Live data from Hacker News

Silk Road 2 Hacked, All Bitcoins Stolen

deepdotweb.com

31–40 of 555 posts

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#31
post #3

Given illegal nature of Silk Road 2, I can't help but be suspicious of this explanation of the hack. If someone's sufficiently willing to flaunt laws as to operate a site devoted to selling contraband, what stops them from taking advantage of their position of power and stealing from their users?

The sad thing is that not only will people trust people like this, but they'll advocate for them having more power over their lives.

http://en.wikipedia.org/wiki/Iran%E2%80%93Contra_affair

http://en.wikipedia.org/wiki/Troubled_Asset_Relief_Program

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#33
post #15

Not having very much knowledge about the financial industry - is this also an issue with marketplaces that deal with fiat monies? i.e. Dwolla, Balanced, Stripe, Venmo, all serve as intermediaries for moving money - do these companies have bank accounts that hold onto massive sums of money? What protections would go into keep those accounts secure?

The main protection overall is probably the reversibility of most kinds of transactions in the mainstream banking system (and the liability of banks to customers in many cases of fraud). At least, this kind of policy can be seen as a backstop to particular arrangements and policies like limiting the size or rate of transactions, requiring multiple authorizations for certain transactions, and so on.

The reversibility of transactions has drawbacks (one that's of interest to me is that it serves as one motivation for reducing privacy and increasing data retention).

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#35
post #3

Given illegal nature of Silk Road 2, I can't help but be suspicious of this explanation of the hack. If someone's sufficiently willing to flaunt laws as to operate a site devoted to selling contraband, what stops them from taking advantage of their position of power and stealing from their users?

This is also the guy that just talked a bunch of trash about the last Dread Pirate Roberts, and how he was so much better about security. Jinxed yourself, bro. Granted this was supposedly in the Bitcoin protocol itself, but for real, there's really never any need to stick your neck out to talk about how great your security is...

I think you're confusing Silk Road 2 with Atlantis. They did talk trash and flapped their wings with fancy Youtube commercials etc before they suddenly closed down soon before Silk Road got busted. Silk Road 2 always claimed to be the rightful heir to the original Silk Road, and have their own Dread Pirate Roberts.

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#36
post #5

Is our only recourse downloading the entire block-chain to keep our wallets stored offline? Or do I have some misunderstanding? I just really like the convenience of services like coinbase.

You don't need the block chain to keep coins. You only need a wallet. Technically your private keys never need to see the internet at all.

Edit: here is one way to do it https://en.bitcoin.it/wiki/How_to_set_up_a_secure_offline_sa...

At a recent meetup there was a presentation recommending Electrum with HD wallets instead. That would mean you really would only need to memorize a passphrase, all the keys would be generated from that so no backup necessary. Personally I am not yet 100% sure HD wallets are safe, need to look into it.

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#37
post #15

Not having very much knowledge about the financial industry - is this also an issue with marketplaces that deal with fiat monies? i.e. Dwolla, Balanced, Stripe, Venmo, all serve as intermediaries for moving money - do these companies have bank accounts that hold onto massive sums of money? What protections would go into keep those accounts secure?

No because if there are bad charges on my card the bank absorbs them, I am refunded, and I am issued a new card in under 48 hours.

If the bank itself collapses the FDIC insures my deposits.

Then again if my drug dealer steals all my money I am shit out of luck, much like all the users of this site. I guess it isn't that different at all.

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#38
post #5

Is our only recourse downloading the entire block-chain to keep our wallets stored offline? Or do I have some misunderstanding? I just really like the convenience of services like coinbase.

You can also use something like blockchain.info for slightly better security than coinbase. They do client-side encryption and decryption of wallets. Of course, if you forget your password, your coins are gone. And blockchain.info could always modify their code to steal your coins later. At least they couldn't steal them without you logging in.

But a thin wallet like Electrum is probably your best bet.

Re: Silk Road 2 Hacked, All Bitcoins Stolen

#40

The claim that this was caused by transaction malleability rings hollow. The reference client (github.com/bitcoin/bitcoin) does not resend transactions because of malleability. The only way you can have double transfers due to malleability is if you are manually reviewing transfers and re-sending them yourself manually. This seems like a very convenient scapegoat.

From my understanding of the malleability issue, couldn't you have vendor withdrawals that get sent, but then not verified by the Silk Road system? Where the original transaction gets rejected due to the modified one getting accepted by the network? So then the Silk Road internals would assume it just didn't go through and not deduct it from the vendor's internal balance, allowing the vendor to repeatedly withdraw as long as they just withdrew their whole balance and modified the transaction each time?
Post reply on HN