Author

Topic: [ANN] KRAKEN.COM - Exchange with USD EUR GBP JPY CAD BTC LTC XRP NMC XDG STR ETH - page 167. (Read 628889 times)

sr. member
Activity: 326
Merit: 250
Atdhe Nuhiu
They apply from now on 24 hours lock on btc payouts to new addresses. Idk why this was not there from beginning.

I would like to have feature that I can set this delay. For me even one week until new address is useful for payout would be enough most of the time.
hero member
Activity: 2548
Merit: 950
fly or die
hero member
Activity: 840
Merit: 1000
Also always keep in mind:

Do not instantly believe what you read on the Internet by someone.There is a lot of FUD spreading around currently about everything to somehow benefit from this Bitfinex hack.
As long as the person can't provide any evidence I would always believe what the official statement is. (In this case by the Kraken support)

Most of the time people lose money because they click on phishing links. That's also the reason why the Blockchain info wallet has a bad reputation. It's simply because people don't know about any basic security measurements.


Yeah sure....cos all these unregulated Bitcoin exchanges have a fucking fantastic record don't they!?

imo, all Bitcoin exchanges are guilty until proven innocent.


Whatever the case, a big bunch of Kraken accounts, were emptied all at the same time, on July 20th. That seems much more to me like Kraken was compromised, as opposed to customer computers being littered with key logging Spyware, like their support guys tried to tell us all. Had Kraken enabled even so much as Email verification, then these accounts would not have been emptied. Yet, just as the case with Bitfinex will turn out, Kraken take no responsibility for their shite security. All losses are to be incurred by their users whose accounts have been affected.

Don't know what fkn legal system that Kraken operate under, but in this country, Kraken would be found to be negligent in their Duty of Care...probably the same legal system as Bitfinex operate under......

....but like I said. Only someone willing to bestow the most charitable views upon the exchanges, would so readily believe the stories that the exchanges put it. Kraken account hacks = some form of inside job, until Kraken can prove otherwise as far as I am concerned.


Criminal Complaint for Fraud, is pending.
sr. member
Activity: 448
Merit: 256
Also always keep in mind:

Do not instantly believe what you read on the Internet by someone.There is a lot of FUD spreading around currently about everything to somehow benefit from this Bitfinex hack.
As long as the person can't provide any evidence I would always believe what the official statement is. (In this case by the Kraken support)



Most of the time people lose money because they click on phishing links. That's also the reason why the Blockchain info wallet has a bad reputation. It's simply because people don't know about any basic security measurements.
legendary
Activity: 1820
Merit: 1000
Can someone react jesus christ: https://cointelegraph.com/news/enable-2fa-kraken-accounts-compromised-funds-stolen

I recommended Kraken to MANY people and at least one guy got money stolen from Kraken even when he used 2FA and unique passwords (he is not an idiot).

I can not believe nobody responds.

To my knowledge nobody has reported having funds stolen with login 2fa enabled. However, some did have funds stolen with 2fa enabled only for funding. With 2fa for funding, it doesn't increase security unless you also enable the settings lock. This point has confused people and we are currently looking at changing it to eliminate this confusion.


Kraken was hacked, probably by the same hackers who just hit Bitfinex, albeit for a much smaller amount of BTC.....

.....and rather than admit it, Kraken opted to raid their own customer's 'unprotected' accounts and then blame the customer for them being robbed.

Admit it u fkn rodent.

Kraken was not hacked. We did have a significant number of accounts that were compromised because the attacker(s) somehow obtained the login credentials (username and password) for the accounts and gained access to the accounts individually by logging in. There is no evidence that the login credentials were obtained through any breach in Kraken's database. We are still investigating to find out how the attacker(s) might have obtained the credentials and it may have been through a variety of methods. Again, to my knowledge none of the compromised accounts had 2fa protection for login, meaning that the username and password was all that was needed to obtain access to the account. Some of the accounts did have 2fa for funding enabled without the settings lock but that does not provide any additional protection. If the settings lock isn't enabled, then anyone who can login to the account can bypass the funding 2fa. So if you only have 2fa for funding enabled, your account is only as secure as your username and password. This has been confusing and we are going to change how it works to eliminate the confusion. But for now everyone should enable 2fa for login at minimum. And if you want to enable any other 2fa settings, but sure to use them in conjunction with the settings lock.
sr. member
Activity: 326
Merit: 250
Atdhe Nuhiu
Can someone react jesus christ: https://cointelegraph.com/news/enable-2fa-kraken-accounts-compromised-funds-stolen

I recommended Kraken to MANY people and at least one guy got money stolen from Kraken even when he used 2FA and unique passwords (he is not an idiot).

I can not believe nobody responds.

To my knowledge nobody has reported having funds stolen with login 2fa enabled. However, some did have funds stolen with 2fa enabled only for funding. With 2fa for funding, it doesn't increase security unless you also enable the settings lock. This point has confused people and we are currently looking at changing it to eliminate this confusion.

