Slashdot Mirror
Bitcoin Thefts Surge, DDoS Hackers Take Millions
CowboyRobot writes "In November, Denmark-based Bitcoin Internet Payment System suffered a DDoS attack. Unfortunately for users of the company's free online wallets for storing bitcoins, the DDoS attack was merely a smokescreen for a digital heist that quickly drained numerous wallets, netting the attackers a reported 1,295 bitcoins — worth nearly $1 million — and leaving wallet users with little chance that they'd ever see their money again. Given the potential spoils from a successful online heist, related attacks are becoming more common. But not all bitcoin heists have been executed via hack attacks or malware. For example, a China-based bitcoin exchange called GBL launched in May. Almost 1,000 people used the service to deposit bitcoins worth about $4.1 million. But the exchange was revealed to be an elaborate scam after whoever launched the site shut it down on October 26 and absconded with the funds. The warnings are all the same: 'Don't trust any online wallet', 'Find alternative storage solutions as soon as possible', and 'You don't have to keep your Bitcoins online with someone else. You can store your Bitcoins yourself, encrypted and offline.'"
Pretty soon they'll all be stolen, kinda like land
“He’s not deformed, he’s just drunk!”
Somebody more familiar with bitcoin can answer this for me, undoubtedly, but based on my limited understanding, if the wallet file is lost or destroyed, the coins within it are effectively gone, correct? If so, then at some point there's an expected loss over time (fraction of the population who don't back up their wallet, expected size of wallet, drive failure rate), and at some point that's going to intersect with the size at which the pool expands, so that the total supply of bitcoins over time actually decreases. Theoretically, we'd hit some point where bitcoins are just being destroyed through loss. The situation will be exacerbated with thefts and personal storage.
in the couch
but I have worked in academic level IT & networking so I know what's going on...
Only at the level of how you store it, not in any aspects of how it works as a currency.
The problem is exchanging Bitcoin for real currency
But in theory you don't need to do that often, the idea is that it is a currency you can accept and use for payments.
It's a bit tricky for me to convert USD into some other currency also, but since I don't do so very often it doesn't matter.
As more places accept BitC for payment that concern becomes much less an issue.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
... and use a VM just for that purpose. Since I do IT I have a copy of VMware workstation and will utilize this for just that purpose to play it safe.
I have one for porn and one I am going to make for litecoin trading as bitcoin is too expensive already :-(
Firefox and Chrome with flash can get you just as infected as IE under Windows in this day and age so any browser is bad. A VM is the only way to stay safe sadly.
http://saveie6.com/
If you are really paranoid, you can use whonix, which puts a vm in a vm, piping everything through tor and preventing just about any leak of IP information or exposure of OS exploits.
Silence is a state of mime.
***UNLESS I CAN SEE IT PLACED IN MY $$$ BANK ACCOUNT IN REAL TIME***
Which goes to show you are missing the point of using it as a currency. A real currency is something you hold onto, not exchange at first opportunity.
You only think you need to do that because you think the exchange rate of BitC against some other currency is too high. Why? Are you SURE about that? Because lots of people were saying the same thing all along, at much lower values. What if BitC doubles in value again? Then you would have been an idiot to exchange it away.
I'm not even a huge BitC proponent, I have only a tiny amount myself. But I can see that worry about the value of BitC against other currencies seems overblown, and there is a constant track-record of underestimating BitC, with every action that is supposed to bring the hammer down on exchange rates (like the closure of Silk Road) having the opposite effect instead. And I see real merchants slowly adopting payment using this currency. If there are enough real objects I can use BitC to buy then I am insulated from swings in value, and it makes more sense to hold than to get rid of right away.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
There are many other choices than "savings account" or "mattress". There are a wide variety of bond investments, bond ETFs and mutual funds, money market accounts, and so on. But you pay a lot for safety, and you also pay for the convenience of liquidity, trading in very small amounts, and retail convenience.
The Internet has nearly removed those last two concerns, however. If you educate yourself on the risks of bonds (both inflation and default risks), which is no harder than educating yourself about how bitcoin works, it's easy to match inflation with funds with daily liquidity, ability to move small amounts, and really quite small risk. But if you want that government backing against default risk, you're going to lose vs inflation - you have to pay for that insurance.
Socialism: a lie told by totalitarians and believed by fools.
As a small addendum to what rasmusbr has already said:
if the wallet file is lost or destroyed, the coins within it are effectively gone, correct?
The short answer is yes. The long answer is a little bit more complicated.
If hacker still has copy of the wallet.dat file, the coin could still be stolen (in theory the file can optionnally be encrypted. In practice we all know how good humans are at picking good passwords).
key pairs in a wallet can also be generated using passphrases (so called brain wallet).
in theory the owner is the only one to know the passphrases generating the key pair and thus the only one able to use the private key.
in practice, again, we all know how good humans are at that task
(and before you ask: yes someone has decided to make a keypair using xkcd's "correct horse battery staple" comic).
worst citizens are the web services. they use their own wallet to process coin. you sent an amount to them, and then they process on your behalf. (some even allow you to upload key pairs). You have to trust that they are honnest people. You have also to trust their security measures that their key don't get stolen.
So out of all the various "lost" coins, some are possibly going to re-appear due to poor password strategies, or due to less scrupulous online companie which will decide to re-purpose un-claimed bitcoin account, or outright scam people into giving them coins and then running away with them.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
In the UK you can save with the government and cut out the middle man. The UK government owns a bank named the National Savings Bank (actually they own several banks, but this is the only one that offers savings accounts to regular people) which offers a middling interest rate and various long-term bonds. When you "invest" in the government's bank instead of it lending the money to somebody else like a regular bank it just spends it on government projects. The money to pay you back later comes from taxation. So in effect it allows the government to borrow from the ordinary consumer at a better rate than they'd get from a foreign bank, and it lets the consumer save with a 100% trustworthy bank.
Anyway, for long term savings the National Savings Bank will give you points over inflation. They will promise to track better than the rate of inflation in interest. They can do this because they are, after all, the government, if they can't make it worthwhile to borrow money at points over inflation they definitely shouldn't be borrowing from foreign banks! Of course "worthwhile" gets to be over a long view when you're a government. Money spent today ensuring a five year old is healthy and well educated pays off twenty, forty, sixty years down the line.
(You might say, what if the government can't pay it back? Maybe the tax base collapses, or the country is invaded or something. But in this case the country will default, EVERYBODY in the UK gets screwed if that happens, regardless of whether they use the government owned bank).
You are talking of a single transaction shifting the market 5% and you call that small?
Real economic markets panic of fractions of a percent shift with billions in transactions.
If a real currency could suffer a 5% inflation with the selling of a single million, everyone would conclude that currency is totally non-viable.
Basically you are saying that if you own bitcoins, you could lose 5% anytime someone sells a single million of a currency supposedly worth billions. That is NOT a stable reliable currency.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.