Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

dzoba.com

Post reply on HN
Print view View original

21–30 of 157 posts

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#21

Post by badman_ting »

jychang wrote: post #5
zoba wrote: post #2

In case my server goes, here is the text: Right now in ##mtgox-chat someone named nanashi____ claims to be speaking for a group of hackers who have gotten into Mt Gox in an attempt to figure out what happened. Nanashi says they have a DB dump and are looking at what to do with it. Nanashi gave these links: A conversation in Japanese with Karpeles and a Banker ( http://picosong.com/Y7di/ ) Some Mt Gox Code ( http://pa…

They have passport scans? I'm impressed by how hard MtGox is fucking up.

Yeah, that is really something. To think that people actually supplied that info. Wow.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#22

Post by zoba »

gklitt wrote: post #16

I'm fluent in Japanese. I listened to the beginning of the recording and it's legit. One of the voices is almost certainly Mark Karpeles' (based on hearing his voice in his recent public apology -- his Japanese is broken but reasonably proficient). It seems to be a recording of a Jan 30 2014 meeting where bankers from Mizuho Bank are asking Karpeles various questions about Bitcoin, the nature of his business, his par…

Awesome, thank you for this.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#23

Post by buro9 »

badman_ting wrote: post #21
jychang wrote: post #5

Earlier quoted context omitted.

They have passport scans? I'm impressed by how hard MtGox is fucking up.

Yeah, that is really something. To think that people actually supplied that info. Wow.

I didn't, I signed up to an account and stopped at this point because unlike a financial institution they are not governed by laws that require this or would ensure the security of such data.

But I totally understand why people did supply it.

They supplied it because:

1) They've been trained to

2) For a while MtGox was actually the most well-known (and therefore trusted) of the exchanges

On #1, every financial institution in the world goes through some form of KYC (Know Your Customer) anti-laundering process that involves identity verification. And people are so used to doing this when signing up to financial accounts that they failed to comprehend that MtGox (and other exchanges) is not a financial institution being regulated by the same safeguards for their data.

On #2, even if you accepted that they were not a financial institution almost all of the bitcoin exchanges are asking for verification. And the larger more well-known exchanges are viewed as "least risky". It's a herd-like mentality, if these thousands of others did it, it must be safe.

I never supplied the info, to this or other exchanges, but I totally see why excited people who feared missing out as the price rose were willing to do so.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#24

Post by AVTizzle »

nathan_f77 wrote: post #8

Wow, that's a lot of my personal data leaked in these last months. My email and encrypted password in the adobe breach, my user id and part of my mobile number via SnapChat, and now hackers potentially have scans of my passport courtesy of Mt. Gox. I'm probably forgetting about some leaks, and who knows how many security breaches were never discovered. The internet is not a safe place.

I feel for you bud. I'm a UMD grad (SSN) who shopped at Target in December (CC).

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#25

Post by MaulingMonkey »

nathan_f77 wrote: post #8

Wow, that's a lot of my personal data leaked in these last months. My email and encrypted password in the adobe breach, my user id and part of my mobile number via SnapChat, and now hackers potentially have scans of my passport courtesy of Mt. Gox. I'm probably forgetting about some leaks, and who knows how many security breaches were never discovered. The internet is not a safe place.

Just a few years back I thought my biggest security risk was myself. In retrospect, this seems horrifically naive: The services I use outnumber me so vastly that the 10 or so breaches that I'm aware of, merely counting the services that I use, seems astoundingly low.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#26

Post by pmorici »

gklitt wrote: post #16

I'm fluent in Japanese. I listened to the beginning of the recording and it's legit. One of the voices is almost certainly Mark Karpeles' (based on hearing his voice in his recent public apology -- his Japanese is broken but reasonably proficient). It seems to be a recording of a Jan 30 2014 meeting where bankers from Mizuho Bank are asking Karpeles various questions about Bitcoin, the nature of his business, his par…

There are additional comments about this call in this reddit thread...

http://www.reddit.com/r/Bitcoin/comments/1zepgt/mark_apparen...

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#27

Post by nothxbro »

Ok, some good news. It might be untrue about them having passport scans. Reason I say that, is the following:

We know from the leaked mtgox crisis plan doc that they have 550,000 verified accounts.

Each user who wanted to be verified had to scan at least 2 documents- a passport+license and a electric bill of sorts.

Assuming both documents alone were only 100KB combined (and its likely way more than that since scans are usually 500KB+ per document) than we can estimate the file size:

550,000 x 100KB = 52.45GB

Thats more than double the claimed 20GB.

In fact, even if we believe that every persons doc is in the DB; and assuming nothing else but passports is in there- you are only allowing for 20KB per document

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#28

Post by nwh »

nathan_f77 wrote: post #8

Wow, that's a lot of my personal data leaked in these last months. My email and encrypted password in the adobe breach, my user id and part of my mobile number via SnapChat, and now hackers potentially have scans of my passport courtesy of Mt. Gox. I'm probably forgetting about some leaks, and who knows how many security breaches were never discovered. The internet is not a safe place.

I'm still getting almost daily phishing/malware from the Mt Gox leak in 2011, and I never even signed up for anything more than to see what it's interface was like. Can't imagine how that will be with people having copies of passports (supposedly).

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#29

Post by badman_ting »

buro9 wrote: post #23
badman_ting wrote: post #21

Earlier quoted context omitted.

Yeah, that is really something. To think that people actually supplied that info. Wow.

I didn't, I signed up to an account and stopped at this point because unlike a financial institution they are not governed by laws that require this or would ensure the security of such data. But I totally understand why people did supply it. They supplied it because: 1) They've been trained to 2) For a while MtGox was actually the most well-known (and therefore trusted) of the exchanges On #1, every financial instit…

That is a rather charitable way of looking at this situation. Which is to be commended, I wish I was still capable of thinking that way.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#30

Post by [deleted] »

MaulingMonkey wrote: post #25
nathan_f77 wrote: post #8

Wow, that's a lot of my personal data leaked in these last months. My email and encrypted password in the adobe breach, my user id and part of my mobile number via SnapChat, and now hackers potentially have scans of my passport courtesy of Mt. Gox. I'm probably forgetting about some leaks, and who knows how many security breaches were never discovered. The internet is not a safe place.

Just a few years back I thought my biggest security risk was myself. In retrospect, this seems horrifically naive: The services I use outnumber me so vastly that the 10 or so breaches that I'm aware of, merely counting the services that I use, seems astoundingly low.

[deleted]
Post reply on HN