2 ms·
My guess is that the attacker doesn't know how many bitcoin were stored on the target's.
by kiba 15y ago
My guess is that the attacker doesn't know how many bitcoin were stored on the target's.
- joeyh 15y agoThe alternative is that they knew Bitcoinia was hosted on Linode, and when this customer service exploit became available for purchase on the 0day market (or whatever), they went in explicitly targeting Bitcoinia, but not knowing which IPs on Linode belonged to it. It's not clear if Bitcoinia separated its web server VM from its bitcoin VM, and if the attackers didn't know, it'd be best to target all the IPs.
- kylebrown 15y agoBitcoinica's web server is hosted on rackspace (through Heroku). They would likely have been able to determine that bitcoinica's bitcoin daemon was hosted separately on linode, by watching the ip addresses broadcasting withdrawal transactions. It is likely that bitcoinica was the target in breaching linode.