Good thing for two-factor authentication. Coinbase account definitely hacked. - page 2.

cozytrade

sr. member

Activity: 1097

Merit: 310

Seabet.io | Crypto-Casino

Quote from: jbrock11 on March 10, 2014, 01:31:09 PM

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and had a password reset request from China...

Password reset request does not indicate any successful hack. How come do you think your account is definitely hacked.

Just because it is from China? Tongue

nanobtc

hero member

Activity: 605

Merit: 634

Statistically, your home PC is probably a greater risk than Coinbase.

101Official

newbie

Activity: 32

Merit: 0

Quote from: farlack on March 10, 2014, 03:21:52 PM

So the 2F worked, how is it unsafe?

Sounds like everything is working as expected.

farlack

legendary

Activity: 1310

Merit: 1000

Quote from: jbrock11 on March 10, 2014, 01:55:31 PM

Quote from: fivejonnyfive on March 10, 2014, 01:47:09 PM

I mean, I'd argue that it is safe BECAUSE of the 2 factor auth. It did exactly what it was supposed to, no?

The two-factor did but as I said, it's still just an option on Coinbase. Luckily I had it turned on.

I'd expect more out of their site security though. My password was pretty difficult but that didn't seem to matter at all.

So the 2F worked, how is it unsafe?

greenlion

hero member

Activity: 667

Merit: 500

Quote from: Arksun on March 10, 2014, 01:57:03 PM

Quote from: jbrock11 on March 10, 2014, 01:31:09 PM

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and had a password reset request from China...

Guess I'm gonna have to move ALL of my coin to paper wallets. Seems like Coinbase is no longer safe even for the tiniest bit of coin I had on there.

I don't get it, someone made a password recovery request pretending to be you, anyone can do this, with any website, anywhere. So Coinbase shouldn't offer password recovery? As long as they don't also control your email account whats the problem?

I would immediately change your email account's password, because the above scenario is absolutely correct, and for someone to have bothered to do this in the first place, they likely would've had reason to believe they were in control of your email.

Arksun

sr. member

Activity: 616

Merit: 250

Quote from: jbrock11 on March 10, 2014, 01:31:09 PM

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and had a password reset request from China...

Guess I'm gonna have to move ALL of my coin to paper wallets. Seems like Coinbase is no longer safe even for the tiniest bit of coin I had on there.

I don't get it, someone made a password recovery request pretending to be you, anyone can do this, with any website, anywhere. So Coinbase shouldn't offer password recovery? As long as they don't also control your email account whats the problem?

jbrock11

newbie

Activity: 29

Merit: 0

Quote from: fivejonnyfive on March 10, 2014, 01:47:09 PM

I mean, I'd argue that it is safe BECAUSE of the 2 factor auth. It did exactly what it was supposed to, no?

The two-factor did but as I said, it's still just an option on Coinbase. Luckily I had it turned on.

I'd expect more out of their site security though. My password was pretty difficult but that didn't seem to matter at all.

fivejonnyfive

sr. member

Activity: 294

Merit: 250

I mean, I'd argue that it is safe BECAUSE of the 2 factor auth. It did exactly what it was supposed to, no?

jbrock11

newbie

Activity: 29

Merit: 0

Quote from: drrussellshane on March 10, 2014, 01:32:47 PM

Good thing you used two-factor authentication!

Bitcoin-related sites, as a rule, should offer TFA.

Yea, I'm thinking it should be a requirement to start an account with all these sites. I know it's the early days and better security will be coming in the future but right now, it's the wild west out there. Can't take any chances. Especially when nobody is really offering insurance right now.

jbrock11

newbie

Activity: 29

Merit: 0

Quote from: pbj sammich on March 10, 2014, 01:32:43 PM

Quote from: jbrock11 on March 10, 2014, 01:31:09 PM

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and has a password reset request from China...

Guess I'm gonna have to move ALL of my coin to paper wallets. Seems like Coinbase is no longer safe even for the tiniest bit of coin I had on there.

Just out of curiousity, where you a Gox customer?

Nah, don't really mess with the exchanges much. Even though I do have an account on Cryptsy.

drrussellshane

hero member

Activity: 546

Merit: 500

Good thing you used two-factor authentication!

Bitcoin-related sites, as a rule, should offer TFA.

pbj sammich

sr. member

Activity: 272

Merit: 250

Fighting Liquid with Liquid

Quote from: jbrock11 on March 10, 2014, 01:31:09 PM

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and has a password reset request from China...

Guess I'm gonna have to move ALL of my coin to paper wallets. Seems like Coinbase is no longer safe even for the tiniest bit of coin I had on there.

Just out of curiousity, where you a Gox customer?

jbrock11

newbie

Activity: 29

Merit: 0

Got an authentication text from Coinbase out of the blue and thought it was suspicious so I logged on to my account and had a password reset request from China...

Guess I'm gonna have to move ALL of my coin to paper wallets. Seems like Coinbase is no longer safe even for the tiniest bit of coin I had on there.

*Edit*: This stupid fu*k has now hacked into my email. Anybody else out there with a little hacking no how, feel free to return the favor.
IP = 27.20.238.204

Topic: Good thing for two-factor authentication. Coinbase account definitely hacked. - page 2. (Read 2924 times)