Possible false alarm: MtGox break in

[cablepair]

I also am finding this hard to believe that this is really DiabloD3d, it does not make sense, that he would issue a statement of this magnitude in this way.

This would be a major incident and it wouldn't be reported in such a short and easy way like this.

I would believe that his forum account is hacked. The hackers that did the CosbyCoin hack probably set this up in order to have some more of their fun down the road.

[tvbcof]

...

Help me understand why this is not more of a big deal?

I remember a similar event a few weeks ago.  The user presented himself as a competent individual, but eventually MtGox looked at their logs and presented a pretty compelling argument that it was user error.  The dude probably got keystroke logged IIRC.

I'll sit on the fence until either 1) more similar events pop up, or 2) MtGox presents evidence from their logs which explains things.  It is easy for me to fence sit here though since I'm not an MtGox users

(Disclosure:  I've had some very low buys in in case MtGox crashes the train.  Been in for a long time and it has not happened yet.)

[ctoon6]

either way, mtgox is not a bank, so do not treat it as such. your a fool to think anything else.

[1.21gigawatts]

It would be a big deal if hundreds of people were coming here complaining that their mt gox accounts were hacked AGAIN.

[Bitcoin Swami]

Swami Sense tells me he got his forum account hacked.

[stsbrad]

I also am finding this hard to believe that this is really DiabloD3d, it does not make sense, that he would issue a statement of this magnitude in this way.

This would be a major incident and it wouldn't be reported in such a short and easy way like this.

I would believe that his forum account is hacked. The hackers that did the CosbyCoin hack probably set this up in order to have some more of their fun down the road.

I find it hard to believe as well, especially since the trolls at SA stated it was wagner first, then gox right?

The "everyone clear out your accounts" was the biggest red flag of the post for me.

[fcmatt]

It would be a big deal if hundreds of people were coming here complaining that their mt gox accounts were hacked AGAIN.

But that is not how it all started last time. People talked about it happening in a trickle.
They were told it was completely their fault, etc.. Then it all blew up with a password file
being handed around like nothing days after.

[makomk]

At this moment, I'm questioning if DiabloD3 really posted this thread, I smelll something fishy here.
Maybe the forum (or DiabloD3 account) is compromised again.

Not unless the box he connects to IRC from has been hacked too; he said essentially the same things in there.

I remember a similar event a few weeks ago.  The user presented himself as a competent individual, but eventually MtGox looked at their logs and presented a pretty compelling argument that it was user error.  The dude probably got keystroke logged IIRC.

Was that the one where the "evidence" was that the attacker logged into the victim's account with the correct password on the first attempt, and it later turned out that MtGox's password database had previously been stolen and many of the passwords cracked, or another incident?

[ctoon6]

It would be a big deal if hundreds of people were coming here complaining that their mt gox accounts were hacked AGAIN.

But that is not how it all started last time. People talked about it happening in a trickle.
They were told it was completely their fault, etc.. Then it all blew up with a password file
being handed around like nothing days after.

yep yep, guys, be careful if you want to exchange your hard earned fiat for bitcoins. because if the gox goes down, you could loose everything.

[Littleshop]

My funds are still at mtgox.com   

I have a yubi.

[tvbcof]

I remember a similar event a few weeks ago.  The user presented himself as a competent individual, but eventually MtGox looked at their logs and presented a pretty compelling argument that it was user error.  The dude probably got keystroke logged IIRC.

Was that the one where the "evidence" was that the attacker logged into the victim's account with the correct password on the first attempt, and it later turned out that MtGox's password database had previously been stolen and many of the passwords cracked, or another incident?

Different one.  They guy had quite a good password IMHO (but that did not stop people for berating him about it.)  Certainly it was much to good for a cold remote guess style attack.

MtGox dug up a log showing a login from somewhere.  And some other people dug up some (not too) old posts from the guy which seemed to show that he was not quite as much of a security guru as he seemed to have been presenting himself as.  This was long after the main MtGox hack where the password database was filtched...or at least the only such time I am aware of where this happened to MtGox.  I'm thinking 3 weeks or a month ago.

[geek-trader]

My funds are still at mtgox.com   

I have a yubi.

Me too, on both points.

[cypherdoc]

my bet is Diablo has had his forum acct hacked.  look, he puts up an OP then refuses to elaborate?

this could be a new tactic from the banker/gov't trolls lurking here to combat Bitcoin.  an "allten" guy here is advocating clearing out your mtgox accts as well to force an audit which makes no sense if he really was concerned about bitcoin or mtgox as it would cause a bank run like event killing mtgox.

[ElectricMucus]

Well he appears to be offline, so the only thing we can do now is wait...

[cypherdoc]

why is the price up then the last few days?

if you want to get your USD out then the fastest way is to BUY bitcoin and then transfer it out.  after all, this is as good a time as any if you're bullish.

[cypherdoc]

a true hacker would clean out hundreds of accts at once to maximize the theft before anyone else could react.  this doesn't pass the smell test.

[Otoh]

Mount Goxxed - surely

though also:

"My funds are still at mtgox.com   

I have a yubi"

[Maged]

my bet is Diablo has had his forum acct hacked.  look, he puts up an OP then refuses to elaborate?

Ha! I see what you did there.

At this moment, I'm questioning if DiabloD3 really posted this thread, I smelll something fishy here.
Maybe the forum (or DiabloD3 account) is compromised again.

Wouldn't the staff members be the first ones to secure their accounts on the forum, even before it went back online after the hack?

Yup. All staff had to re-verify themselves after the forum came back up.

At this moment, I'm questioning if DiabloD3 really posted this thread, I smelll something fishy here.
Maybe the forum (or DiabloD3 account) is compromised again.

Not unless the box he connects to IRC from has been hacked too; he said essentially the same things in there.

This. I saw that too.

[mizerydearia]

This was yesterday in the MtGox IRC channel:

17:31 < kinlo> there is something wrong, how can it have gone above 10 when my sell order at 8 didn't occur?
17:31 < molecular> it didnt reall go above 10, I assume
17:31 < Ymgve> kinlo: bugs, the orders didn't happen or there was something wrong in the matching algorithm
17:32 < kinlo> MagicalTux: ?
17:32 < molecular> likely has to do with the "new currency markets"
17:32 <@MagicalTux> no
17:32 <@MagicalTux> has to do with hackers trying their best to do stuff normal people wouldn't by dropping large amounts of stolen funds/coins

...

17:35 < molecular> flushing bad orders? How do I make a "bad sell order" at 30 USD? ^^
17:35 < xelister> molecular: =)
17:35 <@MagicalTux> molecular, I blocked ~2000 accounts created most likely for the purpose of killing bitcoin on 9/11
17:35 <@MagicalTux> their trades do remain however
17:35 < molecular> MagicalTux, holy moly!
17:35 <@MagicalTux> but they cannot execute, causing weird results

<wardearia> <MagicalTux> has to do with hackers trying their best to do stuff normal people wouldn't by dropping large amounts of stolen funds/coins  ---  Is the claim of the people behind the large amounts of bitcoins transacting at mtgox being 'hackers' accurate or is it speculation?  Also, is it accurate that if large transactions occur at mtgox.com the site will only break if those people transacting are hackers and not legitimate transacters?
<upb> lol
<upb> good questions

Also, with a shady history of lying and censoring/deleting posts to cover history of events/information, why not resort to even further shadiness of preserving buggy code for sake of compromise or even participating in the compromises 1st partily in the guise of 3rd party compromizations?  Regardless though, the codebase developed for mtgox.com exchange seems ripe for abuse and exploitation and will be a feeding ground for those that want bitcoins through the challenge of exploitation.

I would imagine it would be more wise to collectively or consensually switch to a more reputable and secure/reliable exchange market and allow it to establish as most popular exchange site..... preferably one that has 0% transaction fees.   Otherwise with mtgox's 0.6% transaction fee from both sides of each transaction and approximate 1,200,000 bitcoins per month transacted, mtgox makes 14,400 bitcoins a month...and at us$6 each, that's almost us$100,000 profix per month.  OMFGZ!! =/

[ctoon6]

i like how mtgox is blocking traffic that would "kill bitcoin" its not up to mtgox to do this, so please stop, you are not god so dont act like it.