Page 14 of 18 FirstFirst ... 4101112131415161718 LastLast
Results 261 to 280 of 341
  1. #261
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    I think it was a breach of domepizzle computer (sorry if it **** you off). Were the passwords unique? Also there is IP log. Can you share IP from which you were hacked?

    Recent hack just shows how important is to use desktop wallet and exchanges only to send btc in and fiat immediatelly out.
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  2. The Following User Says Thank You to Sherlock For This Useful Post:

    wonderpunter (3 August 2016)

  3. #262
    domepizzle is offline Private Member
    Join Date
    April 2009
    Posts
    16
    Thanks
    3
    Thanked 6 Times in 4 Posts

    Default

    No worries Sherlock that doesn't make me upset. I am not a security expert but I thought that i had everything relatively secure. Yes, all of my passwords are unique. I used LastPass to login everywhere and use the passwords generated from that program. I also use 2FA when possible and that is what really baffles me. I was sent an email saying that my 2FA had been updated which meant it had been disabled. Not sure how this is possible and I am not the only person this happened to. Some people did not have 2FA but others did and all got robbed. Kraken was suspecting that another exchange got hacked and someone used the login credentials. Several people that got robbed had unique passwords so not sure if that was the culprit or not. I want to be as secure as possible so please let me know if you have any recommendations for the most secure setup possible to receive BTC and then turn it into USD asap.

    The IP address used in the hack was 217.128.118.111

  4. The Following User Says Thank You to domepizzle For This Useful Post:

    Sherlock (2 August 2016)

  5. #263
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    This is just crazy. I am trying to have Bitcoins always in my electrum, but I had significant amount of fiat and/or bitcoins at Kraken during last year and nothing happened. You had money there only for few hours or days I guess and boom.

    There must be some least common multiple between the hacked accounts. It is weird that nothing is known. It is just the thread posted here about this hack?
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  6. #264
    domepizzle is offline Private Member
    Join Date
    April 2009
    Posts
    16
    Thanks
    3
    Thanked 6 Times in 4 Posts

    Default

    Kraken keeps asking questions to try and find out how it happened. I have contacted others that were robbed and we can't figure out what we all have in common either. Yes, the money was on there for less then 24 hours.

    Sent from my SM-G920T using Tapatalk

  7. #265
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    If the money were there only 24 hours then the hack will somehow be correlated with that. Not that it helps you. I feel really sorry, because I was the one who recommended Kraken.

    But it is much worse, today 120K btc was lost at Bitfinex. It was the biggest non-Chinese exchange. It is hard to recommend anyone now. Another exchange Btc-e stole ETC(different cryptocurrency) from people.
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  8. The Following User Says Thank You to Sherlock For This Useful Post:

    TheGooner (2 August 2016)

  9. #266
    slotplayer is offline Private Member
    Join Date
    September 2006
    Posts
    1,040
    Thanks
    195
    Thanked 323 Times in 252 Posts

    Default

    Quote Originally Posted by domepizzle View Post
    No worries Sherlock that doesn't make me upset. I am not a security expert but I thought that i had everything relatively secure. Yes, all of my passwords are unique. I used LastPass to login everywhere and use the passwords generated from that program. I also use 2FA when possible and that is what really baffles me. I was sent an email saying that my 2FA had been updated which meant it had been disabled. Not sure how this is possible and I am not the only person this happened to. Some people did not have 2FA but others did and all got robbed. Kraken was suspecting that another exchange got hacked and someone used the login credentials. Several people that got robbed had unique passwords so not sure if that was the culprit or not. I want to be as secure as possible so please let me know if you have any recommendations for the most secure setup possible to receive BTC and then turn it into USD asap.

    The IP address used in the hack was 217.128.118.111
    Maybe log in to your affiliate programs and see if your payment methods have not been changed.

  10. #267
    TheGooner's Avatar
    TheGooner is online now Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,260
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    Indeed - it IS very concerning ...
    http://www.stuff.co.nz/business/worl...-kong-exchange

    I still have not activated BTC payments here and now have a sizable balance outstanding at BP.
    This situation of BTC being the ONLY payment method is not acceptable for large transaction amounts - it's not business ready.

  11. The Following User Says Thank You to TheGooner For This Useful Post:

    universal4 (3 August 2016)

  12. #268
    justbookies is offline Private Member
    Join Date
    September 2009
    Posts
    1,285
    Thanks
    521
    Thanked 863 Times in 512 Posts

    Default

    Quote Originally Posted by domepizzle View Post
    Kraken keeps asking questions to try and find out how it happened. I have contacted others that were robbed and we can't figure out what we all have in common either. Yes, the money was on there for less then 24 hours.
    I can't pretend to know anything about security of these websites, but if your password for 2-factor was different from the login password and both were unique and not used elsewhere and it happened to a few people, maybe it could be an inside job.

    I have found Kraken's support to be absolutely **** - brief, casual and takes days to respond.

    I am not sure there is such a thing as a safe or good Bitcoin exchange now, even the one in London that looks wholly legit and has largest BTC/GBP exchange is not governed by FCA (FCA wont get involved) and is just classed the same as a bureau de change. In other words there is no proper regulation and so no safety net, even in an apparently regulated environment.
    Last edited by justbookies; 3 August 2016 at 5:25 am.

  13. #269
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    I have found Kraken's support to be absolutely **** - brief, casual and takes days to respond.
    I swear I had exactly the opposite experience. Things probably change even faster in cryptocurrency world than in affiliate world.
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  14. #270
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    here is an article about the kraken breach: https://cointelegraph.com/news/enabl...d-funds-stolen
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  15. #271
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    I also use 2FA when possible and that is what really baffles me.
    Not that it changes the disaster, but were you using 2FA for login? They claim that no account with 2FA for login was hacked. They have also some feature 2FA for payouts, and those accounts were hacked.
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  16. The Following 2 Users Say Thank You to Sherlock For This Useful Post:

    justbookies (3 August 2016), TheGooner (3 August 2016)

  17. #272
    domepizzle is offline Private Member
    Join Date
    April 2009
    Posts
    16
    Thanks
    3
    Thanked 6 Times in 4 Posts

    Default

    Quote Originally Posted by Sherlock View Post
    Not that it changes the disaster, but were you using 2FA for login? They claim that no account with 2FA for login was hacked. They have also some feature 2FA for payouts, and those accounts were hacked.
    Unfortunately I only had 2FA for the withdrawals and not login. Essentially you can change the 2FA without verifying through the original 2FA. Here is an article about it.

    https://steemit.com/kraken/@bitjedi/...an-be-bypassed

    The part that sucks is that I didn't even have Bitcoins there it was a pending wire transfer request all USD then cancelled and traded for Bitcoin

  18. The Following User Says Thank You to domepizzle For This Useful Post:

    Sherlock (4 August 2016)

  19. #273
    casinobonusguy is offline Private Member
    Join Date
    October 2006
    Posts
    1,988
    Thanks
    158
    Thanked 998 Times in 611 Posts

    Default

    I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.

  20. The Following 3 Users Say Thank You to casinobonusguy For This Useful Post:

    justbookies (4 August 2016), Sherlock (4 August 2016), TheGooner (4 August 2016)

  21. #274
    justbookies is offline Private Member
    Join Date
    September 2009
    Posts
    1,285
    Thanks
    521
    Thanked 863 Times in 512 Posts

    Default

    Quote Originally Posted by casinobonusguy View Post
    I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.
    Did you get email notification that the transfer had been initiated? ie: If your account had been hacked and you failed to log in for that 24 hours delay period, would you know the requested payout existed?

  22. #275
    casinobonusguy is offline Private Member
    Join Date
    October 2006
    Posts
    1,988
    Thanks
    158
    Thanked 998 Times in 611 Posts

  23. The Following User Says Thank You to casinobonusguy For This Useful Post:

    justbookies (4 August 2016)

  24. #276
    domepizzle is offline Private Member
    Join Date
    April 2009
    Posts
    16
    Thanks
    3
    Thanked 6 Times in 4 Posts

    Default

    Quote Originally Posted by casinobonusguy View Post
    Yes I got the email as soon as I requested the cash out but still on hold even now
    I do like features like this. I talked to someone that needed to get coins off yesterday and had this hold. He was told that this is a new feature they are adding as they enhance their account security. This would have really helped me but was not in place at that time.

