Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Coinbase user emails and full names leaked

pastebin.com

Post reply on HN
Print view View original

251–260 of 294 posts

Re: Coinbase user emails and full names leaked

#251

Post by dsl »

FredEE wrote: post #206
NathanKP wrote: post #64

Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…

Update - blog post here: http://blog.coinbase.com/post/81407694500/update-on-coinbase...

Your customers are upset and losing faith. Stop trying to defend yourself and take action.

Re: Coinbase user emails and full names leaked

#252

Post by stonogo »

albedoa wrote: post #167
stonogo wrote: post #123

Earlier quoted context omitted.

What you are describing is not an audit. The automated system is a separate process. An audit involves an actual IRS agent manually reviewing your entire tax history for the given year.

At least at the state level (MA), the automated system is considered an audit. I recently received notice that an "audit" (their word) of my state tax return detected a discrepancy with my federal return. When I called, I was told that it was caught automatically. So I think the manual and automatic processes are considered to be two forms of the broader term "audit".

The IRS does not work for the state of Massachusetts.

Re: Coinbase user emails and full names leaked

#253

Post by ewoodrich »

stonogo wrote: post #123
drags wrote: post #122

Earlier quoted context omitted.

I'm being audited right now (over a $2,500 student loan interest deduction, of all things) and it's totally automated. It seems like they have an internal process that goes "Taxpayer claimed deduction, IRS doesn't have paperwork matching payment activity, ergo send letter asking taxpayer to pony up". If Coinbase is going to report earnings to the IRS, it's a good idea to match what they report or you might trigger th…

What you are describing is not an audit. The automated system is a separate process. An audit involves an actual IRS agent manually reviewing your entire tax history for the given year.

What you are describing is a compliance audit. The parent either is responding to an automated quasi-audit request (which have different rules) or a traditional correspondence audit, which occurs through phone/mail and is generally confined to specific areas of a return.

Re: Coinbase user emails and full names leaked

#254

Post by larrys »

mikeash wrote: post #193
larrys wrote: post #170

Earlier quoted context omitted.

Read this: http://www.irs.gov/Businesses/Small-Businesses-&-Self-Employ... "An audit may be conducted by mail or through an in-person interview and review of the taxpayer's records." "You will be provided with a written request for specific documents needed." "An IRS audit is a review/examination of an organization's or individual's accounts and financial information to ensure information is being reported correctly,…

Could we just say that it's not what people usually think of when they say "IRS audit"? Getting a letter in the mail asking for some paperwork isn't really scary.

But they should be scared. Why? Because it could be the tip of the iceberg. If you are able to sufficiently answer the inquiry they are generally done with you. Otoh, depending on the inquiry, if you are not you then possibly open yourself up to further scrutiny in the current year or future years.

Re: Coinbase user emails and full names leaked

#255

Post by socillion »

sillysaurus3 wrote: post #191
boling11 wrote: post #186

Earlier quoted context omitted.

xapo.com is insured by Meridian group. There's also one in the UK that's insured Lloyd's that I'm drawing a blank on. Have you looked into either of them?

This is the first I've heard that any insurance company is willing to fully insure any bitcoin exchange, and it's wonderful news. Thank you so much for pointing it out! I'll look into it and see whether it's as good as it sounds.

http://www.reddit.com/r/Bitcoin/comments/20dolm/psa_xapo_doe...

Re: Coinbase user emails and full names leaked

#256

Post by larrys »

saalweachter wrote: post #236
mikeash wrote: post #193

Earlier quoted context omitted.

Could we just say that it's not what people usually think of when they say "IRS audit"? Getting a letter in the mail asking for some paperwork isn't really scary.

I'd imagine a letter in the mail asking for some paperwork is pretty terrifying if you have been cheating on your taxes. :)

I think it's actually something that will raise your anxiety level even if you are "pretty honest".

Also there are some borderline issues with taxes (and/or self employment or small corp) that can give you problems.[1] (One for example is deducting for a home office, another might be charitable deductions, another might be writing off some auto usage).

Think in terms of what happens when you see the flashing lights of a police officer in back of you. Even if you haven't been speeding you don't automatically think "no problem I didn't do anything wrong" you get anxious thinking there might have been some mistake that you have made.

[1] See the typical business owner isn't Zuck and doesn't have an army of knowledgeable advisers to handle all the details. You are essentially on your own with your accountant.

Re: Coinbase user emails and full names leaked

#257

Post by mpyne »

genwin wrote: post #222
mpyne wrote: post #215

Earlier quoted context omitted.

Last time a politician was worried about non- zero probabilities, the U.S. invaded Iraq. I mean, if changing the probability someone's home gets broken into is our standard of practice nowadays there's a lot of companies which will have to close down today.

I reckon non-anonymous bitcoin holders are at greater risk than the average person with money in the bank, since draining the account of the former is a relative cinch once the keys are divulged. The whole crime could be completed within a few minutes.

That much may be true, but I'd consider that an inherent risk associated with using Bitcoin without using a pseudonym. Maybe I'm naïve but I have to assume people who care about such things are already tracking IP addresses directly from the Bitcoin network swarm itself for later investigation...

Re: Coinbase user emails and full names leaked

#258

Post by mpyne »

tptacek wrote: post #212
mpyne wrote: post #209

Earlier quoted context omitted.

It does confirm email addresses you can guess though (which are not necessarily email addresses you have , until they're confirmed), along with leaking other information about that user.

What other information is it leaking?

What danielweber said, the listed real name with Coinbase. I'm not so sold that it's a Big Deal™, but it's certainly not completely leakproof with regard to user data either.

Re: Coinbase user emails and full names leaked

#259

Post by hkphooey »

dsl wrote: post #251
FredEE wrote: post #206

Earlier quoted context omitted.

Update - blog post here: http://blog.coinbase.com/post/81407694500/update-on-coinbase...

Your customers are upset and losing faith. Stop trying to defend yourself and take action.

I remember a story here a few months ago about a person who had deposited tens of thousands of dollars with Coinbase, and they refused to give the customer his coins. That was a clear sign that the systems and processes at Coinbase were broken.

The fact that they didn't help the customer until they took their grievances public indicated to me that either Coinbase don't care about their customers, or they were too busy trying to balance their books because of some proprietary trading gone wrong.

Thus I think it was foolish of Coinbase to release the letter condemning MtGox. Now anything that happens to Coinbase makes them look like total hypocrites. People, glass houses, stones etc.

It's one thing for a magic card trading company to morph into a Bitcoin exchange and have problems... but for a hot-shot start-up in San Francisco with self-proclaimed tech superstars at the helm and millions in the bank to screw up royally, well, it's just embarrassing.

Re: Coinbase user emails and full names leaked

#260

Post by hkphooey »

FredEE wrote: post #206
NathanKP wrote: post #64

Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…

Update - blog post here: http://blog.coinbase.com/post/81407694500/update-on-coinbase...

UPDATE: For anybody following Bitcoin news, this is obviously satire, replacing MtGox with CoinBase. Surprised people downvoted this.

There are rumors that a joint statement will be released at 5PM Pacific Time...

Joint Statement Regarding CoinBase

Apr 1st, 2014

The purpose of this document is to summarize a joint statement to the Bitcoin community regarding CoinBase.

This tragic violation of the trust of users of CoinBase was the result of one company’s actions and does not reflect the resilience or value of bitcoin and the digital currency industry. There are hundreds of trustworthy and responsible companies involved in bitcoin. These companies will continue to build the future of money by making bitcoin more secure and easy to use for consumers and merchants. As with any new industry, there are certain bad actors that need to be weeded out, and that is what we are seeing today. CoinBase has confirmed its issues in private discussions with other members of the bitcoin community

We are confident, however, that strong Bitcoin companies, led by highly competent teams and backed by credible investors, will continue to thrive, and to fulfill the promise that bitcoin offers as the future of payment in the Internet age.

In order to re-establish the trust squandered by the failings of CoinBase, responsible bitcoin exchanges are working together and are committed to the future of bitcoin and the security of all customer funds. As part of the effort to re-assure customers, the following services will be coordinating efforts over the coming days to publicly reassure customers and the general public that all funds continue to be held in a safe and secure manner: Kraken, BitStamp, Circle, and BTC China.

We strongly believe in transparent, thoughtful, and comprehensive consumer protection measures. We pledge to lead the way.

Bitcoin operators, whether they be exchanges, wallet services or payment providers, play a critical custodial role over the bitcoin they hold as assets for their customers. Acting as a custodian should require a high-bar, including appropriate security safeguards that are independently audited and tested on a regular basis, adequate balance sheets and reserves as commercial entities, transparent and accountable customer disclosures, and clear policies to not use customer assets for proprietary trading or for margin loans in leveraged trading.

The following industry leaders stand by this statement:

Jesse Powell — CEO of Kraken

Nejc Kodrič — CEO of Bitstamp.net

Bobby Lee — CEO of BTC China

Nicolas Cary — CEO of Blockchain.info

Jeremy Allaire — CEO of Circle

p.s. Yes, this is the MtGox letter... who will be the last man standing? :-)

Post reply on HN