Bitcoinica MtGox account compromised

[stick_theman]

LOL.  Based on past posts since this whole clusterfuck began, they hardly every communicate with each other except via the occasional email.  I don't think there've been too many all night Skype sessions going on.

LOL @ clusterfuck.   One word ruled them all.

[ninjarobot]

...but I assume that by now you guys (all Bitconica LP partners) must have had a crisis meeting and made some concrete decisions on how to proceed following this latest MtGox compromise? Please don't leave your customers guessing.

LOL.  Based on past posts since this whole clusterfuck began, they hardly every communicate with each other except via the occasional email.  I don't think there've been too many all night Skype sessions going on.

So what do you assume they are doing now - Sipping Piña coladas?

But I am afraid you might be right. A wise man once said: “Problems cannot be solved by the same level of thinking that created them.” - and to be honest it doesn't seem they are even trying to solve the problems anymore. Dysfunctional company is dysfunctional.

[defxor]

Hacker, or somebody, can't spell or purposely misspelled word: LASTPAS; OFFICALY

And the hacker used hotmail. Surely an IP can be traced via them/there.

The spelling is most certainly on purpose, and Hotmail last time I checked (years ago) includes a header in outgoing mail called X-Originating-IP. It will surely turn out to belong to a TOR exit node or anonymizing service.

[Raoul Duke]

Hacker, or somebody, can't spell or purposely misspelled word: LASTPAS; OFFICALY

And the hacker used hotmail. Surely an IP can be traced via them/there.

The spelling is most certainly on purpose, and Hotmail last time I checked (years ago) includes a header in outgoing mail called X-Originating-IP. It will surely turn out to belong to a TOR exit node or anonymizing service.

The captchas on Hotmail registration page aren't very fond of showing themselves to persons who use proxies... even private ones... Never tried with Tor, tho.

[repentance]

So what do you assume they are doing now - Sipping Piña coladas?

Probably all consulting with their own individual lawyers to evaluate the extent to which they can be held liable - collectively and individually - for this mess.  If I was any one of them, at this point I'd be communicating with the others only through my lawyer.

[Phinnaeus Gage]

So what do you assume they are doing now - Sipping Piña coladas?

Probably all consulting with their own individual lawyers to evaluate the extent to which they can be held liable - collectively and individually - for this mess.  If I was any one of them, at this point I'd be communicating with the others only through my lawyer.

To be fair, Genjix is in Berlin attending a hacker convention.
Zhou Tong is on spring break, back in Singapore.
Patrick is...
Tihan Seale is VC'ing, probably another irs.com or invention.com sale.
Donald is...
Wendon is...

~Bruno~

[R-]

I feel just like the little boy after reading about Bitcoinica's third incidence of theft.

[Bitcoin Oz]

So what do you assume they are doing now - Sipping Piña coladas?

Probably all consulting with their own individual lawyers to evaluate the extent to which they can be held liable - collectively and individually - for this mess.  If I was any one of them, at this point I'd be communicating with the others only through my lawyer.

To be fair, Genjix is in Berlin attending a hacker convention.
Zhou Tong is on spring break, back in Singapore.
Patrick is...
Tihan Seale is VC'ing, probably another irs.com or invention.com sale.
Donald is...
Wendon is...

~Bruno~

The only people "winning" will be lawyers.

[mrbrown]

Posted an update to the OP.

i really dont give a fuck anymore just give me my coins back before you loose them all, i have 2800 BTC stuck with you idiots, unbelievable how dumb you guys are..anyway when can I expect my coins ?? you send me a mail with some bs that you had to build a case for my accounts?? hurry the fuck up please

[fabrizziop]

Oh boy, just simple GOOGLE AUTHENTICATOR with a smartphone would have saved your ass and money. What a shame, this is really impressive, seems that the security of Bitcoinica's funds is directed by a pigeon.

[proudhon]

What a shame, this is really impressive, seems that the security of Bitcoinica's funds is directed by a pigeon.

[TheButterZone]

LOL

[Gabi]

Oh boy, just simple GOOGLE AUTHENTICATOR with a smartphone would have saved your ass and money. What a shame, this is really impressive, seems that the security of Bitcoinica's funds is directed by a pigeon.

+1!

[Phinnaeus Gage]

zhoutong:
1. Is bitcoinica a corporation?
2. Why hasn't bitcoinica submitted proper corporate documentation to mtgox? (if you have, please say so)

1. Bitcoinica is currently operated by xWaylab Inc., a Delaware corporation.

2. I have submitted by passport for AML. So our main account has a limit increase. However, we have separate accounts for hedging and withdrawals because one has to be protected by Yubikey. The withdrawal account has normal account limits while the hedging account doesn't have.

Each time you do a manual withdrawal, I would have to manually log in to Mt. Gox account using the Yubikey, and withdraw. This works 99% of the time.

I have requested for withdrawal limit increase on the bitcoinica_withdrawal account, but they rejected because both accounts are owned by the same owner, and the only way to do it is to wait for their sub-account feature (with shared withdrawal limits or something).

Now I'm traveling and I don't have Yubikey access at the moment, so Bitcoinica users have to request for manual withdrawal limit resets.

AND

I believe that one must use key/secret authentication in order to withdraw.

Bitcoinica has an account with Yubikey, and we had to set up another account for automated Mt. Gox code withdrawals till recently.

Now we are using key/secret authentication to process withdrawals from our main account directly.

Slight aside:

Zhou has already told us that his USD reserves amounted to somewhere around $100-200K IIRC.  correct me if i'm wrong about this.

this is peanuts compared to where the customer balances are i would bet so Ferroh is correct.

The reserve is the total of all customer deposits plus 50% of our historical profits.

It's simply impossible to trade beyond Bitcoinica's means.

Also, don't worry about profitability for us. We have been very profitable. If you want to argue against this fact, then continue trolling...

[repentance]

zhoutong:
1. Is bitcoinica a corporation?
2. Why hasn't bitcoinica submitted proper corporate documentation to mtgox? (if you have, please say so)

1. Bitcoinica is currently operated by xWaylab Inc., a Delaware corporation.

2. I have submitted by passport for AML. So our main account has a limit increase. However, we have separate accounts for hedging and withdrawals because one has to be protected by Yubikey. The withdrawal account has normal account limits while the hedging account doesn't have.

Each time you do a manual withdrawal, I would have to manually log in to Mt. Gox account using the Yubikey, and withdraw. This works 99% of the time.

I have requested for withdrawal limit increase on the bitcoinica_withdrawal account, but they rejected because both accounts are owned by the same owner, and the only way to do it is to wait for their sub-account feature (with shared withdrawal limits or something).

Now I'm traveling and I don't have Yubikey access at the moment, so Bitcoinica users have to request for manual withdrawal limit resets.

AND

I believe that one must use key/secret authentication in order to withdraw.

Bitcoinica has an account with Yubikey, and we had to set up another account for automated Mt. Gox code withdrawals till recently.

Now we are using key/secret authentication to process withdrawals from our main account directly.

Zhou has stated that a new Bitcoinica account was established at MtGox when management of Bitcoinica changed (and I seem to recall MtGox saying the same thing).  It's possible that the new accounts were set up somewhat differently.

[Vod]

I believe that one must use key/secret authentication in order to withdraw.

Bitcoinica has an account with Yubikey, and we had to set up another account for automated Mt. Gox code withdrawals till recently.

Now we are using key/secret authentication to process withdrawals from our main account directly.

So the key/secret authentication was in place and turned off before the "theft"?

[Herodes]

Perhaps this is symptomatic for the claims process?

Code:

puter@mybox:~$ ping bitcoinconsultancy.com
PING bitcoinconsultancy.com (50.57.81.35) 56(84) bytes of data.
wait for it... wait for it... wait for it... wait for it... wait for it...

Proudhon: I think you're disrespecting that pigeon, don't be surprised if a relative of it shits on your jacket next time you get out! 

[Clipse]

Next up, Intersango balances will be cleared if not gone allready.

I love these business strategies, divide and conquer at its finest hour.

[rjk]

Perhaps this is symptomatic for the claims process?

Code:

puter@mybox:~$ ping bitcoinconsultancy.com
PING bitcoinconsultancy.com (50.57.81.35) 56(84) bytes of data.
wait for it... wait for it... wait for it... wait for it... wait for it...

Proudhon: I think you're disrespecting that pigeon, don't be surprised if a relative of it shits on your jacket next time you get out! 

That site's been off since the first hack happened.

[Bro]

Next up, Intersango balances will be cleared if not gone allready.

I love these business strategies, divide and conquer at its finest hour.

what about intersango? is it not legit now?