Author

Topic: my wallet got cleaned out and questions (Read 734 times)

legendary
Activity: 1106
Merit: 1000
May 08, 2016, 04:52:36 AM
#17
blockchain.info is good service, without password recovery, so only you who know the password, the 2nd problem are you use same password for your email, other account web ? are you use internet security?

for all blockchain member im recomended using new wallet system from blockchain https://blockchain.info/wallet-beta/#/signup

- IP restriction
- 2fa Sms/google authy
- TOR IP blocked
- 2nd passsword

if you use all security system, im sure your bitcoin is safe

Useless, the safest way to store your bitcoin is store it to cold storage, not into online wallet or exchange wallet service which it have many trouble. Stop using blockchain and exchange wallet.

I dont agree with you that online wallet are not safe, it is upto you that how you are using the security of the web wallet, i am using coinbase web wallet and i have enabled sms and email confirmation security and was using desktop wallet electrum, last 2 or 3 months back i also got hacked due to downloaded a file that was a keylogger, the hacker was able to hack my desktop wallet as i have not enabled the security but he was not able to hack my online web wallet coinbase because i have security of sms and if new ip then email confirmation needed so he as not able to hack my web wallet.

It is upto you that how much security you use of their services.

How if coinbase turn to Mt.gox v2? Are you sure risk your coins there?
Well now electrum have 2fa features. My experience is use web wallet is bad.
legendary
Activity: 1190
Merit: 1002
blockchain.info is good service, without password recovery, so only you who know the password, the 2nd problem are you use same password for your email, other account web ? are you use internet security?

for all blockchain member im recomended using new wallet system from blockchain https://blockchain.info/wallet-beta/#/signup

- IP restriction
- 2fa Sms/google authy
- TOR IP blocked
- 2nd passsword

if you use all security system, im sure your bitcoin is safe

Useless, the safest way to store your bitcoin is store it to cold storage, not into online wallet or exchange wallet service which it have many trouble. Stop using blockchain and exchange wallet.

I dont agree with you that online wallet are not safe, it is upto you that how you are using the security of the web wallet, i am using coinbase web wallet and i have enabled sms and email confirmation security and was using desktop wallet electrum, last 2 or 3 months back i also got hacked due to downloaded a file that was a keylogger, the hacker was able to hack my desktop wallet as i have not enabled the security but he was not able to hack my online web wallet coinbase because i have security of sms and if new ip then email confirmation needed so he as not able to hack my web wallet.

It is upto you that how much security you use of their services.
legendary
Activity: 1106
Merit: 1000
blockchain.info is good service, without password recovery, so only you who know the password, the 2nd problem are you use same password for your email, other account web ? are you use internet security?

for all blockchain member im recomended using new wallet system from blockchain https://blockchain.info/wallet-beta/#/signup

- IP restriction
- 2fa Sms/google authy
- TOR IP blocked
- 2nd passsword

if you use all security system, im sure your bitcoin is safe

Useless, the safest way to store your bitcoin is store it to cold storage, not into online wallet or exchange wallet service which it have many trouble. Stop using blockchain and exchange wallet.
hero member
Activity: 756
Merit: 510
Dear me, I think I'm becoming a god
Why do you people keep having online accounts without email and 2FA verification?

What, are you allergic on having money?
lol
legendary
Activity: 1652
Merit: 1007
DMD Diamond Making Money 4+ years! Join us!
Why do you people keep having online accounts without email and 2FA verification?

What, are you allergic on having money?
legendary
Activity: 1218
Merit: 1006
From your situation it seems like the imported private keys of your get compromised or accessed by some one remotely or physically. You better scan your whole computer for malware. With malware anybody from anywhere can access your all files in your computer. You better have printed those private keys after you import and deleted that pdf file with privatekey. Sorry for your loss.
hero member
Activity: 812
Merit: 1000
The private key which you said you generated online couldn't have compromised the whole wallet no matter if you imported or swept it, but since it was generated online, the funds stored in its address were already vulnerable. Most likely someone was able to find out your handle and the password of your blockchain.info wallet and like you mentioned you didn't had any second security enabled, who ever got in, wiped it clean.

Advice, do a clean sweep of your hard-disk partition and re-install the OS, install virus/malware scanners and update them, run a scan, if everything seems okay, install SPV based desktop clients such as Electrum, use a password to encrypt the wallet and add 2fa for greater security. Also, make note of your seed somewhere safe.
hero member
Activity: 672
Merit: 500
blockchain.info is good service, without password recovery, so only you who know the password, the 2nd problem are you use same password for your email, other account web ? are you use internet security?

for all blockchain member im recomended using new wallet system from blockchain https://blockchain.info/wallet-beta/#/signup

- IP restriction
- 2fa Sms/google authy
- TOR IP blocked
- 2nd passsword

if you use all security system, im sure your bitcoin is safe
hero member
Activity: 840
Merit: 501
why not use coinbase, always need email and sms verify if you want use so high security, or just use xapo wallet has ultra tight security and so many verification to withdraw your coin
legendary
Activity: 1382
Merit: 1122
Blockchain.info is known for this. I'm sorry it happened to you. Don't use online wallets ever. They've had problems in the past and they're going to have problems in the future. I suggest Mycelium for Android and paper wallets.
staff
Activity: 3458
Merit: 6793
Just writing some code
It would be pretty strange if he changed his settings to make his account more vulnerable/ less safe
It would be pretty normal if he didn't sign up with an email, thus that setting would not be enabled by default.

Also, note how he says that
Anyways, I didn't have any secondary security enabled.


Anyways, this is a pointless argument. Either way, he probably got malware on his computer which stole his password or his private keys, or both.
hero member
Activity: 756
Merit: 510
Dear me, I think I'm becoming a god
The private keys got compromised, blockchain.info is rock solid otherwise
I beg to differ. Blockchain.info has had multiple security issues in the past. His private keys were not compromised unless he imported them. He most likely got his password stolen.

A password alone cant get you into a blockchain.info account, if you are trying to sign into your account with a new IP, you need email confirmation
It depends on your security settings. You don't need to have an email linked to the account and if you did, you could also have it not set to email you. It really just depends on what he set for security, and based upon previous cases, the most common issue is password theft, not private keys being compromised which is insanely difficult and almost impossible to do with a web wallet unless the service is hacked.

[/quote]

It would be pretty strange if he changed his settings to make his account more vulnerable/ less safe
staff
Activity: 3458
Merit: 6793
Just writing some code
The private keys got compromised, blockchain.info is rock solid otherwise
I beg to differ. Blockchain.info has had multiple security issues in the past. His private keys were not compromised unless he imported them. He most likely got his password stolen.

A password alone cant get you into a blockchain.info account, if you are trying to sign into your account with a new IP, you need email confirmation
[/quote]
It depends on your security settings. You don't need to have an email linked to the account and if you did, you could also have it not set to email you. It really just depends on what he set for security, and based upon previous cases, the most common issue is password theft, not private keys being compromised which is insanely difficult and almost impossible to do with a web wallet unless the service is hacked.
hero member
Activity: 756
Merit: 510
Dear me, I think I'm becoming a god


The private keys got compromised, blockchain.info is rock solid otherwise
I beg to differ. Blockchain.info has had multiple security issues in the past. His private keys were not compromised unless he imported them. He most likely got his password stolen.

A password alone cant get you into a blockchain.info account, if you are trying to sign into your account with a new IP, you need email confirmation
staff
Activity: 3458
Merit: 6793
Just writing some code
Undecided

Relatively new wallet (2-3 months old)
Used for pocket change
Imported priv key that was generated online
Can't remember if I swept it or just added it

If I sweep a priv key into a wallet, does that mean if that key is compromised the entire wallet funds are available?
No, that is only when you import. When you sweep, the funds are automatically moved from the private key being swept to an address in your wallet via a transaction.

Anyways, I didn't have any secondary security enabled.

I'm just wondering if the wallet password was compromised or was it that priv key that caused this?

blockchain
Your password was probably stolen. Check that you don't have any malware.

The private keys got compromised, blockchain.info is rock solid otherwise
I beg to differ. Blockchain.info has had multiple security issues in the past. His private keys were not compromised unless he imported them. He most likely got his password stolen.
hero member
Activity: 756
Merit: 510
Dear me, I think I'm becoming a god
The private keys got compromised, blockchain.info is rock solid otherwise
member
Activity: 123
Merit: 17
 Undecided

Relatively new wallet (2-3 months old)
Used for pocket change
Imported priv key that was generated online
Can't remember if I swept it or just added it

If I sweep a priv key into a wallet, does that mean if that key is compromised the entire wallet funds are available?

Anyways, I didn't have any secondary security enabled.

I'm just wondering if the wallet password was compromised or was it that priv key that caused this?

blockchain
Jump to: