On Tor, you are allowing someone to be a man-in-the-middle. The exit node can see and intercept all traffic between you and the website, can present a fake phishing site to you, can record all traffic, can wrap SSL in their own certificate, etc. It is anonymous but not secure.
It is more likely that the computer was trojaned though. The PC cannot be trusted, it should be wiped and reloaded. It is not a good idea to let your "friends" use your computer that accesses your Bitcoins, many people would find 600 BTC + more valuable than a friendship.
Topic: Tor+Blockchain wallet hacked? 633 btc loss - page 6. (Read 14360 times)
I saw it in the Chinese section too. It's kind of hard to believe, since Blockchain just got a lot of money from VC.
This has nothing to do with Blockchain.info, idiot.
The whole wallet encryption and decryption is done client side, bockchain.info doesnt store shit.
This person has probably been attacked with a man in the middle attack. I think he has used a malicious TOR exit node which was sniffing his traffic. They then messed with his SSL certificate to blockchain.info. Because of this the user was logging in at blockchain on an unsecure (HTTP) connection. The attacker was able to sniff his data, and get the password. Im doing researchs to these attacks as we speak. Very frightning.
This would not work. Everything is done on the client side as far as encrypting and decrypting the wallet, creating new private keys and signing TXs. If the SSl certificate was tampered with then he should have received a warning. The only thing a TOR exit node would have been able to do is stop the TX from being broadcast or prevent the user from accessing his wallet.
IMO TOR had nothing to do with the fact his money was stolen (if it was in fact stolen)
They can even inject fake SSL-lock icons inside your browser. Not much people will notice.
you dont get it do you? lol at your research... look like you have to spend alot more time.
I saw it in the Chinese section too. It's kind of hard to believe, since Blockchain just got a lot of money from VC.
I was exploring this (1AaAYSunThcnsMdvgRqfCMKF68KacjM98f) address to find some clues, and I just found that this address perhaps is connected to some previous scams (perhaps - not proved for sure...)
One of the transactions.
Sender address is connected with https://bitcointalksearch.org/topic/m.8460225.
But well ... it doesn't change anything...
maybe someone will find something more interesting about it. But it might be just a waste of time.
Thing is to be careful if you are using Tor.
It is generally not efficient to look at individual transactions to try to track down where stolen bitcoin went. Someone could easily create a new address to receive the stolen bitcoin and then use a mixer to hide where he wants them to eventually end up One of the transactions.
Sender address is connected with https://bitcointalksearch.org/topic/m.8460225.
But well ... it doesn't change anything...
maybe someone will find something more interesting about it. But it might be just a waste of time. Thing is to be careful if you are using Tor.
the blockchain.info wallet is a html5/javascript local client.
tor and javascript are known to not go well together for security reasons. it's recommended to have javascript disabled when using tor.
go figure.
tor and javascript are known to not go well together for security reasons. it's recommended to have javascript disabled when using tor.
go figure.
Mindbogglingly scary stuff. Can't imagine how the affected guy feels. What will he do if btc ever really does take off. The psychological costs of theft on this scale must be acute
that is soooo terrible.
thanks for posting.
I just have a few bitcoin but I will remember this.
thanks for posting.
I just have a few bitcoin but I will remember this.
Well, the other day I left 250k laying on my table, and when I came back to the house, my new maid had stolen it all! Happens to the best of us.
This person has probably been attacked with a man in the middle attack. I think he has used a malicious TOR exit node which was sniffing his traffic. They then messed with his SSL certificate to blockchain.info. Because of this the user was logging in at blockchain on an unsecure (HTTP) connection. The attacker was able to sniff his data, and get the password. Im doing researchs to these attacks as we speak. Very frightning.
This would not work. Everything is done on the client side as far as encrypting and decrypting the wallet, creating new private keys and signing TXs. If the SSl certificate was tampered with then he should have received a warning. The only thing a TOR exit node would have been able to do is stop the TX from being broadcast or prevent the user from accessing his wallet.
IMO TOR had nothing to do with the fact his money was stolen (if it was in fact stolen)
They can even inject fake SSL-lock icons inside your browser. Not much people will notice.
I was exploring this (1AaAYSunThcnsMdvgRqfCMKF68KacjM98f) address to find some clues, and I just found that this address perhaps is connected to some previous scams (perhaps - not proved for sure...)
One of the transactions.
Sender address is connected with https://bitcointalksearch.org/topic/m.8460225.
But well ... it doesn't change anything... maybe someone will find something more interesting about it. But it might be just a waste of time.
Thing is to be careful if you are using Tor.
One of the transactions.
Sender address is connected with https://bitcointalksearch.org/topic/m.8460225.
But well ... it doesn't change anything...
maybe someone will find something more interesting about it. But it might be just a waste of time. Thing is to be careful if you are using Tor.
the blockchain.info wallet is a html5/javascript local client.
tor and javascript are known to not go well together for security reasons. it's recommended to have javascript disabled when using tor.
go figure.
tor and javascript are known to not go well together for security reasons. it's recommended to have javascript disabled when using tor.
go figure.
This person has probably been attacked with a man in the middle attack. I think he has used a malicious TOR exit node which was sniffing his traffic. They then messed with his SSL certificate to blockchain.info. Because of this the user was logging in at blockchain on an unsecure (HTTP) connection. The attacker was able to sniff his data, and get the password. Im doing researchs to these attacks as we speak. Very frightning.
This would not work. Everything is done on the client side as far as encrypting and decrypting the wallet, creating new private keys and signing TXs. If the SSl certificate was tampered with then he should have received a warning. The only thing a TOR exit node would have been able to do is stop the TX from being broadcast or prevent the user from accessing his wallet.
IMO TOR had nothing to do with the fact his money was stolen (if it was in fact stolen)
Holly, this is huge!
Need a good password program and 2FA login security for sure.
This person has probably been attacked with a man in the middle attack. I think he has used a malicious TOR exit node which was sniffing his traffic. They then messed with his SSL certificate to blockchain.info. Because of this the user was logging in at blockchain on an unsecure (HTTP) connection. The attacker was able to sniff his data, and get the password. Im doing researchs to these attacks as we speak. Very frightning.
... Then there was an error message pop up, he closed it and refreshed the wallet page...
That was probably a key moment.
I know I'm gonna talk about other people said and besides we're talking about something happened.
In other posts where people claimed their BTC stolen happen the same thing and I mean a common factor which is online wallet. I know (if is true of course) this won't work for what they stealed you but it's important to remark and use offline wallet account when you have >100BTC and is only for your security.
Most people in this forum and Reedit say Armory is a good and easy one to use. I own <10BTC but either way is hard to lost something invested and more important, leave the BTC with bad image.
In other posts where people claimed their BTC stolen happen the same thing and I mean a common factor which is online wallet. I know (if is true of course) this won't work for what they stealed you but it's important to remark and use offline wallet account when you have >100BTC and is only for your security.
Most people in this forum and Reedit say Armory is a good and easy one to use. I own <10BTC but either way is hard to lost something invested and more important, leave the BTC with bad image.
probably a man-in-the-middle attack performed by a TOR exit node.
just a reminder that in general it is not a good idea to use TOR to access
clearnet (that is, "normal" web addresses, as opposed to TOR hidden services).
What TOR makes secure in this case is the connection to the so-called TOR exit
node, which connects for you to your destination address, and sends you
the data back over the TOR network, thus acting as a proxy. However, you are effectively trusting
the exit node not to fiddle with the data it forwards. Since the exit node can be
anybody (you can set up one, too), there is really no reason to trust it.
In particular, they can redirct your blockchain.info request to a fake site,
or strip your communication of its SSL and read all of it.
If you still want to use TOR to access clear net, and want to make this secure,
you have to download and install SSL certificates of every site you are going to use, in this
case of blockchain.info .
just a reminder that in general it is not a good idea to use TOR to access
clearnet (that is, "normal" web addresses, as opposed to TOR hidden services).
What TOR makes secure in this case is the connection to the so-called TOR exit
node, which connects for you to your destination address, and sends you
the data back over the TOR network, thus acting as a proxy. However, you are effectively trusting
the exit node not to fiddle with the data it forwards. Since the exit node can be
anybody (you can set up one, too), there is really no reason to trust it.
In particular, they can redirct your blockchain.info request to a fake site,
or strip your communication of its SSL and read all of it.
If you still want to use TOR to access clear net, and want to make this secure,
you have to download and install SSL certificates of every site you are going to use, in this
case of blockchain.info .
can't believe that owner of 775 btc who is too lazy to protect his/her btc ....should more careful it's too shocking news he lost almost 236740$ it can change one's whole life....
other guys lost much more and they studied "computer science"
actualy we dont know anything about this case. i doubt it was because if Tor. i think it was his shitty computer (maleware etc).
That is terrible so much to lose. Yes these sorts of things make it scary for regular users.
how can someone steal that much and not feel remorse?
humans ftw
Jump to: