<story><title>More than $215,000 stolen from Bitcoinica in Linode incident</title><url>https://bitcointalk.org/index.php?topic=66979.0</url><text></text></story><parent_chain></parent_chain><comment><author>JoachimSchipper</author><text>Ah, Bitcoin. Security amateur hour. Again.&lt;p&gt;Seriously, trusting ~$200 000 to the security of a general-purpose VPS provider? With no failsafes of any kind? Ever notice how real banks don&apos;t do that? Even if you don&apos;t want to build your own data center, you could &lt;i&gt;at least&lt;/i&gt; chat with &lt;a href=&quot;http://www.thebunker.net/colocation/&quot; rel=&quot;nofollow&quot;&gt;http://www.thebunker.net/colocation/&lt;/a&gt; or another properly-paranoid data center.&lt;p&gt;At least &lt;i&gt;these&lt;/i&gt; guys didn&apos;t leave &lt;i&gt;all&lt;/i&gt; their Bitcoins on this machine...</text></comment>
<story><title>More than $215,000 stolen from Bitcoinica in Linode incident</title><url>https://bitcointalk.org/index.php?topic=66979.0</url><text></text></story><parent_chain></parent_chain><comment><author>joeyh</author><text>So they looked for connections to the IRC channel bitcoin uses to find linode IP&apos;s (or portscanned linode, but why bother when
every bitcoin daemon hangs out advertising its IP on IRC?).&lt;p&gt;And they stole from at least 3 systems. One had $5; one $15 thousand, and one had nearly a quarter $million. Which makes me curious why they bothered with the $5 account at all. It&apos;s like robbing a bank, and stopping to smash a gumball machine in the lobby on your way in or out.&lt;p&gt;My guess is that the attackers have a fully automated exploit payload that transfers the bitcoin out. And ran it on every system they could get on, indiscrimitely. So this is not a one-off. I&apos;d be very cautious about running the bitcoin daemon, at least without setting noirc=1 in its configuration.</text></comment>