never type something else as this site to log into my account.
I did not receive phishing mail.

so hmongotaku please take back your insinuation.

https://support.mtgox.com/forums/20232703-phishing-forum

Kind regards,
Gabi
Legendary
*
Offline Offline

Activity: 1148
Merit: 1008


If you want to walk on water, get out of the boat


View Profile
September 07, 2011, 02:52:08 PM
 #29

Only an idiot would fall in that scam

mgtox? rotfl

wake up people, if you are too idiot to use a computer, please stop using it.

Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 03:21:39 PM
Last edit: September 07, 2011, 03:34:18 PM by Febuz
 #30

True Gabi, fact stays that my BTC were robbed before i had taken any action.
I'm experienced with computers, Thank you.
Join me if you experienced a similar kind of theft, fuck the pishing scam.
 
Febuz
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 07, 2011, 04:13:13 PM
 #31

Email from
info@mtgox.com via spb.docker.ru to me   
3:15 PM (2 hours ago)


   
bosschair
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
September 07, 2011, 04:22:29 PM
 #32

(...) clearly this is user error.

I never claimed anything but.

Uh, actually, you claimed that this is a reason not to trust mtgox, so I call bullshit.
the founder
Sr. Member
****
Offline Offline

Activity: 448
Merit: 251


Bitcoin


View Profile WWW
September 07, 2011, 05:06:31 PM
 #33

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.





Bitcoin RSS App / Bitcoin Android App / Bitcoin Webapp http://www.ounce.me  Say thank you here:  1HByHZQ44LUCxxpnqtXDuJVmrSdrGK6Q2f
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 07, 2011, 08:39:43 PM
 #34

(...) clearly this is user error.

I never claimed anything but.

Uh, actually, you claimed that this is a reason not to trust mtgox, so I call bullshit.


Please read my posts before engaging in wild accusations.
.
bosschair
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
September 07, 2011, 10:25:10 PM
 #35

(...) clearly this is user error.

I never claimed anything but.

Uh, actually, you claimed that this is a reason not to trust mtgox, so I call bullshit.


Please read my posts before engaging in wild accusations.
.

Please read the titles of your posts before you post them:  "This is why you still shouldn't trust any 3rd party wallets. (Mt. Gox)"
kgo
Hero Member
*****
Offline Offline

Activity: 548
Merit: 500


View Profile
September 07, 2011, 10:45:30 PM
 #36

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.






I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.
MagicalTux
VIP
Hero Member
*
Offline Offline

Activity: 608
Merit: 501


-


View Profile
September 07, 2011, 10:47:46 PM
 #37

I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

You think people who fall for mtgax.tk would verify open PGP signatures?
legolouman
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500


Decent Programmer to boot!


View Profile
September 07, 2011, 10:49:24 PM
Last edit: September 07, 2011, 11:03:10 PM by legolouman
 #38

I don't know how to respond to this. You blame Gox for following a link to mgtox?

If you love me, you'd give me a Satoshi!
BTC - 1MSzGKh5znbrcEF2qTrtrWBm4ydH5eT49f
LTC - LYeJrmYQQvt6gRQxrDz66XTwtkdodx9udz
kgo
Hero Member
*****
Offline Offline

Activity: 548
Merit: 500


View Profile
September 07, 2011, 10:58:02 PM
 #39

I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

You think people who fall for mtgax.tk would verify open PGP signatures?

That's a valid point...
BitcoinPorn
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500


Posts: 69


View Profile WWW
September 07, 2011, 11:00:46 PM
 #40

Please read my posts before engaging in wild accusations.

Or just read the title of the thread.

Trolling Gox still going on.  I didn't report your post, you can still be a better person and edit it yourself, otherwise your hating on Gox at this time, especially with personal commentary from Tux himself, super obvious at this point.  How long can this charade go on really.

the founder
Sr. Member
****
Offline Offline

Activity: 448
Merit: 251


Bitcoin


View Profile WWW
September 08, 2011, 12:28:56 AM
 #41

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.



I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

That's too complicated for Grandma to use.  I am not sure about the Exchange's mission... but flexcoin's goal is to have widespread adoption of bitcoin's .. that means making it simple to use.   I doubt Grandma is going to be using OpenPGP ..


Bitcoin RSS App / Bitcoin Android App / Bitcoin Webapp http://www.ounce.me  Say thank you here:  1HByHZQ44LUCxxpnqtXDuJVmrSdrGK6Q2f
legolouman
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500


Decent Programmer to boot!


View Profile
September 08, 2011, 12:41:37 AM
 #42

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.



I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

That's too complicated for Grandma to use.  I am not sure about the Exchange's mission... but flexcoin's goal is to have widespread adoption of bitcoin's .. that means making it simple to use.   I doubt Grandma is going to be using OpenPGP ..



I also doubt Grandma will be using BTC. 99% of us are either geeks, or have everything managed by geeks. OpenPGP is a great way of authenticating, but so is the "no emails" policy. One obvious thing is there is only mtgox.com or etc. Just read the actual URL you are on, straight forward.

If you love me, you'd give me a Satoshi!
BTC - 1MSzGKh5znbrcEF2qTrtrWBm4ydH5eT49f
LTC - LYeJrmYQQvt6gRQxrDz66XTwtkdodx9udz
kgo
Hero Member
*****
Offline Offline

Activity: 548
Merit: 500


View Profile
September 08, 2011, 12:43:53 AM
 #43

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.



I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

That's too complicated for Grandma to use.  I am not sure about the Exchange's mission... but flexcoin's goal is to have widespread adoption of bitcoin's .. that means making it simple to use.   I doubt Grandma is going to be using OpenPGP ..



Well yes, Grandma isn't going to use OpenPGP, but she'll just ignore the sig.  Just like my mom, a grandma, does when I send her emails since I sign everything.  MagicalTux had a good point that someone who uses OpenPGP regularly probably wouldn't fall for a blatant phishing attempt.  But still, whenever I get an email about a security risk from an exchange, I currently need to double-check headers to verify it's validity.  It would be nice if I could let Enigmail do the work for me.
kokojie
Legendary
*
Offline Offline

Activity: 1806
Merit: 1003



View Profile
September 08, 2011, 02:21:32 AM
 #44

What The Fuck? I thought bitcoin users are pretty advanced users of technology, yet here we have multiple people fell for a simple phishing email. (btw I received the same phishing email today, laughed at it for a second, then threw it in the trash folder).

btc: 15sFnThw58hiGHYXyUAasgfauifTEB1ZF6
Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
September 08, 2011, 06:25:32 AM
 #45

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.



I'd be even better if all you guys started OpenPGP-signing communications.  That makes it easy for people who care to verify the origin.

That's too complicated for Grandma to use.  I am not sure about the Exchange's mission... but flexcoin's goal is to have widespread adoption of bitcoin's .. that means making it simple to use.   I doubt Grandma is going to be using OpenPGP ..



Well yes, Grandma isn't going to use OpenPGP, but she'll just ignore the sig.  Just like my mom, a grandma, does when I send her emails since I sign everything.  MagicalTux had a good point that someone who uses OpenPGP regularly probably wouldn't fall for a blatant phishing attempt.  But still, whenever I get an email about a security risk from an exchange, I currently need to double-check headers to verify it's validity.  It would be nice if I could let Enigmail do the work for me.
Grandma doesn't need to know she is using OpenPGP, anymore than she needs to know PayPal is using a Verisign extended validation SSL certificate. All she needs is the mail client to tell her "this message is legitimate" and the browser to tell her "this website is legitimate".

What The Fuck? I thought bitcoin users are pretty advanced users of technology, yet here we have multiple people fell for a simple phishing email. (btw I received the same phishing email today, laughed at it for a second, then threw it in the trash folder).
There's no Certified Advanced User of Technology (CAUT) training. People can be "advanced" and yet have gaps in knowledge in some areas, such as security. Also, even CAUTs with the necessary knowledge make mistakes.

Also, if people who are not advanced users of technology are using Bitcoin, that's a good thing.

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
Oldminer
Legendary
*
Offline Offline

Activity: 1022
Merit: 1001



View Profile
September 08, 2011, 07:12:28 AM
 #46

lol great thread

~hover~

If you like my post please feel free to give me some positive rep https://bitcointalk.org/index.php?action=trust;u=18639
Tip me BTC: 1FBmoYijXVizfYk25CpiN8Eds9J6YiRDaX
nmat
Hero Member
*****
Offline Offline

Activity: 602
Merit: 501


View Profile
September 08, 2011, 07:26:51 AM
 #47

Bitmarket.eu requires email confirmation to change the BTC withdrawal address. I like this feature. Does anyone know why none of the other exchanges have it?
The_Duke
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


Lead Core BitKitty Developer


View Profile
September 08, 2011, 08:02:54 AM
 #48

This is exactly why Flexcoin has a STRICT no links in e-mail policy.

If you get a link in an e-mail claiming to be from Flexcoin,  it's not legit.   We do not send out links in any e-mails.  Period.

Why Mt.Gox, Tradehilll and others didn't follow our lead is mind boggling.   Every bitcoin site should follow this policy as it completely removes the threat of phishing attacks as it's well known that our policy is no links, or images in e-mails.


You are the most convincing troll ever. You almost had me believing that you were a pompous, arrogant, self absorbed ('The founder'? really?) twit suffering from delusions of grandeur, but this time you broke routine by trying to claim that you-- not eBay, Paypal, Bank of America, or any other business predating Bitcoin-- were the one who came up with this idea. Oh wait, you really ARE that way in real life. Holy fuck.

Do you want to know why no one will follow your lead-- ever? Because you're desperate, untalented and delusional. FlexCoin could have been a real service with real customers under the following conditions:

1) MyBitcoin.com didn't explode a mountain of diarrhea on the entire community;

2) Your "bank" that is supposed to "lead" Mt. Gox and Tradehill wasn't just a Wordpress template ('Lexington Theme').

3) You weren't you.


Seriously, accept what I've already accepted-- that I have no chance of creating anything intelligent and successful ever so long as I represent my projects. Step down as owner of FlexCoin and work on damage control.

Jesus christ, someone had to say it.

TRO...no wait... he's right.

NOT a member of the so called ''Bitcoin Foundation''. Choose Independence!

Donate to the BitKitty Foundation instead! -> 1Fd4yLneGmxRHnPi6WCMC2hAMzaWvDePF9 <-
nmat
Hero Member
*****
Offline Offline

Activity: 602
Merit: 501


View Profile
September 08, 2011, 08:44:45 AM
 #49

Did I miss something? Wasn't this thread about MtGox phishing emails and countermeasures?  Roll Eyes

Matthew N. Wright, you should open a new thread to trash people individually. It's common practice here at the forums.
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 08, 2011, 10:32:30 AM
 #50

What The Fuck? I thought bitcoin users are pretty advanced users of technology, yet here we have multiple people fell for a simple phishing email. (btw I received the same phishing email today, laughed at it for a second, then threw it in the trash folder).

Yes, you say this right now, while you are fully aware. I've gotten 100s of similar spam e-mails over the years (fake ebay, fake paypal etc.) and always laughed them off.

The problem is I got this mtgox fake mail at a time I just got home from a long day at work (I work in manual labor!) and I wasn't at it 100%.

See, at any other point in time this wouldn't have happened. This just got me at the wrong time. Stupid, I know, but what can you do?
.
Vladimir
Hero Member
*****
Offline Offline

Activity: 812
Merit: 1001


-


View Profile
September 08, 2011, 10:38:45 AM
Last edit: September 11, 2011, 06:06:21 AM by Vladimir
 #51

Due to breach of trust and gross negligence by Sirius and Theymos who recklessly transferred my private and personal data on this forum to a Japaneze company without my permission I am leaving this forum and deleting all my posts. Goodbye.

-
BitcoinPorn
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500


Posts: 69


View Profile WWW
September 08, 2011, 12:59:12 PM
 #52

lol, oh my.  I always find the Flexcoin happening to find a way to promote in the worst situations for others sad, this is all new levels of Flexcoin sadness I never even checked into.


See, at any other point in time this wouldn't have happened. This just got me at the wrong time. Stupid, I know, but what can you do?.

Quit being an ass and change the title of the thread to reflect the reality instead of singling out "Mt Gox" giving an impression that they did something here.  Quit trolling.   Forums have the ability to edit posts just for this reason and you seem to be straight up refusing to at this time.  Not sure why you called me a troll because all it did was make me notice how bad you are trolling and still are.  Every post you make and leave this initial one unchanged is nearly an attack, as at this point you have even acknowledged fault.

The_Duke
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


Lead Core BitKitty Developer


View Profile
September 08, 2011, 01:28:17 PM
 #53


Note how all this was obvious long before "mybitcoin" incident.




Can you point us to one of your posts where you warned people about this "obvious" risk in storing your bitcoins at mybitcoin (or MtGox, or TH for that matter)? If you can't than this was just another captain-hindsight post.

NOT a member of the so called ''Bitcoin Foundation''. Choose Independence!

Donate to the BitKitty Foundation instead! -> 1Fd4yLneGmxRHnPi6WCMC2hAMzaWvDePF9 <-
Vladimir
Hero Member
*****
Offline Offline

Activity: 812
Merit: 1001


-


View Profile
September 08, 2011, 01:44:01 PM
Last edit: September 11, 2011, 06:03:07 AM by Vladimir
 #54

Due to breach of trust and gross negligence by Sirius and Theymos who recklessly transferred my private and personal data on this forum to a Japaneze company without my permission I am leaving this forum and deleting all my posts. Goodbye.

-
The_Duke
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


Lead Core BitKitty Developer


View Profile
September 08, 2011, 01:48:40 PM
 #55


Note how all this was obvious long before "mybitcoin" incident.


Can you point us to one of your posts where you warned people about this "obvious" risk in storing your bitcoins at mybitcoin (or MtGox, or TH for that matter)? If you can't than this was just another captain-hindsight post.

Here you go my friend. https://bitcointalk.org/index.php?topic=20427.msg255690#msg255690 It is directed to another person, but in a scenario of some early idea of anonymous person handling someone else's bitcoins.


