blockchain.info compromised

[mjglqw]

Hey everyone, our DNS provider was targeted. It's going to be several hours before our services are fully restored. The CloudFlare DNS is propagating now.

source

We're researching a DNS issue and looking into it. We apologize for the inconvenience. Stay tuned.

source
I suggest stop using blockchain's wallet service as of now to be extra sure.

[LiteCoinGuy]

i stopped using their app a few years back because it was buggy...they also had problems where people lost coins...and now their website is hacked. better stay away.

[zepher]

i stopped using their app a few years back because it was buggy...they also had problems where people lost coins...and now their website is hacked. better stay away.

Agreed. I use blockchain.info for checking tx's, that's about it.

More info on the issue: https://m.reddit.com/r/Bitcoin/comments ... mpact=true

[mjglqw]

i stopped using their app a few years back because it was buggy...they also had problems where people lost coins...and now their website is hacked. better stay away.

One of the reasons why people should stop using 3rd party wallets

[iFixBTCmemoryIssues]

i stopped using their app a few years back because it was buggy...they also had problems where people lost coins...and now their website is hacked. better stay away.

One of the reasons why people should stop using 3rd party wallets

Hosted wallets are okay, blockchain.info provides you with your keys.

I stopped using them because of their involvement in "thunder". Prior to that, I was both a user and supporter of blockchain.info.

In fact, I still like their leadership and would use their service again. However, they need to make their plan forward clear, I won't be using any thunder or lightning connected technology, only Bitcoin.

[klaaas]

there own blog
https://blog.blockchain.com/2016/10/13/ ... ns-attack/

[dotthebeats]

Thats why i dont store usually my bitcoins on web wallets because of this kind of situation , blockchain does experience this also in the past where there are problems regarding on it. Better to use pc wallets for sure.

[MikeV]

I only use web wallets for small transactions of temp storage. The only safe way to store bitcoin is in a cold storage.

[mattyB]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

[MikeV]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

How could I forget ? I'm sure they'll release an awesome limited edition soon which everyone should totally buy! [/guerilla advertising].

[mjglqw]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

and that too. hah. Took advantage of the topic huh? True, though.

If only someone could send me one of those for free..

*cough*

mattyB

*cough*

[mattyB]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

and that too. hah. Took advantage of the topic huh? True, though.

If only someone could send me one of those for free..

*cough*

mattyB

*cough*

Haha, yeah, I'll always take advantage of an opportunity if I spot one

Regarding getting a free one...well, i've got a few, pre printed promotional ones, but I'm UK based, so unless you're on my side of the pond, I might not be the one that can help there. Obviously for best security I'd recommend ordering a custom designed one with your own BIP38 encrypted keys

I'm getting good at this guerrilla advertising malarkey

[iFixBTCmemoryIssues]

*cough*

BitStashers

*/cough*

and that too. hah. Took advantage of the topic huh? True, though.

If only someone could send me one of those for free..

*cough*

mattyB

*cough*

Haha, yeah, I'll always take advantage of an opportunity if I spot one

Regarding getting a free one...well, i've got a few, pre printed promotional ones, but I'm UK based, so unless you're on my side of the pond, I might not be the one that can help there. Obviously for best security I'd recommend ordering a custom designed one with your own BIP38 encrypted keys

I'm getting good at this guerrilla advertising malarkey

[Rmcdermott927]

It was only a matter of time. They have been one of the biggest targets for hackers for a long time.

[OgNasty]

Nice to get a reminder of why not to use online wallets from time to time.

[mjglqw]

*cough*

BitStashers

*/cough*

and that too. hah. Took advantage of the topic huh? True, though.

If only someone could send me one of those for free..

*cough*

mattyB

*cough*

Haha, yeah, I'll always take advantage of an opportunity if I spot one

Regarding getting a free one...well, i've got a few, pre printed promotional ones, but I'm UK based, so unless you're on my side of the pond, I might not be the one that can help there. Obviously for best security I'd recommend ordering a custom designed one with your own BIP38 encrypted keys

I'm getting good at this guerrilla advertising malarkey

hah. unfortunately i'm from somewhere in asia. No problem though. Goodluck to your company!

[superiorus]

The problem was solved, they are back online and 100% working.

[rogerver]

now their website is hacked.

I don't think that is fair to say. Their domain registrar was hacked. That isn't Blockchain.info's fault. Although it is still a security risk for all their users. I hope this motivates them to bring their Chrome app back into usable form. It would protect against this sort of attack.

[bitkilo]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

Would you be able to custom design a few of these wallets and any chance on a bulk price for 25-50 cards?

[mattyB]

The only safe way to store bitcoin is in a cold storage.

*cough*

BitStashers

*/cough*

Would you be able to custom design a few of these wallets and any chance on a bulk price for 25-50 cards?

Absolutely, yes and yes, I'll send you a PM in a second.

[MikeV]

*cough*

BitStashers

*/cough*

Would you be able to custom design a few of these wallets and any chance on a bulk price for 25-50 cards?

Absolutely, yes and yes, I'll send you a PM in a second.

Could you PM me with a little explanation how the BitStashers card works (loading/redeeming them). I might be interested in a custom bulk order too.

[Decoded]

now their website is hacked.

I don't think that is fair to say. Their domain registrar was hacked. That isn't Blockchain.info's fault. Although it is still a security risk for all their users. I hope this motivates them to bring their Chrome app back into usable form. It would protect against this sort of attack.

Their DNS was hacked. That's all they need. Simply mirror the blockchain.info login page, redirect the DNS to their own server, and you give the hacker your ID and password.

[rogerver]

now their website is hacked.

I don't think that is fair to say. Their domain registrar was hacked. That isn't Blockchain.info's fault. Although it is still a security risk for all their users. I hope this motivates them to bring their Chrome app back into usable form. It would protect against this sort of attack.

Their DNS was hacked. That's all they need. Simply mirror the blockchain.info login page, redirect the DNS to their own server, and you give the hacker your ID and password.

So that means that the company that does the domain name registry was hacked.
None of Blockchain.info's servers were hacked in any way, nor were any of their accounts with the registrar.
What I'm trying to say is that the registrar was hacked, not Blockchain.info.
Another interesting side note is that TOR users were not affected in any way.

[Decoded]

I don't think that is fair to say. Their domain registrar was hacked. That isn't Blockchain.info's fault. Although it is still a security risk for all their users. I hope this motivates them to bring their Chrome app back into usable form. It would protect against this sort of attack.

Their DNS was hacked. That's all they need. Simply mirror the blockchain.info login page, redirect the DNS to their own server, and you give the hacker your ID and password.

So that means that the company that does the domain name registry was hacked.
None of Blockchain.info's servers were hacked in any way, nor were any of their accounts with the registrar.
What I'm trying to say is that the registrar was hacked, not Blockchain.info.
Another interesting side note is that TOR users were not affected in any way.

Yep. The hackers would have control of the domain blockchain.info, nothing else.

I'm not too familiar with Tor, but isn't the general idea of it to not have registrars, and domains are hosted using a private key of sorts? Either way, tor doesn't use registrars, so it's fine.

[mattyB]

Could you PM me with a little explanation how the BitStashers card works (loading/redeeming them). I might be interested in a custom bulk order too.

No worries, PM incoming

[piebeyb]

DNS hijacking, but I think this issue has been addressed properly by blockchain on a few days ago