[Emergency ANN] Bitcoinica site is taken offline for security investigation

[Raoul Duke]

Please switch this server off NOW!

LOL... You cannot stop the meatspin, for it is already burned into your neurons. Switching off the server does not help.

[1714827633]

1714827633

[1714827633]

1714827633

[check_status]

Calling Bitcoinica a scam after they get robbed is like calling a woman a whore after getting raped. Have some class, and contribute something positive to the problem instead of busting out the S word just because something went wrong.

More like a bank that left their vault doors open and is now pondering over whether or not they should refund customers. I got the tag for refusing to refund - Bitcoinica/zhoutong/genjix should as well.

Good lord. How about we wait and see what happens before burning the witch.

So you agree Bitcoinica is a witch but disagree when it should be burned?

Checking Blockexplorer I found no results. What's up with that Theymos?  

Address 182tGyiczhXSSCTciVujNRkkMw1zQxUVhp

First seen?: Never used on the network (as far as I can tell)
Received transactions: 0
Received BTC: 0
Sent transactions: 0
Sent BTC: 0
Hash160?: 4d24195c443c9efbee47e842d7f67de035896fde
Public key?:
Unknown (not seen yet)

Putting in the transaction hash gives the response, Let Theymos know if this is a bug.

7a22917744aa9ed740faf3068a2f895424ed816ed1a04012b47df7a493f056e8 2012-05-11 12:18:15

Is this GMT?

[PawShaker]

Hahahaha, bitcoinica.com has an A record pointing to 50.56.4.62. That's meatspin.

Like minutes ago I nslookup'edit and it was 69.50.131.117.

[bbit]

Sounds like u got ZHOU TONGED

this ^^

[terrytibbs]

Hahahaha, bitcoinica.com has an A record pointing to 50.56.4.62. That's meatspin.

Like minutes ago I nslookup'edit and it was 69.50.131.117.

cache

[rjk]

Hahahaha, bitcoinica.com has an A record pointing to 50.56.4.62. That's meatspin.

Like minutes ago I nslookup'edit and it was 69.50.131.117.

Now when you visit that IP, it just says "Nothing to see"

[Vladimir]

root@boris:~>ping bitcoinica.com
PING bitcoinica.com (50.56.4.62): 56 data bytes
64 bytes from 50.56.4.62: icmp_seq=0 ttl=48 time=102.786 ms
64 bytes from 50.56.4.62: icmp_seq=1 ttl=48 time=101.933 ms
64 bytes from 50.56.4.62: icmp_seq=2 ttl=48 time=102.374 ms
^C

[Raoul Duke]

root@boris:~>ping bitcoinica.com
PING bitcoinica.com (50.56.4.62): 56 data bytes
64 bytes from 50.56.4.62: icmp_seq=0 ttl=48 time=102.786 ms
64 bytes from 50.56.4.62: icmp_seq=1 ttl=48 time=101.933 ms
64 bytes from 50.56.4.62: icmp_seq=2 ttl=48 time=102.374 ms
^C

So, you use the root account to perform pings(!), and the machine is called boris... Very secure indeed, Vladimir!

[Otoh]

watching - the swaps karma coming back around yet again

[PawShaker]

Hahahaha, bitcoinica.com has an A record pointing to 50.56.4.62. That's meatspin.

Like minutes ago I nslookup'edit and it was 69.50.131.117.

cache

Yep, there are some benefits of having long cache time. There is a slight chance that you realise that your DNS account got hacked as well before results propagate to everyone.

Guys at Bitcoinica, my deepest expression of sympathy for this disaster.

[gusti]

I have repeatedly told people that Bitcoinica is a scam and that Bitcoinica staff should be banned from the forums.

Maybe now people will actually listen.

Bitcoinica is a regulated entity, verifiable by government records. We are one of the most legitimate businesses in Bitcoin community, by any standard.

I second that, and vouch for Zhou and the Bitcoinica team.

I refuse to give people who donate 64k BTC to hackers and devalue all of our Bitcoins any credence.

Hopefully the reward will attract even more hackers!

If we decide to reimburse our customers this time, we will buy the exact amount from the market anyway. We don't want to owe any Bitcoins. USD is always the debt currency for us.

If?... Interesting!

I'm not the guy making such decisions, sorry.

Like I said in my edited post, IF you don't reimburse your customers I will want to see you and all of Intersango staff wearing a scammer tag, and genjix(or anyone connected with Intersango) kicked out of the Bitcoin dev team. That's all! You're no better than Tom Williams if you don't fully reimburse your customers.

Intersango still owes me 5 btc :
https://bitcointalk.org/index.php?topic=60943.msg881128#msg881128

If they did not refund that small change, I doubt they will do now.

[Vladimir]

So, you use the root account to perform pings(!), and the machine is called boris... Very secure indeed, Vladimir!

Who ha! If you read some dogmatic 30 year old BS addressed to noobs a-la "do not use root accounts" 1000 times, this does not mean that using a root account for pings (or whatever) on a machine(physical or virtual and of unknown to you configuration, location and purpose) is necessarily insecure. Security, my friend, is not a state it is a process.

[SysRun]

following. I wonder if this will even make the news.

[Raoul Duke]

following. I wonder if this will even make the news.

It will make it to Gawker and Wired, for sure Not sure if we can call that "make the news" tho.

So, you use the root account to perform pings(!), and the machine is called boris... Very secure indeed, Vladimir!

Who ha! If you read some dogmatic 30 year old BS addressed to noobs a-la "do not use root accounts" 1000 times, this does not mean that using a root account for pings (or whatever) on a machine(physical or virtual and of unknown to you configuration, location and purpose) is necessarily insecure. Security, my friend, is not a state it is a process.

eh! it was j/k lol

[cryptoanarchist]

We have over 80% of our Bitcoins in offline wallets at the moment before the attack. We had to keep a large balance because the withdrawals are huge!

use mtgox code for any withdrawals above 500 btc /24h

The hacker almost gained access to our Mt. Gox API keys, before I revoke them!

He could get 30,000+ BTC easily if I was asleep, or busy.

Boy, that inspires confidence.

[Kris]

Sad

[matonis]

Don't forget Betabeat, Bitcoin Magazine, BicoinMedia, The Bitcoin Trader, and that random guy on Forbes!

LOL. Random guy on Forbes now following this unfortunate event.

[S3052]

I have repeatedly told people that Bitcoinica is a scam and that Bitcoinica staff should be banned from the forums.

Maybe now people will actually listen.

Bitcoinica is a regulated entity, verifiable by government records. We are one of the most legitimate businesses in Bitcoin community, by any standard.

I second that, and vouch for Zhou and the Bitcoinica team.

I refuse to give people who donate 64k BTC to hackers and devalue all of our Bitcoins any credence.

Hopefully the reward will attract even more hackers!

If we decide to reimburse our customers this time, we will buy the exact amount from the market anyway. We don't want to owe any Bitcoins. USD is always the debt currency for us.

If?... Interesting!

I'm not the guy making such decisions, sorry.

Like I said in my edited post, IF you don't reimburse your customers I will want to see you and all of Intersango staff wearing a scammer tag, and genjix(or anyone connected with Intersango) kicked out of the Bitcoin dev team. That's all! You're no better than Tom Williams if you don't fully reimburse your customers.

Intersango still owes me 5 btc :
https://bitcointalk.org/index.php?topic=60943.msg881128#msg881128

If they did not refund that small change, I doubt they will do now.

As much as I value the contribution of bitcoinica to the bitcoin economy, this is a big security issue for the entire bitcoin economy, because of the psychological damage it is causing.

At least there needs to be (i) a reimbursement and (ii) heightened security measures implemented in the near future.

[Raoul Duke]

Taken from http://GLBSE.com

GLBSE is under very heavy load

We're aware of the recent break-in at Bitcoinica and believe that GLBSE is also being targeted

We've taken GLBSE offline, including our very small hotwallet(and every bitCent is accounted for), and are taking steps to further secure our system.

We've been operating for over a year without any security incidents.

While you wait, have some fun.

[Vladimir]

eh! it was j/k lol

LOL, my sense of humour is failing me today.