BitShares Forum

Other => Meta => Topic started by: fav on September 22, 2015, 12:37:55 pm

Title: ATTENTION: POSSIBLE SECURITY BREACH [Update]
Post by: fav on September 22, 2015, 12:37:55 pm: -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

regarding: https://bitsharestalk.org/index.php/topic,18560.0.htm

I checked the full log, it seems Rune tried to login via a banned IP (former leozhenping, chono, leoweiwei)

So no security breach, but probably a Proxy that triggered a LOT of Backlogs.
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.46
Comment: https://keybase.io/crypto

wsFcBAABCgAGBQJWAVqVAAoJEKRF7oTcH7KXEdoQAIXRY505GXWPxgCQPQEBtlp9
h4gKfDzB6nFbek7feFN3+BuK6irsPI3hAvZSMOI8K5kbvrlJb/Sam1oDS25yEX0T
EpDVwlAAD8x7dXtVBGFoM03ztaCbP0AETK7pRjOnrzCLwrvlmJQRRX0vzlxQfpBF
e1LNsCsVfzU5q0PUYNue7xIY12DVzFU379zU65RG/C6ePeDgWqncRx65EP4ipTOO
j05kG0vDiDcOHyiC3N7wsUM/MQL0t+32qxlPcRBtRT0YiWlys9fZCPLUhCgozE7a
V7DMAi8GnGWB6+AKwwuBFQrZ/S5NUYRwRKxAM8K6/yUvAHvfx2UinxKC8UFyBV+y
nWNfOkMUltOhBet2+PwNMGXY9QkKniqcuhyEHPPE5b3o7e1pLZbNwpeRIxzvDatt
K8SKEt+JfcHMvDwt5rNhfSLXnQR6NQ50oDT0zMMBYM7a/xYOLI+DWDJh3WwgC1FD
ahH4VcpysQrRboNKXPd2a51DwMNaRyuDlAm516ixbKLnUkpc8AyP1PY7ZGhljBY5
mmeWIuz3/PUhPSswCsL85xYRpYXbLbv9y6sK6VJLdlAXlLWsZTpGRsd4oPp9sXr4
88eNO/e5IPUkCxrJOyJMzD5fEIt85ggQ0xEIZt2JKRyVXAReE5rghVHu4b/WEKXX
EwgrbcnGiCQG7ytAG6FW
=baj4
-----END PGP SIGNATURE-----
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: cass on September 22, 2015, 12:47:05 pm: -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

thank @fav -- yes pls be careful until we have more information about ..
Thanks for you understanding … and sry for circumstances ..
-----BEGIN PGP SIGNATURE-----
Version: OpenPGP.js v0.9.0
Comment: http://openpgpjs.org
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=33rJ
-----END PGP SIGNATURE-----
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: JA on September 22, 2015, 01:00:23 pm: when i delete my messages are they still stored somewhere?
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: lil_jay890 on September 22, 2015, 01:09:03 pm: Awfully fishy that we have seen a market cap plunge timed up almost perfectly with this forum hack... coincidence? I doubt it
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: liondani on September 22, 2015, 01:13:05 pm: Quote from: lil_jay890 on September 22, 2015, 01:09:03 pm
Awfully fishy that we have seen a market cap plunge timed up almost perfectly with this forum hack... coincidence? I doubt it

I thought exactly the same thing!
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: cass on September 22, 2015, 01:16:48 pm: Quote from: jabbajabbaつ◕_◕つ on September 22, 2015, 01:00:23 pm
when i delete my messages are they still stored somewhere?

mh don't guess so -- just on an older backup then ..
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: monsterer on September 22, 2015, 01:21:08 pm: Quote from: liondani on September 22, 2015, 01:13:05 pm
I thought exactly the same thing!

Are you suggesting that forum passwords were used to hack the bitshares online wallet, leading to a massive dump of coins?
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: fav on September 22, 2015, 01:24:35 pm: Quote from: monsterer on September 22, 2015, 01:21:08 pm
Quote from: liondani on September 22, 2015, 01:13:05 pm
I thought exactly the same thing!

Are you suggesting that forum passwords were used to hack the bitshares online wallet, leading to a massive dump of coins?

that's too tinfoil. would be public by now I guess
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: monsterer on September 22, 2015, 01:26:18 pm: Quote from: fav on September 22, 2015, 01:24:35 pm
that's too tinfoil. would be public by now I guess

Yeah - at the very least I'd expect forum passwords to be salted hashes, anyway...
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: fav on September 22, 2015, 01:36:49 pm: @Rune do you use a proxy? looks like you tried to login via a banned IP (former leozhenping, chono, leoweiwei)
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: Rune on September 22, 2015, 02:01:03 pm: Quote from: fav on September 22, 2015, 01:36:49 pm
@Rune do you use a proxy? looks like you tried to login via a banned IP (former leozhenping, chono, leoweiwei)

Yes, I use several different VPN's. Would make sense if this was the case...
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: liondani on September 22, 2015, 02:26:44 pm: Quote from: monsterer on September 22, 2015, 01:21:08 pm
Quote from: liondani on September 22, 2015, 01:13:05 pm
I thought exactly the same thing!

Are you suggesting that forum passwords were used to hack the bitshares online wallet, leading to a massive dump of coins?

In reality I thought that a dumber just combined the hack so he has a bigger impact on the price knowing some of us will be in "panic" mode after this... (I hope nobody's wallet is compromised)
And I am skeptical about the peg fail the last days, it could be easily demonstrated from the attacker to induce community members to short bitAssets (giving them 20% for "free") only to force a margin call there after due the dump scheme(?) That are conspiracy theories that likely don't be true and even if they are they will be not strong enough to stop the violent price increase.... Most likely one of the last best opportunity's to buy cheap BTS !!! ;)
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: Tuck Fheman on September 22, 2015, 04:40:32 pm: Quote from: monsterer on September 22, 2015, 01:21:08 pm
Are you suggesting that forum passwords were used to hack the bitshares online wallet, leading to a massive dump of coins?

Queuing Blazin. :P

I figure we'll see this quote in the "Price Speculation" thread soon.
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: liondani on September 22, 2015, 08:32:36 pm: Quote from: Tuck Fheman on September 22, 2015, 04:40:32 pm
Quote from: monsterer on September 22, 2015, 01:21:08 pm
Are you suggesting that forum passwords were used to hack the bitshares online wallet, leading to a massive dump of coins?

Queuing Blazin. :P

I figure we'll see this quote in the "Price Speculation" thread soon.

lol
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: karnal on September 22, 2015, 08:35:16 pm: Quote from: fav on September 22, 2015, 01:36:49 pm
@Rune do you use a proxy? looks like you tried to login via a banned IP (former leozhenping, chono, leoweiwei)

I got this banned message couple of days ago (2?) as well. I always login using Tor.

Thought it was a temporary glitch, haven't run into it since.
Title: Re: ATTENTION: POSSIBLE SECURITY BREACH
Post by: cass on September 22, 2015, 09:16:05 pm: Quote from: karnal on September 22, 2015, 08:35:16 pm
Quote from: fav on September 22, 2015, 01:36:49 pm
@Rune do you use a proxy? looks like you tried to login via a banned IP (former leozhenping, chono, leoweiwei)

I got this banned message couple of days ago (2?) as well. I always login using Tor.

Thought it was a temporary glitch, haven't run into it since.

thx for info!