Bitcoin Forum
April 26, 2024, 04:40:34 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: BTC-e COMPROMISED!!!! maybe...  (Read 2418 times)
Raoul Duke (OP)
aka psy
Legendary
*
Offline Offline

Activity: 1358
Merit: 1002



View Profile
February 14, 2012, 12:32:53 AM
Last edit: February 14, 2012, 12:50:23 AM by psy
 #1

Well, as seen in the portuguese forum, http://btc-e.com was compromised and at least their user list was leaked, let's wait for the passwords...

http://pastebin.com/5jzUKnAL
1714106434
Hero Member
*
Offline Offline

Posts: 1714106434

View Profile Personal Message (Offline)

Ignore
1714106434
Reply with quote  #2

1714106434
Report to moderator
"Bitcoin: the cutting edge of begging technology." -- Giraffe.BTC
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714106434
Hero Member
*
Offline Offline

Posts: 1714106434

View Profile Personal Message (Offline)

Ignore
1714106434
Reply with quote  #2

1714106434
Report to moderator
finway
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


View Profile
February 14, 2012, 12:38:02 AM
 #2

holly

locust
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
February 14, 2012, 12:42:21 AM
 #3

Maybe they use MD5 also.  Grin

Oh wait...
Nachtwind
Hero Member
*****
Offline Offline

Activity: 700
Merit: 507



View Profile
February 14, 2012, 12:47:53 AM
 #4

Waiting for Coinhunter to turn up to bring his typical "Ready for the downfall of bitcoin" rumors/lies whatnot.

No This wont affect Bitcoin.
Yes, this will affect altchains.
No, Passwords are not (yet?) leaked.
Raoul Duke (OP)
aka psy
Legendary
*
Offline Offline

Activity: 1358
Merit: 1002



View Profile
February 14, 2012, 12:49:58 AM
 #5

You can get a list of usernames just from going from

https://btc-e.com/profile/1 to https://btc-e.com/profile/4375

No proof. I call it FUD so far!
locust
Member
**
Offline Offline

Activity: 65
Merit: 10


View Profile
February 14, 2012, 12:51:00 AM
 #6

Yep

paraipan
In memoriam
Legendary
*
Offline Offline

Activity: 924
Merit: 1004


Firstbits: 1pirata


View Profile WWW
February 14, 2012, 12:55:10 AM
 #7

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

Quote
gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

BTCitcoin: An Idea Worth Saving - Q&A with bitcoins on rugatu.com - Check my rep
bulanula
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500



View Profile
February 14, 2012, 12:58:28 AM
 #8

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

Quote
gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

Now I am famous !?

I wasn't even trying to drive the price down. I just sold a mobo for 62.5 BTC and now that same amount is worth a LOT less with the price decrease from 5.6 to 5.2 so ...

I just want to see what has happened. No market manipulation here. I really got screwed by the price going down. Cry
paraipan
In memoriam
Legendary
*
Offline Offline

Activity: 924
Merit: 1004


Firstbits: 1pirata


View Profile WWW
February 14, 2012, 01:05:43 AM
 #9

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

Quote
gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

Now I am famous !?

I wasn't even trying to drive the price down. I just sold a mobo for 62.5 BTC and now that same amount is worth a LOT less with the price decrease from 5.6 to 5.2 so ...

I just want to see what has happened. No market manipulation here. I really got screwed by the price going down. Cry

you can take it as a man ? keep the coins, they don't ask for maintenance, because I'm preparing to get some cheap coins if you don't Tongue

BTCitcoin: An Idea Worth Saving - Q&A with bitcoins on rugatu.com - Check my rep
pent
Hero Member
*****
Offline Offline

Activity: 490
Merit: 500



View Profile
February 14, 2012, 03:05:28 AM
 #10

btc-e always impressed me as a group of slovenly people
gmaxwell
Staff
Legendary
*
Offline Offline

Activity: 4158
Merit: 8382



View Profile WWW
February 14, 2012, 03:14:33 AM
 #11

The fake compromise announcement earlier caused some careful inspection. Phantomcircuit believes he's found some actual severe vulnerabilities.  Bad day for BTC-E I guess.

Without knowing the details of all he found — I recommend staying logged on of BTC-E when you aren't using it, and only visiting it with a clean browser which is not concurrently viewing other sites.
btc-e.com
Legendary
*
Offline Offline

Activity: 1694
Merit: 1002


View Profile WWW
February 14, 2012, 07:51:00 AM
Last edit: February 14, 2012, 09:13:26 AM by btc-e.com
 #12

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat

Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com

BTC-E.com // Биpжa пo aвтoмaтичecкoй тopгoвлe Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com
btc-e.com
Legendary
*
Offline Offline

Activity: 1694
Merit: 1002


View Profile WWW
February 14, 2012, 08:13:31 AM
 #13

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat Smiley

Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com

BTC-E.com // Биpжa пo aвтoмaтичecкoй тopгoвлe Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com
sethsethseth
Sr. Member
****
Offline Offline

Activity: 257
Merit: 250


Not trusting third parties with my private keys


View Profile
February 14, 2012, 08:36:50 AM
 #14

Stuff like this keeps happening and everyone still rushes to the hot new exchange with the crazy features.... *cough* bitcoinica....

SealsWithClubs poker room has  over 400 players online. Buy in from .01 to 60btc.      BTCSportsMatch lets you bet sports with vig free lines!  Best kept secret in bitcoin....          LocalBitcoins.com is very user-friendly now for bank transfers.  You don't have to live close to trade when in the same currency area.           
Electrum client is awesome. Try it. And please stop sending bitcoins to sites run by security newbies, or don't complain when you lose everything.
terrytibbs
Hero Member
*****
Offline Offline

Activity: 560
Merit: 501



View Profile
February 14, 2012, 08:40:31 AM
 #15

All the nonsense that is written above, the facts do not.
"This is nonsense, not facts, nonsense!"

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat Smiley
"Fixed it lolz"
btc-e.com
Legendary
*
Offline Offline

Activity: 1694
Merit: 1002


View Profile WWW
February 14, 2012, 12:53:59 PM
 #16

https://btc-e.com/news/59

Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com

BTC-E.com // Биpжa пo aвтoмaтичecкoй тopгoвлe Bitcoin \ Litecoin \ Namecoin \ Novacoin <-> Exchange btc-e.com
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!