Live data from Hacker News

500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

bitcoincharts.com

111–120 of 262 posts

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#111
post #60

Newest update: Apparently someone got the whole user account database of Mt.Gox I wont publish the link to it though for obvious reasons. Quick analysis: the database is legit, it contains user id, username, email if set, and a bcrypt hash. The hashes seem salted with a global salt.

I don't think the db is public, it's being sold for a price.

It's public. I have the db loaded in mysql right now, and have confirmed its validity (my account is in there).

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#113
post #83

Earlier quoted context omitted.

More likely, people trying to make bank when (not if) it happens again.

Ah, true, taking advantage of market glitches. I should add some positions for that, too :-)

The real question is if mtgox can actually reverse trades like they claim they're going to do as a result of this situation.

In a regulated exchange it's certainly possible. Is it possible with bitcoin? Once the block is away...it's away.

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#114
I'm a little annoyed that MtGox effectively is bitcoin. I've been spending my mined coins on goods from various merchants and it has been working great. That's what bitcoin is designed to be, a currency. Recently there's so much speculation and people buying, holding and selling that so much focus has shifted away from the real use.

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#115
I wanted to see if I could buy some on the cheap, but I wasn't already set up to do so. I would never take this currency seriously, but I'd be willing to put in a bit of money to speculate a bit.

I looked at bitmarket.eu but they have a manual verification process, which I'm sure would not complete until after the price recovers. Oh well.

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#116
post #110
post #84

Earlier quoted context omitted.

So it was... I confirmed my username is in there but at least passwords are hashed. Luckily, I never added an email address and used a different Username and pw than I do everywhere else. Gotta take precautions with bitcoin!

Doesn't look as if passwords were salted, though :-( (Edit: just read in another comment that there seems to have been a global salt)

Very sloppy. When you're dealing with actual money, industry-standard practices like this shouldn't be considered optional.

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#117
This was apparently on HN 14 hours ago:

Mtgox hacked database listed for sale (pastebin.com)

http://news.ycombinator.com/item?id=2670302

pointed to: http://pastebin.com/ui0nusuZ

which says:

  I have hacked into mtgox database. Got a huge number of logins password combos.
  Mtgox has fixed the problem now. Too late, cause I've already got the data.

  Will sell the database for the right price.
  Send your offers to:
  gfc06@hotmail.com

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#118

There's an alleged database dump of Mt Gox floating around... https://twitter.com/#!/954/status/82531189705019392 UPDATE: looks legit. http://forum.bitcoin.org/index.php?topic=19543.0 https://support.mtgox.com/entries/20208066-huge-bitcoin-sell...

Damn, I'm in there. Glad I used a generated password (from LastPass) so I don't have to change my passwords on a lot of various sites.

this is the only way to fight incompetence of some websites. those passwords are (most likely) unsalted vanilla MD5 hashes. just entered a few of them into google from that file and yes, many of them are present in rainbow tables. damn. makes me angry as a programmer how financial website can be this unsecure and easy to compromise.

Re: 500k Bitcoins traded in 1h, Mt.Gox market hacked + crash

#120
post #95

Earlier quoted context omitted.

> and despite there being no government regulation, the exchange stepped in, protected their customer, rolled back the trades and protected the market You know that's basically the same thing - central entity with overarching authority exerts its will over the market, canceling transactions it's deemed 'fraudulent' between two independent consenting entities. "Free hand of the market" ain't present here, chief - this…

> central entity with overarching authority exerts its will over the market MtGox certainly is not central authority . If you stop being their customer, they will have just to live with that.

> If you stop being their customer, they will have just to live with that.

That's precisely the theory behind free governments the world over, to wit: "Governments are instituted among Men, deriving their just Powers from the Consent of the Governed". Except we all know in practice there are barriers to withdrawing consent from the government, just as there are surely barriers to leaving a market.

Post reply on HN