News for hackers. Stuff that matters.

A comment on Excoin exchange's Bitcoins stolen, will be shutting down.

Re:Excoin exchange's Bitcoins stolen, will be shutting down by akerl_ on Sunday February 15, 2015 @02:52PM (#9053811)
"We noticed the hot wallets dwindling but assuming it was members moving their funds off site during the DDOS, we loaded all the cold balances onto the site"

I'm a bit shocked that their tracking of their transactions was so easily broken as to prevent them from seeing that all the funds were being pulled by so few users.

Also, the part at the bottom where they basically post a wall of IPs and addresses seems like a weird way to move forward. Do they not plan on there being an official investigation?

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by BRitterbeck on Sunday February 15, 2015 @03:08PM (#9053866)
The last set of addresses under the DDoS part of the page resolves to Google's crawlers.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by dredmorbius on Sunday February 15, 2015 @08:09PM (#9054845)
Another set is Yandex, a Chinese [Edit: Nope, Russian, see below] web crawler. I've done a basic "what CIDRs and ASNs were involved" in a top-level post.

These idiots can't tell Web crawler traffic from DDoS (though often there's little practical difference).

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by bx_ on Sunday February 15, 2015 @08:33PM (#9054914)
https://company.yandex.com/

Yanex is Russia's Google.

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by dredmorbius on Sunday February 15, 2015 @09:17PM (#9055017)
Derp. I was thinking of Baidu. Knew it was search at least, from logs.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by Shank on Sunday February 15, 2015 @04:01PM (#9054109)
Probably an amplification attack using Google, a clever way to increase the size of an attack without adding too much additional cost.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by Buge on Sunday February 15, 2015 @04:31PM (#9054211)
An interesting example is creating 700 Mbps with a few google docs.

http://chr13.com/2014/03/10/using-google-to-ddos-any-website...

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by panhandlr on Sunday February 15, 2015 @03:00PM (#9053833)
"Do they not plan on there being an official investigation?"

How do you officially investigate someone stealing your monopoly money?

Where is the FDIC insurance? Exactly what are they suppose to tell the police? The FBI? ... oh thats right, nothing, because they are not a bank, and the only thing "stolen" was some ones and zeroes off a hard-drive.

Seriously though... where is the police report on this? Or any of the other hacked bitcoin exchanges for that matter?

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by akerl_ on Sunday February 15, 2015 @03:02PM (#9053840)
It doesn't matter if you're storing bitcoins or roflcoins or pictures of kittens: in most places, maliciously accessing somebody else's computer system and stealing data is a crime.

The government investigates stolen "ones and zeros" all the time. The FDIC provides protection for users, but the lack of FDIC doesn't mean that no laws apply.

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by panhandlr on Sunday February 15, 2015 @03:11PM (#9053882)
What about the laws the operators of the exchange broke by running un-audited code to handle financial transactions?
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by akerl_ on Sunday February 15, 2015 @03:14PM (#9053894)
Assuming such laws apply to them, and assuming they broke them, "so?". Their guilt or innocence does not have any connection with any investigation of somebody hacking into their systems.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by toomuchtodo on Sunday February 15, 2015 @03:04PM (#9053848)
> Where is the FDIC insurance? Exactly what are they suppose to tell the police? The FBI? ... oh thats right, nothing, because they are not a bank, and the only thing "stolen" was some ones and zeroes of a hard-drive.

This is a slippery slope. How do you think the Federal Reserve pops money into existence before they go on a QE tear? The bits ("ones and zeroes") pop into existence in their account, and they start buying assets/mortgages/whatever.

Currency only has value because of the shared belief that is has value.

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by fnordfnordfnord on Sunday February 15, 2015 @03:50PM (#9054058)
>nothing, because they are not a bank,

Are you implying that a bank would somehow be held accountable for breaking the law or ripping people off? Since when?

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by toomuchtodo on Sunday February 15, 2015 @04:00PM (#9054104)
My rebuttal to the post I replied to was that all currencies are ones and zeros now. The "> " was me quoting their post.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by fnordfnordfnord on Sunday February 15, 2015 @04:29PM (#9054207)
My mistake. I'm on mobile. I rarely comment on mobile.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by baddox on Sunday February 15, 2015 @05:31PM (#9054426)
It's possible with a small bank.
[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by Lazare on Sunday February 15, 2015 @08:36PM (#9054928)
You have a valid point about FDIC.

The rest of your comment is nonsnese.

You think the FBI is never interested in ones and zeros on a hard drive? How do you square that with the facts discussed here: https://news.ycombinator.com/item?id=9044805

You think there's never any police reports or official investigation? How do you square that with the facts surrounding the collapse of Mt Gox? A recent headline announced that the police are closing in on the fraudsters: http://www.welivesecurity.com/2015/01/02/bitcoin-fraud-mt-go...

Apparently police are quite capable of investigating the theft of "monopoly money", and understanding the issues involved.

[ Parent | on HN ]
Re:Excoin exchange's Bitcoins stolen, will be shutting down by pron on Sunday February 15, 2015 @03:28PM (#9053963)
I have no love for BTC, either, but whatever it is that was stolen -- be it a bunch of ones and zeros, some paint smeared on canvas or your rare comic books -- if it has market value (more than monopoly money, certainly) then valuable property was stolen. The higher the value, the more serious the crime. And if there was a theft of property, the FBI can certainly investigate.
[ Parent | on HN ]