So, this is the second time this has happened to me but today, one of my many blockchain.info wallets was hacked.
Now, this wallet was NOT mine, it was a shared wallet with a long time partner of mine who had majority of his BTC in it as well as a small portion of my own.
MY wallet had:
-- 2auth
-- Secondary Password
-- IP logging (in case of suspicious activity)
-- a 13char password including caps, numbers and special characters
My wallet was prepared for this sort of attack, as this has happened to me with a 20BTC amount in June 2013 when the value was a little lower.
On the other hand his wallet had:
-- 2auth
-- NO secondary pass
-- NO IP logging
-- A weak-ish password
For the record, my WALLET WAS NOT compromised but I am here to let you know that 2auth accounts CAN be compromised!! Our Private Keys were NOT public, nor were they ever shared on an opensource/logged chat room. All were encrypted via PGP messages so it would not have been a security leak.
Blockchain Hackers have been around for ages and surprisingly blockchain has done jack shit about it...This is just to let you know that even small wallets with .1BTC can be hacked.
We lost 3BTC in this hack, I won't reveal the address due to my own security but it's a considerable loss. I hope you ALL keep your wallets safe with not only 2auth but EXTREMELY strong passwords and secondary passwords. NEVER hint your password to anyone. Blockchain.info is easily bruteforce-able, so if you have a weak-ish password, UPDATE it to a 10+char (the more the better) password IMMEDIATELY, or simply get rid of the risk and use an online wallet.
Why did I use blockchain instead of offline wallets like I CONSTANTLY endorse on this board? Convenience. I only ever use it for convenience, and today, the cost of convenience was not what I planned on paying vs' using an offline wallet.
Stay Safe
-Regular Guy
Now, this wallet was NOT mine, it was a shared wallet with a long time partner of mine who had majority of his BTC in it as well as a small portion of my own.
MY wallet had:
-- 2auth
-- Secondary Password
-- IP logging (in case of suspicious activity)
-- a 13char password including caps, numbers and special characters
My wallet was prepared for this sort of attack, as this has happened to me with a 20BTC amount in June 2013 when the value was a little lower.
On the other hand his wallet had:
-- 2auth
-- NO secondary pass
-- NO IP logging
-- A weak-ish password
For the record, my WALLET WAS NOT compromised but I am here to let you know that 2auth accounts CAN be compromised!! Our Private Keys were NOT public, nor were they ever shared on an opensource/logged chat room. All were encrypted via PGP messages so it would not have been a security leak.
Blockchain Hackers have been around for ages and surprisingly blockchain has done jack shit about it...This is just to let you know that even small wallets with .1BTC can be hacked.
We lost 3BTC in this hack, I won't reveal the address due to my own security but it's a considerable loss. I hope you ALL keep your wallets safe with not only 2auth but EXTREMELY strong passwords and secondary passwords. NEVER hint your password to anyone. Blockchain.info is easily bruteforce-able, so if you have a weak-ish password, UPDATE it to a 10+char (the more the better) password IMMEDIATELY, or simply get rid of the risk and use an online wallet.
Why did I use blockchain instead of offline wallets like I CONSTANTLY endorse on this board? Convenience. I only ever use it for convenience, and today, the cost of convenience was not what I planned on paying vs' using an offline wallet.
Stay Safe
-Regular Guy
