[ANN][BURST] Burst | Efficient HDD Mining | New 1.2.3 Fork block 92000

[Erkallys]

If I have my passphrase, can I access my BURST on another system ?

[bobafett]

If I have my passphrase, can I access my BURST on another system ?

yes

[muhrohmat]

im getting a bit worried the price of burst its better to buy than to mine and the bitcoin its like beeing less dollars soo i dont mine for a while i need to put again the system for the next 2 weeks in order for me to do the 60 cents per day in mining

[crowetic]

-[ANNOUNCEMENT]-


It appears as though my friend and partner, irontiga, has had his BURST wallet compromised. He has been away for a bit and hasn't had too much contact, so I haven't had a chance to find out how it happened exactly, but this account BURST-W945-7PTT-T4FD-732VF is who now has all of tiga's BURST, and his assets.


here is the txid https://block.burstcoin.info/tx.php?tx=3888272425188818324

Effective Immediately, all ByteEnt and ByteBank asset payouts are paused while we figure out this issue. The reason I am doing this, is because tiga was obviously a large holder in the company, and I refuse to pay out to someone who isn't him. I will pay every legitimate holder, but let us figure this out and find out what is really going on here.


we must figure out how this happened, if this is a lesson in security, let us know now, this is not a funny joke if it is a joke, and I'm very upset if you're a thief, as you've mined on my pool for a long time. I see your account, I see you.


This is upsetting.

[k0r3]

-[ANNOUNCEMENT]-


It appears as though my friend and partner, irontiga, has had his BURST wallet compromised. He has been away for a bit and hasn't had too much contact, so I haven't had a chance to find out how it happened exactly, but this account BURST-W945-7PTT-T4FD-732VF is who now has all of tiga's BURST, and his assets.


here is the txid https://block.burstcoin.info/tx.php?tx=3888272425188818324

Effective Immediately, all ByteEnt and ByteBank asset payouts are paused while we figure out this issue. The reason I am doing this, is because tiga was obviously a large holder in the company, and I refuse to pay out to someone who isn't him. I will pay every legitimate holder, but let us figure this out and find out what is really going on here.


we must figure out how this happened, if this is a lesson in security, let us know now, this is not a funny joke if it is a joke, and I'm very upset if you're a thief, as you've mined on my pool for a long time. I see your account, I see you.


This is upsetting.

Wow this is awful, If theres anything i can do to help, let me know.

[crutsy]

-[ANNOUNCEMENT]-


It appears as though my friend and partner, irontiga, has had his BURST wallet compromised. He has been away for a bit and hasn't had too much contact, so I haven't had a chance to find out how it happened exactly, but this account BURST-W945-7PTT-T4FD-732VF is who now has all of tiga's BURST, and his assets.


here is the txid https://block.burstcoin.info/tx.php?tx=3888272425188818324

Effective Immediately, all ByteEnt and ByteBank asset payouts are paused while we figure out this issue. The reason I am doing this, is because tiga was obviously a large holder in the company, and I refuse to pay out to someone who isn't him. I will pay every legitimate holder, but let us figure this out and find out what is really going on here.


we must figure out how this happened, if this is a lesson in security, let us know now, this is not a funny joke if it is a joke, and I'm very upset if you're a thief, as you've mined on my pool for a long time. I see your account, I see you.


This is upsetting.

Could be a shot in the dark but...

On 4/19 1,592 wallets were created. http://burstcoin.eu/charts/new-wallets-per-day    Average is about 25-30/day

I thought it was odd that so many wallets were created on one day, feels like some brute-forcing of some kind

[Grim]

yep that address is known to be brute forcing passwords ...

create a simple 4 digit password and send 1 burst to it, it will be gone to BURST-W945-7PTT-T4FD-732VF in a matter of days

EDIT: oh sorry I have mistake it for that account: BURST-853Y-8F4F-YFXA-F7U3R

[coinits]

yep that address is known to be brute forcing passwords ...

create a simple 4 digit password and send 1 burst to it, it will be gone to BURST-W945-7PTT-T4FD-732VF in a matter of days

Was he using symbols as well as alphanumerics in his password?

[coinits]

Hey DEV is there a way to limit brute force wallet attacks while not inconveniencing legit wallet owner?

[xizmax]

https://block.burstcoin.info/acc.php?acc=BURST-W945-7PTT-T4FD-732VF

Ivabeer -> www.edwatech.com -> email craige@iinet.net.au

Registrant:
Edwatech Computing
   27 Waring Green
   Clarkson, WA 6030
   AU

   Domain Name: EDWATECH.COM

   Administrative Contact, Technical Contact:
      Edwards, Craig Email craige@IINET.NET.AU
      Edwatech Computing
      27 Waring Green
      Clarkson, WA, 6030
      AU
      +61 8 9407 8548


   Record expires on 28-Mar-2014.
   Record created on 28-Mar-2000.
   Database last updated on 2-Jul-2009 16:09:03 EDT.

   Domain servers in listed order:

   NS2.NO-IP.COM                
   NS1.NO-IP.COM                
   NS3.NO-IP.COM                
   NS4.NO-IP.COM

Information Updated: Thu, 2 Jul 2009 22:17:51 UTC

Craig Edwards -> https://au.linkedin.com/pub/craig-edwards/53/392/163

Wasn't even difficult to find. Does it bear any relevance I cannot say. Use own judgment.

[coinits]

https://block.burstcoin.info/acc.php?acc=BURST-W945-7PTT-T4FD-732VF

Ivabeer -> www.edwatech.com -> email craige@iinet.net.au

Registrant:
Edwatech Computing
   27 Waring Green
   Clarkson, WA 6030
   AU

   Domain Name: EDWATECH.COM

   Administrative Contact, Technical Contact:
      Edwards, Craig Email craige@IINET.NET.AU
      Edwatech Computing
      27 Waring Green
      Clarkson, WA, 6030
      AU
      +61 8 9407 8548


   Record expires on 28-Mar-2014.
   Record created on 28-Mar-2000.
   Database last updated on 2-Jul-2009 16:09:03 EDT.

   Domain servers in listed order:

   NS2.NO-IP.COM                
   NS1.NO-IP.COM                
   NS3.NO-IP.COM                
   NS4.NO-IP.COM

Information Updated: Thu, 2 Jul 2009 22:17:51 UTC

Craig Edwards -> https://au.linkedin.com/pub/craig-edwards/53/392/163

Wasn't even difficult to find. Does it bear any relevance I cannot say. Use own judgment.

How did you link the wallet to the user?

[xizmax]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

[coinits]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

[xizmax]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

[coinits]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

Need to investigate the person deeper to see if a link can be established. There are too many scams in crypto right now. I expect the regulators to do a sweep soon and tough laws and regs to be enacted.

If anyone on here has coins in Cryptsy they should be careful because they may be in the crosshairs of the law for their involvement with the PayCoin Scandal.

[crutsy]

What IP address does the burst address mine from?

[crowetic]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

Need to investigate the person deeper to see if a link can be established. There are too many scams in crypto right now. I expect the regulators to do a sweep soon and tough laws and regs to be enacted.

If anyone on here has coins in Cryptsy they should be careful because they may be in the crosshairs of the law for their involvement with the PayCoin Scandal.

I'm already looking into this and sent a message to the person on burstforum and also in the blockchain, hopefully they'll get back to me and we can figure this out.

[Merick]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

Need to investigate the person deeper to see if a link can be established. There are too many scams in crypto right now. I expect the regulators to do a sweep soon and tough laws and regs to be enacted.

If anyone on here has coins in Cryptsy they should be careful because they may be in the crosshairs of the law for their involvement with the PayCoin Scandal.

I'm already looking into this and sent a message to the person on burstforum and also in the blockchain, hopefully they'll get back to me and we can figure this out.

Do we know anything about the original password style? How many characters, was it built from dictionary words, did it contain numbers and symbols?  I'm curious about the brute force capabilities, what type of password was the algorithm able to crack?

[crowetic]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

Need to investigate the person deeper to see if a link can be established. There are too many scams in crypto right now. I expect the regulators to do a sweep soon and tough laws and regs to be enacted.

If anyone on here has coins in Cryptsy they should be careful because they may be in the crosshairs of the law for their involvement with the PayCoin Scandal.

I'm already looking into this and sent a message to the person on burstforum and also in the blockchain, hopefully they'll get back to me and we can figure this out.

Do we know anything about the original password style? How many characters, was it built from dictionary words, did it contain numbers and symbols?  I'm curious about the brute force capabilities, what type of password was the algorithm able to crack?

Currently I don't know much other than what I've posted, as I said tiga has been really busy lately and we haven't seen much of him. So that makes this 10x harder.

[callmejack]

How did you link the wallet to the user?

It says its alias right there on tiga's block explorer

OK. Thanks but beware of a ruse.

That is exactly why I said to use own judgment. That info could've easily been placed there to mislead.

Need to investigate the person deeper to see if a link can be established. There are too many scams in crypto right now. I expect the regulators to do a sweep soon and tough laws and regs to be enacted.

If anyone on here has coins in Cryptsy they should be careful because they may be in the crosshairs of the law for their involvement with the PayCoin Scandal.

I'm already looking into this and sent a message to the person on burstforum and also in the blockchain, hopefully they'll get back to me and we can figure this out.

Do we know anything about the original password style? How many characters, was it built from dictionary words, did it contain numbers and symbols?  I'm curious about the brute force capabilities, what type of password was the algorithm able to crack?

Currently I don't know much other than what I've posted, as I said tiga has been really busy lately and we haven't seen much of him. So that makes this 10x harder.

the whole password discussion already happened many pages back.
one of the most meaningful posts is this:
https://bitcointalk.org/index.php?topic=731923.msg9451896#msg9451896

it says if your passphrase is random enough you are "save".
the only way to prevent weak passwords on wallet side would be to analyze the entropy and discline the public key generation if it is bad.
i dont speak java but in general there must exist several string entropy analyzer even for java  
the issue with such an approach becomes the usability for an average user if you get forced to use secure passwords.