Any technical details on how Instawallet was hacked?

Boussac

legendary

Activity: 1221

Merit: 1025

e-ducat.fr

Quote from: Snektor on August 29, 2013, 06:57:14 AM

I 've heard on the street that it was a scam related to drugproblems and gamblingdebts.
On of their own people 'hacked' the place and took 35000btc. Huh

Woww

Quote from: Snektor on August 29, 2013, 06:57:14 AM

It's strange to me that one of the biggest scams in btc recently seems already been forgotten.
Well, I don't forget when someone steals my money!

Woow again.
If it's that bad, there is not point in even trying to contact them then.
They probably run off to the Virgin Islands or Costa Rica with wife and children.
Evene a life sentence to Gitmo would be too lenient to them.

Snektor

newbie

Activity: 2

Merit: 0

since no one talks about it anymore and I cannot start a new topic (newbie or so?):

Any updates about the instawallet hack or was it really a scam?
I 've heard on the street that it was a scam related to drugproblems and gamblingdebts.
On of their own people 'hacked' the place and took 35000btc. Huh

But ok, just gossip maby, but that's all the info I can get.

Has ANYONE received any bitcoin they claimed?
After filing my claims I never heard from them again.
No bitcoin, no message why no bitcoin. Only an automated message with a reference nr.

How can I reach Instawallet, Paytunia or Bitcoincentral? They don't give an emailadress.
Should I go to France and go to the police to file criminal charges against them?
Has anyone done that already?

It's strange to me that one of the biggest scams in btc recently seems already been forgotten.
Well, I don't forget when someone steals my money!

Fking

full member

Activity: 136

Merit: 100

If they don't give more details about how the DB got stolen, yeah one could assume it was them. But lets see.

MPOE-PR

hero member

Activity: 756

Merit: 522

Quote from: Nicolai on April 09, 2013, 05:54:11 AM

Quote from: jp on April 08, 2013, 09:36:38 PM

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.

Yes your wrong. One of the few things we know, is that the "Google index url" problem wasn't a security flaw and couldn't have been used to hack them in any way.

Who's "we" and why are we that stupid?

Also, does coinbase pay for shilling or just promises to?

Nicolai

newbie

Activity: 39

Merit: 0

Quote from: jp on April 08, 2013, 09:36:38 PM

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.

Yes your wrong. One of the few things we know, is that the "Google index url" problem wasn't a security flaw and couldn't have been used to hack them in any way.

Fuyuki_Wataru

member

Activity: 167

Merit: 10

What if Instawallet hacked themselves, so they could run off with the money? Wink

crazy_rabbit

legendary

Activity: 1204

Merit: 1002

RUM AND CARROTS: A PIRATE LIFE FOR ME

Social Engineering is my guess. I'm surprised bitcoin millionaires aren't becoming crazy paranoid of anyone new they meet.

Tonko

full member

Activity: 126

Merit: 100

Quote from: DannyHamilton on April 08, 2013, 10:34:07 PM

You are assuming they actually were hacked?

Wink

Having Ruby programmers around is as good excuse as any.

moni3z

hero member

Activity: 899

Merit: 1002

They claimed the server was compromised and somebody got access to the logs, which helpfully tell you every single url that was accessed, hence all the wallet addresses. Who knows how they did this but there is plenty of ruby on rails exploits

The Google Chrome/gmail thing that indexed all the wallets was a different problem

DannyHamilton

legendary

Activity: 3472

Merit: 4801

Quote from: Fking on April 08, 2013, 06:16:56 AM

Do we know anything more than the official statement that their DB was fraudulently accessed?

What was their setup, security wise?

You are assuming they actually were hacked?

Wink

jp

member

Activity: 69

Merit: 10

I could be wrong on this, but it's my understanding that they didn't have a robots.txt and Google started indexing their private URLS.

I could be wrong on this though.

Fking

full member

Activity: 136

Merit: 100

Do we know anything more than the official statement that their DB was fraudulently accessed?

What was their setup, security wise?

Topic: Any technical details on how Instawallet was hacked? (Read 1070 times)