4 ms·
Bitcoin trading platforms do not need bitcoins accessible by remote servers. They should have a huge portion of the coins in cold storage (not available from re
by ewillbefull 13y ago
Bitcoin trading platforms do not need bitcoins accessible by remote servers. They should have a huge portion of the coins in cold storage (not available from remote servers). Also, the storage and attribution of coins to accounts should be done by a server under physical possession/control, so that authentication cannot even be forged in the event of a frontend breach.
There are a lot of things you can do to protect your bitcoins. Having them all on linode servers is the worst thing possible.
http://en.wikipedia.org/wiki/Air_gap_%28networking%29 http://en.wikipedia.org/wiki/Air_gap_%28networking%29
- ericd 13y agoYeah, that's one of those applications that you really need to colo and secure yourself with outside security verification, or at the very least go with a host that has a reputation for ironclad security. Hosting that kind of thing on a low-cost VPS is ridiculous.
- ceol 13y agoFrom what I remember, it was a 17 year old kid who built and ran the site, and it was his first time ever handling financial transactions (there was another bitcoin-related hacking around the same time, so I might be confusing them.) It was a recipe for disaster.
- sillysaurus 13y agoIt's incredible how much people are willfully ignoring Linode's gross incompetence in this matter.
- ceol 13y agoTheir only gross incompetence was not informing customers in a timely manner, which I could forgive them for. Having a security breach is something that happens to, quite literally, every hosting provider. I say all this as someone who dropped Linode for DO due to not being able to afford them anymore.