Bitcoins - digital currency - Page 65 - Business, Finances and Investing Forum

Two Plus Two Forums Other Topics Business, Finance, and Investing

Bitcoins - digital currency

Post Reply Subscribe

...

Page 65 of 2108

First

15 45 55 60 61 62 63 64 65 66 67 68 69 70 75 85 115 165 265 565 1065

Last

Page 65 of 2108

First

15 45 55 60 61 62 63 64 65 66 67 68 69 70 75 85 115 165 265 565 1065

Last

06-19-2011 , 03:53 PM

#1601

SenatorKevin

veteran

Join Date: May 2007 Posts: 2,905

Quote:

Originally Posted by MasterLJ

That's a really good question. Markets shouldn't have mulligans.

Trades get busted all the time in real markets too.

Quote

06-19-2011 , 03:58 PM

#1602

e306

old hand

Join Date: Feb 2008 Posts: 1,815

what does "salted" mean in this context?

Quote

06-19-2011 , 03:59 PM

#1603

Valhalla1

journeyman

Join Date: Mar 2005 Posts: 359

Quote:

Originally Posted by MasterLJ

Yeah I agree.

They do have solid API's in place for ticker/depth of market, and they are now testing their auto-trading API. That said, TradeHill liquidity sucks ass although that should change when they release their auto-trading API next week.

thanks for the heads up on the Tradehill ticker API, my site now uses tradehill to set prices

Quote

06-19-2011 , 04:04 PM

#1604

mustmuck

veteran

Join Date: Jul 2005 Posts: 2,497

Quote:

Originally Posted by e306

what does "salted" mean in this context?

Those characters in the csv file are hashes of people's passwords. If they aren't salted you can use a precomputed table of hashes to work out what people's passwords are. If they are salted then out have to brute force them.

Quote

06-19-2011 , 04:07 PM

#1605

SenatorKevin

veteran

Join Date: May 2007 Posts: 2,905

You'd be crazy to think those entries are salted. Nobody salts stuff unless legally required, generally speaking obv.

Quote

06-19-2011 , 04:12 PM

#1606

anyhero

adept

Join Date: Mar 2008 Posts: 855

Salting means you take the user's password and add some random junk to it before hashing it. It makes the password hashes much more secure in the event of a database leak.

http://en.wikipedia.org/wiki/Salted_hash

Quote

06-19-2011 , 04:13 PM

#1607

e306

old hand

Join Date: Feb 2008 Posts: 1,815

does the "precomputed table of hashes" only work with dictionary words and passwords like "12345" or "qwertz", or also with non-dictionary-words combined with numbers?

Quote

06-19-2011 , 04:13 PM

#1608

mustmuck

veteran

Join Date: Jul 2005 Posts: 2,497

Quote:

Originally Posted by SenatorKevin

Nobody salts stuff unless legally required, generally speaking obv.

While they may not be salted I strongly disagree with that statement.

Quote

06-19-2011 , 04:15 PM

#1609

wahoo3

veteran

Join Date: Sep 2008 Posts: 2,805

sick timing that i signed up to mtgox 2 days ago huh. at least i didn't include e-mail address.

Quote

06-19-2011 , 04:37 PM

#1610

Parlay Slow

Carpal \'Tunnel

Join Date: Nov 2003 Posts: 8,122

Quote:

Originally Posted by SenatorKevin

You'd be crazy to think those entries are salted. Nobody salts stuff unless legally required, generally speaking obv.

huh?

Quote

06-19-2011 , 04:41 PM

#1611

SenatorKevin

veteran

Join Date: May 2007 Posts: 2,905

Quote:

Originally Posted by Parlay Slow

huh?

I'm being sarcastic here, but everyone should just assume their password was compromised.

Quote

06-19-2011 , 04:46 PM

#1612

Parlay Slow

Carpal \'Tunnel

Join Date: Nov 2003 Posts: 8,122

Quote:

Originally Posted by SenatorKevin

I'm being wrong here and trying to pass it off as sarcasm like a weirdo.

fyp

Quote

06-19-2011 , 04:57 PM

#1613

e306

old hand

Join Date: Feb 2008 Posts: 1,815

what will they do with all the accounts that have bought at 0.01 and instantly cashed out? there is nothing to roll back in that case.

Quote

06-19-2011 , 05:04 PM

#1614

ZengZang

journeyman

Join Date: Mar 2009 Posts: 338

Quote:

Originally Posted by AlbertoKnox

That guy is malicious or an idiot, probably both. Donations before the issue is resolved, beggar puhlease.

yes i looked like a ****** now your the one, I think mtgox lied to me about the hacking incident yesterday....They told me that they were responsible for freezing my account.
Because it contained 0.16 btc from the 25k btc heist.

Quote

06-19-2011 , 05:05 PM

#1615

ZengZang

journeyman

Join Date: Mar 2009 Posts: 338

Quote:

Originally Posted by e306

what will they do with all the accounts that have bought at 0.01 and instantly cashed out? there is nothing to roll back in that case.

I bought @ 15

and instant cash out, because I needed the money..

Quote

06-19-2011 , 05:12 PM

#1616

e306

old hand

Join Date: Feb 2008 Posts: 1,815

best hacking-line would have been:

*taking over controll of mt.gox account with lots of coins
*creating 100 mt.gox accounts
*creating 100 new bitcoin-adresses
*creating buy-orders for 0.01 usd/btc in all 100 accounts
*making the price crash to 0.01 with the hacked account
*intantly cashing out all 100 accounts to different bitcoin-adresses at a price of <1 usd/btc.

=> so even with the 1k per day limit, he would have gotten 100.000 bitcoins out of the system. with no rollback possible.

Quote

06-19-2011 , 05:13 PM

#1617

Freakin

bacon wannabe

Join Date: Sep 2004 Posts: 17,153

Changed my gox acct pass 2 weeks ago to 14 char upper/lower+num+symbol (that even I don't know) just because I assumed this was an inevitablity.

I dislike being right sometimes

Hope this doesn't destroy the exchange rate

Quote

06-19-2011 , 05:13 PM

#1618

doublec

journeyman

Join Date: May 2007 Posts: 315

I've suspended withdrawals on the namecoin/bitcoin exchange to give people time to change their passwords for their openid accounts in case they shared the password with Mt Gox.

Quote

06-19-2011 , 05:23 PM

#1619

doublec

journeyman

Join Date: May 2007 Posts: 315

I'm probably not allowed to link to it but in #bitcoin-dev someone just posted a list of Mt Gox users with gmail accounts whose passwords match the mtgox password. So some people were pretty silly...

Quote

06-19-2011 , 05:32 PM

#1620

Ponies

Pooh-Bah

Join Date: Mar 2007 Posts: 3,726

mtgox was always the part of bitcoins that scared me the most. 1 site run by this random guy that exploded onto millions of $ worth of trading.

How could this guy not be smart enough to have some security experts come in and lock everything down? This is gonna cost him millions of potential $ and could have cost a bunch of people alot of money as well.

Quote

06-19-2011 , 06:21 PM

#1621

AlbertoKnox

Pooh-Bah

Join Date: Oct 2007 Posts: 3,676

Quote:

Originally Posted by Ponies

I know he was working on redoing the whole site, probably thought it would hold until then. Whoops.

The site was really pathetic. Thankfully the $1000/day limit was broken a few days ago and I got almost all of my coins out.

I don't even believe that 1 account had 500k coins. That's plain stupid.