Trickle (OP)
Newbie
Offline
Activity: 3
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 02, 2012, 05:07:27 PM |
|
I had around 300 Bitcoins stolen from my MT Gox account on Sep 8th/9th 2011. I found out after receiving an email to say that my account was up for review and eventually getting a working password from them that got me into my account. I reported the theft to Mt Gox and their response was to say that transactions are irreversible and the only thing they can do is to give me a free yubikey to stop it happening again. My account, with a strong password, was compromised due to the insecurity of their systems, but they refuse to accept any culpability or responsibility for my loss.
I don't expect (and surely won't receive!) any sympathy from fellow posters. I knew this was a risky business before I got in; I naively trusted the security and integrity of such a large exchange; I should have transferred the coins to an application; I could have sold at a good profit and got out quickly; I gambled and lost - learn and move on.
What remains slightly surprising however is that such a cowboy outfit should be handling so many transactions and retaining the trust of so many traders. Their website boasts of trading securely and with confidence; this apparently stated without irony. Yet, when a customer's account is hacked, it's just tough luck, one of those things....
In conclusion, if you hold bitcoins or cash with Mt Gox, be very careful. If you should suddenly find your balance is unaccountably zero, you'll wait a long time for any redress or even sympathy. Meanwhile, if anyone does have any ideas on how I might retrieve my Bitcoins, I would be very grateful.
Regards
Trickle.
|
|
|
|
kokjo
Legendary
Offline
Activity: 1050
Merit: 1000
You are WRONG!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 02, 2012, 05:16:09 PM |
|
My account, with a strong password, was compromised due to the insecurity of their systems, but they refuse to accept any culpability or responsibility for my loss.
proof please!
|
"The whole problem with the world is that fools and fanatics are always so certain of themselves and wiser people so full of doubts." -Bertrand Russell
|
|
|
tatsuchan
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 02, 2012, 05:17:48 PM |
|
The exchanges are one of the worst problems with bitcoin right now. I seen some developers working on a p2p version of an exchange, but sadly nothing has been released yet as far as I know. There is a large opportunity out there for exchanging bitcoin into cash for anyone with the know-how and money to back it up. The ideal use of bitcoin though is for us to exchange it as we do fiat currencies. Keep it in your digital wallet and spend it as needed. Investing/trading as of now is risky.
As far as MtGox....yea they suck. It's the same reason I go to any shit store/service provider. There are no options.
|
|
|
|
btccomm
Newbie
Offline
Activity: 56
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 02, 2012, 11:32:35 PM |
|
The exchanges are one of the worst problems with bitcoin right now. ...
That's a big problem.
|
|
|
|
John (John K.)
Global Troll-buster and
Legendary
Offline
Activity: 1288
Merit: 1227
Away on an extended break
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 02:27:30 AM |
|
My account, with a strong password, was compromised due to the insecurity of their systems, but they refuse to accept any culpability or responsibility for my loss.
proof please! This +1. I'm guessing that your own computer was compromised by a keylogger.
|
|
|
|
jl2012
Legendary
Offline
Activity: 1792
Merit: 1111
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 03:50:45 AM |
|
are you sure that your computer is not compromised?
|
Donation address: 374iXxS4BuqFHsEwwxUuH3nvJ69Y7Hqur3 (Bitcoin ONLY) LRDGENPLYrcTRssGoZrsCT1hngaH3BVkM4 (LTC) PGP: D3CC 1772 8600 5BB8 FF67 3294 C524 2A1A B393 6517
|
|
|
eleven
Newbie
Offline
Activity: 14
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 04:54:24 PM |
|
I was going to say you were compromised as well. Or unfortunaty it could be something slightly different. Do you use the same password anywhere else? Most humans are creatures of habit, so if one site with your account on it was compromised the hacker would have a good start to logging in elsewhere. I remember back in january when slush got hacked, luckily this time the intruder did not take user/pass combos, but if he did we would all be in trouble!
|
|
|
|
Trickle (OP)
Newbie
Offline
Activity: 3
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 05:18:53 PM |
|
Many thanks to all for your responses.
In answer to why I waited so long: having bought at around $13 last June, I was waiting until the price got back somewhere near that until I did anything with them. I simply put them to one side as I would a company's shares. Obviously I should have kept them in a wallet, but naively thought they were safe. My password was very strong and unique to my Mt Gox account.
I take it that Mt Gox is completely accountable to no-one?
Regards
Trickle
|
|
|
|
realnowhereman
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 05:37:38 PM |
|
I hesitate to say it but... I don't believe it.
You say you have a unique strong password.
The only possibility if that is true is that there is a serious security fault in Mt.Gox that lets an attacker log in as someone else. Why then did they stop with you? Why haven't they stolen from lots and lots of accounts? Let's recall that after the break-in the full Mt.Gox user list and hashes were made public, so there is plenty of scope for abuse of such a vulnerability to go through thousands of known account names.
It's more likely that your password isn't as secure as you think it is, or you have logged in from a compromised computer at some point.
|
1AAZ4xBHbiCr96nsZJ8jtPkSzsg1CqhwDa
|
|
|
MoonShadow
Legendary
Offline
Activity: 1708
Merit: 1010
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 03, 2012, 05:40:23 PM |
|
I take it that Mt Gox is completely accountable to no-one?
They're accountable to the government of Japan. If you think you have standing there, feel free to file a complaint.
|
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
DublinBrian
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 04, 2012, 09:59:28 AM |
|
My account, with a strong password, was compromised due to the insecurity of their systems, but they refuse to accept any culpability or responsibility for my loss. My guess is your password was compromised by phishing. These phishing emails are very realistic looking, I nearly fell for it myself. Check your inbox for any emails appearing to be from MtGox, and see if there are any links to .ru domains.
|
|
|
|
deepceleron
Legendary
Offline
Activity: 1512
Merit: 1036
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 04, 2012, 12:38:43 PM |
|
Keyword : June = mtgox hack
The Mtgox user/encrypted password list was stolen, and if the password wasn't changed on the account, it would be just a matter of time before a hacker cracked the password.
|
|
|
|
drknow012
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 98
Merit: 10
Fairy Tale + Fact = Unregulated Virtual Currency!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 04, 2012, 02:04:30 PM |
|
"no mun, no fun, your son" "too bad, so sad, your dad" -Sinbad ![Tongue](https://bitcointalk.org/Smileys/default/tongue.gif)
|
BTCChess Affiliate Program: Earn 50% on all commissions from referrals at btcchess.tkJust sign up, post your affiliate link in your sig, and take part in the community's discussions! It's that easy! Donations and Investors: 1F6yYdQ7rWVaH9Nqv7gbBw5FbZUuhL9smh
|
|
|
KGB_Bunny
Newbie
Offline
Activity: 30
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 04:08:57 AM |
|
I really am sorry for your loss. Regardless if it was there fault or yours, losing that much can really hurt and you have my sympathy. ![Sad](https://bitcointalk.org/Smileys/default/sad.gif)
|
|
|
|
David_Benz
Donator
Newbie
Offline
Activity: 56
Merit: 0
you got hacked bitch!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 04:37:01 AM |
|
did you think they would?
use CampBX
|
I am the Bitcoinica Hacker.
|
|
|
julz
Legendary
Offline
Activity: 1092
Merit: 1001
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 04:56:37 AM |
|
My account, with a strong password, was compromised due to the insecurity of their systems, but they refuse to accept any culpability or responsibility for my loss. My guess is your password was compromised by phishing. These phishing emails are very realistic looking, I nearly fell for it myself. Check your inbox for any emails appearing to be from MtGox, and see if there are any links to .ru domains. yep... this: .. I found out after receiving an email to say that my account was up for review...
screams phishing victim to me.
|
@electricwings BM-GtyD5exuDJ2kvEbr41XchkC8x9hPxdFd
|
|
|
MoonShadow
Legendary
Offline
Activity: 1708
Merit: 1010
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 05:21:12 AM |
|
If you are going to keep substantial funds at a website not under your own control, such as Mt.Gox or any one of these wallet services; then please use the two-step authentication (i.e. yubikey). If they don't have it & don't use split wallets (i.e. they keep your secret keys at the server) just don't use that service. It's money people! Act like there are people out there who want your personal data, because there are. Bitcoin isn't Facebook! There really is something to be gained from stealing your data!
|
"The powers of financial capitalism had another far-reaching aim, nothing less than to create a world system of financial control in private hands able to dominate the political system of each country and the economy of the world as a whole. This system was to be controlled in a feudalist fashion by the central banks of the world acting in concert, by secret agreements arrived at in frequent meetings and conferences. The apex of the systems was to be the Bank for International Settlements in Basel, Switzerland, a private bank owned and controlled by the world's central banks which were themselves private corporations. Each central bank...sought to dominate its government by its ability to control Treasury loans, to manipulate foreign exchanges, to influence the level of economic activity in the country, and to influence cooperative politicians by subsequent economic rewards in the business world."
- Carroll Quigley, CFR member, mentor to Bill Clinton, from 'Tragedy And Hope'
|
|
|
SgtSpike
Legendary
Offline
Activity: 1400
Merit: 1005
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 05:26:31 AM |
|
I had around 300 Bitcoins stolen from my MT Gox account on Sep 8th/9th 2011. I found out after receiving an email to say that my account was up for review and eventually getting a working password from them that got me into my account.
Oops. Sounds like you fell for a phish. ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) Sorry, that definitely sucks.
|
|
|
|
Hexadecibel
Human Intranet Liason
VIP
Hero Member
Offline
Activity: 571
Merit: 504
I still <3 u Satoshi
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 06:16:56 AM |
|
If you are going to keep substantial funds at a website not under your own control, such as Mt.Gox or any one of these wallet services; then please use the two-step authentication (i.e. yubikey). If they don't have it & don't use split wallets (i.e. they keep your secret keys at the server) just don't use that service. It's money people! Act like there are people out there who want your personal data, because there are. Bitcoin isn't Facebook! There really is something to be gained from stealing your data! Bears repeating. Bitcoin is freedom, and freedom requires responsibility. 1. Assume your computer -any computer- is infected with a trojan. Don't use those computers for important things. Use your laptop or desktop to boot a Live session of Ubuntu. I've gone so far as to run the live session from a 4GB SD card on my laptop and it operates without a hard drive. Every time I boot my machine its clean. The SD card is read only, and everything the OS loads goes to RAM which is also wiped when you power off. Its basically a banking terminal Learn how to boot a live session here: http://www.ubuntu.com/download/help/try-ubuntu-before-you-installThis is the only means I use to do any banking business online. There are windows options that can do similar things but I believe this is cheapest and easiest. 2. Make strong passwords. strong passwords don't have to be hard to remember. ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fimgs.xkcd.com%2Fcomics%2Fpassword_strength.png&t=665&c=iYEvZcAkMZGgeg) Further, DO NOT USE THE SAME PASSWORD FOR EVERYTHING. 3. Don't give your passwords out. Not even to your mother.
|
|
|
|
Foxpup
Legendary
Offline
Activity: 4466
Merit: 3122
Vile Vixen and Miss Bitcointalk 2021-2023
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 05, 2012, 07:43:44 AM |
|
Further, DO NOT USE THE SAME PASSWORD FOR EVERYTHING.
You forgot the relevant XKCD comic: ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fimgs.xkcd.com%2Fcomics%2Fpassword_reuse.png&t=665&c=wnUbVv0jqlfJ0w)
|
Will pretend to do unspeakable things (while actually eating a taco) for bitcoins: 1K6d1EviQKX3SVKjPYmJGyWBb1avbmCFM4I am not on the scammers' paradise known as Telegram! Do not believe anyone claiming to be me off-forum without a signed message from the above address! Accept no excuses and make no exceptions!
|
|
|
|