I will send you PM where you can defend yourself and myself now too. Because it was me who recommended Kraken and it would help me a lot if you can put shine on that. I would like to buy a bit more now through Kraken, but I am scared since I do not know what is going on.
hero member
Activity: 840
Merit: 1000
Can someone react jesus christ: https://cointelegraph.com/news/enable-2fa-kraken-accounts-compromised-funds-stolen

I recommended Kraken to MANY people and at least one guy got money stolen from Kraken even when he used 2FA and unique passwords (he is not an idiot).

I can not believe nobody responds.

To my knowledge nobody has reported having funds stolen with login 2fa enabled. However, some did have funds stolen with 2fa enabled only for funding. With 2fa for funding, it doesn't increase security unless you also enable the settings lock. This point has confused people and we are currently looking at changing it to eliminate this confusion.


Kraken was hacked, probably by the same hackers who just hit Bitfinex, albeit for a much smaller amount of BTC.....

.....and rather than admit it, Kraken opted to raid their own customer's 'unprotected' accounts and then blame the customer for them being robbed.

Admit it u fkn rodent.
legendary
Activity: 1820
Merit: 1000
Can someone react jesus christ: https://cointelegraph.com/news/enable-2fa-kraken-accounts-compromised-funds-stolen

I recommended Kraken to MANY people and at least one guy got money stolen from Kraken even when he used 2FA and unique passwords (he is not an idiot).

I can not believe nobody responds.

To my knowledge nobody has reported having funds stolen with login 2fa enabled. However, some did have funds stolen with 2fa enabled only for funding. With 2fa for funding, it doesn't increase security unless you also enable the settings lock. This point has confused people and we are currently looking at changing it to eliminate this confusion.
hero member
Activity: 2548
Merit: 950
fly or die
Today i had an interesting thing to happen.

Had a position to sell at 545€ XBTEUR done at 9:xx AM
At 15PM a huge spike up to 590€ appears and my trade doesn't execute....really awesome...not.

Care to explain why anyone?

It could just be that there were other people in the order queue before you.
hero member
Activity: 2548
Merit: 950
fly or die
I wonder, whether I am the only one who considers it disturbing that Kraken's two-factor authentication, e.g. for withdrawing funds, can easily be by-passed by simply changing the authentication method. For example, despite having Yubikey enabled for withdrawing funds, it is possible to withdraw funds without possessing the Yubikey (and without knowing the Master key) as follows:
   1. Go to Security/Two-Factor Authentication
   2. Click on the "Edit/View details" link for Funding
   3. Change Method to Password
   4. Set a new password (no Yubikey and no master key is required!)
   5. Go to Funding/Withdraw
   6. Add a new address and withdraw funds to it using the newly set password
So, anyone who is able to log in to a Kraken account or catches a browser with an open Kraken session is able to deplete this account.
I reported this vulnerability to Kraken more than two weeks ago. According to Kraken, this behaviour is intended and can be suppressed by going to Settings/Account and enabling "Global Settings Lock". However, I wonder who is aware of the fact that, without this "Global Settings Lock", the two-factor authentication is completely ineffective.


I just heard that some Kraken accounts were compromised a week ago. So, I take this opportunity to bring up the issue above (for the third time!), because it is still not addressed.

Kraken's system is set up to facilitate theft, and also offer plausible deniabilty.....i.e. "we offered you the security procedures to protect your account, but u never used them, etc etc".

That's ridiculous. They offer incredible safety features, they just don't impose them on you because they know they will turn off many people.

I have in fact set the global settings lock on my account more than a year ago and now can't change my settings because I've lost the key (I know I have it somewhere, can't remember where). I still can withdraw my funds fortunately.
sr. member
Activity: 326
Merit: 250
Atdhe Nuhiu
Can someone react jesus christ: https://cointelegraph.com/news/enable-2fa-kraken-accounts-compromised-funds-stolen

I recommended Kraken to MANY people and at least one guy got money stolen from Kraken even when he used 2FA and unique passwords (he is not an idiot).

I can not believe nobody responds.
legendary
Activity: 2940
Merit: 1131
Today i had an interesting thing to happen.

Had a position to sell at 545€ XBTEUR done at 9:xx AM
At 15PM a huge spike up to 590€ appears and my trade doesn't execute....really awesome...not.

Care to explain why anyone?
this is a known bug, it happend 3 times within the past 3 days. It is just a bug that shows an order for ~590€, but this trade did not happen, so nothing else is executed.
You can also see the 3 spikes at bitcoinity
member
Activity: 94
Merit: 10
Today i had an interesting thing to happen.

Had a position to sell at 545€ XBTEUR done at 9:xx AM
At 15PM a huge spike up to 590€ appears and my trade doesn't execute....really awesome...not.

