Live data from Hacker News

Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

dzoba.com

81–90 of 157 posts

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#81

Earlier quoted context omitted.

In case anyone's wondering, "nanashi" means "anonymous" in Japanese.

it could also refer to the number 74, so maybe mr or ms anonymous is ~40yo right now ?

Nope, it's 名無し nanashi, the standard way of saying "Mr/Ms Anonymous" on Japanese forums like 2ch.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#83
post #28

Earlier quoted context omitted.

I'm still getting almost daily phishing/malware from the Mt Gox leak in 2011, and I never even signed up for anything more than to see what it's interface was like. Can't imagine how that will be with people having copies of passports (supposedly).

My spam folder is also full of, well, spam addressed to the email address I supplied to Dropbox (and only Dropbox) when I first signed up there sometime in 2011 and later leaked (I think 2012). Sometimes I wish data privacy laws were stricter, but it appears that not even financial services laws are sufficiently strict, as just demonstrated here.

> Sometimes I wish data privacy laws were stricter

I think the laws and awareness are good enough atm, but no laws and probably no amount of knowledge or auditing will stop a data leak from indadvertedly occurring.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#84
post #67

Earlier quoted context omitted.

Can you explain what's wrong with this? If I had 1 million in $info[ 'balance' ]? Would $bean->Coins overflow?

Using floats to represent currency is a big no-no. Floats have limited precision, and some numbers aren't representable by floats. Go try adding 0.1 to itself over and over again in your favorite implementation. It is better to represent as integers or fixed-precision numbers. That way, you are dealing with exact quantities.

Could make all the same arguments against integers: - Limited precision, - Some numbers aren't representable, - Go try adding 1 to itself over and over again.

That said, yes, floats are a bad idea for financial arithmetic.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#85
post #67

Earlier quoted context omitted.

Can you explain what's wrong with this? If I had 1 million in $info[ 'balance' ]? Would $bean->Coins overflow?

Using floats to represent currency is a big no-no. Floats have limited precision, and some numbers aren't representable by floats. Go try adding 0.1 to itself over and over again in your favorite implementation. It is better to represent as integers or fixed-precision numbers. That way, you are dealing with exact quantities.

As an example in Ruby (2.1.1):

x = 0.1 #=> 0.1 10.times { x+=0.1 } #=> 10 x #=> 1.0999999999999999

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#86

Earlier quoted context omitted.

Karpeles making mistakes with honorifics? That's odd, even though it would he incorrect, surely he could just -san suffix everyone and be done with it?

Japanese honorifics extend tremendously beyond name suffixes.

I'm digging further off-topic, but anyway: as a non-japanese speaker and someone who spontaneously thinks in terms of optimization, I'm amazed by the seemingly gratuitously complicated rules of politeness in that language.

Does it require concentration for a native to avoid faux-pas in a discussion? Can it become much more difficult depending on your social origins (i.e. how effective is it as a social discriminant)? I'm wondering how much time and thought is typically spent on those matters, to the detriment of actually thinking and communicating information.

(I guess this post is extremely rude from a japanese PoV, but I'd genuinely like to understand all this better, and I'm sure typical HN readers can understand this approach)

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#87

Thought I'll quickly scan the source code... On the first screen: $bean->Coins = (int)round($info['balance'] * 100000000); Really? Currency as a float and rounding? Just so that he can later: $client->sendToAddress($addr, $bean->Coins / 100000000); I'm ready to believe in any error "due to a bug" they claim now.

Where is the source code?

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#88
post #76

Earlier quoted context omitted.

I don't know about honorifics, but he was using "ore," according to Reddit. If he wrote the letter on the front page of Mt Gox, there are some weird/offputting polite language mistakes, too. (I can't listen to the recording right now and wouldn't get much out of it even if I could, since I can't hear well enough. :-/)

I usually hear 'ore' from people who learned their Japanese by watching shonen anime. Even outside of a business meeting, in normal conversation, it would be offensive to most people I think.

What does the use of 'ore' imply and what makes it rude? Is it a snobby way of referring to yourself?

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#89

Ok, some good news. It might be untrue about them having passport scans. Reason I say that, is the following: We know from the leaked mtgox crisis plan doc that they have 550,000 verified accounts. Each user who wanted to be verified had to scan at least 2 documents- a passport+license and a electric bill of sorts. Assuming both documents alone were only 100KB combined (and its likely way more than that since scans a…

They might very well have a "verified" column in their DB, and the scans archived or discarded.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#90

Ok, some good news. It might be untrue about them having passport scans. Reason I say that, is the following: We know from the leaked mtgox crisis plan doc that they have 550,000 verified accounts. Each user who wanted to be verified had to scan at least 2 documents- a passport+license and a electric bill of sorts. Assuming both documents alone were only 100KB combined (and its likely way more than that since scans a…

My guess is any passport scans would just be any recent web uploads made by users trying to verify their accounts and thus copied off the web server filesystem, not their customer database. Once verified these documents would be moved somewhere else, one would hope.

In any case, regardless of what was found or how, it's completely inexcusable that such sensitive data isn't encrypted asymmetrically the moment they receive it.

Post reply on HN