Bitcoin Forum
January 16, 2019, 12:57:05 AM *
News: Latest Bitcoin Core release: 0.17.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: unlock codes for Mtgox yubikeys leaked  (Read 6892 times)
atsoat
Newbie
*
Offline Offline

Activity: 23
Merit: 0


View Profile
May 29, 2014, 10:54:15 PM
 #1

For those who have a Mtgox yubikey and now wish to unlock it and re-program it for other purposes, the unlock codes have been leaked:
http://www.sendspace.com/file/in4ss6

Search for your serial number (as printed on the dongle) in the txt file downloadable at the above link (ignore/delete any obviously dodgy exe files that are downloaded at the same time). And then use the tools from http://www.yubico.com/products/services-software/personalization-tools/use/ to reprogram.

The entry ending in A relates to slot 1, while that ending in B relates to slot 2.

I discovered this via this page: http://crypto.stackexchange.com/questions/14809/any-use-for-now-defunct-mt-gox-yubikey. I have no idea who/how/when this was leaked.

While this list allows the yubikeys to be unlocked and re-programmed, assuming yours is listed (and mine was) - it is not a leak of the stored keys in the device.

If you had funds at MtGox when it eventually died, then obviously you should think about whether you really want to re-program your yubikey - as at some level it allows you to to prove ownership of your account there.
1547600225
Hero Member
*
Offline Offline

Posts: 1547600225

View Profile Personal Message (Offline)

Ignore
1547600225
Reply with quote  #2

1547600225
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1547600225
Hero Member
*
Offline Offline

Posts: 1547600225

View Profile Personal Message (Offline)

Ignore
1547600225
Reply with quote  #2

1547600225
Report to moderator
1547600225
Hero Member
*
Offline Offline

Posts: 1547600225

View Profile Personal Message (Offline)

Ignore
1547600225
Reply with quote  #2

1547600225
Report to moderator
1547600225
Hero Member
*
Offline Offline

Posts: 1547600225

View Profile Personal Message (Offline)

Ignore
1547600225
Reply with quote  #2

1547600225
Report to moderator
Geremia
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250


View Profile WWW
July 25, 2014, 06:55:20 PM
 #2

Excellent! I can make use of my free YubiKey now! Thank you very much!

BTC tip jar | my BTC wiki, BTC StackExchange, & Twister posts pages | Tox ID: 65C3E8810738AD9D175234808FCB317A1103632903436203D45411AE97C03F54C34861AB6663
Join Kraken. | The best, free book on Bitcoin: Mastering Bitcoin
Nos cum prole pia benedicat Virgo Maria.
ninjarobot
Hero Member
*****
Offline Offline

Activity: 761
Merit: 500


Mine Silent, Mine Deep


View Profile
July 25, 2014, 08:25:30 PM
 #3

Interesting.

Does the download link work for anyone?

(nothing happens when I click on the (BOT)yk_s.txt link...)

WeMineCoins
Member
**
Offline Offline

Activity: 63
Merit: 10


View Profile WWW
July 25, 2014, 10:11:22 PM
 #4

Fantastic I'd be all over this if I wasn't planning on framing my MtGox yubikey.

The Technical Founder of WeMineCoins
Geremia
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250


View Profile WWW
August 03, 2014, 04:37:11 AM
 #5

Fantastic I'd be all over this if I wasn't planning on framing my MtGox yubikey.
Why would you frame it?  Huh For your BTC history museum?  Roll Eyes

BTC tip jar | my BTC wiki, BTC StackExchange, & Twister posts pages | Tox ID: 65C3E8810738AD9D175234808FCB317A1103632903436203D45411AE97C03F54C34861AB6663
Join Kraken. | The best, free book on Bitcoin: Mastering Bitcoin
Nos cum prole pia benedicat Virgo Maria.
haploid23
Legendary
*
Offline Offline

Activity: 812
Merit: 1000



View Profile WWW
August 03, 2014, 05:17:03 AM
 #6

I had a chance to get my free Mtgox Yubikey from that security leak (2011?), but never bothered to get one. Now I wish I had gotten it, just to keep a piece of history.

Nagle
Legendary
*
Offline Offline

Activity: 1204
Merit: 1000


View Profile WWW
August 04, 2014, 05:48:43 AM
 #7

First, has anyone checked to see that this is valid data?

If it is, this is evidence of gross negligence by the Mt. Gox trustee. It should be reported to the Tokyo District Court and the Tokyo police.
st4nl3y
Legendary
*
Offline Offline

Activity: 1050
Merit: 1000


View Profile
August 04, 2014, 05:53:51 AM
 #8

People should be careful when downloading this. It might contain traps, like mt.gox leaked database did.
Nagle
Legendary
*
Offline Offline

Activity: 1204
Merit: 1000


View Profile WWW
August 04, 2014, 06:33:50 PM
 #9

People should be careful when downloading this. It might contain traps, like mt.gox leaked database did.
No, it's just a plain text file of Yubikey IDs and unlock codes. Whether they work, I don't know.
Geremia
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250


View Profile WWW
August 11, 2014, 10:43:59 PM
 #10

People should be careful when downloading this. It might contain traps, like mt.gox leaked database did.
No, it's just a plain text file of Yubikey IDs and unlock codes. Whether they work, I don't know.
It worked for mine.

