Pages:
Author

Topic: MtGox's claims seem to be correct: Bitcoins still with them (Read 4412 times)

full member
Activity: 126
Merit: 100
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497


That Kevin Day guy seems like the perpetrator to me.  Should be track-able to see if he did it.
member
Activity: 70
Merit: 10
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497


Hey I seen that link before.

Must you spam your websites each 5 posts in each thread each minute of each hour?
full member
Activity: 154
Merit: 100
I think the plan for teh hackers was to withdraw $1000 worth of BTC at $.01, but they likely expected the trade to be executed instantly.  

Instead, the price steadily dropped for 10-15 minutes while everyone watched, then as soon as it was over tons of bids and asks were added and price immediately shot back up to $10-12.

Adam Barr yesterday confirmed that only about 100-200 bitcoins were transferred out around the $10 mark, not hte 100,000BTC that people are speculating on.

member
Activity: 70
Merit: 10
ON A SIDE NOTE: 20000th THREAD HERE!
newbie
Activity: 54
Merit: 0
I don't know how exchanges are regulated.  I don't know what typical practices are.  But this bothers me more than a little.  I didn't have a gox account and I certainly don't intend to get one now.

Like I say, maybe their business practices are typical but...

1) why is the auditor unnamed?  that should have been public information both before and after the incident.

2) why does an auditor have a copy of the exchange database (read-only or otherwise) on an unsecured machine?

3) why does the copy of the exchange database include the email and password columns? 

these are just a few questions.

have any of these questions been answered in another thread?
hero member
Activity: 910
Merit: 1005
hero member
Activity: 1148
Merit: 501
clipse : if bruce is going to get more info on this... it's not spam.  Had i not seen it in this thread, i wouldn't know about it.

So Bruce : Are you saying you're going to have the guy who hacked mtgox on?
newbie
Activity: 54
Merit: 0
I don't know how exchanges are regulated.  I don't know what typical practices are.  But this bothers me more than a little.  I didn't have a gox account and I certainly don't intend to get one now.

Like I say, maybe their business practices are typical but...

1) why is the auditor unnamed?  that should have been public information both before and after the incident.

2) why does an auditor have a copy of the exchange database (read-only or otherwise) on an unsecured machine?

3) why does the copy of the exchange database include the email and password columns? 

these are just a few questions.
newbie
Activity: 42
Merit: 0
they should use some of these bitcoins to compensate the people whose money they lost through bad security
newbie
Activity: 26
Merit: 0
Quote
It appears that someone who performs audits on our system and had read-only access to our database had their computer compromised. This allowed for someone to pull our database. The site was not compromised with a SQL injection as many are reporting, so in effect the site was not hacked.

No, you weren’t hacked, you employed people with as much responsibility, professionalism, and sense of duty as you: none.

It makes it OK that it was "someone else" and not Gox? Earlier, Gox blamed each victimized user even as the complaints mounted.

Gox' character seems at the level of a 12 year old.
full member
Activity: 125
Merit: 100
OMG Bruce, if this is true then my hat is off to you.


hero member
Activity: 504
Merit: 502
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497


GOD could you please stop injecting your own "company" at the expense of every single thread ? Its really becoming spammy.
full member
Activity: 185
Merit: 100
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497
You better have your microphones sorted out today... Smiley
newbie
Activity: 56
Merit: 0
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497



that would be 500 mil. bitcoins.
sensationalist?
legendary
Activity: 2198
Merit: 1311
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497


WTF?
sr. member
Activity: 336
Merit: 252
As I said elsewhere....  There's a lot more coming out.

Today at 2pm ET we'll be interviewing LIVE.... the man behind the $5,000,000 trade....
. of Bitcoin at $0.01 each....

http://twitter.com/brucewagner/status/82786506330218497
kjj
legendary
Activity: 1302
Merit: 1026
Some on this board claim the hacker sold and bought a large amount of coins at 0.01 to be able to withdraw 1000$ worth of coins at 0.01.

Based on the interview last night, I think MtGox claimed that the $1000 worth of bitcoins was based on them being in the neighborhood of $5-$10 each, rather than $0.01 each.  

I don't much care for the explanation given about the 'auditor' being hacked.  They're citing privacy reasons for not giving out the name of the auditor, when in fact it is ridiculous to have any audit performed by unnamed entities.  It's the name of the auditor, and their credibility therefrom, which gives credence to the audits they perform.  Not naming the auditor is extremely suspicious, in my opinion.

When asked why the auditor needed access to the live database, it was claimed that the audit being performed was to ensure that MtGox wasn't manipulating quoted prices to their own benefit.  That's all great, but only if the auditor is legitimate.  And we have no way of knowing that the auditor is legitimate if we don't know who the auditor is.

What use is an audit performed by unnamed entities?  It's worthless!

I'm sure they would have been more than happy to name the auditor two days ago.  But now, I can understand them keeping quiet.

And at this point, do you really care what the financial auditor has to say, nameless or not?

Sounds like they will be attempting to recover the losses from the auditor.  Depending on how that goes, we'll probably find out their name when that is done.
newbie
Activity: 56
Merit: 0
how is it known that its that address?

1. there was only one large trade on this day. it originated from this address, which wasnt touched for a week before that.
2. apparently it was known before that day that this address belongs to MtGox, see for example: http://forum.bitcoin.org/index.php?topic=17897.0
full member
Activity: 124
Merit: 100
how is it known that its that address?

i guess one could find out by making sure its the one used to transfer funds from the temporary addresses given out when adding funds to account...
full member
Activity: 209
Merit: 100
Some on this board claim the hacker sold and bought a large amount of coins at 0.01 to be able to withdraw 1000$ worth of coins at 0.01.

Based on the interview last night, I think MtGox claimed that the $1000 worth of bitcoins was based on them being in the neighborhood of $5-$10 each, rather than $0.01 each.  

I don't much care for the explanation given about the 'auditor' being hacked.  They're citing privacy reasons for not giving out the name of the auditor, when in fact it is ridiculous to have any audit performed by unnamed entities.  It's the name of the auditor, and their credibility therefrom, which gives credence to the audits they perform.  Not naming the auditor is extremely suspicious, in my opinion.

When asked why the auditor needed access to the live database, it was claimed that the audit being performed was to ensure that MtGox wasn't manipulating quoted prices to their own benefit.  That's all great, but only if the auditor is legitimate.  And we have no way of knowing that the auditor is legitimate if we don't know who the auditor is.

What use is an audit performed by unnamed entities?  It's worthless!

Pages:
Jump to: