[ANN] LocalBitcoins.com - a location-based bitcoin to cash marketplace

[sayulita]

If there are any sellers in the USA who accept cash deposits into their bank accounts for bitcoin please PM me immediately.

Thanks.

[ppykdm32]

I lost 0.8 btc. That's all I have. TT
User: Erdinger
via paypal
What should I do to take my bitcoin back?

[SebastianJu]

Why did you accept paypal? Its not even offered by LBTC isnt it? And its that way for a reason. You wont get the coins back now.

[hoop]

how this is work safely 

[skivrmt]

how this is work safely 

Paypal isn't safe.  Cash deposits at a local bank are safe.  Coins get escrowed.  Buy from seller with 100% rating and 30+ feedback.

[counter]

how this is work safely 

It works safely if the person makes the right decisions of how to best make the transaction.

[avanda1121]

Sold my bitcoins in this page. Its really good to trade there 

+1

[Stephen Gornick]

Any suggestions are welcome!

The site is currently offline (no response when accessing the site).    There is no information out-of-band, such as a message on a status.localbitcoins.com http://localbitcoins.blogspot.com site (hosted separately), or an acknowledgement of the issue here in this thread, and/or on Twitter: http://twitter.com/localbitcoins

[Stephen Gornick]

There is no information out-of-band

Just a few minutes after I posted that, there was a blog post and Twitter status update -- so LocalBitcoins did address the outage out-of-band eventually.

As far as what happened:

LocalBitcoins received a very dangerous attack against the site infrastructure
The site will be down for a while as the system is being rebuilt

 - http://localbitcoins.blogspot.com/2014/05/attack-against-localbitcoins.html

[ReBoRn]

Sad news but good is all data is safes and site will back soon with all features and stuff

[BurtW]

Would be nice if they caught the bastards with their hands in the cookie jar and were able to ID them but having them get nothing for their efforts is a huge win in Bitcoinland.

[dscotese]

I posted this elsewhere, but figured I should have put it in this thread, so here it is:

A reasonable encryption strategy is to be able to decrypt with a password of at least 12 (more like 15 - 20) characters for access that lasts a few minutes, or a much longer password (40 characters or more) for access that lasts an hour or two.  If we assume that the hacker grabbed a copy of enough information to be able to start an exhaustive search for the password, LBC knows how long we can expect his search to go on before he finds it.

If his search is ever successful, what data will be compromised?

Is there a list of BTC addresses that LBC can provide to miners, asking them to filter out transactions from them until further notice?

A protocol for that kind of lock would be nice. I would honor it if I were mining. Just a simple request "please lock this BTC addy until further notice," signed with the address would do. It could be broadcast in any transaction and thereby get to all miners.

Ahh, of course if it could be unlocked with a signature from the same address, it would be kind of useless.  But suppose it had to be unlocked with a signature from the same address that locked it?  So the attacker would need that external address' private key too.

[leopard2]

I would suggest the coins have either been stolen already or not at all. Either

a) attacker has access to wallets or private keys for 40 minuntes, and managed to transfer coins -> GONE
b) attacker had no access or no time to transfer, then LBC staff will certainly have moved coins to new wallets -> OK

The part that I don't understand .. is there no callback to a given phone no when access to a server is granted? 2FA for accounts but not for root access?   

[acegilz]

do anybody know how is this done exactly? If its not to hard to do, I would like to protect my files on the server too.. thanks

All data on the website server is encrypted. Manual actions are needed to make this data readable, so the attacker could not gain access to the data even when having a server console access.

[Stephen Gornick]

Last update 16 hours ago:

We are restoring the site and you can log in already. Some contacts might not yet be available. Transactions are delayed.
 - https://twitter.com/LocalBitcoins/status/463035216471539712

Looks like they re-opened prematurely .... seeing sluggish performance, getting HTTP 500 errors, etc.

[ReBoRn]

Last update 16 hours ago:

We are restoring the site and you can log in already. Some contacts might not yet be available. Transactions are delayed.
 - https://twitter.com/LocalBitcoins/status/463035216471539712

Looks like they re-opened prematurely .... seeing sluggish performance, getting HTTP 500 errors, etc.

Its not working for me 502 error or server not found may be down again or its just for me

[Stephen Gornick]

Looks like they re-opened prematurely .... seeing sluggish performance, getting HTTP 500 errors, etc.

We are having some performance issues right now. ETA for getting basic functions working is 2-3 hours.
 - https://twitter.com/LocalBitcoins/status/463294142400192512

After logging in now I see:

We are working on the issues
We are experiencing heavy load right now. The site might respond slowly and you might run into issues. However please still feel free to try to access some of the site functionality. Our team is working on this and we should be back in business in a few hours.


But none of the trading functionality (e.g., Dashboard) is available.

[BurtW]

DOWN.

Another attack?  Whatsup?

http://www.isitdownrightnow.com/localbitcoins.com.html

[dscotese]

Hey Burt, thanks for that site (iidrn.com).

[madtune]

Damn localbitcoins i just lose 3.5 btc my account was hacked and can't login to see other transaction.

my money was send from this wallet 1NUi7FYqUfk7Xmx15h7KWZEwfi2hEKpdLn to this one 1Jme6DcnyuRbVKcsDXTsgFbpkUzPtsR7Bc after few mins he send again to this wallet 14hkTLRiar9RXLhWc8sJTohBhG4pbXXG2S. It's any way to block, freze that wallet please let me know.

  

https://blockchain.info/address/1Jme6DcnyuRbVKcsDXTsgFbpkUzPtsR7Bc    
https://blockchain.info/address/14hkTLRiar9RXLhWc8sJTohBhG4pbXXG2S  


also i don't have 2 verification on my wallet how he get my password i think is very sick site now is down for 10 hours and they say that localbitcoins had no problem and user are responsible for the lose.