Pages:
Author

Topic: Hacked Linode & coins stolen to 1NRy8GbX56MymBhDYM... - page 13. (Read 62186 times)

legendary
Activity: 2940
Merit: 1333
Of course everyone has the ability to track down the path of the coins and then possibly confront the perpetrator and request them to return the coins.

A while ago I decided to track down the 'allinvain' stolen coins and see where they ended up.  It turned out that by mid February they were distributed to over 100,000 different addresses, including 8 of my own addresses.  I'm guessing somebody did a very good job of laundering them.  Either that, or this is just the natural way that bitcoins are passed around.

http://bitcoin.stackexchange.com/a/2900/659 is where I posted my findings.
full member
Activity: 219
Merit: 101
It's a bit disturbing that bitcoinica was also down at this time

3 high profile bitcoin sites all down at the same time. (19:00 UTC) - -- EDIT Ignore: I misread the 07:00 UTC in OP)



marked

also it appears that bitcoinica is hosted at rackspace:

http://whois.domaintools.com/50.56.4.62
legendary
Activity: 4634
Merit: 1851
Linux since 1997 RedHat 4
I am against anything that could potentially put coins into limbo and add even a hint of centralization to the mix.

plus, there is no way I would trust any organization to decide how "tainted" my coins were ... it sounds like it could be ripe for abuse


Agreed on both count, but ... read my previous post: there nothing
you can do to prevent this from being built by someone at some point.
Actually, the concept being described is completely against the Bitcoin design.

The design is of course that when a transaction occurs, it cannot be reversed.
End of story.

As soon as that is no longer true you have destroyed the Bitcoin design.
It is no longer decentralised - someone now has power over it.

If 'some' central authority has the power to deem coins good or bad, then you may as well just dump Bitcoin.

Unfortunately sometimes people hack into other people's access security information and are able to steal what is protected by that information.
That certainly does not mean we should consider giving power of Bitcoin to anyone in any manner whatsoever.
That is purely a knee-jerk reaction to the problem - and should never be done.

Of course everyone has the ability to track down the path of the coins and then possibly confront the perpetrator and request them to return the coins.
However, giving that power to any particular person or group to decide is ludicrous.

If that is what you want - then go visit SolidCoin2.0 and stay away from Bitcoin.
full member
Activity: 372
Merit: 114
Wow, I was actually just looking into moving some of my hosting and linode was where I had chosen.  I guess I will have to rethink that.  I'll probably go with EC2 since it seems Amazon takes security quite seriously, but EC2 is noticably more expensive.
legendary
Activity: 3472
Merit: 1724

EULA's aren't the end-all that companies make them out to be though.  Even if they say "we will not be held liable for blah blah blah", doesn't mean that a court won't hold them liable.

+1
legendary
Activity: 4634
Merit: 1851
Linux since 1997 RedHat 4
I'll be surprised if they offer to cover any losses ... imaginary money and all that hooey
Well that's easy to resolve.
Give them a new slush address and tell them transfer in the same imaginary money that was lost.
full member
Activity: 168
Merit: 100
It's a bit disturbing that bitcoinica was also down at this time

3 high profile bitcoin sites all down at the same time. (19:00 UTC) - -- EDIT Ignore: I misread the 07:00 UTC in OP)

[2nd EDIT: 020212-03:12 UTC right sentiment, wrong reason.]


marked
member
Activity: 98
Merit: 10
I'll be surprised if they offer to cover any losses ... imaginary money and all that hooey

oh yeah, and eric schmidt thinks p2p currency is illegal too!
full member
Activity: 154
Merit: 102
Bitcoin!
Wow. Watching this.
member
Activity: 98
Merit: 10
I'll be surprised if they offer to cover any losses ... imaginary money and all that hooey
legendary
Activity: 2184
Merit: 1056
Affordable Physical Bitcoins - Denarium.com
Well, either Linode compensates adequately for this or they will have a serious boycott campaign on their hands. If they compensate and promise to fix their systems their reputation might be saved, otherwise it will go down the drain.
legendary
Activity: 2198
Merit: 1311
A nice gesture on their part, in addition to fixing the vulnerability and explaining exactly how they've done so, would be to accept bitcoin as payment for their service.   
donator
Activity: 1218
Merit: 1079
Gerald Davis
the joys of having a superadmin account

So how about not having those. 

This.

Superadmin account + sa in hands of 3rd party who accepts no liability = Sad
legendary
Activity: 1750
Merit: 1007
The fact that they have a super admin account that isn't restricted to whitelisted IPs is amazing.  Even my small startup (not even public outside of bitcoin forums/BTC Guild) doesn't allow administrator logins from anywhere other than my office and my home.
legendary
Activity: 2198
Merit: 1311
the joys of having a superadmin account

So how about not having those. 
legendary
Activity: 1400
Merit: 1005
It all depends on how slush manages this ordeal, worst case I would atleast want to get partial damages reimbursed.
Slush already said he'd cover it from his own pocket.  No loss to anyone mining with him.
member
Activity: 98
Merit: 10
the joys of having a superadmin account
hero member
Activity: 504
Merit: 502
It all depends on how slush manages this ordeal, worst case I would atleast want to get partial damages reimbursed.
member
Activity: 70
Merit: 10
Shows a major weakness in linode I'd say. Other linodes were hit as well.  I would be saying goodbye to linode. Since they seem to be short on details we can't conclude anything, except that they're system is flawed. They need to have failsafes in place.

What could you have done to prevent this?  Would an encrypted wallet prevented this?  Multiple wallets?  It may help a lot of people to discuss how to make it harder at least.

Stealing BTC might become more profitable than mining or maybe it already is, the crook had to give up an 0day possibly?

Would be nice to see linode present an in-depth analysis if they can't cover any of your losses.
hero member
Activity: 728
Merit: 500
165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g
Quote
Subscriber further acknowledges that Linode.com's liability for its own negligence may not in any event exceed an amount equivalent to charges payable by subscriber for services during the period damages occurred. In no event shall Linode.com be liable for any special or consequential damages, loss or injury. Linode.com is not responsible for any damages your business may suffer.
https://www.linode.com/tos.cfm

I wouldn't expect any different from inexpensive hosting.  No one would take on that kind of liability without a large markup.

It might be in their interests to take responsibility for damages for PR reasons, but I don't think they have a mandate (ethically or legally) to cover $15k of consequential damages for a customer using a $50-100/month service.

I also would not jump on them for admitting fault.  There are way too many companies out there that try to cover everything up when they screw up.  Linode should be commended for providing a prompt and honest answer right from the top brass.

I suggest asking nicely, not with a lawyer's letterhead.
Pages:
Jump to: