Topic: Gridlane VPS - They Will Steal your Wallet.Dat file (Read 1624 times)
Better to host the hot wallet on your own machine at your physical location.
this is why its best to not use a hosting providor that specialises in bitcoins. as they are more then likely to know how important the wallet.dat file is, and thus be tempted to access it.
it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.
it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.
Counterpoint: Linode. In spite of not accepting Bitcoin they have been attached in some way to many of Bitcoin's biggest hacks. If you want to run any hot wallet. Even one that keeps coins for a mere minute before shuttling them away to cold storage, you require control down to the iron.
Thank god it was only chump change man, you learned a pretty good lesson for relatively cheap compared to what could of happened..
So many thieves in this industry... it's a little bit depressing.
So many thieves in this industry... it's a little bit depressing.
100% agreed. We switched to a non-bitcoin accepting hosting company.
Real shame, because it's so much easier to pay for hosting with btc ...
anyone know if superbithost.com is legit, or had any bad experiences with them?
Real shame, because it's so much easier to pay for hosting with btc ...
anyone know if superbithost.com is legit, or had any bad experiences with them?
this is why its best to not use a hosting providor that specialises in bitcoins. as they are more then likely to know how important the wallet.dat file is, and thus be tempted to access it.
it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.
it is best to use professional hosting that does not advertise itself as bitcoin orientated, or best get a server and good internet upstream speeds and run your own webhosting. do not rely on third parties that you dont personally know, to look after your wealth. especially if they have the keys to your wealth.
WARNING!!!
I've been using Gridlane.com for some of my websites (BitPlastic.com debit card, BitLaunder.com bitcoin laundering and BitFiverr.com micro gigs), and I have multiple different (separate, compartamentalized, and unconnected) accounts with gridlane.
On *EACH* account, my wallet.dat file was stolen, almost simultaneously. No evidence whatsoever of a hacker or outside breach. No login by ssh or root. The wallet was just emptied - POOF, gone.
We never store client funds in hot wallets on the server, so they only got chump change (less than 1 btc in total). Nevertheless, we had to move our entire network off Gridlane and onto dedicated servers, which was a real hassle.
Just wanted to warn everyone here about Gridlane. Any webhosting company which accepts bitcoin is, in my view, automatically under suspicion because the incentive to rip off a customers' wallet.dat is just so high. If you run a website which accepts bitcoin, and especially if you hold client funds online in a hot wallet, you had better be 100% sure about your hosting company! And if you get mysteriously hacked, that's the FIRST (not the last) place where suspicion should fall.
As much as I love bitcoin, I am forced to switch to a non-bitcoin accepting hosting company.
Be careful ...
Dr. Michael Moriarty, owner of the Bitcoin Network
PS: This is why we never store client funds in hot wallets, ever. We run bitcoind and incoming deposits credit automatically, but the wallets are flushed every minute to offline cold wallets, and withdrawals are processed manually from the cold wallets. This means withdrawals from our sites take a little longer (2-3 hrs on average), but there is NO WAY for a hacker to steal client funds, as happened to bitfloor and inputs.io and many others
I've been using Gridlane.com for some of my websites (BitPlastic.com debit card, BitLaunder.com bitcoin laundering and BitFiverr.com micro gigs), and I have multiple different (separate, compartamentalized, and unconnected) accounts with gridlane.
On *EACH* account, my wallet.dat file was stolen, almost simultaneously. No evidence whatsoever of a hacker or outside breach. No login by ssh or root. The wallet was just emptied - POOF, gone.
We never store client funds in hot wallets on the server, so they only got chump change (less than 1 btc in total). Nevertheless, we had to move our entire network off Gridlane and onto dedicated servers, which was a real hassle.
Just wanted to warn everyone here about Gridlane. Any webhosting company which accepts bitcoin is, in my view, automatically under suspicion because the incentive to rip off a customers' wallet.dat is just so high. If you run a website which accepts bitcoin, and especially if you hold client funds online in a hot wallet, you had better be 100% sure about your hosting company! And if you get mysteriously hacked, that's the FIRST (not the last) place where suspicion should fall.
As much as I love bitcoin, I am forced to switch to a non-bitcoin accepting hosting company.
Be careful ...
Dr. Michael Moriarty, owner of the Bitcoin Network
PS: This is why we never store client funds in hot wallets, ever. We run bitcoind and incoming deposits credit automatically, but the wallets are flushed every minute to offline cold wallets, and withdrawals are processed manually from the cold wallets. This means withdrawals from our sites take a little longer (2-3 hrs on average), but there is NO WAY for a hacker to steal client funds, as happened to bitfloor and inputs.io and many others
Jump to: