News for hackers. Stuff that matters.
Re:Bitcoin stolen while laptop was in Apple store by d0 on Thursday February 13, 2014 @02:03PM (#7233428)
Moral of the story: don't deal with the Apple Store. The amount of people I know who have had their data trashed (after possibly being cloned) is quite high. The solution to most problems is wipe the machine. They usually come to me after telling them to fuck off. I haven't had to destroy a single machine yet.

We're talking trivial shit like an HP printer driver thrashing the CPU or corrupt mail folders.

Seriously, 11 people so far and I don't repair Macs for a living.

I wouldn't trust them with an etch-a-sketch.

Also treat your computer like a credit card. If it goes out of sight, you're fucked, encrypted or not. FileVault and BitLocker are faulty by design.

Re:Bitcoin stolen while laptop was in Apple store by shinratdr on Thursday February 13, 2014 @04:25PM (#7234487)
Contrasting anecdote: Had to deal with them many times for a variety of issues as have friends and family. Never had an issue that wasn't solved on the spot or with a quick repair turnaround.

The Apple Store service in your area depends on your area. The real moral is to not hand someone a wallet with $8500 in cash inside of it for no reason. Whether or not it's a physical or digital wallet is irrelevant. This is incredibly irresponsible on the part of OP.

Re:Bitcoin stolen while laptop was in Apple store by golubevpavel on Thursday February 13, 2014 @02:15PM (#7233522)
Hm. What's wrong with FileVault?

I knew that there could be some issues with my laptop after service it Apple, they informed me about it. But I thought to myself, come on, it's just a minor cooler issue, they won't even need to login to fix it. How could they possible break anything.

Re:Bitcoin stolen while laptop was in Apple store by d0 on Thursday February 13, 2014 @02:22PM (#7233580)
FileValult problems: http://mjtsai.com/blog/2012/08/07/filevault-2s-apple-id-back...

AFAIK they don't login to fix hardware issues -- they netboot diagnostics software but on multiple occasions I was informed by people that Apple had "made a backup of their system" before a reinstall. What that entails and what the retention policy is, I do not know but I suspect unless they're doing a three-pass erase on their temporary storage devices afterwards (which is unlikely) then your data is easy pickings...

My MBP, which is incidentally knackered, is still FileVault encrypted. It will stop a casual theif getting in but not much more

Re:Bitcoin stolen while laptop was in Apple store by tptacek on Saturday February 15, 2014 @01:11PM (#7244640)
So if I understand what you're saying here, you think that a thief working at the Apple store might have either themselves had access to your Apple ID, or was colluding with someone inside of Apple at Cupertino to get access to your Apple ID, so that they could steal $8500 from you?

Am I missing something about the story here or is that an accurate summary?

Re:Bitcoin stolen while laptop was in Apple store by aroch on Thursday February 13, 2014 @02:41PM (#7233728)
So turn off letting your Apple ID unlock your FV volumes. A FV drive, that's locked cannot be unlocked just by having local access.

You authorize Apple to make a backup of your drive if yu're having work done that may cause data loss.

Re:Bitcoin stolen while laptop was in Apple store by d0 on Thursday February 13, 2014 @02:44PM (#7233748)
There is an issue with user switching and firewire/DMA that allows remote access as well as cold boot attacks but these are out of reach of most people.
Re:Bitcoin stolen while laptop was in Apple store by acdha on Thursday February 13, 2014 @04:11PM (#7234381)
firewire / thunderbolt DMA access was fixed many years ago: if you enabled a firmware password, those buses have DMA disabled.
Re:Bitcoin stolen while laptop was in Apple store by toomuchtodo on Thursday February 13, 2014 @05:29PM (#7234981)
Are you saying that if I have a firmware password on my MBA that my internal SSD is inaccessible via Thunderbolt externally (until I've entered my password)?
Re:Bitcoin stolen while laptop was in Apple store by aroch on Thursday February 13, 2014 @05:43PM (#7235123)
No, but your TB device wouldn't have read access to physical memory (where keys would be)
Re:Bitcoin stolen while laptop was in Apple store by acdha on Thursday February 13, 2014 @07:22PM (#7235801)
No - but it means that a device can't read your FileVault keys out of memory so all they can read is the encrypted volume.
Re:Bitcoin stolen while laptop was in Apple store by rdl on Thursday February 13, 2014 @08:21PM (#7236176)
They generally do ask for a login on your system when you give them the machine for service. You don't need to provide it.
Re:Bitcoin stolen while laptop was in Apple store by cpayne on Thursday February 13, 2014 @09:25PM (#7236449)
Also treat your computer like a credit card

That's the best comment in this thread.

Re:Bitcoin stolen while laptop was in Apple store by xauronx on Friday February 14, 2014 @09:11AM (#7238552)
Eh, in that case, what OP did was perfectly reasonable. I would hand my credit card to Apple much quickly than I would hand it to a friend of a friend that knows how to fix computers (which is what it sounds like d0 does, fix computers for people). And I certainly don't think you would sit there and watch someone while they work on your computer for a hours. I would just do it myself if I was going to waste that time.

The real moral of the story should be "treat your bitcoin wallet like a wallet.... because it is one".

Re:Bitcoin stolen while laptop was in Apple store by kaonashi on Thursday February 13, 2014 @05:04PM (#7234778)
Moral of the story: don't have more money tied up in BTC than you can afford to lose.