3 ms·

How would they know? (Serious question)

• deleted 15y ago
  [deleted]
  • regularfry 15y ago
    That only tells you that a transaction occurred. It doesn't tell you who initiated it.
    • deleted 15y ago
      [deleted]
• ScottBurson 15y ago
  My guess is they're looking at the HTTP referrer field in their server logs. Normally, a CSRF exploit shows up as an HTTP request originating from a different site (i.e., other than mtgox.com). I think the referrer can be spoofed, though, which would disguise the exploit in the logs.
  • tlrobinson 15y ago
    The referrer isn't spoofable in any normal browsers (and CSRF attacks occur within the user's browser).