How I got robbed of 34 btc on Mt.Gox today
bitcointalk.org
How I got robbed of 34 btc on Mt.Gox today
1–10 of 251 posts
Re: How I got robbed of 34 btc on Mt.Gox today
#2So... you ran a Java applet on a domain with mtgox in its name and didn't make sure that site is owned by MtGox?
I'm sorry for your loss but what happened is your own fault entirely and I would be surprised if MtGox decides to refund you.
Re: How I got robbed of 34 btc on Mt.Gox today
#3TLDR; OP runs java applet (either in browser or downloaded it).
Java applet sends bitcoin from OP's MtGox account to the 'hackers' bitcoin address, using the OP's browser, which was logged in to his MtGox account at the time.
Re: How I got robbed of 34 btc on Mt.Gox today
#4I quite like the JVM but I think it should be stopped from running inside a browser.
Re: How I got robbed of 34 btc on Mt.Gox today
#5I'm not doubting Bitcoin's potential to become a true currency, but unless this type of smash-and-grab situation can be traced/avoided/insured (whatever the right mechanism is) it is going to be extremely hard to make ordinary businesses and people use it. People don't place value in the currency itself, but the system that provides certain security around it.
Re: How I got robbed of 34 btc on Mt.Gox today
#6This is exactly why everyone on the internet keeps saying that you shouldn't automatically run Java applets or shouldn't have Java installed at all on your computer.
Java is just such a big target for hackers nowadays, that there will always be zero-days.
Re: How I got robbed of 34 btc on Mt.Gox today
#7So... you ran a Java applet on a domain with mtgox in its name and didn't make sure that site is owned by MtGox? I'm sorry for your loss but what happened is your own fault entirely and I would be surprised if MtGox decides to refund you.
That is true.
1) You really shouldn't be running java applets unless you are certain you want to. I have had Java disabled for about a year and have only seen a page that required it once.
2) The domain name should've been a dead giveaway
3) Why would MtGox refund it? You got your money stolen by someone else. It's not MtGox's fault at all.
Re: How I got robbed of 34 btc on Mt.Gox today
#8This is probably not much different from any other internet banking trojan horse delivered via a java exploit.
Some banks solve this problem by requiring a 2 factor auth to confirm transactions (even after logging in).
Re: How I got robbed of 34 btc on Mt.Gox today
#9I'm not doubting Bitcoin's potential to become a true currency, but unless this type of smash-and-grab situation can be traced/avoided/insured (whatever the right mechanism is) it is going to be extremely hard to make ordinary businesses and people use it. People don't place value in the currency itself, but the system that provides certain security around it.
Banks that handle USD follow strict federal regulations on security procedures and insurance. If this happened at a bank, the OP would absolutely get his money back. Bitcoin needs federal regulations... oh wait...
Re: How I got robbed of 34 btc on Mt.Gox today
#10I quite like the JVM but I think it should be stopped from running inside a browser.
The thing is that it's easy to stop Java applets from executing. Even better most browser prevent this by default. Including chrome, which he was probably using as indicated by the screenshot.
Looks like this was entirely his own fault, though it still sucks. Wouldn't hope for a refund though t.b.h.