Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

dzoba.com

Post reply on HN
Print view View original

51–60 of 157 posts

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#51

Post by gklitt »

sdrothrock wrote: post #47
TazeTSchnitzel wrote: post #46

Earlier quoted context omitted.

Karpeles making mistakes with honorifics? That's odd, even though it would he incorrect, surely he could just -san suffix everyone and be done with it?

I don't know about honorifics, but he was using "ore," according to Reddit. If he wrote the letter on the front page of Mt Gox, there are some weird/offputting polite language mistakes, too. (I can't listen to the recording right now and wouldn't get much out of it even if I could, since I can't hear well enough. :-/)

Yes, he was saying "ore", which is an incredibly rude and amateur mistake. In English, that would be like be entering an important business meeting with a bank and saying, "Yo dude, wassup?"

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#52

Post by jmomo »

jychang wrote: post #5
zoba wrote: post #2

In case my server goes, here is the text: Right now in ##mtgox-chat someone named nanashi____ claims to be speaking for a group of hackers who have gotten into Mt Gox in an attempt to figure out what happened. Nanashi says they have a DB dump and are looking at what to do with it. Nanashi gave these links: A conversation in Japanese with Karpeles and a Banker ( http://picosong.com/Y7di/ ) Some Mt Gox Code ( http://pa…

They have passport scans? I'm impressed by how hard MtGox is fucking up.

This is why I have had to stop using a number of services which requested a photocopy of official government documentation. I am specifically thinking of how I had to dump my Dwolla account.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#53

Post by McGlockenshire »

kens wrote: post #42
McGlockenshire wrote: post #19

The code is ... interesting. Smells organic, not designed. Comments are rare but usually useful. Highly coupled. Static methods everywhere. Violates SOLID principles. Basically, ignores current best practices. Clearly not designed for any sort of automated testing, which should be the first damn thing you do when there's any sort of money involved. Hell, even when there isn't money involved. We'd already guessed that…

How is the exception handling? For instance, if something goes wrong when generating a new private key, could they still attempt the transaction but with a null key? (cf the earlier bug that lost 2609 bitcoins.)

Unfortunately I don't know enough about the bitcoin innards to give you an informative answer, and the answer isn't clear from a plain reading of the code.

The leaked code seems to just be an internal API for twiddling wallets. There doesn't seem to be any logic here for either the txid conflict retry bits or the hot/cold transfer bits.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#54

Post by thirsteh »

gklitt wrote: post #51
sdrothrock wrote: post #47

Earlier quoted context omitted.

I don't know about honorifics, but he was using "ore," according to Reddit. If he wrote the letter on the front page of Mt Gox, there are some weird/offputting polite language mistakes, too. (I can't listen to the recording right now and wouldn't get much out of it even if I could, since I can't hear well enough. :-/)

Yes, he was saying "ore", which is an incredibly rude and amateur mistake. In English, that would be like be entering an important business meeting with a bank and saying, "Yo dude, wassup?"

That isn't how you do it?

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#55

Post by alcari »

mschuster91 wrote: post #32
nothxbro wrote: post #27

Ok, some good news. It might be untrue about them having passport scans. Reason I say that, is the following: We know from the leaked mtgox crisis plan doc that they have 550,000 verified accounts. Each user who wanted to be verified had to scan at least 2 documents- a passport+license and a electric bill of sorts. Assuming both documents alone were only 100KB combined (and its likely way more than that since scans a…

It is possible for them to extract the MRZ data of the passport (the Machine Readable Zone), it contains the passport ID, issuer state, DOB and DOE. I don't know if the regulatory requirements state that you must keep a photocopy, but in case you do not it would be foolish to store more data than you need.

That may be possible, but they also accepted non-passport images, which don't necessarily have such information.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#56

Post by sentenza »

wahnfrieden wrote: post #48
TazeTSchnitzel wrote: post #46

Earlier quoted context omitted.

Karpeles making mistakes with honorifics? That's odd, even though it would he incorrect, surely he could just -san suffix everyone and be done with it?

Japanese honorifics extend tremendously beyond name suffixes.

There is a reason that speaking Japanese correctly is a highly valuable skill. For me personally, though, the amount of "communication rites" in Japanese business interactions is enough to be scared away.

On the other hand, I'd say that the bank person has enough reasons besides the honorifics to be really angry at the guy. The info posted indicates that they want to get rid of him and given that they cite technical difficulties, it might well be possible that their tech team already suspected the "non-banking-grade" software quality we are now hearing about.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#57

Post by uid »

gklitt wrote: post #51
sdrothrock wrote: post #47

Earlier quoted context omitted.

I don't know about honorifics, but he was using "ore," according to Reddit. If he wrote the letter on the front page of Mt Gox, there are some weird/offputting polite language mistakes, too. (I can't listen to the recording right now and wouldn't get much out of it even if I could, since I can't hear well enough. :-/)

Yes, he was saying "ore", which is an incredibly rude and amateur mistake. In English, that would be like be entering an important business meeting with a bank and saying, "Yo dude, wassup?"

Karpeles confirmed Japanese brogrammer

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#58

Post by sentenza »

jychang wrote: post #5
zoba wrote: post #2

In case my server goes, here is the text: Right now in ##mtgox-chat someone named nanashi____ claims to be speaking for a group of hackers who have gotten into Mt Gox in an attempt to figure out what happened. Nanashi says they have a DB dump and are looking at what to do with it. Nanashi gave these links: A conversation in Japanese with Karpeles and a Banker ( http://picosong.com/Y7di/ ) Some Mt Gox Code ( http://pa…

They have passport scans? I'm impressed by how hard MtGox is fucking up.

Also, we now see that the Wild West metaphor for Bitcoin banking carries quite far. If you fuck up in the wilderness, you'll not only be sorry, but you'll also be ripped apart by the wolves!

Maybe this can serve as a warning that the tedious processes used by banks and other institutions handling "serious" money can't just be disrupted away.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#59

Post by [deleted] »

gklitt wrote: post #51
sdrothrock wrote: post #47

Earlier quoted context omitted.

I don't know about honorifics, but he was using "ore," according to Reddit. If he wrote the letter on the front page of Mt Gox, there are some weird/offputting polite language mistakes, too. (I can't listen to the recording right now and wouldn't get much out of it even if I could, since I can't hear well enough. :-/)

Yes, he was saying "ore", which is an incredibly rude and amateur mistake. In English, that would be like be entering an important business meeting with a bank and saying, "Yo dude, wassup?"

[deleted]

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#60

Post by viraptor »

Thought I'll quickly scan the source code... On the first screen:

    $bean->Coins = (int)round($info['balance'] * 100000000);
Really? Currency as a float and rounding? Just so that he can later:

    $client->sendToAddress($addr, $bean->Coins / 100000000);
I'm ready to believe in any error "due to a bug" they claim now.
Post reply on HN