Topic: MtGox UPDATE - page 4. (Read 24209 times)
Jed and Tux made a lot for bitcoin community in the past and I hope this accident will force them make double efforts to secure the No1 exchange! I also had some bids on 14.5 but I do not mind against reversing transactions.
Thanks for the update, I'm a big fan of your service (the charts are great) and you still have my support.
Any ETA on how long the security fixes will take? Any chance of being up within ~12 hours?
Any ETA on how long the security fixes will take? Any chance of being up within ~12 hours?
i really don't think you can call them 'stolen coins' with a straight face. what's done is done, and it's on your shoulders to fix it, NOT by denying people with legitimate bids their feast.
Of course they were stolen! They were in essence stolen from the user whos account was compromised, and then used to cause chaos on the market. Regardless of the fact that they were used within the system and by the account of the user who orignally owned them, they were still plainly stolen by the hacker who then simply dumped all but the little bit he could get away with.
They were absolutely Stolen, and almost all trades since the event are Illegitimate in my eyes anyway.
i really don't think you can call them 'stolen coins' with a straight face. what's done is done, and it's on your shoulders to fix it, NOT by denying people with legitimate bids their feast.
Coins sold by someone who didn't own them are not stolen? Why? because you got them?That's very narcissistic, almost psychopathic.
Psychopaths should not benefit from this currency: that's the way the old world worked.
you're completely right and i already retracted that sentiment in an earlier post in this thread.
even if i do feel a little burned (hey it's natural after a seemingly eye-popping win), i'd rather do what is right for this thing to succeed long-term.
All passwords will be disabled and you will have to reset your password with the email on file. If no email is on file then it will be handled manually.
I count almost 4,000 accounts with blank emails — and mine is one of them. How do you plan on handling them manually? How will you verify that whoever is claiming to be the owner really is the owner?
Thanks.
MyFarm:
Yes the site won't be back online until we are certain there are no other exploits.
Cool, see you guys in a month or two. Though you might upset a few people who have thousands of dollars/BTC tied up in your system.Yes the site won't be back online until we are certain there are no other exploits.
I sure don't envy you at this point.
i really don't think you can call them 'stolen coins' with a straight face. what's done is done, and it's on your shoulders to fix it, NOT by denying people with legitimate bids their feast.
Coins sold by someone who didn't own them are not stolen? Why? because you got them?That's very narcissistic, almost psychopathic.
Psychopaths should not benefit from this currency: that's the way the old world worked.
Hi. I'm trying to login but it says "No user with email address -heremyemailaddress-". Should I worry?
I think this post was long overdue. People have been reporting for over a week now that they've been getting hacked on MtGox, and then this happened. Every account, every e-mail, every (hashed) password. What's sad is that it's taken this long to post about it. Lots of people have been reporting this and it seems to fall on deaf ears. They have a whole thread about MtGox accounts that got hacked, yet no word was said to try and calm users or ease concerns.
Sorry to be so hard on you guys, don't get me wrong I love(d) the service, but you NEED to talk with users and tell them what's going on when they report getting hacked, and that needs to happen ASAP...not a week later. I hope your actions or lack thereof don't affect your business when it re-opens....cause I have/had(not sure, can't login) bitcoins with you guys and was looking forward to the value working it's way back up to 20.
HOPEFULLY people will trust you guys after this. A come back from this level of hack is hard, but I wish you guys the best.
Sorry to be so hard on you guys, don't get me wrong I love(d) the service, but you NEED to talk with users and tell them what's going on when they report getting hacked, and that needs to happen ASAP...not a week later. I hope your actions or lack thereof don't affect your business when it re-opens....cause I have/had(not sure, can't login) bitcoins with you guys and was looking forward to the value working it's way back up to 20.
HOPEFULLY people will trust you guys after this. A come back from this level of hack is hard, but I wish you guys the best.
Hopefully more great entrepreneurs will join bitcoin world, replacing those guys who providing bitcoin service with a one-man company.
> how is the situation where people withdrew funds in between the massive selloff and the trading freeze going to addressed?
Very few coins were withdrawn between selloff and when we took the site down. We will deal with it on a case by case basis.
Very few coins were withdrawn between selloff and when we took the site down. We will deal with it on a case by case basis.
@klamathonsite
whoa buddy, if you were investing in stocks, bonds, or other, you wouldn't be able to get your money out any faster.
I recommend you just chillax a tiny bit before you have a burst vessel in the brain.
whoa buddy, if you were investing in stocks, bonds, or other, you wouldn't be able to get your money out any faster.
I recommend you just chillax a tiny bit before you have a burst vessel in the brain.
That's all nice but the fact remains that thanks to you guys my username, e-mail and password are now out there for anyone to see...
hope you will be fine after such disaster. It's a good lesson for you.
> How will resetting of passwords be arranged?
All passwords will be disabled and you will have to reset your password with the email on file. If no email is on file then it will be handled manually.
> How was the list with accounts stolen? Was this through a SQL injection?
We are still investigating.
MyFarm:
Yes the site won't be back online until we are certain there are no other exploits.
All passwords will be disabled and you will have to reset your password with the email on file. If no email is on file then it will be handled manually.
> How was the list with accounts stolen? Was this through a SQL injection?
We are still investigating.
MyFarm:
Yes the site won't be back online until we are certain there are no other exploits.
This just goes to show the safest way to protect your coins are put them on usb key and keep them there until they are ready to sell and i would deffently think twice using mtgox for the service do the fact they have taken down access to our accounts and we have to take a 3rd parties advice to settle down and they they are safe btc or funds this is BULLSHIT with how much i have invested I DO NOT LIKE ANYONE keeping me from my investment. so for this day forward I look to start dealing with people direct and use like clearcoin for the transfer of coins that also cuts out the % mtgox takes. I am freaking pissed I cant trust they took enough security measures to protect us in the first freaking place then they should not have opened their online service.
I dont have to worry about banks not letting me have access to my accounts or funds do to a issue they could not have for-sen so for mtgox.com to pull that shit is a power play with OUR money. Im looking into attornys tomorrow to find out their responsibly
and loss of revenues.
this my opinion and the facts.
Tomorrow is a day of reckoning .
I dont have to worry about banks not letting me have access to my accounts or funds do to a issue they could not have for-sen so for mtgox.com to pull that shit is a power play with OUR money. Im looking into attornys tomorrow to find out their responsibly
and loss of revenues.
this my opinion and the facts.
Tomorrow is a day of reckoning .
The rollback is inevitable, and the right thing to do. If it were just a system glitch or a typo, would you still say "what's done is done"? These weren't real trades. Sorry if you don't get to keep 10,000 bitcoins bought at $.10. I'd be pissed too, but there is not an alternative.
grumble. i suppose you're right after all.
fuck it. good luck mtgox. :-)
My question is:
how is the situation where people withdrew funds in between the massive selloff and the trading freeze going to addressed?
People who withdrew coins will have a rollback + a withdraw?
how is the situation where people withdrew funds in between the massive selloff and the trading freeze going to addressed?
People who withdrew coins will have a rollback + a withdraw?
I think this post was long overdue. People have been reporting for over a week now that they've been getting hacked on MtGox, and then this happened. Every account, every e-mail, every (hashed) password. What's sad is that it's taken this long to post about it. Lots of people have been reporting this and it seems to fall on deaf ears. They have a whole thread about MtGox accounts that got hacked, yet no word was said to try and calm users or ease concerns.
Sorry to be so hard on you guys, don't get me wrong I love(d) the service, but you NEED to talk with users and tell them what's going on when they report getting hacked, and that needs to happen ASAP...not a week later. I hope your actions or lack thereof don't affect your business when it re-opens....cause I have/had(not sure, can't login) bitcoins with you guys and was looking forward to the value working it's way back up to 20.
HOPEFULLY people will trust you guys after this. A come back from this level of hack is hard, but I wish you guys the best.
Sorry to be so hard on you guys, don't get me wrong I love(d) the service, but you NEED to talk with users and tell them what's going on when they report getting hacked, and that needs to happen ASAP...not a week later. I hope your actions or lack thereof don't affect your business when it re-opens....cause I have/had(not sure, can't login) bitcoins with you guys and was looking forward to the value working it's way back up to 20.
HOPEFULLY people will trust you guys after this. A come back from this level of hack is hard, but I wish you guys the best.
Hello everyone, MagicalTux is busy getting everything back in order on mtgox so he asked me to post here and answer any questions people have.
First, only a small amount of BTC was stolen. MtGox will refund the stolen BTC to the compromised user.
Everyone's bitcoins are safe on the site. We still are holding all the coins safely in reserve. The vast majority of the coins are stored offline so they are impossible to compromise.
He understands the rollback won't be popular with people who were able to pick up coins for .10 or whatever but none of those trades were legitimate so mtgox has a legal obligation to reverse the trades.
I'm sure when you think about it you don't actually want to buy stolen coins and take advantage of the situation.
Things have been very hectic with mtgox since MagicalTux took over. He has simultaneously been trying to fend off persistent ddos attacks, hire more staff, deal with the huge increase in users, improve the code to support the much larger trade volume, permit SQL injection to compromise security, ensure regulatory compliance and deal with various security issues. Obviously things haven't gone as smoothly as we would like but we can see the light at the end of the tunnel with more people being hired and the backend changes done. MtGox will hopefully be able to regain your trust in the coming weeks.
The site should be up again shortly. I'm asking him to clear all the standing orders.
Please post any questions you have here and I'll do my best to answer.
Fix'dFirst, only a small amount of BTC was stolen. MtGox will refund the stolen BTC to the compromised user.
Everyone's bitcoins are safe on the site. We still are holding all the coins safely in reserve. The vast majority of the coins are stored offline so they are impossible to compromise.
He understands the rollback won't be popular with people who were able to pick up coins for .10 or whatever but none of those trades were legitimate so mtgox has a legal obligation to reverse the trades.
I'm sure when you think about it you don't actually want to buy stolen coins and take advantage of the situation.
Things have been very hectic with mtgox since MagicalTux took over. He has simultaneously been trying to fend off persistent ddos attacks, hire more staff, deal with the huge increase in users, improve the code to support the much larger trade volume, permit SQL injection to compromise security, ensure regulatory compliance and deal with various security issues. Obviously things haven't gone as smoothly as we would like but we can see the light at the end of the tunnel with more people being hired and the backend changes done. MtGox will hopefully be able to regain your trust in the coming weeks.
The site should be up again shortly. I'm asking him to clear all the standing orders.
Please post any questions you have here and I'll do my best to answer.
The rollback is inevitable, and the right thing to do. If it were just a system glitch or a typo, would you still say "what's done is done"? These weren't real trades. Sorry if you don't get to keep 10,000 bitcoins bought at $.10. I'd be pissed too, but there is not an alternative.
Jump to: