Bitcoin Forum
August 22, 2024, 08:39:53 PM
Welcome,
Guest
. Please
login
or
register
.
News
: All versions of Windows are affected by a
critical security bug
; make sure you update.
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Economy
>
Trading Discussion
>
Scam Accusations
>
Attempted MITM on BitPay over Tor
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: Attempted MITM on BitPay over Tor (Read 1164 times)
keystroke
(OP)
Hero Member
Offline
Activity: 900
Merit: 1014
advocate of a cryptographic attack on the globe
Attempted MITM on BitPay over Tor
November 09, 2014, 03:38:58 AM
#1
Some links to BitPay are hijacked by evil exit nodes. Their SSL certificate isn't for BitPay but seems generated on the fly. The new page then tries to get you to pay to one of their BTC addresses. Anyone else see this? Nice attack vector.
"The difference between a castle and a prison is only a question of who holds the keys."
QuantumQrack
Sr. Member
Offline
Activity: 337
Merit: 250
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 03:59:05 AM
#2
Sounds to me like Tor is fucking useless.
lyth0s
Legendary
Offline
Activity: 1260
Merit: 1000
World Class Cryptonaire
⇾
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 03:59:09 AM
#3
Hmm. Can you confirm that this is only for bitpay? Or do they replace all bitcoin addresses?
Monero
- Truly Anonymous Digital Cash.
Bitcoin Reading List 2017
Divinespark
Hero Member
Offline
Activity: 938
Merit: 501
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 05:23:52 AM
#4
Tor is a complete waste of time. trading in suboptimal anonymity for guaranteed insecurity.
▄▄███▄▄
▄▄████▀▀▀████▄▄
████▀▀▄▄███▄▄▀▀████
█▄▄ ▀▀███▀▀ ▄▄█
█████▄▄ ▄▄████▀
██▌▀█████▄ ▄█████▀▄▄█
██▌ ██▌▀██ ███▀▄▄███▀
██▌ ██▌ ██ ██████▀▀▄█
▀█▌ ██▌ ██ ███▀▄▄███▀
▀▀
▀█▌ ██ ██████▀▀
▄▄ ▀█ ██▀▀▄▄
████▄▄ ▄▄████
▀███████████▀
.
AMEPAY
.
.
█
█
█
█
█
█
FAST
█
█
█
█
█
█
CONVENIENT
█
█
█
█
█
█
SECURE
│
▄▄█████████▄▄
▄████
█████████
████▄
▄███
███
█████████
███
███▄
▄██
██
█████▀▀▄▀▀█████
██
██▄
▄█
█
█
█████▄▄█▀ ▀█▄▄█████
█
█
█▄
██
█
█████ ▀▀█▄██▀▀▄█████
█
██
██
█
██
███ █ ▄ █ ▄▀▀▄███
██
█
██
████████ █ █ █ ▄▀▀▄████████
▀█████████▄█ █ ▄██████████▀
▀████████ ▀▀▀ ████████▀
▀█
███████████████████
█▀
▀██
█████████████
██▀
▀▀█████████▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
PRIVATE SALE
....
L I V E
E....
|
.
....
IEO
....
.
C O M I N G S O O N
E
|
$600,000
worth of AME
.
►
.
ALREADY
SOLD
!
▄▄█████████▄▄
▄████
█████████
████▄
▄███
███
█████████
███
███▄
▄██
██
█████▀▀▄▀▀█████
██
██▄
▄█
█
█
█████▄▄█▀ ▀█▄▄█████
█
█
█▄
██
█
█████ ▀▀█▄██▀▀▄█████
█
██
██
█
██
███ █ ▄ █ ▄▀▀▄███
██
█
██
████████ █ █ █ ▄▀▀▄████████
▀█████████▄█ █ ▄██████████▀
▀████████ ▀▀▀ ████████▀
▀█
███████████████████
█▀
▀██
█████████████
██▀
▀▀█████████▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
│
deluxeCITY
Hero Member
Offline
Activity: 532
Merit: 500
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 06:26:24 AM
#5
Quote from: QuantumQrack on November 09, 2014, 03:59:05 AM
Sounds to me like Tor is fucking useless.
As of recently tor has become much less secure when connecting to non-tor sites via tor.
The TOR project has not been able to determine exactly how law enforcement was able to find the identities/locations of the onion sites, however it is most likely (IMO) that they used some kind of timing attack
keystroke
(OP)
Hero Member
Offline
Activity: 900
Merit: 1014
advocate of a cryptographic attack on the globe
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 06:27:26 AM
#6
The page was designed as a BitPay page. So at least in this case they didn't replace random bitcoin addresses.
"The difference between a castle and a prison is only a question of who holds the keys."
buybtc
Member
Offline
Activity: 98
Merit: 10
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 06:29:05 AM
#7
Report the bad exit nodes to the tor project, they will blacklist their IPs
hilariousandco
Global Moderator
Legendary
Offline
Activity: 3906
Merit: 2676
Join the world-leading crypto sportsbook NOW!
Re: Attempted MITM on BitPay over Tor
November 09, 2014, 06:32:27 AM
#8
Quote from: lyth0s on November 09, 2014, 03:59:09 AM
Hmm. Can you confirm that this is only for bitpay? Or do they replace all bitcoin addresses?
Users have reported thefts from their blockchain.info accounts as well.
▄▄███████▄
███████▄▄▄
█████████████
▀▀▀▀▀▀████▄▄
███████████████
▀▀███▄
███████████████
▀███
█████████████
███
██
█████████▀▀
███
███ ███
███ ███
███ ███
███▄ ▄███
▀███▄▄ ▄▄███▀
▀▀████▄▄▄▄▄▄▄▄▄████▀▀
▀▀▀███████▀▀▀
.
Sportsbet
.
io
.
F U N
|
F A S T
|
F A I R
░░░███
█▄▄▄▄
▌
░▄▄░
▄▄
█████
▌
██▄▀
█████
▄▄
█
██▄
████
▌▐█▌
█████
▄██
█
██
██▀▄▄▄▌███░▄▄▄▀██
██
██
███
█▄▄▄█▄▄▄█
███
██
█░██
████
█
█░▐█▌░█
█
████
██░█
█
▀▀
█
██▀░█
█
█░▐█▌░█
█
█░▀██
█
▀▀
█
▄▄▄░
█▀
░█░
█
██░▐█▌░██
█
░█░
▀█
░▄▄▄
█
██▀░░
▀
▀
░░
▀█
█░▐█▌░█
█▀
░░
▀
▀
░░▀██
█
▀██
███
██▄
███
▀▀█
█
█▀▀
███
▄██
███
██▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
█████████████
LEADING CRYPTO SPORTSBOOK & CASINO
█████████████
MULTI
CURRENCY
│
1500+
CASINO GAMES
│
CRYPTO EXCLUSIVE
CLUBHOUSE
│
FAST & SECURE
PAYMENTS
.
..
PLAY NOW!
..
Pages: [
1
]
Print
Bitcoin Forum
>
Economy
>
Trading Discussion
>
Scam Accusations
>
Attempted MITM on BitPay over Tor
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...