That is also in hindsight of someone getting his mybitcoin account compromised. Where have you been actively telling people NOT to use 3rd party wallets? Going "I told you so" only works if you actually told people so.

NOT a member of the so called ''Bitcoin Foundation''. Choose Independence!

Donate to the BitKitty Foundation instead! -> 1Fd4yLneGmxRHnPi6WCMC2hAMzaWvDePF9 <-
the founder
Sr. Member
****
Offline Offline

Activity: 448
Merit: 251


Bitcoin


View Profile WWW
September 08, 2011, 02:18:30 PM
 #56

Did I miss something? Wasn't this thread about MtGox phishing emails and countermeasures?  Roll Eyes

Matthew N. Wright, you should open a new thread to trash people individually. It's common practice here at the forums.

I was under the impression this thread was an attack based on personal error, followed by a retraction, and then beating up of said attacker, but in looking at the title "This is why you still shouldn't trust any 3rd party wallets." it's pretty clear that my trashing of FlexCoin, a "3rd party wallet" site is warranted.

Apologies for the explosion. It has been building since his first post, which was 362 posts ago. I vote that we take all my aggression towards 'the founder' quantified by the running post count to back Bitcoin. Since he's bound to spam FlexCoin in each and every thread he participates in, the value can only go up UP UP!

Matt,  seriously get off your high horse...  Troll somewhere else...   Lexicon theme was developed internally for the blogging side. We built it internally... I hope you understand that...  then of course we offered it on a theme site for additional revenue.  

The banking area is not based on wordpress.. but you wouldn't know that because you only know how to bash but not research?  The chances are you don't even have an account to be educated enough on how the system works.   So No your trashing isn't warranted...   not even close.

Whatever... I don't care much at all what you say.. we're building a service.. don't use it...  In fact it appears that most of your posts are attacking people personally..  I just happened to be the next one in line.  

If you must know, I found the title offensive because it's not all 3ed party wallets,  it was Mt.Gox that DIDN'T follow the proper procedure in my opinion (no links).

Start your own bitcoin business then...  hopefully I'll find your posts somewhere and bash you for kicks.

Quote
Apologize without explaining yourself, and let us all get back to picking on FlexCoin.

Actually I would like to start picking on you... after researching your posts it appears that the majorty of them are bashing and not contributing?   

Seriously are you EVER going to help the bitcoin community or just run around trolling?   Seriously Matthew N. Wright do you have anything to contribute?


Bitcoin RSS App / Bitcoin Android App / Bitcoin Webapp http://www.ounce.me  Say thank you here:  1HByHZQ44LUCxxpnqtXDuJVmrSdrGK6Q2f
the founder
Sr. Member
****
Offline Offline

Activity: 448
Merit: 251


Bitcoin


View Profile WWW
September 08, 2011, 02:47:24 PM
Last edit: September 08, 2011, 03:10:19 PM by the founder (FlexCoin)
 #57

I also doubt Grandma will be using BTC. 99% of us are either geeks, or have everything managed by geeks. OpenPGP is a great way of authenticating, but so is the "no emails" policy. One obvious thing is there is only mtgox.com or etc. Just read the actual URL you are on, straight forward.

I know man.. but I think that's the problem.  We have to widen the appeal of the technology to spread beyond us to reach sustainability. All the bitcoin services and the default client need to be easy to use and easy to understand.


Bitcoin RSS App / Bitcoin Android App / Bitcoin Webapp http://www.ounce.me  Say thank you here:  1HByHZQ44LUCxxpnqtXDuJVmrSdrGK6Q2f
oOoOo (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
September 08, 2011, 04:43:00 PM
 #58


Quit being an ass and change the title of the thread to reflect the reality instead of singling out "Mt Gox" giving an impression that they did something here.  Quit trolling.   Forums have the ability to edit posts just for this reason and you seem to be straight up refusing to at this time.  Not sure why you called me a troll because all it did was make me notice how bad you are trolling and still are.  Every post you make and leave this initial one unchanged is nearly an attack, as at this point you have even acknowledged fault.


There. You happy now?? What you wanna do me next? Bend over?!?! lol

/trololol

p.s. I aint gonna delete that post, gonna stay there for reference.

bye,
oOo
Xiong Zhuang
Member
**
Offline Offline

Activity: 102
Merit: 10


View Profile
September 17, 2011, 11:15:30 AM
 #59

We try to push yubikey usage a lot, to avoid this. That's why we offered more than 1000 free yubikeys so far, and hope people understand that security is not that simple.

I recieve a mail about free yubikey yesterday, I thought it's another phishing mail at first. Thanks you very much!

Did you get my PM? I really need your help.
Pages: 1 2 3 [All]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!