BTC-e COMPROMISED!!!! maybe...

[Raoul Duke]

Well, as seen in the portuguese forum, http://btc-e.com was compromised and at least their user list was leaked, let's wait for the passwords...

http://pastebin.com/5jzUKnAL

[finway]

holly

[locust]

Maybe they use MD5 also. 

Oh wait...

[Nachtwind]

Waiting for Coinhunter to turn up to bring his typical "Ready for the downfall of bitcoin" rumors/lies whatnot.

No This wont affect Bitcoin.
Yes, this will affect altchains.
No, Passwords are not (yet?) leaked.

[Raoul Duke]

You can get a list of usernames just from going from

https://btc-e.com/profile/1 to https://btc-e.com/profile/4375

No proof. I call it FUD so far!

[locust]

Yep

[paraipan]

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

[bulanula]

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

Now I am famous !?

I wasn't even trying to drive the price down. I just sold a mobo for 62.5 BTC and now that same amount is worth a LOT less with the price decrease from 5.6 to 5.2 so ...

I just want to see what has happened. No market manipulation here. I really got screwed by the price going down.

[paraipan]

someone seems very determined to drive the community moral down with all this staged attacks.

live chat on btc-e

gmaxwell: bulanula there is little evidence that anything is hacked.
majorminer: question
gmaxwell: s/little/none/ really.
gmaxwell: Someone could have made that user list by iterating https://btc-e.com/profile/1
majorminer: if btc goes to ..lets say 2$, which intern will drive the price of ltc up?
bulanula: ok
m3ta: there is only the evidence that it's easy to just scrape the fuck out of /profile/ and get a list of users. boo hoo. big deal.
bulanula: but still dodgy
gmaxwell: Whats still dodgy?
majorminer: anyone could clearify this for me?
bulanula: list of users no pass
gmaxwell: bulanula: anyone could generate that list trivally
m3ta: dude, even Facebook can be scraped to get usernames. so what?

Now I am famous !?

I wasn't even trying to drive the price down. I just sold a mobo for 62.5 BTC and now that same amount is worth a LOT less with the price decrease from 5.6 to 5.2 so ...

I just want to see what has happened. No market manipulation here. I really got screwed by the price going down.

you can take it as a man ? keep the coins, they don't ask for maintenance, because I'm preparing to get some cheap coins if you don't

[pent]

btc-e always impressed me as a group of slovenly people

[gmaxwell]

The fake compromise announcement earlier caused some careful inspection. Phantomcircuit believes he's found some actual severe vulnerabilities.  Bad day for BTC-E I guess.

Without knowing the details of all he found — I recommend staying logged on of BTC-E when you aren't using it, and only visiting it with a clean browser which is not concurrently viewing other sites.

[btc-e.com]

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat

[btc-e.com]

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat

[sethsethseth]

Stuff like this keeps happening and everyone still rushes to the hot new exchange with the crazy features.... *cough* bitcoinica....

[terrytibbs]

All the nonsense that is written above, the facts do not.

"This is nonsense, not facts, nonsense!"

CSRF bug fixed. please clear your browser cache so you can trade/withdraw/chat

"Fixed it lolz"

[btc-e.com]

https://btc-e.com/news/59