Security Breach Forces Bitcoin Bank Inputs.io To Halt Operations
New submitter BitVulture writes "The hardcore Bitcoin community is abuzz with news of the closure of Inputs.io, a supposedly secure online Bitcoin wallet, after an attack resulted in the loss of 4100 Bitcoins. A PGP-signed message at the home page of the now mostly non-operational site briefly explains the situation: 'Two hacks totalling about 4100 BTC have left Inputs.io unable to pay all user balances. The attacker compromised the hosting account through compromising email accounts (some very old, and without phone numbers attached, so it was easy to reset). The attacker was able to bypass 2FA due to a flaw on the server host side.'
There's no word yet whether Inputs.io will eventually resume operations or whether the security breach will force the Bitcoin bank out of business."
It's computer fraud and abuse. It's not like they really robbed a bank.
Support my political activism on Patreon.
Dark Wallet is a project of unSYSTEM and Defense Distributed that starts with simple premises: Bitcoin as a web technology and privacy by default.
This is for worst or better, online wallet that CONTAINS your private key can be hacked like inputs.io. That's why it's recommended to use wallet like blockchain.info where you hold the private key so they can't spent bitcoin for you. In some case where they must hold the key for you (exchange service for instance) most of their coin should be in cold storage / not allocate to direct individual. In another news, Bitcoin value is at all time high over $300.
Great intro video... 31,306USD Raised of $50,000 Goal...
I'm so glad that Bitcoin is such a simple solution to the complexity of cash!
I don't respond to AC's.
Might want to make that more clear in story, it almost reads like an anti-bitcoin FUD thing.
So a 'bank' had their servers breached and money stolen... *yawn*.
---- Booth was a patriot ----
Holy shit, 4100? Is that ALL the bitcoins!?!? XD
"When information is power, privacy is freedom" - Jah-Wren Ryel
Unlike traditional bank, you can trace the money stolen where it goes but unable to get it back. Bitcoin have no way to force a transaction except if everyone would update their software to approve a transaction without the valid cryptographic signature something unlikely to happen considering the thousands of instance running.
So now I need a PhD in computer security to use Bitcoin without getting robbed?
In security, complexity is a smell.
Pick any two.
Let's call the real cops who are paid by real taxes to investigate the theft of tax-avoiding digtal currency!
to freeze the accounts and get at least some of the money back.
Oh, wait. There aren't. How's that anarchy tasting?
Just bits !! Imagination !! Hand waving !! Suckers !!
Having watched this bitcoin project/program/scheme (whatever) unfold the last couple years it seems like a money making fraud scheme. I still don't fully understand how it works, it's extremely confusing to actually try to use the "currency", why someone can just say a bitcoin is worth X dollars, and you can create money by "mining" for it with a graphics card. It feels like something created by criminal entities which will eventually collapse or found to be fraudulent....
Never, never, never trust your Bitcoin wallet to a third party, no matter how trusted.
Keep your wallet safe by maintaining personal, physical possession of it and adhering to safe network practices.
I think it is a misuse of the word "bank" using it to describe these websites.
Better known as 318230.
"A hacker with his computer can steal more than a hundred men with guns."
So, for security, you had to provide a telephone number? Ahahahahaha.
Bitcoin makes everything about currency handling harder for the average person.
It doesn't provide anonymity - that could be facilitated by a central bitcoin exchange server, which may or may not be logging everyone's activity (intentionally or otherwise). But then you might as well use any traditional money laundering method.
The only interesting thing with Bitcoin is that there's a limit to the amount of bitcoins. But just as a govenrment mandate detached the dollar from gold, a government mandate could change relevant representations+algorithms to allow the government to produce more bitcoins at will. And, just as everyone accepted who accepted US dollars accepted the former change, they'd accept the latter change too.
Bitcoins are a tool for speculators, drug dealers, and criminals.
It does not sound like Nation State Attacker was at work here.
The attack was not so sophisticated that the infosec boys were left scratching their heads as to how the breach was made. In fact, for a so-called vault, Inputs.io leaving up the access to old accounts that skirt 2FA seems sloppy.
And, certainly, having 4100 BTC to spend for your porn and drugs would be motivation to some who are capable of such an attack.
