BIPS被攻擊導(dǎo)致價(jià)值百萬(wàn)美元比特幣失竊

2013年11月26日 11:58
來源：新華網(wǎng)

人參與條評(píng)論

新華網(wǎng)11月26日電 據(jù)美國(guó)科技博客Gizmodo報(bào)道，一個(gè)網(wǎng)絡(luò)犯罪團(tuán)伙入侵了歐洲主要比特幣支付服務(wù)BIPS并盜竊了1295個(gè)比特幣，以當(dāng)前匯率換算，這些比特幣價(jià)值近100萬(wàn)美元。

這些比特幣并不屬于BIPS，而是屬于其客戶。據(jù)比特幣論壇上的貼文顯示，一名客戶在11月15日到17日的DDoS攻擊中丟失了價(jià)值7.3萬(wàn)美元的比特幣，這筆錢在很多地方都能買房了。

在攻擊前，BIPS首席執(zhí)行官克里斯·亨利克森對(duì)他的服務(wù)顯得也不是很有信心。“我們不會(huì)免受攻擊，如果你在第三方存儲(chǔ)了大量比特幣，你最好盡快找到其他存儲(chǔ)方式，”他對(duì)客戶說?！熬W(wǎng)絡(luò)錢包就像你每天帶在身上的普通錢包一樣，你不應(yīng)該在里面放很多錢。”

一名客戶在回帖中說，亨利克森的公司曾經(jīng)承諾他們的服務(wù)是安全的：“事實(shí)上，你的網(wǎng)站寫道："你的數(shù)據(jù)在BIPS上是安全的"。所以，我當(dāng)時(shí)覺得把比特幣存在這里是很安全的?！?/p>

這里的教訓(xùn)很簡(jiǎn)單：不要把比特幣存在網(wǎng)上—特別是現(xiàn)在匯率正在飆升（以后可能暴跌）。即便想BIPS這樣的網(wǎng)站說他們有多安全，事實(shí)越來越清楚地證明這種加密貨幣是黑客們盜竊的最佳目標(biāo)。而且這種事總在發(fā)生。事實(shí)上，就在這次攻擊前一個(gè)星期，針對(duì)比特幣錢包inputs.io的攻擊導(dǎo)致價(jià)值120萬(wàn)美元比特幣失竊?！哆B線》雜志的頭條新聞?wù)f到：“120萬(wàn)美元盜竊行為證明你永遠(yuǎn)不應(yīng)該把比特幣存在網(wǎng)上?！?/p>

如果你打算把自己一輩子的血汗錢都換成比特幣存款（不考慮波動(dòng)性和安全性），你最好把這些神奇的代碼存在一臺(tái)不上網(wǎng)的電腦上。甚至還可以打印在紙上，木頭做的紙。

譯者：林杉

百度新聞與新華網(wǎng)國(guó)際頻道合作稿件，轉(zhuǎn)載請(qǐng)注明出處。

$1 Million Heist Reminds Us That Bitcoin Is Neither Safe nor Secure

Let"s play a little game called Good Idea/Bad Idea. Round One: Saving money. That"s a good idea! Round two: Saving thousands of dollars in a Bitcoin wallet that"s highly susceptible to hackers and heists. As the customers of Bitcoin payment processor BIPS will tell you, that"s a bad idea.

A bunch of cybercriminals just broke into BIPS and stole 1,295 Bitcoin. At the present exchange rate that"s about $1 million. These Bitcoin didn"t belong to BIPS, either, but rather to many of its 20,000 customers. According to postings in a Bitcoin forum, one customer lost about $73,000 worth of the cryptocurrency in the series of Distributed Denial of Service (DDoS) attacks that took place between November 15 and 17. You can buy a house for that amount of money in many parts of the country.

After the breach, BIPS chief executive Kris Henrickson didn"t exactly instill confidence in his service. "Attacks are not isolated to us, and if you are storing larger amounts of coins with any third party, you may want to find alternative storage solutions as soon as possible," he told his customers. "Web Wallets are like a regular wallet that you carry cash in and not meant to keep large amounts in." One customer pointed out in a reply that Henrickson"s company did, in fact, claim to be secure: "In fact, your website said: "Your data is secure at BIPS." So yeah, I felt pretty goddamn secure leaving my BTC balance there."

There"s an easy lesson to learn here: Don"t store your Bitcoin on the internet—especially as the exchange rate continues to skyrocket (and subsequently crash). As much as companies like BIPS might talk up their security, it"s become glaringly obvious that the cryptocurrency is an easy and much sought-after target for hackers. These kinds of breaches happen all the time. In fact, just a week before the BIPS hack, an attack on the Bitcoin wallet company inputs.io led to $1.2 million in stolen Bitcoin. Wired went with the headline: "$1.2M Hack Shows Why You Should Never Store Bitcoins on the Internet."

If you do decide to put your life savings in Bitcoin—despite its volatility and lack of security—the best thing you can do is store those magical codes on a computer that"s not connected to the internet. Or, even better, print them out on paper, the kind made from trees. [Mashable]

打印轉(zhuǎn)發(fā)