Pages:
Author

Topic: Bitcoin is a hackers dream - page 2. (Read 5718 times)

hero member
Activity: 588
Merit: 500
Hero VIP ultra official trusted super staff puppet
July 19, 2012, 04:07:23 PM
#28
Even though aq is making glaring assumptions and seems to be hell bent on ignoring reason, I think the gist of the message is 100% true. Never before has it been so profitable (and risk-free) to hack.

We are only seeing the beginning people. Bitcoin will push hackers and technology through greed alone. SHA256 could be cracked/exploited.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 03:56:14 PM
#27
Or it was transferred to Accrum Exchange and used to buy Liberty Reserve.
I think Aurum Exchange is not that anonymously. If this was the case, they could probably identify the hacker, once given some information. But because all information that could lead to the hacker is classified by MtGox we will never know.

The idea that the thief did a wire transfer to their personal bank account is just stupid.
I agree, but even then, have you ever seen single police investigation in Bitcoin land? There have been a number of heists and not a single one. So why now? Why  do you believe, that it will be different this time?

BTW, it is still be possible that one of the involved parties (Consultancy,Zhou,Tihan,...) was withdrawing.
The community could recognize some account number or anything. I doubt that some complete Bitcoin-virgin that did steal this.
I give you an example: someone recognized Zhou exchanging some 40k$ LR to RMB for some bad rate in a hurry a day after the theft. Zhou said it was unrelated, but this shows that a community can recognize way more than some astonished local Japanese police officer.
donator
Activity: 1218
Merit: 1079
Gerald Davis
July 19, 2012, 03:30:23 PM
#26

I think you missed this:

As I said we know how and where the USD moved, so yes.

They know to whom the funds have been transferred.

Where does not equal whom.  We have no idea what method of withdrawal was used for the USD, but it';s unlikely that the hacker tried to get it payed into their bank account.
While unlikely, we don't know it. Keep in mind, that all those more or less anonymous withdraws take weeks, so either MtGox helped to speed this up, in which case they very much know with whom they dealt, or yes it was redrawn to some bank account.


Or it was transferred to a handful of throw away account w/ fake info and used to buy BTC and removed from the site.
Or it was transferred to Accrum Exchange and used to buy Liberty Reserve.

Lots of methods to get USD off MtGox nearly instantly.  Not all of them are low cost but I doubt any thief was worried about that.

The idea that the thief did a wire transfer to their personal bank account is just stupid.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 03:27:00 PM
#25

I think you missed this:

As I said we know how and where the USD moved, so yes.

They know to whom the funds have been transferred.

Where does not equal whom.  We have no idea what method of withdrawal was used for the USD, but it';s unlikely that the hacker tried to get it payed into their bank account.
While unlikely, we don't know it. Keep in mind, that all those more or less anonymous withdraws take weeks, so either MtGox helped to speed this up, in which case they very much know with whom they dealt, or yes it was redrawn to some bank account.
hero member
Activity: 868
Merit: 1000
July 19, 2012, 03:06:30 PM
#24

I think you missed this:

As I said we know how and where the USD moved, so yes.

They know to whom the funds have been transferred.

Where does not equal whom.  We have no idea what method of withdrawal was used for the USD, but it';s unlikely that the hacker tried to get it payed into their bank account.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 03:01:14 PM
#23
Wow, I wasn't aware that you can withdraw 40kBTC and 40kUSD while having an anonymous account at MtGox. The same MtGox that is known for their extensively KYC and AML... Maybe you know something that we dont?

It wasn't an anonymous account which withdrew the money.  It was the Bitcoinica account which had trusted status - at one point the limits for trusted status were $100,000 and BTC 40,000 daily.  They've been revised since then and yet again after the hack.  you need to remember that as far as MtGox's computer was concerned it was Bitoinica making the withdrawals and Bitcoinica had a history of moving large amounts on and off MtGox.  It's possible that there even more funds in the Bitcoinica account but the hacker was unable to access them because of the daily limits.

I think you missed this:

As I said we know how and where the USD moved, so yes.

They know to whom the funds have been transferred.
hero member
Activity: 868
Merit: 1000
July 19, 2012, 03:00:02 PM
#22

And about the Bitcoins, it would have been easy for MtGox to tell us the transaction ID, but they choose to astonish some Japanese police officer with such information, IF they even filed that report.

Whoever took the funds is laundering money.  There are massive penalties for disclosing information related to money laundering investigations.
hero member
Activity: 868
Merit: 1000
July 19, 2012, 02:56:47 PM
#21
Wow, I wasn't aware that you can withdraw 40kBTC and 40kUSD while having an anonymous account at MtGox. The same MtGox that is known for their extensively KYC and AML... Maybe you know something that we dont?

It wasn't an anonymous account which withdrew the money.  It was the Bitcoinica account which had trusted status - at one point the limits for trusted status were $100,000 and BTC 40,000 daily.  They've been revised since then and yet again after the hack.  you need to remember that as far as MtGox's computer was concerned it was Bitoinica making the withdrawals and Bitcoinica had a history of moving large amounts on and off MtGox.  It's possible that there even more funds in the Bitcoinica account but the hacker was unable to access them because of the daily limits.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 02:31:44 PM
#20
...

As I said we know how and where the USD moved, so yes.

And about the Bitcoins, it would have been easy for MtGox to tell us the transaction ID, but they choose to astonish some Japanese police officer with such information, IF they even filed that report.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
July 19, 2012, 02:20:13 PM
#19
And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.

They said they were filing a report with the police and could not publicly discuss the information they had while the matter was being investigated.  They did not say that they knew who the hacker was.  They said they knew where the transactions went.  That information may allow the hacker to be traced but it doesn't mean that MtGox is aware of their identity.
Wow, I wasn't aware that you can withdraw 40kBTC and 40kUSD while having an anonymous account at MtGox. The same MtGox that is known for their extensively KYC and AML... Maybe you know something that we dont?
Read DannyHamilton's comment 3 or 4 posts above yours. Obviously Bitcoinica's account was AML verified/trusted, so withdrawals of huge amounts would be possible. How it happened instantly, I don't know.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 02:14:26 PM
#18
And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.

They said they were filing a report with the police and could not publicly discuss the information they had while the matter was being investigated.  They did not say that they knew who the hacker was.  They said they knew where the transactions went.  That information may allow the hacker to be traced but it doesn't mean that MtGox is aware of their identity.
Wow, I wasn't aware that you can withdraw 40kBTC and 40kUSD while having an anonymous account at MtGox. The same MtGox that is known for their extensively KYC and AML... Maybe you know something that we dont?
legendary
Activity: 3472
Merit: 4801
July 19, 2012, 02:11:40 PM
#17
It was more like this: a burglar breaks into your hours, and you call the police, they will not investigate but tell you: "you should have had 10 foot concrete walls around your house, but your where only 3 foot, so it your fault. now go to jail".
Perhaps more like this:
You use a bank that is not insured to deposit your money.  You believe that the bank is taking reasonable security precautions. They store all deposits in a vault that requires a key that is only held by the bank owner.  The bank owner then gets careless and makes multiple copies of the key to the vault.  The bank announces that it will be closing its doors and sends all its employees home.  Then the bank owner leaves the copies of the vault key in public places all over town attached to a note that says "bank vault key" and has the address of the bank.  A criminal who knows that there is no security guarding the bank finds one of the copies of the key.  He walks in the unlocked front door when nobody is looking. He uses the key, takes the money out of the vault, and leaves. He leaves behind no evidence.

Obviously you are upset that a criminal took your money from the vault before the bank managed to return your deposit to you, but why wouldn't you blame the bank owner for leaving the key all over town and the money unsecured?
hero member
Activity: 868
Merit: 1000
July 19, 2012, 02:02:50 PM
#16
And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.

They said they were filing a report with the police and could not publicly discuss the information they had while the matter was being investigated.  They did not say that they knew who the hacker was.  They said they knew where the transactions went.  That information may allow the hacker to be traced but it doesn't mean that MtGox is aware of their identity.
legendary
Activity: 3472
Merit: 4801
July 19, 2012, 02:02:21 PM
#15
Regular customers have to wait weeks to get their funds out, but the hacker managed do withdraw this in an instant. So of course, MtGox knows them. And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.
I don't follow your logic.  The hacker logged into MtGox as Bitcoinica.  MtGox allowed the instant transfer because they know who Bitcoinica is.  This doesn't mean they know who the hacker is.  I have not seen anywhere that MtGox said that they can identify the hacker.
legendary
Activity: 1736
Merit: 1006
July 19, 2012, 02:01:51 PM
#14

Until BTC is legal tender or recognised by the law / state as property nobody can do a damn thing about them getting stolen / hacked.


This only serves to highlight the corruption of the state. They serve only their own interests while ignoring legitimate property right claims.

This isn't a bitcoin problem, OP.
legendary
Activity: 938
Merit: 1001
bitcoin - the aerogel of money
July 19, 2012, 01:43:01 PM
#13
So are credit cards.

What fraction of carders actually get caught?

Even if the credit card customer is negligent, it's usually the bank that takes the hit, and then socializes the cost among all customers. Very rarely the it's the scammer.

With bitcoin, at least I don't have to pay for other people's negligence. And yes, if you entrust tens of thousands of dollars to an alpha-web app run by an one-man enterprise then that is also a form of negligence.
legendary
Activity: 1008
Merit: 1000
July 19, 2012, 12:48:25 PM
#12
Bitcoin is really a hackers dream.

Last year, some hacker managed to steal huge funds from mybitcoin.com. How got blamed? The operator of mybitcoin.com. No one cared about the actual hacker.
This year, a hacker stole 45k from Bitcoinica. Everyone blamed the operators. The owners replaced the funds. No one cared about the actual hacker.
Now recently more funds where stolen from Bitcoinica. MtGox even knows who the hacker is, but "of course" cannot share this information. So same thing as every time, no one cares about the actual hacker. Everyone blames the operators and tries to lynch them.

Conclusion: In the Bitcoin world it is OK to steal, the blame will always be on the victim. A hacker can even use his real name and real address, and still no one cares. Blame and lawsuits are always on the victims...

Welcome to crypto-anarchy! The future is already here.

A. If you go after the hacker... there will be 10 more in line behind him.

A. Going after the hackers protects a bad service.

B. If you go after the service provider... the next 10 hackers will be unsuccessful.

B. Going after the service provider ensures a better service is provided in the future.
legendary
Activity: 2142
Merit: 1010
Newbie
July 19, 2012, 12:44:13 PM
#11
Bitcoin is really a hackers dream.

Last year, some hacker managed to steal huge funds from mybitcoin.com. How got blamed? The operator of mybitcoin.com. No one cared about the actual hacker.
This year, a hacker stole 45k from Bitcoinica. Everyone blamed the operators. The owners replaced the funds. No one cared about the actual hacker.
Now recently more funds where stolen from Bitcoinica. MtGox even knows who the hacker is, but "of course" cannot share this information. So same thing as every time, no one cares about the actual hacker. Everyone blames the operators and tries to lynch them.

Conclusion: In the Bitcoin world it is OK to steal, the blame will always be on the victim. A hacker can even use his real name and real address, and still no one cares. Blame and lawsuits are always on the victims...

Welcome to crypto-anarchy! The future is already here.
hero member
Activity: 518
Merit: 500
July 19, 2012, 12:41:10 PM
#10
Conclusion: In the Bitcoin world it is OK to steal, the blame will always be on the victim. A hacker can even use his real name and real address, and still no one cares. Blame and lawsuits are always on the victims...

Well done cpt. Obvious !

Until BTC is legal tender or recognised by the law / state as property nobody can do a damn thing about them getting stolen / hacked.

Try and tell the police somebody stole your WOW gold or monopoly money = BS.

The funny thing with Bitcoinica is : why no USD returned yet ? why no police report as hacking into computer systems is illegal ?

Smells funny to me.
aq
full member
Activity: 238
Merit: 100
July 19, 2012, 12:37:44 PM
#9
This has happened with Mt. Gox last year (Gox was blamed) as well. The issue is not so much blaming the victim, as blaming the only identificable source of error (try tracking down these hackers...).
This time MtGox even knows who has stolen the funds. Does that change anything? Apparently not!


Where have they said that?
Regular customers have to wait weeks to get their funds out, but the hacker managed do withdraw this in an instant. So of course, MtGox knows them. And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.
Pages:
Jump to: