Openex hacked but coins recovered - page 9.

bitpop

legendary

Activity: 2912

Merit: 1060

Quote from: r3wt on January 14, 2014, 08:28:35 AM

Quote from: bitpop on January 14, 2014, 08:27:07 AM

Go to digital ocean and do all their tutorials. It'll cost you a couple bucks. You'll learn almost everything.

thanks for the advice, will do. it looks like the tutorials are all pretty old. are they possibly out of date?

I don't think so. I did see ubuntu is 12.04 and newest is 13.10 but it doesn't matter.

CatCoin

newbie

Activity: 38

Merit: 0

Quote from: r3wt on January 14, 2014, 08:24:15 AM

Quote from: Coin_Master on January 14, 2014, 08:20:00 AM

Quote from: r3wt on January 14, 2014, 08:11:16 AM

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

Getting qualified is learning. But you need to demonstrate that you can apply what you have learned correctly, by passing an examination.

last time i checked, experience > exams. i was A+ certified @ 17. i fell into drugs, got back into computers and started programming about a year and a half ago. started working on the exchange about 4 months ago.

I'm quoting this so that it lives on forever.

A+ certification + 1 year of supposed programming experience == I'm ready to run a crypto exchange and safeguard peoples' money

Snail2

legendary

Activity: 1512

Merit: 1000

Quote from: r3wt on January 14, 2014, 08:11:16 AM

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

There are no "properly secure the server". Securing a server is a cyclic task with continuous risk assessment, fine tuning your systems and admin procedures, searching for vulnerabilities and fixing them. Perhaps you should take a look at ISO 27001.

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: bitpop on January 14, 2014, 08:27:07 AM

Go to digital ocean and do all their tutorials. It'll cost you a couple bucks. You'll learn almost everything.

thanks for the advice, will do. it looks like the tutorials are all pretty old. are they possibly out of date?

Coin_Master

full member

Activity: 148

Merit: 100

Quote from: r3wt on January 14, 2014, 08:24:15 AM

last time i checked, experience > exams

Would you try flying a plane without a license, without taking exams to determine you are capable and competent. I hope not.

bitpop

legendary

Activity: 2912

Merit: 1060

Go to digital ocean and do all their tutorials. It'll cost you a couple bucks. You'll learn almost everything.

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: CatCoin on January 14, 2014, 08:23:20 AM

This whole situation is just an elaborate troll, right? This guy can't be for real.

no man, its very real look at the logs. lets just say i learned a valuable lesson, more than i could possibly convey through the computer.

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: Coin_Master on January 14, 2014, 08:20:00 AM

Quote from: r3wt on January 14, 2014, 08:11:16 AM

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

Getting qualified is learning. But you need to demonstrate that you can apply what you have learned correctly, by passing an examination.

last time i checked, experience > exams. i was A+ certified @ 17. i fell into drugs, got back into computers and started programming about a year and a half ago. started working on the exchange about 4 months ago.

CatCoin

newbie

Activity: 38

Merit: 0

This whole situation is just an elaborate troll, right? This guy can't be for real.

Coin_Master

full member

Activity: 148

Merit: 100

Quote from: r3wt on January 14, 2014, 08:11:16 AM

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

Getting qualified is a part of learning, you need to demonstrate that you can apply what you have learned correctly, by passing an examination.

Snail2

legendary

Activity: 1512

Merit: 1000

I didn't expected such fundamental mistakes with that site as well, but mocking with the site owner is contra productive will not lead anywhere. Your point are valid and I share your concerns but if you point him to some "Top 100 step by step Linux hardening" site that could be more fruitful

.

bitpop

legendary

Activity: 2912

Merit: 1060

Quote from: r3wt on January 14, 2014, 08:11:16 AM

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

Of course. We are all passionate about technology here, but don't learn while holding people's money.

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: Coin_Master on January 14, 2014, 08:05:04 AM

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

thanks for your advice. everyone can learn. you are wrong.

Coin_Master

full member

Activity: 148

Merit: 100

Quote from: r3wt on January 14, 2014, 04:06:50 AM

it's my first server, doesn't mean i'm incapable of learning i just don't know because i'm not experienced. maybe i'll find someone who is and hire them to teach me how to properly secure the server.

That in itself is scary. Security is ongoing, when you say "properly secure the server" you imply that at some point the job is done. You should not be running a server that has other peoples money stored on it. My advice would be to get some qualifications first.

bitpop

legendary

Activity: 2912

Merit: 1060

Quote from: r3wt on January 14, 2014, 07:58:24 AM

Quote from: CatCoin on January 14, 2014, 07:42:45 AM

Quote from: Snail2 on January 14, 2014, 07:30:37 AM

Leave him alone guys. Thanks to God nothing rally serious happened and I guess he have learned from this lesson. Instead of mocking him give him some useful advice about OS hardening.

My OS hardening advice:
Quit while you're ahead before you put more people at risk of losing their money.

The attitude you present here is exactly why people will keep making this mistake, and others will keep losing money because of it. There is no "it's ok, try harder next time". This isn't a game anymore... people are losing real money so that kids can "give running an exchange a try". It isn't funny, and it shouldn't be encouraged to continue.

thanks for the advice but no. i didn't come this far to give up. and stop calling me a kid.

Jesus kid, how old are you?

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: CatCoin on January 14, 2014, 07:42:45 AM

Quote from: Snail2 on January 14, 2014, 07:30:37 AM

Leave him alone guys. Thanks to God nothing rally serious happened and I guess he have learned from this lesson. Instead of mocking him give him some useful advice about OS hardening.

My OS hardening advice:
Quit while you're ahead before you put more people at risk of losing their money.

The attitude you present here is exactly why people will keep making this mistake, and others will keep losing money because of it. There is no "it's ok, try harder next time". This isn't a game anymore... people are losing real money so that kids can "give running an exchange a try". It isn't funny, and it shouldn't be encouraged to continue.

thanks for the advice but no. i didn't come this far to give up. and stop calling me a kid.

CatCoin

newbie

Activity: 38

Merit: 0

Quote from: Snail2 on January 14, 2014, 07:30:37 AM

Leave him alone guys. Thanks to God nothing rally serious happened and I guess he have learned from this lesson. Instead of mocking him give him some useful advice about OS hardening.

My OS hardening advice:
Quit while you're ahead before you put more people at risk of losing their money.

The attitude you present here is exactly why people will keep making this mistake, and others will keep losing money because of it. There is no "it's ok, try harder next time". This isn't a game anymore... people are losing real money so that kids can "give running an exchange a try". It isn't funny, and it shouldn't be encouraged to continue.

cassieheart

sr. member

Activity: 354

Merit: 250

Selling my OpenEx shares 21 Available. 0.075 a share. Pm me for more details.

r3wt

hero member

Activity: 686

Merit: 504

always the student, never the master.

Quote from: CatCoin on January 14, 2014, 07:11:14 AM

What are you even talking about? "It won't last long"? You're welcome to dispute anything I said, but there's nothing to dispute.

You got in over your head. That's life. I respect that you're aiming to pay people back. Learn from your mistakes and don't do it again.

i recovered the wallet.dat with foremost and all the coins were still there, which leads me to believe the attacker was a greyhat giving out a lesson to a rookie sysadmin. "aimining to pay people back" i'm readying the transaction as we speak. fyi, i don't write javascript. hired out for most of that.

bitpop

legendary

Activity: 2912

Merit: 1060

No mocking and we did.

Topic: Openex hacked but coins recovered - page 9. (Read 14287 times)