Care to explain why anyone?
hero member
Activity: 840
Merit: 1000
I wonder, whether I am the only one who considers it disturbing that Kraken's two-factor authentication, e.g. for withdrawing funds, can easily be by-passed by simply changing the authentication method. For example, despite having Yubikey enabled for withdrawing funds, it is possible to withdraw funds without possessing the Yubikey (and without knowing the Master key) as follows:
   1. Go to Security/Two-Factor Authentication
   2. Click on the "Edit/View details" link for Funding
   3. Change Method to Password
   4. Set a new password (no Yubikey and no master key is required!)
   5. Go to Funding/Withdraw
   6. Add a new address and withdraw funds to it using the newly set password
So, anyone who is able to log in to a Kraken account or catches a browser with an open Kraken session is able to deplete this account.
I reported this vulnerability to Kraken more than two weeks ago. According to Kraken, this behaviour is intended and can be suppressed by going to Settings/Account and enabling "Global Settings Lock". However, I wonder who is aware of the fact that, without this "Global Settings Lock", the two-factor authentication is completely ineffective.


I just heard that some Kraken accounts were compromised a week ago. So, I take this opportunity to bring up the issue above (for the third time!), because it is still not addressed.

Kraken's system is set up to facilitate theft, and also offer plausible deniabilty.....i.e. "we offered you the security procedures to protect your account, but u never used them, etc etc".
HPt
member
Activity: 70
Merit: 15
I wonder, whether I am the only one who considers it disturbing that Kraken's two-factor authentication, e.g. for withdrawing funds, can easily be by-passed by simply changing the authentication method. For example, despite having Yubikey enabled for withdrawing funds, it is possible to withdraw funds without possessing the Yubikey (and without knowing the Master key) as follows:
   1. Go to Security/Two-Factor Authentication
   2. Click on the "Edit/View details" link for Funding
   3. Change Method to Password
   4. Set a new password (no Yubikey and no master key is required!)
   5. Go to Funding/Withdraw
   6. Add a new address and withdraw funds to it using the newly set password
So, anyone who is able to log in to a Kraken account or catches a browser with an open Kraken session is able to deplete this account.
I reported this vulnerability to Kraken more than two weeks ago. According to Kraken, this behaviour is intended and can be suppressed by going to Settings/Account and enabling "Global Settings Lock". However, I wonder who is aware of the fact that, without this "Global Settings Lock", the two-factor authentication is completely ineffective.


I just heard that some Kraken accounts were compromised a week ago. So, I take this opportunity to bring up the issue above (for the third time!), because it is still not addressed.
hero member
Activity: 840
Merit: 1000
In bitcoin world always have the 2FA enabled ,

Always trading with them since years without any problem Wink

and what about those who did have 2FA enabled, but who still got robbed, cos the hackers turned 2FA off in the Kraken accounts with simple use of the account password?

My brother traded on MtGox for years without any problems......until one day when there was a problem.


Kraken are either grossly incompetent, corrupt, or both.

THE ONLY exchange that doesn't operate email verification as a bare minimum (they don't do Email verification at all) before processing withdrawals, and then they turn around and tell Joe that their shockingly inept security is Joe's problem!?

Quote
"Dear Joe, we here at Kraken are very sorry about your recent loss, but you never had 2FA enabled, now fuck off!
Yours Sincerely

Kraken Support Team

P.S. If you are one of those who did have 2FA enabled but still got robbed, then you can fuck off as well. You won't get a penny out of us!"
hero member
Activity: 586
Merit: 500
Gambling bitcoin webmaster
In bitcoin world always have the 2FA enabled ,

Always trading with them since years without any problem Wink
hero member
Activity: 840
Merit: 1000
Kraken has definitely improved lately, love it.

LOL...U must be the thief who empited all those Kraken accounts without 2FA enabled?
legendary
Activity: 1778
Merit: 1043
#Free market
@Dargo, will you add (as exchange) ethereum classic?
Actaully you can't add something that already exists. Ethereum classic is ethereum. Ethereum forked is the new version that must be added. This trading pair should be represented ETH/ETF. To avoid any confusion with Exchange-Traded Fund (ETF abbr) four letter representation would be better - ETHC/ETHF.


Btw they now have ethereum HF (hardfork) on kraken.com, my question was if they have the intention to add ethereum classic (ETC, the same one on poloniex). Basically the original chain that didn't agree with the DAO hard-fork, just download the client from etheremclassic.org and run it together.
legendary
Activity: 3431
Merit: 1233
@Dargo, will you add (as exchange) ethereum classic?
Actaully you can't add something that already exists. Ethereum classic is ethereum. Ethereum forked is the new version that must be added. This trading pair should be represented ETH/ETF. To avoid any confusion with Exchange-Traded Fund (ETF abbr) four letter representation would be better - ETHC/ETHF.
Jump to: