Topic: I just got hacked - any help is welcome! (25,000 BTC stolen) - page 18. (Read 381664 times)

Holding Bitcoins on a previously infected computer, allright, its a facepalm thing.

I had an idea for this concept a couple of months ago when I was thinking about running my own Bitcoin ATM drive through bank.

Run a computer with some kind of secure linux distro. Tiny core would be a good base to work from since its one of the most lightweight distros.(Only 10 MB or so!)

Run the standard stable bitcoin server with every port blocked except the ports need by the bitcoin server.

Tiny core runs completely in memory so if some one were to try and compromise the machine and it lost power then everything would be permanently erased. No trace. In order for your wallet to be recoverable, enable a script that periodically encrypts your wallet and sends it a remote databank, like google docs, drop box, ect. Do not use hard drives.

Install SSH but use key based authentication with a password needed to unlock your private key. This would allow you access to your machine from any terminal on your local network. Disable password logins and make sure the ssh port is blocked from outside access. 

Connect the headless server to your Ethernet, never use a wifi network!

Also connect the pc to a back up power supply and surge protector.

Hope this helps!

PS: I'm thinking about making a linux distro based off of this called SecuCoin. Using microcore+bitcoind+openssh = ~10 MB for the whole OS!

This OS would not have a gui and would need a gui implementation for access from a external terminal.

Unfortunately, a new kind of money will not solve the problems of a for profit monetary system. When your incentive is to acquire money, the methodology becomes irrelevant in the context of a distorted value system in which you need to acquire the money to be rewarded and receive the necessities of life. That won't change until we choose to have relevant values and conduct ourselves accordingly.

Trial is already approaching. Imprisonment is gonna be hard. I think losing that kind of amount though would put him in a bind. I wouldn't trade to make more on that kind of money. I'd trade out of the system, slowly. But I'm thinking people who pull this crap are going to be dumb enough to borrow from someone else to make some more.

Not only do most of the writers suck, their stories suck.  Jesus Diaz is the worst...he will ban you if you even slightly disagree or point out how incompetent he is.  Banhammer Junkie.  I honestly like Lifehacker's articles and Jalopnik's car talk but Gizmodo/Gawker as a whole really blow.

Gavin's talk was today, bud. AFTER this incident took place.

"@Allinvain - I hope this gets tracked down and you get some solid answer from commuity leaders"

I had a noob question can BTC still be sent to the wallet that was stolen ? maybe you can trace it that way ?

Hmmm.....Gavin gives a talk at the CIA and a few days later $500,000 is hacked from someone's bitcoin account.    It does make one wonder...

Quite a lot of drama around here as I learn about bitcoins for my first week...beats PrimeTime TV

btw, why aren't leaders of the services involved in this thread?  This seems like a big enough event that it might helpful if they address aspects of this to the community as they see it.  There is much that could be learned from this.  Yet, mostly what we see in this thread are admonishments and accusations.  It seems the leaders of the pools and exchanges involved should step up to the plate and address the community about what steps are being taken and how others can prevent security breaches.

Noob question - Where is the wallet.dat file stored on a Mac?

@Allinvain - I hope this gets tracked down and you get some solid answer from commuity leaders.

Don't worry, karma is a bitch. After you die I am sure you will haunt his house and make his pots rattle.

On the positive side, if you can sufficiently document the loss you have one hell of a tax deduction.

A Libertarian would march their private army to the thief, capture him, and hold a trial under common law.

I think we have to treat 500k worth of bitcoins the same way you'd treat 500k of physical dollars.  Leaving them on a computer connected to the internet is like leaving 500 grand in a stack in the middle of your living room with your front door open.  I probably wouldn't have more than a few grand in anyone wallet.  Store the largest amounts offline, in multiple nondescript backed up devices.

This thread made me wondering two things:

1. What is Libertarian's way dealing with thievery? If seeking intervention from authority is not an option, what else you can do?

2. If police somehow finds this thief, for $500K, what kind of prison term will this guy face in US? Russia?

I don't car if this thief breaks that 25k into 1 btc chunks. Lets start rocking an excel sheet and track that shit.

I have made only 10 btcs since I started, but will happily send you one I feel bad this happened to you.

Unfortunately, this is the general public perception of bitcoin because of scam/theft threads like this.

The world has gotten used to their interest debt whores "protecting" them.

Hopefully bitcoin will only become stronger due to this incident. (people will take security more seriously)

Yeah. I will be vindicated in the end. I am a fool for losing my bitcoins, but I am no troll!

I know I was just thinking the same thing!    Hopefully it doesn't.  To bad they accuse you of being a troll? I mean really?

Oh wow. I hope this doesn't start a negative press storm against bitcoin. It does not deserve it.

I did contact the police, but do you honestly think they can do anything? The way the police operates means they cannot do anything in the even to of a cyber crime. The only reason I went to the police is to have some legal proof that I reported the theft.

I talked to slush. I'm still waiting for him to possibly do something. The funny thing is that the day my pool account got broken into I told slush about it but he was busy at the time dealing with a DDoS attack. What I should've done was move the money the very first minute I discovered my pool account was hacked. Should'a would'a could'a..