But I assume central banks and gov'ts with propped up currencies don't want to see Bitcoin really take off. Just breaking everyone's trust in BTC is a win for them.
SLASHDOT: news for people who can't concentrate on work or have no life at all and got tired of yelling back at the TV.
So, for security, you had to provide a telephone number? Ahahahahaha.
Yep. So much for "anonymous" and "untraceable."
...It doesn't provide anonymity - that could be facilitated by a central bitcoin exchange server, which may or may not be logging everyone's activity (intentionally or otherwise)....
Yep. It is not designed to be anonymous-- all transactions are reported. You can trust that they are not being recorded, and you can take steps to hide your identity-- but this is up to you.
The only interesting thing with Bitcoin is that there's a limit to the amount of bitcoins. But just as a govenrment mandate detached the dollar from gold, a government mandate could change relevant representations+algorithms to allow the government to produce more bitcoins at will. And, just as everyone accepted who accepted US dollars accepted the former change, they'd accept the latter change too.
Exactly. A part of the value of bitcoin lies in your trust that they don't decide to increase the number of bitcoins.
Eventually, of course, if bitcoin is to remain viable they will have to increase the number-- we have lived in a world of inflation for so long that we have forgotten that deflation is what happens when you have a fixed amount of specie. Deflation is just as bad as inflation, and the ultimate result of deflation is that it forces people to turn to other forms of currency.
Bitcoin was designed to eliminate third party risk. The risk of the government/bank freezing assets arbitrarily. The risk of the government seizing additional "TAX" money. The risk of spying on your transactions. The risk of the government debasing the currency. etc etc etc
If you are using bitcoin in a manner that exposes you to significant and avoidable third party risk...ie. online wallets with no backup...then their is no one to blame but yourself.
In this case the risk was created from control gaps of a "fourth party" provider. The bitcoin.io's third party host was weak on several fronts.
...
Yeah, I know it's the "fad" to bash Bitcoin. But it's disappointing, because Bitcoin represents everything that us nerds reading slashdot should like: It's a mix of cryptography, freedom of speech, computing, networking, finance, economics, and even politics. Most of us here dig that stuff.
Get over the hype and take Bitcoin for what it really is: a fascinating experiment that has, so far, withstood the amazing barrage of publicity, hacking attempts, legal uncertainties, and remains valuable for reasons completely contrary to everyone that says it's worthless. It may become worthless one day, but consider the possibility that Bitcoin is disproving all your wildly oversimplified assumptions about what makes something valuable. It is completely different than anything else we know, and there's plenty of reasons to believe that it could succeed as much as it could fail.
Why does gold have value? Nothing is backing gold. Yet it has value, mainly because of its properties: scarcity, fungibility, density, beauty, etc. Bitcoin is really quite similar but with some different properties. Ease of transfer over the internet, fungibility, scarcity, storage efficiency, near-anonymity and built-in escrow. I don't think it's any more ludicrous for Bitcoin to have value than it is for gold to have value. And in the end, when I want to sell WoW weapons, buy webserver space, or play a few games of poker online, why would I use credit cards or paypal, which all require me to remember log-in creditials, give away personal information to be [improperly] protected by a third-party and/or pay a bunch of fees. There's plenty of value in being able to pay people across the world, instantaneously, without sacrificing your privacy, and without paying any fees. Why is that not valuable?
When I shutdown my laptop I store it in a safe to protect my bitcoins.
Get free satoshi (Bitcoin) and Dogecoins
Never, never, never trust Bitcoin.
FTFY
Well, I agree with you on one point: Robbing a bank by walking into the lobby of your local branch is very romantic, but it's a horrible and dangerous way to steal money, and has lousy returns. I'd say we've long past the point where that was the best way to rob a bank. (I'd say owning or running a bank is probably the best way to rob it...)
A bank doesn't need to keep ANY dollar bills on hand for dollars in their bank accounts; only branch banks need physical currency at all. There are plenty of non-branch banks out there that don't have any physical currency; what would they need it for? The Fed does not require any bank, even Federal Reserve members, to hold any particular portion of their assets in currency (although I do think Federal Reserve members do need to let their account holders withdraw their deposits as cash at any point; it's how the Fed actually distributes cash out into the economy.)
A dollar bill doesn't represent "debt"; it represents one dollar's worth of the world's total supply of dollars/dollar-denominated assets. In that sense, it's little different from a share of stock. Some of those dollar-denominated assets are debts, some are coins in my pocket, some are bits on my bank's hard disks, some consist of stacks of $100's in a cave in some benighted 3rd-world kleptocracy. If the supply of dollars increases faster than dollar-denominated assets, we have inflation, if the reverse happens, we have deflation.
You may of course choose to blame the Federal Reserve for whatever you like, but the Fed did not create fractional reserve banking or fiat currency, nor did they originate the idea of moving money around through a method other sacks of cash.
And even if we still had the gold standard, why would we tie the amount of gold on-hand to physical currency? Virtual currency is easier and safer to store, manage, and move. An electronic dollar is no different from a $1 bill in my pocket.
BTW, yes, credit is the backbone of every modern economy in the world; this is hardly new... it's been the case for centuries. Modern capitalism would be utterly impossible without it.
It doesn't give you interest or loans but I think it's called bank in a more general sense. Isn't a piggy bank where you keep your coins?
Never, never, never trust *snip* Bitcoin.
Good point! Lesson learned!
I've been analyzing bitcoin lately, and have come up with the following reasoning:
As the coins are limited to 21M coins, you can, at this date, purchase 1/21Mth part of all the coins in the world for $300,-
Even if you put the odds of bitcoin supplanting US dollar very slim (1:1000), the only rational choice is to buy bitcoin.
If in 2030 the world uses bitcoins, you end up owning a sizeable portion (1/21M) of the entire money supply of the world's default currency.
How is this not a good deal? Heck, even at 1:1000000 odds of bitcoin supplanting US dollar would still make sense at $300,- per coin.
Where is fault in my logic? It seems too easy.
Bram Stolk http://stolk.org/tlctc/
And never let your hard drive crash, or your removable drive go through the washer.
"Think about how stupid the average person is. Now, realise that half of them are dumber than that." - George Carlin
As far i know, you can see the history of each bitcoin in the blockchain, each wallet that have and had it, each transaction that it had been involved into. If those bitcoins where moved to a particular wallet, any participant in the bitcoin network can see to which wallet it went it all, and what that person did after that. Maybe the name of that person is not known yet, but the people that will receive some of those bitcoins in exchange of something may have a hint on who they are or where they are living.
Unless, of course, the private key got erased instead of copied, or used to transfer them to somewhere else. Then the bitcoins will vanish in practice, but won't be a robbery in that case.
This is great. Usually when a bank loses everything the taxpayers are forced to bail them out. The customers actually losing is a breath of fresh air.
I love Jesus, except for his foreign policy.
Secure and online: http://a.fsdn.com/sd/logo_w_l.png
It might seem hard to understand why an entity like Inputs.io exists when one of the strengths of Bitcoin is its decentralized structure. But anyone who knows a bit about how fraud is prevented and how Bitcoin is spent easily sees its major flaw as virtual money. Every Bitcoin is basically marked money that you can trace from the moment it's created or "mined". By depositing their Bitcoins with Inputs, users of the service can mix their Bitcoins together such that the Bitcoins deposited are different from the Bitcoins withdrawn. The 1 BTC withdrawn by user Ann might, for example, be part of the 2 BTC deposited by Bob, who when decides to withdraw might draw his 2 BTC against the pooled Bitcoins of one or several other users.
i only have 0.0006 bitcoins in my wallet from faucets. i like the interface inputs.io. shame it got hacked though.
Not trusting bitcoins to web wallets doesn't mean you can't make encrypted backups.
"Online wallet" seems like the equivalent of asking a homeless man to watch a shopping cart full of alcohol for you. What is the point? Genuinely curious because I bounce BTC through several exchanges, a wallet on my PC, and a paypal style service for cashing them out for USD. I don't see what value an online wallet would provide to help me with my use cases.
Not that this is what's going on, of course, but this came to mind:
1. open bitcoin "bank"
2. get lots of deposits
3. "get hacked" and close up shop
There is no step four, the profit's in step three.
To the usual nattering nabobs of negativism, I suppose you haven't heard of multiple encrypted backups?
That made me chuckle. Can I mod down my own GP comment?
My comment would have made a lot more sense if the URL was Slashdot.org/logo.png