[Emergency ANN] Bitcoinica site is taken offline for security investigation

[ashleyconnor]

So where is the mass leak ?

Were those images it ?

I'm guessing it's going to be all Patrick's email, unfortunately. Seems logical anyway.

Where did you hear this?

[1714035731]

1714035731

[1714035731]

1714035731

[1714035731]

1714035731

[1714035731]

1714035731

[1714035731]

1714035731

[1714035731]

1714035731

[rjk]

So where is the mass leak ?

Were those images it ?

I'm guessing it's going to be all Patrick's email, unfortunately. Seems logical anyway.

Where did you hear this?

I didn't hear it, I am just making an assumption based on the fact that his email server was compromised.

[R-]

Approximately, how many clients/users did/does Bitcoinica have? I'm guessing about a couple hundred.

~Bruno~

Almost 5000

Why do you need 13 web servers for 5,000 clients Zhou?

[Krakonos]

Why do you need 13 web servers for 5,000 clients Zhou?

They were not all web servers. I see some db server, workers (Gox trading in that volume can't be very efficient), web server, vault could be wallet server,... I'd guess he had some development servers too (you can't develop on production server, right?).  And judging by the amount of RAM, they weren't too powerful. Maybe one big machine could do it and still had a lot of time to cpu-mine bitcoins, but separating parts makes sense for increased security (that way when your db server gets compromised, the attacker can't easily access the wallet server, unless you have some open doorway like unencrypted ssh key used on wallet server or some other bad stuff..)

[Maged]

It's quite comforting to see "emergency backup" on that list...

Knowing the intelligence of the Bitcoinica people, there might not be a single backup in existence anymore. Hell, this forum has more backups than they did.

[R-]

It's quite comforting to see "emergency backup" on that list...

Knowing the intelligence of the Bitcoinica people, there might not be a single backup in existence anymore. Hell, this forum has more backups than they did.

Despite their reputation, they definitely store backups somewhere other than the cloud... Right 

separating parts makes sense for increased security (that way when your db server gets compromised, the attacker can't easily access the wallet server, unless you have some open doorway like unencrypted ssh key used on wallet server or some other bad stuff..)

Must be difficult  to manage.

[Maged]

It's quite comforting to see "emergency backup" on that list...

Knowing the intelligence of the Bitcoinica people, there might not be a single backup in existence anymore. Hell, this forum has more backups than they did.

Despite their reputation, they definitely store backups somewhere other than the cloud... Right 

Dear God I hope so. But given that their claims server was also setup in the cloud - Rackspace specifically - I don't think they had hosting anywhere else. That leaves manually downloaded backups... As someone who used to do that, let's just say that it's easy to forget/put off. They *might* have a backup from sometime in the last month.

[imsaguy]

It's quite comforting to see "emergency backup" on that list...

Knowing the intelligence of the Bitcoinica people, there might not be a single backup in existence anymore. Hell, this forum has more backups than they did.

Despite their reputation, they definitely store backups somewhere other than the cloud... Right 

Dear God I hope so. But given that their claims server was also setup in the cloud - Rackspace specifically - I don't think they had hosting anywhere else. That leaves manually downloaded backups... As someone who used to do that, let's just say that it's easy to forget/put off. They *might* have a backup from sometime in the last month.

Kinda like Project #2's backup that was about a month too old?  I can hear it now.. "Let's just payout based on what everyone's average position was over the last month"

[WhatsHappening]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?


EDIT: Now screenshots has been replaced with previous content

[bulanula]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?

Notice the vanity address they created : 1aW1CUWsHzE9j2wUTkV2uGVRMkGsgNMrT

Mr T !

[muyuu]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?

LOL except that is not bitcoinica, it's a squat site "bitconica". Change coin for con good one.

[bulanula]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?

LOL except that is not bitcoinica, it's a squat site "bitconica". Change coin for con good one.

Sure got me there !

Guilty as charged. LOL. Good one !

[Phinnaeus Gage]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?

Notice the vanity address they created : 1aW1CUWsHzE9j2wUTkV2uGVRMkGsgNMrT

Mr T !

Notice the vanity address? 1aW1CUWsHzE9j2wUTkV2uGVRMkGsgNMrT

[Raoul Duke]

Now this screenshots are visible at http://www.bitconica.com/ (another hack ??)

BTW: Anybody has his BTC/USD back from Bitcoinica ?

Notice the vanity address they created : 1aW1CUWsHzE9j2wUTkV2uGVRMkGsgNMrT

Mr T !

Notice the vanity address? 1aW1CUWsHzE9j2wUTkV2uGVRMkGsgNMrT

LOLLLLL

That vanity address will take a whole new meaning if I tell you that Cú in Portuguese means ass lol

[rdponticelli]

By the way, has anybody received any communication from Bitcoin Consultancy regarding the refund requests? I have filled one on the 16 but haven't heard anything yet.

Their strong point doesn't seem to be precisely communication...

[Phinnaeus Gage]

By the way, has anybody received any communication from Bitcoin Consultancy regarding the refund requests? I have filled one on the 16 but haven't heard anything yet.

Their strong point doesn't seem to be precisely communication...

Au contraire (French 101), for what if communication is their strong point?

[btcgoldsilver]

By the way, has anybody received any communication from Bitcoin Consultancy regarding the refund requests? I have filled one on the 16 but haven't heard anything yet.

I haven't heard anything yet apart from an email acknowledgement of my claim.

[disclaimer201]

By the way, has anybody received any communication from Bitcoin Consultancy regarding the refund requests? I have filled one on the 16 but haven't heard anything yet.

I haven't heard anything yet apart from an email acknowledgement of my claim.

Not cool. A timeplan, some updates, anything would be good. Is it already time to call you Intersango guys scammers again? I'm getting very pissed at this wall of non-communication. It's my money. It does not belong to you guys, and you messed it up. Follow through with your responsibility. Don't fuck up Bitcoin for me and apparently 5000 others. What other options to speed up the process are left?

[rjk]

Maybe they are a "professional operation" and don't respond to forum trolling, but only by email? Nah... I kind of doubt it. Has anyone gotten a response by email either, other than an automated confirmation?

Also, broken DNSSEC. Fail.

[tvbcof]

By the way, has anybody received any communication from Bitcoin Consultancy regarding the refund requests? I have filled one on the 16 but haven't heard anything yet.

I haven't heard anything yet apart from an email acknowledgement of my claim.

Not cool. A timeplan, some updates, anything would be good. Is it already time to call you Intersango guys scammers again? I'm getting very pissed at this wall of non-communication. It's my money. It does not belong to you guys, and you messed it up. Follow through with your responsibility. Don't fuck up Bitcoin for me and apparently 5000 others. What other options to speed up the process are left?

Bitcoinica is just doing people a favor by providing an object lesson in 'counterparty risk'.  People can (sometimes) conjure up some pixels on their monitor stating that they have NNN.NNN BTC...and they believed it.  What they actually have is a loose promise that a counterparty (Bitcoinica and it's nebulous owners) will give them up to that number of BTC or $$$ equiv if they ask for them.

It amazes me that so many people are so anti-Bitcoin in that they cannot except what it is and love it for it's unusual strengths.  A life-time of training under our current monetary solutions has had it's effect I guess.