How I got robbed of 34 btc on Mt.Gox today

Post by darkarmani » Thu, Apr 11, 2013, 7:34 PM UTC

antr wrote: post #5

I'm not doubting Bitcoin's potential to become a true currency, but unless this type of smash-and-grab situation can be traced/avoided/insured (whatever the right mechanism is) it is going to be extremely hard to make ordinary businesses and people use it. People don't place value in the currency itself, but the system that provides certain security around it.

Post by chimeracoder » Thu, Apr 11, 2013, 7:39 PM UTC

kbolino wrote: post #199

svachalek wrote: post #191

Earlier quoted context omitted.

I believe String literals are guaranteed to be == in the same source file by the spec, although it's been some years since I could quote chapter and verse for that.

You are correct (albeit substituting "class" for "source file" since runtime Java has no concept of source files), although the guarantee is stronger than that. Any two identical literals will refer to the same object, since literals are interned, regardless of what classes "own" them. Chapter and verse: JLS §3.10.5, http://docs.oracle.com/javase/specs/jls/se7/html/jls-3.html#...

Post by [deleted] » Thu, Apr 11, 2013, 7:48 PM UTC

sequoia wrote: post #180

burntsushi wrote: post #163

Earlier quoted context omitted.

> I would be surprised if MtGox decides to refund you I agree that MtGox shouldn't be doing any kind of refunding in this case. > what happened is your own fault entirely You're blaming the victim. If I'm walking down a dark alley and someone pulls a gun on me and takes my wallet, is it my fault because I decided to walk down a dark alley? Not at all. The only person at fault here is the cracker who perpetrated the s…

+-------------------------------------------------------+ | SECURITY WARNING! | | You are attempting to walk down a dark alley, | | which could be dangerous. Only walk down | | dark alleys you are familiar with and trust. | | By walking down this alley you assume responsibility | | for the attendant risks. | | | | Do you still wish to walk down the dark alley? | | [x] Yes [ ] Cancel | +-------------------------------…

Post by drivebyacct2 » Thu, Apr 11, 2013, 8:02 PM UTC

StavrosK wrote: post #72

DanBC wrote: post #65

Earlier quoted context omitted.

This wasn't someone hacking MtGox. This was someone on a vulnerable OS, running without malware protection, with Java active in the browser, visiting an unknown link, and possibly giving an application permission to run. (Although maybe it didn't need permission to run?) To get to that point the person needed to ignore several well established security principles.

Oh come on, how hard is it for MtGox to implement TOTP and tell users to download Google Authenticator? It's not really that much hassle to enter a code each time you want to make a transaction, and these things wouldn't happen. Sure, the user was being stupid here, but MtGox didn't do them any favors either.

Post by Pinckney » Thu, Apr 11, 2013, 8:25 PM UTC

code4life wrote: post #197

RyanZAG wrote: post #76

Isn't this exactly what Bitcoin was created for - to allow unregulated access to currency? I guess people don't really realize what unregulated actually means - and nor do they realize why you really do want regulated currency. This kind of thing happens all the time with real banks, but with real banks, all transactions can be traced and reversed. Law enforcement can follow the required documentation to find the own…

We don't need sympathy or regulation. A simple market solution like voluntary bitcoin insurance would do the trick.