  25. #277
    hublot's Avatar
    hublot is offline Public Member
    Join Date
    April 2014
    Location
    Parts Unknown
    Posts
    142
    Thanks
    3
    Thanked 100 Times in 67 Posts

    Default

    Quote Originally Posted by casinobonusguy View Post
    I thought I would share my own experience with Kraken in past 24 hours .I have cash there and about 15 hours ago initiated a transfer to my blockchain account as I need to pay some people in coins.The transaction is still on hold and when I inquired I was told there is now a 24 hour hold on all bitcoin withdraws.I rather see this action than it be set so a person can be wiped out in 5 minutes.
    After inquiring with Kraken, they did confirm this new policy, however its only if you are sending to a brand new BTC address, if you decide to send to an old address you have already had a successful transfer to, the payment should go thru as usual and in the normal time frame.

  26. The Following 2 Users Say Thank You to hublot For This Useful Post:

    justbookies (4 August 2016), TheGooner (4 August 2016)

  27. #278
    casinobonusguy is offline Private Member
    Join Date
    October 2006
    Posts
    1,988
    Thanks
    158
    Thanked 998 Times in 611 Posts

    Default

    Hi,

    A withdrawal request has been made for the withdrawal address named (removed). If you requested this action, great, it was successful.


    Thanks for choosing Kraken Bitcoin Exchange The Kraken Team

    Note: if you didn't request this action, your account may be compromised and you should do the following:

    1) log into https://www.kraken.com immediately and go to Account > Funding > Withdraw - you may be able to cancel the withdraw if you catch it soon enough.
    2) change your password;
    3) create a new set of two-factor authentications;
    4) create a support ticket letting our support staff know about the incident: https://support.kraken.com.

    The IP recorded for this action was (removed)


    This is the standard email they send when you withdraw ,it was a new address I sent to .

  28. #279
    Sherlock's Avatar
    Sherlock is online now Public Member
    Join Date
    December 2013
    Location
    WC
    Posts
    4,162
    Thanks
    1,256
    Thanked 3,264 Times in 1,817 Posts

    Default

    It seems they are taking this breach seriously, but they do not want to talk about it, because of negative publicity. I can not say for sure, but it seems that sweeping account hacks under the carpet is not so unusual in Bitcoin world.

    I PMed the elsewhere Kraken rep (maybe it was even owner, not sure), invited him here. He was quite open to me, but refused to comment on GPWA with (at least for me) lame excuse that he has not enough reputation here to be trusted.
    We are all bloodsucking ticks, hungry, devious
    each one latched on to the ass of the previous
    when the last and the first latch on it can be shown
    ass-blood sucked by the first from the last is his own

  29. The Following 2 Users Say Thank You to Sherlock For This Useful Post:

    justbookies (4 August 2016), TheGooner (4 August 2016)

  30. #280
    TheGooner's Avatar
    TheGooner is online now Private Member
    Join Date
    March 2007
    Location
    New Zealand
    Posts
    4,260
    Thanks
    1,949
    Thanked 4,211 Times in 2,004 Posts

    Default

    It's interesting ...

    The policy of 24 hour delay for new bitcoin addresses is clearly a knee-jerk reaction to the hackings and the loss of BTC.

    It's a policy that will work to prevent BTC hijacking (as long as people are not travelling, or on holiday, or ... ) but it also speaks volumes for the complete lack of confidence in the current security set-up, the holes in 2FA, and also indicates that they just don't know WTF went on - and how to stop it.

    Overall - I think that this is a prudent measure to take ... but this combined the the increasing delays in actually getting BTC confirmations mean that transfering BTC out of an exchange is hardly a "real-time" event now.

  31. The Following 3 Users Say Thank You to TheGooner For This Useful Post:

    -Shay- (4 August 2016), Sherlock (4 August 2016), universal4 (4 August 2016)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •