News for hackers. Stuff that matters.
Re:We have detected a security breach. Services are temporar... by jimrandomh on Monday April 01, 2013 @02:31PM (#5474951)
"Online wallet services" are an invitation to theft and fraud. Do not use them. I've been saying that since July 2011 (https://bitcointalk.org/index.php?topic=26260.0), before MyBitcoin ran off with everyone's money, and it's just as true today as it was then.

If you lost money today I feel for you, but seriously, it's your own damn fault. A Bitcoin is only yours if it was last sent to an address that is yours, and an address is only yours if no one else knows what it is - in other words, you have to have generated it anew on a secure, malware-free computer, and avoided ever putting the wallet file on any computer that has malware or that is not yours.

Seriously, stop it, you fools.

Re:We have detected a security breach. Services are temporar... by itcmcgrath on Monday April 01, 2013 @03:25PM (#5475293)
Which is essentially saying BTC will never become more than a semi-serious play thing for the tech community. How is the non-tech user ever going to be able to use this with anywhere near level of trust/safety they do with current traditional currencies. Hell, a lot of my tech friends can't keep their computer secure/clean, not to mention backed-up, so how are Joe and Jane Average?

Or, alternatively BTC embraces the same banking industry setup it is trying to get away from.

That said, I don't disagree with what you are saying (and upvoted) - just pointing out some implications.

Re:We have detected a security breach. Services are temporar... by wereHamster on Monday April 01, 2013 @03:28PM (#5475307)
Those who want to trust BTC banks can do so. But now people have the choice not to trust them and instead manage their wallet themselves. You don't have that choice in the current banking system.
Re:We have detected a security breach. Services are temporar... by itcmcgrath on Monday April 01, 2013 @03:35PM (#5475338)
When I moved to the US, I spent a week+ living on cash until I had my bank account set up. Being able to buy pre-paid VISA cards for cash at retailers solves the part of the online issue as well. You can be a 'mattress' banker with cash if you wish, securing your house just like you would secure your computer.

Not sure there is as big as a difference between BTC and the current as people would lead you to believe. Emphasis on as since there obviously are differences - at least until new laws get thought up and passed.

Re:We have detected a security breach. Services are temporar... by aneth4 on Monday April 01, 2013 @09:38PM (#5477188)
> Not sure there is as big as a difference between BTC and the current as people would lead you to believe

1) The value of your card is unlikely to be stolen by a hacker, unless you make an online purchase.

2) If someone spends the value of your card, you have recourse

3) Bitcoin is used to store much large amounts of money than you likely had on your VISA card

Re:We have detected a security breach. Services are temporar... by fusiongyro on Monday April 01, 2013 @03:35PM (#5475339)
You're presenting it as a choice between two equally viable options, but the point is that you really have to manage it yourself.
Re:We have detected a security breach. Services are temporar... by wereHamster on Monday April 01, 2013 @03:46PM (#5475410)
Yes, right now using these online wallets is not really an option if you are at all concerned about your bitcoins. But it will be in the future. Because online wallets are not less secure than an E-Banking account at a conventional bank. The difference is that banks spend a lot more money on security than the current online wallet operators (think penetration testing, code review, dedicated security staff, option to have two-factor authentication etc).
Re:We have detected a security breach. Services are temporar... by tempaccount9473 on Monday April 01, 2013 @04:10PM (#5475569)
> Because online wallets are not less secure than an E-Banking account at a conventional bank.

Nope. Look at everything you can do with your online bank account. Transfers to other accounts, wires, bill pay, stop payments, ACH (if you're lucky), etc. What's the common there? All those transaction are reversable. This makes it hard for hackers to steal money from banks, they need an unwitting third party (mule) to accept an account transfer, and then go to a branch or ATM to withdraw cash.

So it's not like your online banking accounts are secure, you can purchase any number of stolen online banking credentials from trojan/botnet operators. The price for those accounts is quite low, because the real effort is in finding unwitting mules.

The problem with bitcoin, is that bitcoin transfers are irreversable. So banks will never be able to protect bitcoin wallets effectively, because they can't rely on being able to reverse transactions for compromised accounts.

Re:We have detected a security breach. Services are temporar... by itcmcgrath on Monday April 01, 2013 @04:27PM (#5475679)
Excellent points.

I worked in a bank designing systems at one point. Even with methods to retrieve money lost through fraudulent transactions, they still had monthly 'Fraud' budgets much larger than my salary for money they couldn't retrieve. Imagine BTC services 'Fraud Budget' when all transactions are non-reversible.

Banks do have a massive advantage in 'Practical' security as well in the form of a 'big stick' aided by the government. Since the practical risks of fraud against a bank are much higher than fraud against an online BTC service (who is the FBI more likely to help), the exposure would be much bigger.

Re:We have detected a security breach. Services are temporar... by mootothemax on Monday April 01, 2013 @05:34PM (#5476087)
Do banks regularly buy lists of their own compromised accounts? If not, why? Surely it'd be cheaper in the long run?
Re:We have detected a security breach. Services are temporar... by Nursie on Monday April 01, 2013 @06:54PM (#5476455)
Surely that would be encouraging the market ?!
Re:We have detected a security breach. Services are temporar... by fusiongyro on Monday April 01, 2013 @04:02PM (#5475519)
You make strong points, but (and without wanting to rehash some tedious arguments) there is still the fundamental difference that "e-banking" is not dealing with "e-cash" the way Bitcoin is "e-cash." Different members of the audience perceive this variously as a benefit or a drawback, but either way it will complicate security.
Re:We have detected a security breach. Services are temporar... by cadetzero on Monday April 01, 2013 @03:51PM (#5475440)
> How is the non-tech user ever going to be able to use this with anywhere near level of trust/safety they do with current traditional currencies.

Near everyone I know, regardless of age, does their banking online. I don't see how this is any different than a username/password being stored on some banking server, and getting stolen.

Best case? You boot to a clean ISO, make a wallet, generate an address, write down the public/private key, transfer all your btc to it, and call it a day. There is no digital trace, and you have a paper wallet.

Re:We have detected a security breach. Services are temporar... by polemic on Monday April 01, 2013 @04:59PM (#5475901)
This is wrong in so many ways.

If your bank is hacked you as the user are not liable for the loss. Online transactions are traceable and reversible. Banks are heavily regulated and the legal regime is well defined. Etc etc etc.

Having your online banking hacked is a bit like being mugged on the way out of the bank. Having an online wallet service hacked is like someone driving in a truck, emptying the vault and leaving without a trace.

Re:We have detected a security breach. Services are temporar... by ccrabb on Monday April 01, 2013 @06:47PM (#5476426)
And then the mugger shows up the next day and gives you your money back.
Re:We have detected a security breach. Services are temporar... by TylerE on Monday April 01, 2013 @06:00PM (#5476241)
It's different because FDIC.
Re:We have detected a security breach. Services are temporar... by polemic on Monday April 01, 2013 @03:45PM (#5475401)
> "How is the non-tech user ever going to be able to use this with anywhere near level of trust/safety they do with current traditional currencies."

Insurance.

Re:We have detected a security breach. Services are temporar... by itcmcgrath on Monday April 01, 2013 @03:52PM (#5475442)
Insurance isn't a magic word.

Insurance works on risk profiles. Insurance also works by limiting exactly what situations they do and do not cover (see: All the people who 'thought' they had flood insurance over the years).

Something tells me insurance is going to be a lot more expensive for BTC, which can have a range of impacts that will make it unpalatable for the average consumer, if they or online services can even get (try insuring a Audi R8 under an 18 year old's name...)

Re:We have detected a security breach. Services are temporar... by polemic on Monday April 01, 2013 @04:50PM (#5475842)
That's all true. It's also the only way anyone is going to trust an online bitcoin wallet. Why is it surprising that it would be expensive?
Re:We have detected a security breach. Services are temporar... by itcmcgrath on Monday April 01, 2013 @05:09PM (#5475952)
Not surprising; 'Insurance' is less likely to have the impact people are saying it will - either it will be incredibly hard to get insurance in the first place (making it more of a non-factor), and/or it will not provide the same level of coverage/safety-net as you get with a Bank, and hence BTC will never get to the same level of trust.

Either case, I don't think 'Insurance' is going to be the magic thing that will make BTC as viable as traditional currencies.

Re:We have detected a security breach. Services are temporar... by astrodust on Monday April 01, 2013 @05:39PM (#5476109)
Nobody in their right mind would insure Bitcoins.
Re:We have detected a security breach. Services are temporar... by polemic on Monday April 01, 2013 @05:50PM (#5476184)
Probably not for the reason you think.

Actuaries happen to be quite good an quantifying risk. If the price is right, someone will be willing to insure it. An insurer with a specialist background in systems and security could do well.

The actual problem is the implications of underwriting a fiat currency with a "real" currency.

Re:We have detected a security breach. Services are temporar... by astrodust on Tuesday April 02, 2013 @12:11AM (#5477647)
You may as well be insuring cigars against arson.
Re:We have detected a security breach. Services are temporar... by M4v3R on Monday April 01, 2013 @02:59PM (#5475128)
While this is true, it's extremely hard to keep your computer free of any kind of malware. There are many trojans that go undetected for enough time to do serious damage. I personally know a guy that, even with having anti virus installed, had 2500 BTC stolen from his personal computer.

So really, so far the most secure way to store Bitcoin is either to encrypt private key and only then store it somewhere, or print it out, store it in a safe and remove all traces from the computer. Better yet - use a locally hosted javascript app to generate the pair and never write it to disk, from where it could be recovered even after deletion.

I'm now working on developing a Bitcoin platform that will enable you to do exactly this - your private keys will be generated on your computer, encrypted with PBKDF2-derived passphrase from your password and only then stored on our servers. This way no one except you can ever touch the coins.

Re:We have detected a security breach. Services are temporar... by gnarbarian on Monday April 01, 2013 @03:14PM (#5475236)
if I had a stash of bitcoins I'd probably use some hardened Linux variant or OpenBSD to store them and perform transactions.
Re:We have detected a security breach. Services are temporar... by fpgaminer on Monday April 01, 2013 @03:33PM (#5475329)
This is why I started working on a Hardware Wallet last year. Easy to use, impossible to steal.
Re:We have detected a security breach. Services are temporar... by aquayellow on Monday April 01, 2013 @03:07PM (#5475183)
Yes, I learned it the hard way when I had around 200 BTC stolen from the online service I was using. I kept blaming the service but the fact is it's stupid to think of bitcoins = hard currencies and online wallet services = bank.
Re:We have detected a security breach. Services are temporar... by TranceMan on Monday April 01, 2013 @03:17PM (#5475249)
Are you saying stick with the banking cartels?