Wall Observer BTC/USD - Bitcoin price movement tracking & discussion - page 28375.

chessnut

legendary

Activity: 924

Merit: 1001

Quote from: fonzie on April 08, 2014, 05:02:00 AM

Can someone please update me what´s happening. Are there more Bitcoin exchanges that have been hacked?
Is that the reason why kraken.com went down a few times in the last days?

Unfortunately not fonzie. no more exchanges down.

fonzie

hero member

Activity: 504

Merit: 500

Moderator

Can someone please update me what´s happening. Are there more Bitcoin exchanges that have been hacked?
Is that the reason why kraken.com went down a few times in the last days?

ChartBuddy

legendary

Activity: 2380

Merit: 1823

1CBuddyxy4FerT3hzMmi1Jz48ESzRw1ZzZ

Explanation

gibbtek

newbie

Activity: 29

Merit: 0

Just want to say I love this forum. I log on every morning to have a read and drink my coffee (and then leave it open all day to stay on top of things)...

It really does provide me with the news that's most relevant to me, and a good laugh b/c the banter here is mostly pretty good.

My day job is as analyst developer and I manage a few servers to host client systems, so seeing this message about heartbleed is a big deal for me.

Defo good idea to stay away from any important SSL connections and reset passwords once the admins have confirmed they've updated their openssl packages - which shouldn't take long actually I manage to do mine in a short space of time.

So thanks for the heads up!

KFR

hero member

Activity: 560

Merit: 500

Per ardua ad luna

Quote from: solex on April 08, 2014, 04:32:58 AM

Quote from: dreamspark on April 08, 2014, 04:29:51 AM

Quote from: chessnut on April 08, 2014, 04:22:46 AM

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

It depends if Perfect-Forward Security was used, if it wasn't then yeah were in the shit. If it was used then the sessions from before a private key is stolen are safe. There is also no knowing who and how many people knew about this and also which sites actually had heartbeat set up. Furthermore you dont know if anyone has actually stolen the private keys yet.

2FA enabled, like authenticator, would prevent any major damage to an account. Passwords best changed though.

+1

dreamspark

hero member

Activity: 798

Merit: 1000

Quote from: solex on April 08, 2014, 04:32:58 AM

Quote from: dreamspark on April 08, 2014, 04:29:51 AM

Quote from: chessnut on April 08, 2014, 04:22:46 AM

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

It depends if Perfect-Forward Security was used, if it wasn't then yeah were in the shit. If it was used then the sessions from before a private key is stolen are safe. There is also no knowing who and how many people knew about this and also which sites actually had heartbeat set up. Furthermore you dont know if anyone has actually stolen the private keys yet.

2FA enabled, like authenticator, would prevent any major damage to an account. Passwords best changed though.

Some people in the bitfinex thread are saying that their 2FA was compromised as well and positions closed as well as other internal transactions. Hackers were unable to withdraw though.

On that note Bitfinex have also fixed the vulnerability and are regenerting their ssl certs.

solex

legendary

Activity: 1078

Merit: 1006

100 satoshis -> ISO code

Quote from: dreamspark on April 08, 2014, 04:29:51 AM

Quote from: chessnut on April 08, 2014, 04:22:46 AM

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

It depends if Perfect-Forward Security was used, if it wasn't then yeah were in the shit. If it was used then the sessions from before a private key is stolen are safe. There is also no knowing who and how many people knew about this and also which sites actually had heartbeat set up. Furthermore you dont know if anyone has actually stolen the private keys yet.

2FA enabled, like authenticator, would prevent any major damage to an account. Passwords best changed though.

PoolMinor

legendary

Activity: 1844

Merit: 1338

XXXVII Fnord is toast without bread

Time to consult your pineal gland.

http://www.youtube.com/watch?v=CTC_eeJj7zE

dreamspark

hero member

Activity: 798

Merit: 1000

Quote from: chessnut on April 08, 2014, 04:22:46 AM

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

It depends if Perfect-Forward Security was used, if it wasn't then yeah were in the shit. If it was used then the sessions from before a private key is stolen are safe. There is also no knowing who and how many people knew about this and also which sites actually had heartbeat set up. Furthermore you dont know if anyone has actually stolen the private keys yet.

KFR

hero member

Activity: 560

Merit: 500

Per ardua ad luna

Quote from: chessnut on April 08, 2014, 04:22:46 AM

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

Hackers don't know every vulnerability that exists. Inevitably when a major exploit is first published some of the black hats that have just heard about it start trying it out.

That's why admins rush to update their machines as soon as fixes are published, as is the case with this one.

chessnut

legendary

Activity: 924

Merit: 1001

If this ssl vulnerablility has been a problem since 2011, why should we be worried now? are hackers targeting every site?

dreamspark

hero member

Activity: 798

Merit: 1000

Really dont want to see a dump now, cant do anything as I refuse to log into Bitstamp until they sort out their SSL vunerability.

chessnut

legendary

Activity: 924

Merit: 1001

huobi froze at 2799 and then moved to 2783 where it is frozen now. hmm..... whats goin on

p0peji

sr. member

Activity: 266

Merit: 250

Quote from: ShroomsKit on April 08, 2014, 04:11:15 AM

Some idiots panic sold already...

Where is the rest of the idiots when you need them to panic sell some more?

ShroomsKit

hero member

Activity: 672

Merit: 500

Some idiots panic sold already...

KFR

hero member

Activity: 560

Merit: 500

Per ardua ad luna

Like a kitten pouncing on shadows. ;p

JorgeStolfi

hero member

Activity: 910

Merit: 1003

Quote from: solex on April 08, 2014, 03:58:20 AM

Has Huobi stopped trading? Fixing OpenSSL maybe?
edit: still going

Still frozen for me, by coincidence during a freefall, with the order book out of date. A trip switch perhaps?

dreamspark

hero member

Activity: 798

Merit: 1000

Quote from: solex on April 08, 2014, 03:58:20 AM

Has Huobi stopped trading? Fixing OpenSSL maybe?

Funny is just read the ars article on this, scary stuff.

dreamspark

hero member

Activity: 798

Merit: 1000

Another thing to remember with the shutting down of the smaller Chinese exchanges is which banks were they using if at all? It is likely that the smaller exchanges relied heavily on 3rd party payment processors and so makes sense that they would have to shut down. The larger exchanges who are making alot of money for the banks and dont completely rely on 3rd party payment processors aer likely to be unaffected?

solex

legendary

Activity: 1078

Merit: 1006

100 satoshis -> ISO code

Has Huobi stopped trading? Fixing OpenSSL maybe?

edit: still going

Topic: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion - page 28375. (Read 26608997 times)