4 ms·

I wonder about that. It seems to me that the bitcoin wallet shouldn't have been accessible after reboot, at least until someone came by to give the agent managi

by olefoo 15y ago

I wonder about that. It seems to me that the bitcoin wallet shouldn't have been accessible after reboot, at least until someone came by to give the agent managing it the passphrase that would allow it to decrypt it's state. From the sound of things the wallet was just laying around unencrypted?

ceol 15y ago
https://bitcointalk.org/index.php?topic=66979.msg778666#msg778666 https://bitcointalk.org/index.php?topic=66979.msg778666#msg7... According to the admin of bitcoinica, he didn't have the wallet encrypted because the ruby gem he was using to process withdrawals didn't support it.
- ashconnor 15y ago
  Doesn't even matter if the wallet was encrypted, he'd still have to have the password somewhere on the server.
  - lmm 15y ago
    Not if he entered it manually on every reboot. There'd still be attacks around snooping the contents of the wallet from memory, but the ability to do a root password reset that involves rebooting the box wouldn't be enough (and it seems like that may have been all the access that the attackers here had).
    - deleted 15y ago
      [deleted]
- AdamGibbins 15y ago
  That doesn't eliminate the option of filesystem or container based encryption.