Live data from Hacker News

Bitcoin payment processor BIPS compromised, 1295 BTC stolen

bitcointalk.org

41–50 of 70 posts

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#41
post #24

How do we know this isn't an inside job?

A good question to be asking. I agree with this sentiment:

> Every time a company loses somebody else's bitcoins, the main assumption should be that it was an inside job. It's way too easy for a company to take the money and say that they were hacked.

http://www.reddit.com/r/Bitcoin/comments/1rexob/bitcoin_paym...

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#44
Here's their security page: https://bips.me/security -- "industry-leading security" .. "BIPS ... does not store bitcoin on its servers".

Is it time for a PCI-like consortium that will validate your bitcoin storage security procedures? (Not that PCI is guarantee of anything, but at least following it prevents you from having full credit card data lying around in files).

I.e. analyze your fail-safes (which seem to be lacking) and validate that unless someone is holding a gun to the owner's head, that your 1000 bitcoins held for you in their "vault" cannot be sent off to a random address.

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#45
post #13

Earlier quoted context omitted.

There's no difference as if you shut your site down everytime someone DDoS then you'll have no customers anyway.

"If we keep closing our retail store every time there's a riot inside of it, we'll never have any customers." No, you shut the thing down, you post a page that explains what is going on and what you're doing about it, then you open again when it's clear.

Your analogy is wrong. A riot inside your store would be a compromised server. What you want to do is to close your store every time someone who looks like a burglar walks by, in front of your store. After no time the competing store on the other side of the street will hire an actor to walk by your store and shut you down just with walking in front of your store.

It's super easy for every competitor to get you out of business forever if you just shut down. DDoS is not like something especially hard or expensive to set up (depending on your service of course), but again, shutting down is not an option as a standard countermeasure.

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#46
1295 bitcoin stolen with a value of x dollar. See, they didn't care about the bitcoin they cared about the dollars behind it. As long as a bitcoin its value is measured in dollars and accepting bitcoin is merely done because it is at a high dollar rate, how can this possibly be a viable alternative currency? Apart from the whole fluctuation on steroids, bitcoin is nothing more than a wrapper for American dollars.

Because, at the end of the day, you have to pay for your groceries and mortgage in dollars. B-but muh Subway sandwich

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#47

1295 bitcoin stolen with a value of x dollar. See, they didn't care about the bitcoin they cared about the dollars behind it. As long as a bitcoin its value is measured in dollars and accepting bitcoin is merely done because it is at a high dollar rate, how can this possibly be a viable alternative currency? Apart from the whole fluctuation on steroids, bitcoin is nothing more than a wrapper for American dollars. Bec…

Honestly, let's think a little bit here. If this story was reported on in China, what currency would it be converted to for the readership?

If a story about American dollars being stolen was reported on in China, what currency would it be reported in? Is the dollar just a wrapper for the Yuan?

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#49
post #44

Here's their security page: https://bips.me/security -- "industry-leading security" .. "BIPS ... does not store bitcoin on its servers". Is it time for a PCI-like consortium that will validate your bitcoin storage security procedures? (Not that PCI is guarantee of anything, but at least following it prevents you from having full credit card data lying around in files). I.e. analyze your fail-safes (which seem to be l…

Bitcoin advocates talk about lack of regulations a feature, not a bug, so I'd wonder how well it'd go over.

I think it's important and will have to happen eventually.

Re: Bitcoin payment processor BIPS compromised, 1295 BTC stolen

#50
post #16
post #15

Earlier quoted context omitted.

@fleitz A million dollars difference, seems to me.

You mean in addition to being technically incompetent the team was also too stupid to buy insurance?

Given recorded history, why would anybody sell insurance to bitcoin companies?
Post reply on HN