Hacker News Reader

Comment by akerl_ | Hacker News Reader

"We noticed the hot wallets dwindling but assuming it was members moving their funds off site during the DDOS, we loaded all the cold balances onto the site"

I'm a bit shocked that their tracking of their transactions was so easily broken as to prevent them from seeing that all the funds were being pulled by so few users.

Also, the part at the bottom where they basically post a wall of IPs and addresses seems like a weird way to move forward. Do they not plan on there being an official investigation?

View on HN

The last set of addresses under the DDoS part of the page resolves to Google's crawlers.

Probably an amplification attack using Google, a clever way to increase the size of an attack without adding too much additional cost.

An interesting example is creating 700 Mbps with a few google docs.

http://chr13.com/2014/03/10/using-google-to-ddos-any-website...

Another set is Yandex, a Chinese [Edit: Nope, Russian, see below] web crawler. I've done a basic "what CIDRs and ASNs were involved" in a top-level post.

These idiots can't tell Web crawler traffic from DDoS (though often there's little practical difference).

https://company.yandex.com/

Yanex is Russia's Google.

Derp. I was thinking of Baidu. Knew it was search at least, from logs.

"Do they not plan on there being an official investigation?"

How do you officially investigate someone stealing your monopoly money?

Where is the FDIC insurance? Exactly what are they suppose to tell the police? The FBI? ... oh thats right, nothing, because they are not a bank, and the only thing "stolen" was some ones and zeroes off a hard-drive.

Seriously though... where is the police report on this? Or any of the other hacked bitcoin exchanges for that matter?

It doesn't matter if you're storing bitcoins or roflcoins or pictures of kittens: in most places, maliciously accessing somebody else's computer system and stealing data is a crime.

The government investigates stolen "ones and zeros" all the time. The FDIC provides protection for users, but the lack of FDIC doesn't mean that no laws apply.

What about the laws the operators of the exchange broke by running un-audited code to handle financial transactions?

Assuming such laws apply to them, and assuming they broke them, "so?". Their guilt or innocence does not have any connection with any investigation of somebody hacking into their systems.

> Where is the FDIC insurance? Exactly what are they suppose to tell the police? The FBI? ... oh thats right, nothing, because they are not a bank, and the only thing "stolen" was some ones and zeroes of a hard-drive.

This is a slippery slope. How do you think the Federal Reserve pops money into existence before they go on a QE tear? The bits ("ones and zeroes") pop into existence in their account, and they start buying assets/mortgages/whatever.

Currency only has value because of the shared belief that is has value.

>nothing, because they are not a bank,

Are you implying that a bank would somehow be held accountable for breaking the law or ripping people off? Since when?

My rebuttal to the post I replied to was that all currencies are ones and zeros now. The "> " was me quoting their post.

My mistake. I'm on mobile. I rarely comment on mobile.

It's possible with a small bank.

I have no love for BTC, either, but whatever it is that was stolen -- be it a bunch of ones and zeros, some paint smeared on canvas or your rare comic books -- if it has market value (more than monopoly money, certainly) then valuable property was stolen. The higher the value, the more serious the crime. And if there was a theft of property, the FBI can certainly investigate.

You have a valid point about FDIC.

The rest of your comment is nonsnese.

You think the FBI is never interested in ones and zeros on a hard drive? How do you square that with the facts discussed here: https://news.ycombinator.com/item?id=9044805

You think there's never any police reports or official investigation? How do you square that with the facts surrounding the collapse of Mt Gox? A recent headline announced that the police are closing in on the fraudsters: http://www.welivesecurity.com/2015/01/02/bitcoin-fraud-mt-go...

Apparently police are quite capable of investigating the theft of "monopoly money", and understanding the issues involved.

Reply on news.ycombinator.com