Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

Post by nwh » Mon, Mar 03, 2014, 7:44 AM UTC

claudius wrote: post #36

nwh wrote: post #28

Earlier quoted context omitted.

I'm still getting almost daily phishing/malware from the Mt Gox leak in 2011, and I never even signed up for anything more than to see what it's interface was like. Can't imagine how that will be with people having copies of passports (supposedly).

My spam folder is also full of, well, spam addressed to the email address I supplied to Dropbox (and only Dropbox) when I first signed up there sometime in 2011 and later leaked (I think 2012). Sometimes I wish data privacy laws were stricter, but it appears that not even financial services laws are sufficiently strict, as just demonstrated here.

Post by ealloc » Mon, Mar 03, 2014, 7:55 AM UTC

buro9 wrote: post #23

badman_ting wrote: post #21

Earlier quoted context omitted.

Yeah, that is really something. To think that people actually supplied that info. Wow.

I didn't, I signed up to an account and stopped at this point because unlike a financial institution they are not governed by laws that require this or would ensure the security of such data. But I totally understand why people did supply it. They supplied it because: 1) They've been trained to 2) For a while MtGox was actually the most well-known (and therefore trusted) of the exchanges On #1, every financial instit…

Post by ssg_rolson » Mon, Mar 03, 2014, 8:18 AM UTC

jychang wrote: post #5

zoba wrote: post #2

In case my server goes, here is the text: Right now in ##mtgox-chat someone named nanashi____ claims to be speaking for a group of hackers who have gotten into Mt Gox in an attempt to figure out what happened. Nanashi says they have a DB dump and are looking at what to do with it. Nanashi gave these links: A conversation in Japanese with Karpeles and a Banker ( http://picosong.com/Y7di/ ) Some Mt Gox Code ( http://pa…

They have passport scans? I'm impressed by how hard MtGox is fucking up.

Post by sdrothrock » Mon, Mar 03, 2014, 8:24 AM UTC

TazeTSchnitzel wrote: post #46

gklitt wrote: post #16

I'm fluent in Japanese. I listened to the beginning of the recording and it's legit. One of the voices is almost certainly Mark Karpeles' (based on hearing his voice in his recent public apology -- his Japanese is broken but reasonably proficient). It seems to be a recording of a Jan 30 2014 meeting where bankers from Mizuho Bank are asking Karpeles various questions about Bitcoin, the nature of his business, his par…

Karpeles making mistakes with honorifics? That's odd, even though it would he incorrect, surely he could just -san suffix everyone and be done with it?

Post by wahnfrieden » Mon, Mar 03, 2014, 8:29 AM UTC

aegiso wrote: post #39

McGlockenshire wrote: post #19

The code is ... interesting. Smells organic, not designed. Comments are rare but usually useful. Highly coupled. Static methods everywhere. Violates SOLID principles. Basically, ignores current best practices. Clearly not designed for any sort of automated testing, which should be the first damn thing you do when there's any sort of money involved. Hell, even when there isn't money involved. We'd already guessed that…

Way too much schadenfreude given Gox's history. Although contrary to popular belief Gox was never a Magic exchange, they were a Bitcoin startup at a time when Bitcoin was not much more than internet lols and pizza deliveries. The first thing you do when hacking together a stupid exchange for a joke e-currency isn't writing unit tests. You just write the code and blast it up on a domain you had lying around for a diff…