BTC tip jar | my BTC wiki, BTC StackExchange, & Twister posts pages | Tox ID: 65C3E8810738AD9D175234808FCB317A1103632903436203D45411AE97C03F54C34861AB6663
Join Kraken. | The best, free book on Bitcoin: Mastering Bitcoin
Nos cum prole pia benedicat Virgo Maria.
st4nl3y
Legendary
*
Offline Offline

Activity: 1050
Merit: 1000


View Profile
August 12, 2014, 05:46:40 AM
 #11

People should be careful when downloading this. It might contain traps, like mt.gox leaked database did.
No, it's just a plain text file of Yubikey IDs and unlock codes. Whether they work, I don't know.

Oh, in that case it should be fine then.
Veda
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
October 13, 2014, 03:42:24 PM
 #12

First, has anyone checked to see that this is valid data?

If it is, this is evidence of gross negligence by the Mt. Gox trustee. It should be reported to the Tokyo District Court and the Tokyo police.

(sorry for bumping just found this thead with google and felt like clearing this up)

These leaked keys are not in any way a security breach for Mt. Gox. These keys can only be used to reprogram your yubikey.
You can see the unlockcode as the locksmiths tool to change your the key of your front door to make it fit to another lock. By doing that, the lock the key originally was for, cannot be opened anymore afterwards (unless there where more than 1 keys).

I wish I had a Mt. Gox yubikey Sad
Yubi_David
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
October 14, 2014, 05:16:07 PM
 #13

Hello All,

The access codes linked to above will only allow for the re-configuration of any Mt.Gox issued YubiKey, but cannot be used to extract the secrets stored on the YubiKeys themselves. Please note that if you overwrite the configuration of a Mt.Gox YubiKey, there is no way to restore it, and the YubiKey will no longer be able to verify your identity for any Mt.Gox services used with it previously.

Thank you,
-David Maples
Yubico Solutions Engineer
www.yubico.com
Dehumanizer
Member
**
Offline Offline

Activity: 77
Merit: 10



View Profile
January 23, 2015, 03:40:13 PM
 #14

I've found this topic today when I was thinking about what to do with my old mtgox yubikey and I can confirm it worked for me as well.
I now have a working yubikey, thank you!

I did not have any balance at MtGox so I don't care about losing a potentional access to the restored MtGox (lol)
Brewins
Legendary
*
Offline Offline

Activity: 1120
Merit: 1000



View Profile
January 24, 2015, 05:47:46 AM
 #15

So did anyone found some use for the yubikeys?

(whatever a yubikey is)
sangaman
Sr. Member
****
Offline Offline

Activity: 342
Merit: 250



View Profile WWW
January 24, 2015, 05:58:24 AM
 #16

What other Bitcoin services use Yubikeys? I thought it'd be a nice souvenir but I wouldn't mind making it a functional souvenir.
Dehumanizer
Member
**
Offline Offline

Activity: 77
Merit: 10



View Profile
January 24, 2015, 09:36:23 AM
 #17

So far I have found and verified that Kraken.com works with yubikey, I will do some more research today if there are more useful sites that use yubikey 2FA.
And of course, you can configure 2nd slot (the long press) as static password, so anywhere where you need a password, you can use it. It's a random set of either 16 or 32 alphanumeric characters, so it's always more secure than any password you can create and remember yourself. It is of course always the same fixed string (until you reconfigure it again), so it's advisable to add some prefix which you easily remember for each place where you use this fixed password, so that you won't have the same password everywhere where you use it.
Dehumanizer
Member
**
Offline Offline

Activity: 77
Merit: 10



View Profile
January 24, 2015, 01:47:12 PM
 #18

Blockchain.info wallet also allows to use yubikey
Geremia
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250


View Profile WWW
February 04, 2015, 05:57:22 PM
 #19

So did anyone found some use for the yubikeys?

(whatever a yubikey is)
I use mine for two-factor authentication for my Google account.

BTC tip jar | my BTC wiki, BTC StackExchange, & Twister posts pages | Tox ID: 65C3E8810738AD9D175234808FCB317A1103632903436203D45411AE97C03F54C34861AB6663
Join Kraken. | The best, free book on Bitcoin: Mastering Bitcoin
Nos cum prole pia benedicat Virgo Maria.
mayax
Legendary
*
Offline Offline

Activity: 1204
Merit: 1001


View Profile
February 04, 2015, 10:03:54 PM
 #20

who cares about MT Gox now? Smiley
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Bitcointalk.org is not available or authorized for sale. Do not believe any fake listings.
Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!