Bitcoin Forum
October 17, 2017, 11:36:32 AM *
News: Latest stable version of Bitcoin Core: 0.15.0.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 6 7 8 9 [10] 11 »  All
  Print  
Author Topic: Bitcoin cold storage - HACKED easily  (Read 12026 times)
mayax
Legendary
*
Offline Offline

Activity: 1008


View Profile
January 26, 2015, 06:43:20 PM
 #181


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.
1508240192
Hero Member
*
Offline Offline

Posts: 1508240192

View Profile Personal Message (Offline)

Ignore
1508240192
Reply with quote  #2

1508240192
Report to moderator
1508240192
Hero Member
*
Offline Offline

Posts: 1508240192

View Profile Personal Message (Offline)

Ignore
1508240192
Reply with quote  #2

1508240192
Report to moderator
1508240192
Hero Member
*
Offline Offline

Posts: 1508240192

View Profile Personal Message (Offline)

Ignore
1508240192
Reply with quote  #2

1508240192
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1508240192
Hero Member
*
Offline Offline

Posts: 1508240192

View Profile Personal Message (Offline)

Ignore
1508240192
Reply with quote  #2

1508240192
Report to moderator
ChuckBuck
Hero Member
*****
Offline Offline

Activity: 560



View Profile
January 26, 2015, 06:58:05 PM
 #182


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.

Stop trying to spread FUD dude. 

It's already been established, it's near impossible to hack cold storage, unless that attacker somehow installed the compromised version of ECDSA on the cold offline wallet.

Can't be done, only in theory.

██
█║█
║║║
║║║
█║█
██

                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
e i d o o
██


                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
██
█║█
║║║
║║║
█║█
██
sethminer14
Member
**
Offline Offline

Activity: 98


View Profile
January 26, 2015, 07:34:53 PM
 #183

So what everybody needs to realize is that if you don't have the common sense to take proper precautions, you will get hacked.

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
♥ ♦ ♣ ♠ SATOSHIBTCET 100% Provably Fair Bitcoin Video Poker & Casino Games » In-Game Faucet ♥ ♦ ♣ ♠
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
mayax
Legendary
*
Offline Offline

Activity: 1008


View Profile
January 29, 2015, 05:36:39 PM
 #184


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.

Stop trying to spread FUD dude. 

It's already been established, it's near impossible to hack cold storage, unless that attacker somehow installed the compromised version of ECDSA on the cold offline wallet.

Can't be done, only in theory.

who established ? Smiley 
ChuckBuck
Hero Member
*****
Offline Offline

Activity: 560



View Profile
January 29, 2015, 05:46:17 PM
 #185


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.

Stop trying to spread FUD dude. 

It's already been established, it's near impossible to hack cold storage, unless that attacker somehow installed the compromised version of ECDSA on the cold offline wallet.

Can't be done, only in theory.

who established ? Smiley 

Carlos Rienzi, head of Security at Xapo:

https://blog.xapo.com/xapo-responds-to-coindesk-article-on-susceptibility-to-backdoor-attack/

Your myth has been debunked.

BUSTED!     Grin

██
█║█
║║║
║║║
█║█
██

                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
e i d o o
██


                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
██
█║█
║║║
║║║
█║█
██
mayax
Legendary
*
Offline Offline

Activity: 1008


View Profile
January 29, 2015, 05:49:53 PM
 #186


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.

Stop trying to spread FUD dude.  

It's already been established, it's near impossible to hack cold storage, unless that attacker somehow installed the compromised version of ECDSA on the cold offline wallet.

Can't be done, only in theory.

who established ? Smiley  

Carlos Rienzi, head of Security at Xapo:

https://blog.xapo.com/xapo-responds-to-coindesk-article-on-susceptibility-to-backdoor-attack/

Your myth has been debunked.

BUSTED!     Grin

final words : "we believe that our deep cold storage architecture offers the highest levels of bitcoin storage security available by any bitcoin company."

why do you show me ADVERTING? Smiley
ChuckBuck
Hero Member
*****
Offline Offline

Activity: 560



View Profile
January 29, 2015, 06:12:02 PM
 #187


That would not help with this attack, as the keys are compromised during the signing whether it happens online or offline. If you have a system running a compromised version of ECDSA, there's nothing you can really do to protect the private key of an address that's been used to sign a transaction. That being said, the attacker first has to get you to use a compromised version.
Which definitely can't be defined as 'easily'.
The hack would be rather hard to deploy, especially on a larger base.

large scale = any online wallet can be compromised in this way. When it's about computer, you can not be ever sure. Anyway, why would someone keep a large amount of funds in BTC by having the fear that he can wake up in a morning and see : balance ZERO.

Stop trying to spread FUD dude.  

It's already been established, it's near impossible to hack cold storage, unless that attacker somehow installed the compromised version of ECDSA on the cold offline wallet.

Can't be done, only in theory.

who established ? Smiley  

Carlos Rienzi, head of Security at Xapo:

https://blog.xapo.com/xapo-responds-to-coindesk-article-on-susceptibility-to-backdoor-attack/

Your myth has been debunked.

BUSTED!     Grin

final words : "we believe that our deep cold storage architecture offers the highest levels of bitcoin storage security available by any bitcoin company."

why do you show me ADVERTING? Smiley


Not sure what ADVERTING is, but whatever Xapo is selling, I'm buying.   Roll Eyes

██
█║█
║║║
║║║
█║█
██

                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
e i d o o
██


                    ▄██▄
                  ▄██████▄
                ▄██████████
              ▄██████████▀   ▄▄
            ▄██████████▀   ▄████▄
          ▄██████████▀    ████████▄
         ██████████▀      ▀████████
         ▀███████▀   ▄███▄  ▀████▀   ▄█▄
    ▄███▄  ▀███▀   ▄███████▄  ▀▀   ▄█████▄
  ▄███████▄      ▄██████████     ▄█████████
  █████████    ▄██████████▀    ▄██████████▀
   ▀█████▀   ▄██████████▀    ▄██████████▀
     ▀▀▀   ▄██████████▀    ▄██████████▀
          ██████████▀    ▄██████████▀
          ▀███████▀      █████████▀
            ▀███▀   ▄██▄  ▀█████▀
                  ▄██████▄  ▀▀▀
                  █████████
                   ▀█████▀
                     ▀▀▀
██
█║█
║║║
║║║
█║█
██
koelen3
Legendary
*
Offline Offline

Activity: 980


Sooner or later, a man who wears two faces forgets


View Profile
January 31, 2015, 06:50:57 PM
 #188

So i read the whole post and to find out here afterwards that it was fake  Cry
THough it is good that it was fake , would have costed me lot of work to make them more safe
SargeR33
Member
**
Offline Offline

Activity: 112

★Bitin.io★ - Instant Exchange


View Profile
February 01, 2015, 10:21:08 AM
 #189

Since getting into bitcoin, I have never seen anything so full of made up FUD just to try push people out.

This is the same as when a new player joins an online game. He is bulled, threatened and made to feel weak until they eventually leave the game.

The problem I see with bitcoin is there are too many people who's intention is to push people away from bitcoin.

BitNerd
Full Member
***
Offline Offline

Activity: 131


View Profile
February 01, 2015, 10:39:40 AM
 #190

there are many hacking reports daily.


Where can we see those reports?
piramida
Legendary
*
Offline Offline

Activity: 1120



View Profile
March 17, 2015, 03:52:02 PM
 #191

there are many hacking reports daily.


Where can we see those reports?

In OPs heavily hallucinating brain Smiley I guess it's scary to live your life when you don't understand anything you read, as is the case with OP. To him, most probably reading an article that "eating dangerous substances can sometimes lead to death" equals to a summary of "eat = die". I feel sorry for him.

i am satoshi
kingofbitcoin
Sr. Member
****
Offline Offline

Activity: 406

Good bye Blockchain , you were hacked


View Profile
January 27, 2016, 07:59:59 AM
 #192

I just want to share with you guys my story which is also in my avatar.
First I learned about bitcoin in early 2013 and immediately fall in love with it.
I kept all my BTC in blockchain wallet, an online wallet. My bad as I opened it even in my work PC (full of spyware or viruses) so I was stolen my private key from some hacker ,trojan, or backdoor program.

I immediately after then, started using MULTIBIT CLASSIC in LINUX (not a single problem from more than 1 year) I just upgraded yesterday to a new laptop with LINUX mint latest and MULTIBIT HD which has better security.

Whats the risk of my BTC and private keys to be stolen? I think its low ,but what are they in % (using LINUX adds a lot of chances to not getting hacked easily , still possible though) Huh

1DDc49pyE3xEbCt8YakfLe48Syrq5XLve

ISLAM-The only true monotheist religion
Lauda
Legendary
*
Offline Offline

Activity: 1638


GUNBOT Licenses -10% with ref. code 'GrumpyKitty'


View Profile WWW
January 27, 2016, 08:04:01 AM
 #193

I kept all my BTC in blockchain wallet, an online wallet. My bad as I opened it even in my work PC (full of spyware or viruses) so I was stolen my private key from some hacker ,trojan, or backdoor program.
Whats the risk of my BTC and private keys to be stolen? I think its low ,but what are they in % (using LINUX adds a lot of chances to not getting hacked easily , still possible though) Huh
Even though you kind of made a relevant post, you still revived a very old threads for no good reason. Nobody can tell you a chance in %; exact chances in these cases can not be calculated to the high amount of variables. It is certainly possible to get hacked but is rather improbable. It depends solely on you, not anyone else. If you want to be even more sure then use a system solely for running Bitcoin.

          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
.
|
.
|
          ▄█████▄
        ▄█████████▄
      ▄████▀   ▀████▄
    ▄████▀   ▄ ▄█▀████▄
  ▄████▀   ▄███▀   ▀████▄
▄████▀   ▄███▀   ▄   ▀████▄
█████   ███▀   ▄███   █████
▀████▄   ▀██▄▄███▀   ▄████▀
  ▀████▄   ▀███▀   ▄████▀
    ▀████▄       ▄████▀
      ▀████▄   ▄████▀
        ▀███  ████▀
          ▀█▄███▀
unthy
racquemis
Member
**
Offline Offline

Activity: 62


View Profile
January 27, 2016, 09:17:21 AM
 #194

I just want to share with you guys my story which is also in my avatar.
First I learned about bitcoin in early 2013 and immediately fall in love with it.
I kept all my BTC in blockchain wallet, an online wallet. My bad as I opened it even in my work PC (full of spyware or viruses) so I was stolen my private key from some hacker ,trojan, or backdoor program.

I immediately after then, started using MULTIBIT CLASSIC in LINUX (not a single problem from more than 1 year) I just upgraded yesterday to a new laptop with LINUX mint latest and MULTIBIT HD which has better security.

Whats the risk of my BTC and private keys to be stolen? I think its low ,but what are they in % (using LINUX adds a lot of chances to not getting hacked easily , still possible though) Huh

Opening your online wallet on a PC full of viruses isn't the smartest thing to do... i never use any online wallet though. I only use software wallets, password protected.
kingofbitcoin
Sr. Member
****
Offline Offline

Activity: 406

Good bye Blockchain , you were hacked


View Profile
January 27, 2016, 09:24:25 AM
 #195

Thats why I bought a HP PAVILION DV 7 with only LINUX and only WALLETS in it. Don't intend to use it for anything else. Thanks for your answers.

1DDc49pyE3xEbCt8YakfLe48Syrq5XLve

ISLAM-The only true monotheist religion
elizabethqueen
Sr. Member
****
Offline Offline

Activity: 252



View Profile
January 27, 2016, 02:34:37 PM
 #196

Your funds are not safe neither in "cold storage". Read:

https://www2.informatik.hu-berlin.de/~verbuech/klepto-ecdsa/klepto-ecdsa.pdf  

or

http://www.coindesk.com/research-hackers-install-backdoor-bitcoin-cold-storage/


many of you said "cold storage is the best". well. it is not. that explains many hacks in Bitcoin which some of the bitcoiners considered to be very safe. Smiley

What's next? Mass withdrawals from Bitcoin. What can you do when you KNOW that your cold storage is exposed to be stolen? You must be stupid to keep your earnings there.

Only few people knew about this exploit. Now, any russian or ukrainian kid will try to hack the cold storages and guess what?! THEY WILL DO IT !    Grin
talk about bitcoin most secure storage,i think its depending how we secure our device too,cold storage maybe not safest way to keep your bitcoin,but i think its better than use only online wallet to store your big mount of your bitcoin.

jethrorn99
Full Member
***
Offline Offline

Activity: 224



View Profile
January 27, 2016, 03:42:58 PM
 #197

How's that could happened ?

It's going to happen only if there's malware or other program that could do that.

BellaBitBit
Hero Member
*****
Offline Offline

Activity: 560


View Profile
January 27, 2016, 03:49:03 PM
 #198

So the only truly safe to store Bitcoin is on paper wallet?  Storage of Bitcoin is one of my least favorite parts about Bitcoin, some of it is over the head of the average user that is not super technical.

I love Bitcoin
NorrisK
Legendary
*
Offline Offline

Activity: 1428



View Profile
January 27, 2016, 04:12:35 PM
 #199

If that was the case than why aren't the exchanges hacked more often? Or large holders keeping their coins safe on paper?

Maybe it is time for everybody to switch to hardware wallets though.

ABitNut
Hero Member
*****
Offline Offline

Activity: 760


I'm a cynic, I'm a quaint


View Profile
January 27, 2016, 11:42:30 PM
 #200

This topic should not have been resurrected. There was little useful discussion in it to start with and it only got worse.



              ▄
            ▄███▄
          ▄███████▄
   ▄▄▄    █
█████████
   ███
    ███████████▄
██    ████    ████████▄
      ████    ██████████
  ████    ████▀██████████
  ████    ██▀   ▀█████████▄
      █████       █████████▄
      ███▀         ▀████████
  ██████▀           ▀███████
  █████▀             ▀█████
   ████ █▄▄▄     ▄▄▄█ ████
    ███ ▀███████████▀ ███
     ▀▀█▄ █████████ ▄█▀▀
        ▀▀▄▄ ▀▀▀ ▄▄▀▀
●●
●●
●●
●●
●●
●●
|●  facebook
●  reddit
●  ann thread
|
█ ██
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██

██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
█ ██ █
██ █
Pages: « 1 2 3 4 5 6 7 8 9 [10] 11 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!