News for hackers. Stuff that matters.
Re:Instawallet Hacked by error54 on Wednesday April 03, 2013 @03:28PM (#5488432)
I know it's been said many times before, but we're only going to see a rise in bitcoin thefts. With the price being over $100/coin and you're stealing virtually untraceable currency, I'm honestly just surprised that there hasn't been more thefts. I'm sure the security team at Mt. Gox is top notch as they probably have dozens of hack attempts per day.
Re:Instawallet Hacked by GigabyteCoin on Wednesday April 03, 2013 @03:40PM (#5488497)
I for one believe the barrage of attacks and attempted thefts will inevitably make Bitcoin safer. Just like Google Chrome's pwning contests, eventually nobody will be capable of claiming the prize.
Re:Instawallet Hacked by ebbv on Wednesday April 03, 2013 @03:47PM (#5488547)
It's not really comparable to Pwn2Own. Pwn2Own's only vector of attack is by finding flaws in the software directly.

All of these wallet service companies employ people and many, many successful hacks are performed by exploiting the people involved / mistakes the people make.

So while software with enough hardening can eventually get to a state that's quite safe, as long as people are an active part of the security chain, you're going to have valid attack vectors.

Re:Instawallet Hacked by makomk on Wednesday April 03, 2013 @05:16PM (#5489159)
There have also been attacks on Bitcoin companies that exploited their hosting company's procedures or lax handling by their employees. Securing this stuff is fundamentally hard.
Re:Instawallet Hacked by ams6110 on Wednesday April 03, 2013 @04:32PM (#5488848)
Agreed, people are far easier targets than systems, unless the systems are negligently unsecured.
Re:Instawallet Hacked by jellicle on Wednesday April 03, 2013 @04:15PM (#5488729)
How are attacks on $yourbitcoinservice supposed to make $mynewbitcoinservice safer?
Re:Instawallet Hacked by danielweber on Wednesday April 03, 2013 @04:44PM (#5488940)
Because $mynewbitcoinservice will realize, "whoa, we should make sure we are hack-proof," and then use HTTPS to make sure they are hack-proof.
Re:Instawallet Hacked by zwass on Wednesday April 03, 2013 @05:06PM (#5489066)
Hmmmm, I don't think "use HTTPS" is going to cut it in this case...
Re:Instawallet Hacked by makomk on Wednesday April 03, 2013 @05:14PM (#5489139)
Instawallet used HTTPS.
Re:Instawallet Hacked by nym on Wednesday April 03, 2013 @03:45PM (#5488534)
Growing pains.
Re:Instawallet Hacked by emgre on Wednesday April 03, 2013 @03:34PM (#5488472)
Which is going to be a huge limit on sustained value/adoption, for better or worse. Bitcoin's rooted in the community most capable of stealing it.
Re:Instawallet Hacked by nym on Wednesday April 03, 2013 @03:49PM (#5488554)
The bitcoin community spends a ton of time trying to educate people on cold-storage wallets and two-factor authentication for online wallets.

MtGox has even given away free YubiKeys in the past to help keep people's accounts secure. Does Chase or BofA anyone else offer that kind of security? :)

https://en.bitcoin.it/wiki/Cold_storage https://mtgox.com/press_release_20120215.html

Re:Instawallet Hacked by lhc- on Wednesday April 03, 2013 @03:56PM (#5488616)
The thing is, Chase and BoA are often capable of reversing fraud and catching the people behind it. Bitcoins don't really allow for that sort of restitution.
Re:Instawallet Hacked by tensafefrogs on Wednesday April 03, 2013 @04:48PM (#5488969)
Bitcoin is not a bank, and does not replace banks.

There's nothing stopping anyone from setting up a bank that handles your bitcoin transactions, and therefore can reverse transactions between two parties.

Replace "Bitcoin" with "Dollar" and you see how strange your statement is.

Re:Instawallet Hacked by jarek on Wednesday April 03, 2013 @05:03PM (#5489048)
I think the issue would be more that bitcoin is philosophically incompatible with services like that.

Bitcoin is anonymous, so I could transfer my money to my account at another bank, report fraud, and the bank could never know unless the other bank told them. If the other bank tells them, or you set up a centralized register of transfers or accounts, you're just mirroring the current systems.

Bitcoin doesn't have The Man, so there's no motivation not to do so fraudulently - what's the worst that happens if a bank realizes you're trying to defraud them? You've already moved your money elsewhere.

Re:Instawallet Hacked by eli on Wednesday April 03, 2013 @04:17PM (#5488749)
Yes, they do. https://www.bankofamerica.com/privacy/online-mobile-banking-...

Chase has a thing where it texts you a code as well.

Re:Instawallet Hacked by foobarqux on Wednesday April 03, 2013 @06:39PM (#5489747)
interactive brokers has various type of two factor authentication depending on how much money you have stored with them.
Re:Instawallet Hacked by codesuela on Wednesday April 03, 2013 @05:24PM (#5489227)
dont know bout the US but in Germany every bank requires 2FA for transfers
Re:Instawallet Hacked by yasth on Wednesday April 03, 2013 @04:26PM (#5488812)
Eh that is nothing, just imagine when people who have no ability to steal it and thus no awareness of how it might be stolen get pulled in by the hype.

Not to mention the costs that security brings, a friend of mine is locked out of what is now $50k worth of bitcoins, just can't remember the password on the encrypted store.