NEM (XEM) Official Thread - 100% New Code - Easy To Use APIs - page 1885.

Bitventurer

sr. member

Activity: 491

Merit: 250

S P 8 D E

Quote from: Eadeqa on July 10, 2014, 03:01:57 PM

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

"NxT coin password: Blah Blah Blah"

He lost more BTC than Nxt (~ $700,000 worth of BTC).

The hacker immediately dumped them on bitstamp. I hope bitstamp confiscate the account and contact law enforcement a this was clear case of theft.

it was not , your misinformed

schnötzel

legendary

Activity: 1316

Merit: 1041

Bitcoin is a bit**

Quote from: Eadeqa on July 10, 2014, 03:01:57 PM

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

"NxT coin password: Blah Blah Blah"

He lost more BTC than Nxt (~ $700,000 worth of BTC).

The hacker immediately dumped them on bitstamp. I hope bitstamp confiscate the account and contact law enforcement a this was clear case of theft.

Eadeqa

hero member

Activity: 644

Merit: 500

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

"NxT coin password: Blah Blah Blah"

He lost more BTC than Nxt (~ $700,000 worth of BTC).

The hacker immediately dumped them on bitstamp. I hope bitstamp confiscate the account and contact law enforcement a this was clear case of theft.

Sebastien256

hero member

Activity: 715

Merit: 500

what about promoting this thread Nem members?

https://bitcointalksearch.org/topic/nxt-first-asset-of-the-nxt-asset-exchange-on-coinmarketcapcom-685041

TwinWinNerD

legendary

Activity: 1680

Merit: 1001

CEO Bitpanda.com

Quote from: schnötzel on July 10, 2014, 01:07:50 PM

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

We don't even know what was on the text file. Maybe the person who took it had no clue what NxT was until he read the text file. Maybe the text file was like

"NxT coin password: Blah Blah Blah"

even a lot of people are still oblivious as to what BTC is.

But seriously - i can´t believe it. With 40mil nxt you can hire an it expert (if needed) and buy some / make next accounts on a armada of several computers.

With some work you can make a complete offline cold wallet. Just need to figure out how to sign a message offline.

schnötzel

legendary

Activity: 1316

Merit: 1041

Bitcoin is a bit**

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

We don't even know what was on the text file. Maybe the person who took it had no clue what NxT was until he read the text file. Maybe the text file was like

"NxT coin password: Blah Blah Blah"

even a lot of people are still oblivious as to what BTC is.

But seriously - i can´t believe it. With 40mil nxt you can hire an it expert (if needed) and buy some / make next accounts on a armada of several computers.

Sebastien256

hero member

Activity: 715

Merit: 500

Quote from: patmast3r on July 10, 2014, 01:04:34 PM

Quote from: Sebastien256 on July 10, 2014, 01:01:21 PM

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

probably not related to hearthbleed. For being able to exploit hearthbleed bug, the hacker would have need to snif Klee before the patch is made. When heartbleed bug was made public, it have probably took less than a week to correct the login procedure.

One week is a long fucking time. I don't think it took dropbox that long though if they were vulnderable.
Also an attacker wouldn't have sniffed Klee specifically. An attacker would have sniffed every fucking dropbox connection to the server.

one week, is a very conservative maximum bound....

patmast3r

hero member

Activity: 980

Merit: 1001

Quote from: Sebastien256 on July 10, 2014, 01:01:21 PM

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

probably not related to hearthbleed. For being able to exploit hearthbleed bug, the hacker would have need to snif Klee before the patch is made. When heartbleed bug was made public, it have probably took less than a week to correct the login procedure.

One week is a long fucking time. I don't think it took dropbox that long though if they were vulnderable.
Also an attacker wouldn't have sniffed Klee specifically. An attacker would have sniffed every fucking dropbox connection to the server.

Sebastien256

hero member

Activity: 715

Merit: 500

Quote from: TaunSew on July 10, 2014, 12:56:20 PM

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

probably not related to hearthbleed. For being able to exploit hearthbleed bug, the hacker would have need to snif Klee before the patch is made. When heartbleed bug was made public, it have probably took less than a week to correct the login procedure.

TaunSew

hero member

Activity: 756

Merit: 506

Quote from: Sebastien256 on July 10, 2014, 12:54:46 PM

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.

on dropbox no less, where any dropbox employee could had done it (although it was likely related to heart bleed).

Even one of those simple encryption done online probably could had adverted this.

We don't even know what was on the text file. Maybe the person who took it had no clue what NxT was until he read the text file. Maybe the text file was like

"NxT coin password: Blah Blah Blah"

even a lot of people are still oblivious as to what BTC is.

Sebastien256

hero member

Activity: 715

Merit: 500

Quote from: schnötzel on July 10, 2014, 12:53:42 PM

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

yeah, in a plain text file.... not encrypted.
Most of the 1M dollars were BTC.

schnötzel

legendary

Activity: 1316

Merit: 1041

Bitcoin is a bit**

He really had all passwords on one pc/ mac? Oh my gosh? I feel with him but this is really stupido

TaunSew

hero member

Activity: 756

Merit: 506

Quote from: Sebastien256 on July 10, 2014, 11:57:38 AM

Quote from: freigeist on July 10, 2014, 11:01:04 AM

Quote from: TaunSew on July 10, 2014, 07:24:24 AM

NxT's price is collapsing because one of the original NxT whales (40 million) downloaded a keylog file and presumably close to 7 million has been dumped by a hacker so far and another 33 million will be dumped. He had passwords to wallets worth several $million on a text file on his desktop.

https://nxtforum.org/general-discussion/price-speculation/5440/

This does relate to NEM as it is entirely traded on the AE and NxT's price changes has a huge effect. A $500 NEMstake is possible if NxT continues to drop in price.

F*ck!!!
When will people learn and stop using windows OS and other closed source
operating systems.

Actually, Klee compromises computer was a mac...

but the stored files were on drop box (open SSL) and Klee never changed his password after heartbleed. It makes you wonder how someone so careless could be entrusted with that much money. Klee not only lost his own money but he also lost the NxT's community fund.

That should be a lesson when NEM has its' funds that they need to be cold storage and require multiple layers of authentication involving two or more people before they can be moved. If that can't be handled or done then arguably there shouldn't be any point in having reserve funds if they can't be secured.

Never mind, it's open knowledge that any drop box employees can look into your files and I doubt their management cares if you steal "magic coin" (especially non-BTC "magic coins"). Heck the local police departments often have that "he stole your coins? You mean World of Warcraft?" reaction to this crypto currency crime.

mrvegad

hero member

Activity: 616

Merit: 500

With NEM you will need someones password AND wallet.dat file to take their NEM.

patmast3r

hero member

Activity: 980

Merit: 1001

Quote from: zachamo on July 10, 2014, 12:28:29 PM

Does anyone recall a few dozen pages back my mention of a HYBRID key?

Part of it is stored like a wallet.dat and part of it is your passphrase, meaning if someone gets the phrase OR your wallet file, they still can't access your funds?

Sounds like an even better idea now.

Isn't that how any encrypted wallet file works already ?

zachamo

sr. member

Activity: 347

Merit: 251

There can be only one!

Does anyone recall a few dozen pages back my mention of a HYBRID key?

Part of it is stored like a wallet.dat and part of it is your passphrase, meaning if someone gets the phrase OR your wallet file, they still can't access your funds?

Sounds like an even better idea now.

Sebastien256

hero member

Activity: 715

Merit: 500

Quote from: freigeist on July 10, 2014, 11:01:04 AM

Quote from: TaunSew on July 10, 2014, 07:24:24 AM

NxT's price is collapsing because one of the original NxT whales (40 million) downloaded a keylog file and presumably close to 7 million has been dumped by a hacker so far and another 33 million will be dumped. He had passwords to wallets worth several $million on a text file on his desktop.

https://nxtforum.org/general-discussion/price-speculation/5440/

This does relate to NEM as it is entirely traded on the AE and NxT's price changes has a huge effect. A $500 NEMstake is possible if NxT continues to drop in price.

F*ck!!!
When will people learn and stop using windows OS and other closed source
operating systems.

Actually, Klee compromises computer was a mac...

fragout

legendary

Activity: 1279

Merit: 1018

There really needs to be something done in the security front to put a stop to all these hacking attacks. I know there is keepass, 2FA etc, but something is needed for the non tech minded person if crypto is ever going to take off. Its just too easy to download a keylogger or other malware these days.

On a related note. I watched a bitcoin panal with some security experts and the winklevoss twins early last year in which, one of the security experts described how a system could be hacked and your bitcoins stolen. The Winklevoss twins looked at each other after hearing this with a look of OH shit on their faces

solix

full member

Activity: 180

Merit: 100

Who maintains the simple machines forum at nemcoin? Have a technical issue...

xtester

hero member

Activity: 840

Merit: 500

Risk taker & Black Swan farmer.

Yeah, sad and instructive story.

There is a far to big incentive to be a hacker these days.

Topic: NEM (XEM) Official Thread - 100% New Code - Easy To Use APIs - page 1885. (Read 2984910 times)