5 ms·
Bitstamp was hacked 2 weeks ago, and only now are users finding out
- rasengan 13y agoDon't use a centralized exchange. Don't use a hosted online wallet. Any centralized source of a large amount of BTC/XBT or any other currency thereof is simply going to be a target, no matter what. Anybody that claims they are 100% secure should be put into question. 0days are very real. If you would like to use an "online" wallet, use Blockchain.info.
- nextstep 13y agoWhy should we trust Blockchain.info?
- rasengan 13y agoThey don't actually "hold" your coins (nor your private key(s)).
- LoganCale 13y agoTo expand upon this because I think it's interesting and not something that everyone appears to understand with how the blockchain works: those are effectively the same. Everyone's coins are distributed across the entire Bitcoin network, and everyone who has a copy of the blockchain has everyone's coins, but only those who hold the corresponding private keys for each address (public key) the coins belong to can use them. So if you don't control the private keys to your coins, you don't control the coins.
- LoganCale 13y agoThey don't hold your unencrypted private keys.
- Idocrase 13y agoWhat's to stop a hacker from serving you malicious javascript that steals your unencrypted private keys? blockchain.info is no more secure than any other web wallet.
- LoganCale 13y agoI don't know how blockchain.info actually works. If you give them your decryption key at any point, even if they claim not to keep it, then you're heavily relying on trusting them and that's not much better than the other web wallet alternatives, I agree.
- droope 13y agoThey have a browser extension, so there's that. Two-factor involves trusting them, but the actual bitcoin transactions apparently not. Myself, I only hold pocket change in blockchain, the rest I hold on cold storage. Regarding them being shady, they are as shady as you all silicon valley fellows. :) I hear that's where they are based.
- nly 13y agoI was told, to my surprise, by a couple of Bitcoin developers just the other day that they aren't to be trusted either. Apparently they are known shady.
- StavrosK 13y agoWhat can you use if you don't want to download the entire multi-gigabyte blockchain?
- LoganCale 13y agohttps://multibit.org/ https://multibit.org/
- singularityyy 13y agoIf only someone told you the difference between an online exchange and online wallet. Tell me again how I shouldn't use a centralized exchange but should use blockchain.info to .. buy Bitcoin?
- singularityyy 13y agoWe really need more transparency in Bitcoin exchanges, and this needs to come from within the community. The days of 'playing around' are gone, this is serious business now. Industry leaders should at least form a consortium that handles these kinds of issues and at least does an audit of funds. In addition, exchanges should prove they have the said funds. It's a public ledger folks, we need to demand more openness and honesty.
- akinder 13y agoYou mean.. like put regulations and oversight into place? How delicious.
- shpxnvz 13y agoNo, he clearly did not mean regulation. He said demand, as a customer may do, rather than coerce by force, as a government must do.
- orblivion 13y agoYep. Fun fact: libertarians don't want the world to be the wild wild west forever. We believe in regulations and oversight, we just think it need not be at gunpoint. Hopefully the Bitcoin industry gets to it before the government does and we'll find out how it compares.
- singularityyy 13y agoWhat does regulation have anything to do with what I wrote? Do you know you can demand things as a consumer? As a group? As a community? As a market participant? Target 'leaked' 70m+ credit card details and there was no regulation that would have forced them to disclose it. But yeah, lets make all the regulation in the world for Bitcoin exchanges, because, you know ...
- maxerickson 13y agoAre you being pedantic about forcing them or are you unaware that most U.S. states have notification laws that apply when a data breach involves personal information?
- Traubert 13y agoThis is a sensational title. Apparently "only" a list of email addresses was stolen.
- biot 13y agoCopied. And who can say with certainty that no other data was copied? If the incident occurred due to a server breach, can you still trust the server?
- wehadfun 13y agowho still has money in anyone of these online wallets?
- singularityyy 13y agoJesus man, do some homework at least. It's not an online wallet, it's an exchange. Do you not understand the difference?
- kolev 13y agoWell, technically, you can use them as a hosted wallet, too.