News for hackers. Stuff that matters.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by sillysaurus3 on Thursday February 27, 2014 @01:35PM (#7313986)
Quick question: What's preventing Coinbase from shutting down operations tomorrow and walking away with everyone's money, as MtGox walked away with mine?

Or, what if the founders orchestrated some sort of disaster wherein all of the coins are claimed to be lost, but in reality they're simply transferred to the founders?

I know they wouldn't actually do that. My question is, what's stopping them? Why wouldn't someone try to do that, other than their morals?

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by diego on Thursday February 27, 2014 @01:47PM (#7314077)
Nothing, so most people should use Coinbase the same way they use a grocery store: buy what they need and take it somewhere else. Unfortunately most people do not know enough to do that. I wrote a blog post about it if you're interested.

http://diegobasch.com/do-you-know-enough-to-securely-own-bit...

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by gnaritas on Thursday February 27, 2014 @01:50PM (#7314097)
> Nothing

False. Theft is against the law. Bitcoins don't magically avoid being subject to existing law. The owners are known and subject to US jurisdiction, you have legal recourse through the courts should they try and steal your funds.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by diego on Thursday February 27, 2014 @02:01PM (#7314162)
The law doesn't prevent you from committing crimes. It certainly did not prevent Mt. Gox from making bitcoins disappear.

If that happens and you need to go to court, good luck proving that an exchange stole your coins. We haven't even seen Mt. Gox play out yet. Suppose they actually stole everyone's coins. Can someone prove it wasn't a hacker or a software bug? Time will tell.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by gnaritas on Thursday February 27, 2014 @03:46PM (#7314931)
> The law doesn't prevent you from committing crimes.

That wasn't the question, the question was what's to stop them and the answer I objected to was "Nothing"; that's false, the law is not nothing. What's to stop most bad behavior... the law.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by makomk on Thursday February 27, 2014 @04:46PM (#7315354)
The law is fairly obviously not an answer though, given the context. The original question specifically asked what stops Coinbase from shutting down and taking everyone's money like MtGox did. It was just as illegal when MtGox did it, yet it happened anyway. (Actually, most of the other answers have the exact same problem.)
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by gnaritas on Thursday February 27, 2014 @05:52PM (#7315834)
> The law is fairly obviously not an answer though, given the context.

You're free to think that, I'm free to think you're wrong. MtGox is in Japan, Coinbase isn't; the contexts are different.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by natrius on Thursday February 27, 2014 @06:44PM (#7316171)
If there is evidence that MtGox was complicit in the loss of their customers' Bitcoin, someone will go to jail, regardless of the jurisdiction. It's plain old theft.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by smtddr on Thursday February 27, 2014 @04:57PM (#7315442)
>>What's to stop most bad behavior... the law

No... what stops most bad behavior is _consequences_. The law applies to everyone, but the consequences for breaking them don't.

We will see what(if any) consequences are placed upon MtGox. Personally, I still can't see how MtGox will be found liable of anything. Bitcoins aren't protected under any law and nobody said it was okay to trade your hard-earned government-backed fiat for some magical interwebz money. It might as well be fairy wings & unicorn tails. Don't get me wrong, I'm into crypto-coins and willing to lose up to 7k on them... but I fully understand that my coins could disappear in the next 5 mins due to any number of reasons and I have absolutely nobody to blame but myself.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by gnaritas on Thursday February 27, 2014 @05:29PM (#7315691)
The law is what defines the consequences, your pedantry is pointless.

> Bitcoins aren't protected under any law

False. Just because something is new doesn't mean existing laws don't apply to it. Bitcoins are property and property is protected by law regardless of when said item was invented. We don't have to create new law to cover every new invention man decides to own.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by smtddr on Thursday February 27, 2014 @07:58PM (#7316563)
I disagree with you... but we'll see how it plays out with MtGox.

In the eyes of the law, I don't think bitcoin is your property anymore than buying a special weapon on Eve Online with fiat-money is your legal property. Maybe it should be, maybe it will be, but today that's not the case.

Or maybe I'm completely wrong... Has anyone sought legal action on financial loss related the value of an item inside Eve Online? Or any virtual item in any system?

A straight scam I understand, but say you purchased a bunch of rare swords & armor in some online game then next month the server crashes and all players lose their virtual items and the gaming company goes bankrupt. Is the company liable?

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by sheetjs on Thursday February 27, 2014 @02:47PM (#7314499)
The one good thing about coinbase is that they do react to outrage on HN. For example: https://news.ycombinator.com/item?id=6929705
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by k-mcgrady on Thursday February 27, 2014 @02:55PM (#7314558)
The fact that public outrage is required to get their attention when dealing with such large amounts of money doesn't inspire confidence. Your example is a good example of bad customer service, not something good to credit them with.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by baddox on Thursday February 27, 2014 @01:59PM (#7314148)
Lots of people in this thread seem to think that there is either no incentive for Coinbase to conduct their business legitimately, or that the law is the only incentive. That ignores the much more obvious and presumably stronger incentive: they should be able to make a lot more money as a legitimate business than if they just ran away with one lump sum.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by diego on Thursday February 27, 2014 @02:08PM (#7314213)
That relies on the assumption that they will not suffer a tremendous loss due to a rogue employee, a software bug or a malicious hack.

If they found themselves in a situation in which they are certain to go out of business as soon as people find out that they are in trouble, that motivation would cease to exist. It would come down to ethics, reputation, pressure from investors, etc.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by torbjorn on Thursday February 27, 2014 @03:46PM (#7314930)
Sure, Bad Things™ could happen at Coinbase like they did at Gox. However, I think it is reasonable to trust Coinbase more than Mt. Gox. If you looking to Mt. Gox's history there are many signals that suggest general mismanagement and dysfunction.

This is in no way rigorous but consider User Interface design as a rule of thumb. Gox had an ugly unintuitive site. Coinbase on the other hand has a polished UI. This attention to detail suggests that the people who operate Coinbase are very different from those who operated Gox.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by baddox on Thursday February 27, 2014 @06:57PM (#7316261)
Rogue employees, software bugs, and malicious hacks can also happen in a pure USD business covered by explicit laws.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by torbjorn on Thursday February 27, 2014 @03:39PM (#7314873)
The mistrust in Coinbase line of thinking seems similar to fear and paranoia about terrorism. Could a bad actor acquire and use agency to do something horrible like obtain a dirty bomb and set it off? Sure, it is possible. But at the same time it is very unlikely. People GENERALLY want to be good actors and make a positive impact on the world.

With Mt. Gox I am more inclined to think their problems stemmed incompetence rather than malevolence.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by CoachRufus87 on Thursday February 27, 2014 @02:00PM (#7314156)
> The owners are known and subject to US jurisdiction

Assuming they don't just leave the country

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by MichaelGG on Thursday February 27, 2014 @02:20PM (#7314291)
... Most places have extradition treaties with the US or US-allies. I'm sure it wouldn't be hard to find one Coinbase user not in the US, then use that country's extradition.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by gnaritas on Thursday February 27, 2014 @03:48PM (#7314948)
We have jurisdiction in all countries, just ask our politicians and witness our world policing.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by pavanky on Thursday February 27, 2014 @02:00PM (#7314158)
How do you probe you lost something that is not tied to your identity ?
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by devindotcom on Thursday February 27, 2014 @01:43PM (#7314049)
The promise of future profits amounting to more than what they would walk away with today, gained in a somewhat more respectable fashion. If they become the leading wallet in the world, they're sitting on a goose laying golden eggs. Doesn't make sense to slaughter it today for dinner.

These guys are known — like the guys at Mt Gox. They're not anonymous, and they would run a real risk of bodily harm by such a public crime.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by sillysaurus3 on Thursday February 27, 2014 @01:48PM (#7314082)
The promise of future profits amounting to more than what they would walk away with today

That's exactly the same argument I used to justify why MtGox wouldn't shut down, almost word for word. It's the same argument I used to convince myself why they wouldn't shut down. They still shut down.

They're not anonymous, and they would run a real risk of bodily harm by such a public crime.

So we're relying on mob justice? Also, Mr. Karpeles hasn't been harmed and probably won't be.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by Mtinie on Thursday February 27, 2014 @02:19PM (#7314284)
Or, it could be that Mr. Karpeles hasn't been harmed for a common sense reason; right now, he's the only one who seems to know what's going on inside of Mt.Gox, and what the actual status of the missing BTC is. If he comes out and announces that all of the customers' coins are irretrievably gone, then all bets are off.

(No, I don't want to see harm come to him, and I don't mean that comment above as a threat. What I do know is that there's a very strong chance that at last some of the BTC he lost/stole/squandered/etc. was owned by people who don't settle things with a lawsuit and a lawyer. Maybe it is unlikely, but it's something that I would be concerned of, if I was in his shoes right now)

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by devindotcom on Thursday February 27, 2014 @03:01PM (#7314597)
The jury's out on whether MtGox took the money and ran or lost the money and hid, right?

I'm not saying we should rely on mob justice. I'm saying that the risk of reprisal is a perfectly understandable reason not to commit certain crimes. These guys are public figures and would be easy targets for people who want to harrass or harm them, unlike for example a mask-wearing bank robber whom nobody can identify and who stole only the bank's money.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by corford on Thursday February 27, 2014 @02:14PM (#7314251)
Why put yourself in a position where you need to worry about that happening?

Keep the bulk of your BTC in a private wallet under your exclusive control and only use the intermediary provided wallet when you need to make a trade through their platform/exchange. You're still exposed while a trade is being executed but your maximum exposure is never more than the amount you are trading at that time.

You wouldn't deposit your life's savings with a new, unknown bank based out of a tiny island state with lax/non-existent regulation. Don't do the same with your BTC.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by baddox on Thursday February 27, 2014 @01:57PM (#7314140)
I'm not sure what your point is. My best guess is that you're implying that the only reason people don't do things that are illegal is the fact that they are illegal. If I'm wrong, please correct me, and disregard the next paragraph.

I see two problems with this point. Firstly, while I'm not entirely sure how the legal system in the US works, but I suspect it would be illegal for Coinbase to shut down and run away with everyone's Bitcoins. I doubt that USD is the only asset that is legally protected from theft/fraud. Secondly, I suspect that Coinbase has a huge incentive to not do this even if it were legal to do so. Namely, they should be able to make a lot more money by conducting their business legitimately and continually than if they ran off with one lump sum.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by jmulho on Thursday February 27, 2014 @02:26PM (#7314337)
> they should be able to make a lot more money by conducting their business legitimately and continually...

You're not the first person to make this point. It is not necessarily true. What if the amount they could run off with is huge and their margins are tiny, or they are losing money?

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by mbesto on Thursday February 27, 2014 @01:50PM (#7314094)
Simple - because YC, a16z, USV, SV Angel, etc all have skin in the game.[0] There are some serious people with some serious money who have reputations to uphold. AFAIK Mt. Gox had none of that.

[0]http://www.crunchbase.com/company/coinbase

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by mcherm on Thursday February 27, 2014 @04:54PM (#7315412)
Other than their morals?

Well, I suppose there are legal implications: that's known as "theft". Also there are the morals of every other employee... I believe Coinbase is set up with standard controls so no one person can steal funds without it being obvious to (and preferably requiring the cooperation of) other employees.

I would ask a similar question: What's preventing Nationwide Insurance, Chase Bank, and e-Trade from shutting down operations tomorrow and walking away with everyone's money? The biggest difference between these institutions and MtGox is that these institutions all have regulators who have the power to (in extremis) take over the operations of the institution if it begins to show the same kinds of trouble that MtGox showed for quite some time before its collapse. Coinbase is not currently subject to any such regulation.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by panarky on Thursday February 27, 2014 @01:55PM (#7314128)
The fact that the identities of Coinbase people are known, and apparently you can hire a hitman with Bitcoin. If you have any Bitcoin left.

Seriously, though, Coinbase and other online wallets and exchanges need to get with the program and prove they're not running a fractional reserve.

Radical transparency is a big part of the answer, and it's much more feasible with Bitcoin's public blockchain than with the dinosaur monetary system.

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by dangero on Thursday February 27, 2014 @01:57PM (#7314139)
Third option would also be actual negligence which is an interesting case because people are used to dealing with banks and do not realize that they will not get their money back. Im not suggesting FDIC style protection for Bitcoin exchanges is a good idea, but that is just what people are conditioned to expect and I think that is why so many people leave their money in exchanges like Coinbase or MtGox.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by ojr on Thursday February 27, 2014 @02:31PM (#7314375)
enough with this fear, uncertainty and doubt, Mt Gox should not be placed in the same sentence as Coinbase, Coinbase is a lot more transparent...
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by granfalloon on Thursday February 27, 2014 @01:51PM (#7314100)
Because they would go to jail for a very long time?
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by baddox on Thursday February 27, 2014 @02:00PM (#7314154)
Because they run what I suspect to be a fairly lucrative business which, if operated competently, should make them a lot more money in the long run than if they just stole everyone's bitcoins?
[deleted]
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by thinkcomp on Thursday February 27, 2014 @01:37PM (#7314002)
Actually, no. PayPal is licensed and bonded in 47+ states. Coinbase is licensed in 0.

I don't think it's the best regulatory framework, but it's all we've got.

[deleted]
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by thinkcomp on Thursday February 27, 2014 @01:46PM (#7314066)
You're right, the surety bond system is fundamentally flawed. But it's $9 million more in security (in California, since different states have different bond requirements) than Coinbase has.

I've advocated for an FDIC-like system for money transmitters, run by CFPB or some other entity, for three years. Congress is hard to reach these days.

http://www.thinkcomputer.com/corporate/whitepapers/heldhosta...

http://www.thinkcomputer.com/20140214.cfpbcomment.pdf

Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by thinkcomp on Thursday February 27, 2014 @01:37PM (#7313999)
Nothing. And good luck finding their worldwide "cold storage" locations. They're apparently not in the United States, and not required to disclose them to any regulator.
Re:A Major Coinbase Milestone: 1 Million Consumer Wallets by smtddr on Thursday February 27, 2014 @04:32PM (#7315250)
Here are my reasons:

- They are in SF so I can walk/bike/bus to their office; for whatever good that does me. Didn't do that one dude any good going to MtGox's Japan office. =/

- They are YC backed, so that means pg knows about 'em. That adds a "gold star" in my book in that they must have passed some kind of filter to get into YC; that they're not just plain scammers, unprofessional or woefully uneducated about security on the interwebz.

- I feel very confident about this video: http://techcrunch.com/2013/12/17/foundation-brian-armstrong-...

All that said, you still shouldn't leave a huge amount of coins on an address that you don't exclusively hold the private key to. 1 or 2 bitcoins, meh. Day-trading with 50 BTC? Risky, but okay I guess. Those crazy amounts I saw on that gox-horror Reddit thread, like 100+? Some people in the THOUSANDS?!!! That was a bad decision. That needs to be some place else. Coinbase.com may have the most honest people in the world, but I also believe hackers are extremely talented people and hundreds of bitcoin is adequate motivation for a certain subset of hackers to pour all their energy into breaking coinbase. I'd love for Coinbase.com to talk about all the strange hack attempts they must see against their service every... minute.

I day trade on btc-e.com with 1k USD and my rule is to never have more that 2k on there. If I reach 2K, I buy 1k's worth of bitcoin --> send to coinbase.com --> cash out. Repeat again with the 1k remaining. I could try and turn 2k into 4k, but that's a risk I'm not willing to take. I'm happy with my 1k units of profit.