3 ms·

> At the start of February 2014, illegal access through the abuse of a bug in the bitcoin system resulted in an increase in incomplete bitcoin transfer transact

by jfasi 13y ago

> At the start of February 2014, illegal access through the abuse of a bug in the bitcoin system resulted in an increase in incomplete bitcoin transfer transactions and we discovered that there was a possibility that bitcoins had been illicitly moved through the abuse of this bug. ... > We believe that there is a high probability that these bitcoins were stolen as a result of an abuse of this bug I find the insistence that this catastrophe was brought on by a protocol bug very suspicious. A recent post on HN by an expert elaborated on why transaction malleability wasn't likely to have been the source of this exploit [1]. Meanwhile Mt. Gox is insisting that they were robbed by a bug in the protocol. This could be the position advised by Mt. Gox's legal representation, in a sort of "that's my story and I'm sticking to it" sort of way. If this line is actually true, then either the transaction malleability issue is much much bigger than we anticipated, or the bitcoin protocol has some vulnerability that we don't know about. That's scarier than a paltry exchange collapse. [1] http://hackingdistributed.com/2014/03/01/what-did-not-happen-at-mtgox/ http://hackingdistributed.com/2014/03/01/what-did-not-happen...

brokentone 13y ago
You're looking for this post: https://news.ycombinator.com/item?id=7329540 https://news.ycombinator.com/item?id=7329540
corresation 13y ago
I assume you mean http://hackingdistributed.com/2014/03/01/what-did-not-happen-at-mtgox/ http://hackingdistributed.com/2014/03/01/what-did-not-happen..., however I would hardly attribute that to "an expert". It is raw speculation, and states absolutes where there are none.
- jfasi 13y ago
  Thanks for the link! I've updated my comment. True, this post contains speculation on some matters, but if a professor at Cornell whose work focuses around distributed systems who authored the selfish mining attack isn't an "expert," then I don't know who is.
  - corresation 13y ago
    The author has credentials, but there is absolutely no expertise demonstrated in cryptocurrencies, much less regarding the specific issues of MtGox. It was all speculation, and it is inconsistent in its inputs -- on the one hand it disbelieves what MtGox claims, but on the other it takes historic claims of security (that keys were in cold storage) as proof of other conclusions. Speculation that is based upon cherry picked belief and disbelief might yield the conclusions that one wants, but it adds little to the information pool. And regarding claims that keys were in cold storage: Maybe, but one thing I think we're all learning from these amateur hour platforms is that a lot of claims aren't backed by reality. They have "Top men" working on their security. "Top men".
- barkingcat 13y ago
  yes that post is raw speculation and shouldn't be taken as truth. It's a bunch of "what-if's" and "we don't think anyone can be so incompetent" statements.

by jfasi 13y ago

brokentone 13y ago

You're looking for this post: https://news.ycombinator.com/item?id=7329540 https://news.ycombinator.com/item?id=7329540

corresation 13y ago

I assume you mean http://hackingdistributed.com/2014/03/01/what-did-not-happen-at-mtgox/ http://hackingdistributed.com/2014/03/01/what-did-not-happen..., however I would hardly attribute that to "an expert". It is raw speculation, and states absolutes where there are none.

jfasi 13y ago
Thanks for the link! I've updated my comment. True, this post contains speculation on some matters, but if a professor at Cornell whose work focuses around distributed systems who authored the selfish mining attack isn't an "expert," then I don't know who is.
- corresation 13y ago
  The author has credentials, but there is absolutely no expertise demonstrated in cryptocurrencies, much less regarding the specific issues of MtGox. It was all speculation, and it is inconsistent in its inputs -- on the one hand it disbelieves what MtGox claims, but on the other it takes historic claims of security (that keys were in cold storage) as proof of other conclusions. Speculation that is based upon cherry picked belief and disbelief might yield the conclusions that one wants, but it adds little to the information pool. And regarding claims that keys were in cold storage: Maybe, but one thing I think we're all learning from these amateur hour platforms is that a lot of claims aren't backed by reality. They have "Top men" working on their security. "Top men".
barkingcat 13y ago
yes that post is raw speculation and shouldn't be taken as truth. It's a bunch of "what-if's" and "we don't think anyone can be so incompetent" statements.