MTGOX really is affecting me being able to feed my family

[Raoul Duke]

Incidentally, Capri200 either wasn't used or hasn't been cracked yet.
 - http://www.leakedin.org/?check=3d9ad3d4e34f82f0b0fd29de989d51acb737c1e8

Great password gathering website LOL

[1713975084]

1713975084

[1713975084]

1713975084

[1713975084]

1713975084

[1713975084]

1713975084

[TangibleCryptography]

This hacking crap WILL be the main thing that keeps bitcoin from going to the general population.Who besides software guru's & REAL puter nerds will understand how to secure either thier PC or logins to such an extreme level 

I doubt it.  It will just require Bitcoin "providers" (wallet developers, ewallets, exchanges, etc) to take security more serious.


A couple examples:
a) MtGox could check passwords against weak/known password list and exclude them
b) MtGox could require 2nd factor authentication for accounts over certain value (my broker does).
c) MtGox could implement a delay with notification (you get notification BEFORE the withdrawal occurs
d) MtGox could limit withdrawals to a specific list of whitelisted addresses.

In time hardware secured local wallets can make Bitcoin theft from local wallets much more difficult even if the wallet exists on a system which is infected with malware.

Until there is a way to "backup" BTC like a bank does (reimburse for specific reasons),whether with insurance or something similar,BTC will be used mainly by launderers & drug dealers (Silk Road)................

That will simply never happen.   Due to the nature of Bitcoin it is simply impossible to prove you didn't withdraw those coins to a new address.  No insurance company would offer a policy to cover that. 

[TangibleCryptography]

Incidentally, Capri200 either wasn't used or hasn't been cracked yet.
 - http://www.leakedin.org/?check=3d9ad3d4e34f82f0b0fd29de989d51acb737c1e8

Great password useless SHA-256 hash of password gathering website LOL

FYPFY.

[Raoul Duke]

Incidentally, Capri200 either wasn't used or hasn't been cracked yet.
 - http://www.leakedin.org/?check=3d9ad3d4e34f82f0b0fd29de989d51acb737c1e8

Great password useless SHA-256 hash of password gathering website LOL

FYPFY.

Did you bother opening the homepage before trying to fix it?

[DeathAndTaxes]

Did you bother opening the homepage before trying to fix it?

Yes.  Did you read the words in the screenshot you just provided?

Just provide your password (which we hash with JavaScript; view source to verify) or a SHA-1 hash of your password below, and we'll check.

For example here is a hash of my LinkedIn password.
http://www.leakedin.org/?check=04858397aa974628e2f20f62661034dfa7dcd233

Have fund spending the next thousand years trying to brute force it.

SHA-1 may be degraded but having the hash only doesn't really give you anything useful.

Hell here is a SHA-1 hash of my MtGox password ee5f21d188bb765b74c315cf4cda472e50f55c02
and here is SHA-1 hash of my BitcoinTalk password 030b02c46b7c238cb21ac04a7aadd1d937c5c2e2

Congrats you just collected 3 SHA-1 hashes.  That has got to be worth something.

[Raoul Duke]

Did you bother opening the homepage before trying to fix it?

Yes.  Did you read the words in the screenshot you just provided?

Just provide your password (which we hash with JavaScript; view source to verify) or a SHA-1 hash of your password below, and we'll check.

For example here is a hash of my LinkedIn password.
http://www.leakedin.org/?check=04858397aa974628e2f20f62661034dfa7dcd233

Have fund spending the next thousand years trying to brute force it.

SHA-1 may be degraded but having the hash only doesn't really give you anything useful.

Hell here is a SHA-1 hash of my MtGox password ee5f21d188bb765b74c315cf4cda472e50f55c02
and here is SHA-1 hash of my BitcoinTalk password 030b02c46b7c238cb21ac04a7aadd1d937c5c2e2

Congrats you just collected 3 SHA-1 hashes.  That has got to be worth something.

Except most people will just enter their password there.
You can trust them all you want, but don't tell people to do it.

[DeathAndTaxes]

Except most people will just enter their password there.
You can trust them all you want, but don't tell people to do it.

Right click > View Source.  Hmm yup the javascript is hashing the password using SHA-1 function and the only data sent to the server is the SHA-1 hash.

Your point again?

By your logic nobody should use Bitcoin.  While the source code is open and available unless someone has read it themselves every single line they should never recommend Bitcoin to anyone else and even if they do recommend it they should only do so to people who are capable of reading the entire source code line by line.

Which is why Bitcoin is only used by Satoshi and 3 guys from MIT with masters degrees in computer science and cryptography.

Right?

[Raoul Duke]

Right!

[Inaba]

Just cracked this hash from D&T: 030b02c46b7c238cb21ac04a7aadd1d937c5c2e2

Unhashed:  freeBFLSrofl!

Ass

[Kazimir]

Just cracked this hash from D&T: 030b02c46b7c238cb21ac04a7aadd1d937c5c2e2

Unhashed:  freeBFLSrofl!

Ass

Uhm... sha1("freeBFLSrofl!") = c23c4530a58dcb542c450bd411ca75ee8058f52a, so no.

[Inaba]

Woosh!

[DeathAndTaxes]

Woosh!

Yeah.  I thought it was funny though.  I guess you needed 66 or more posts to get it.

[ludo0777]

TL;DR, as always, NEVER INVEST MORE THAN YOU CAN AFFORD TO LOSE.

Why do I have to keep repeating that every so often.

Yes you shouldn't invest money you need for food. Full stop.

[rjk]

TL;DR, as always, NEVER INVEST MORE THAN YOU CAN AFFORD TO LOSE.

Why do I have to keep repeating that every so often.

Yes you shouldn't invest money you need for food. Full stop.

Your habit of bumping old topics without adding much to the discussion is really annoying; please stop. Did you happen to notice the dates on the thread?