BIPS被攻击导致价值百万美元比特币失窃

2013年11月26日 11:58
来源：新华网

人参与条评论

新华网11月26日电据美国科技博客Gizmodo报道，一个网络犯罪团伙入侵了欧洲主要比特币支付服务BIPS并盗窃了1295个比特币，以当前汇率换算，这些比特币价值近100万美元。

这些比特币并不属于BIPS，而是属于其客户。据比特币论坛上的贴文显示，一名客户在11月15日到17日的DDoS攻击中丢失了价值7.3万美元的比特币，这笔钱在很多地方都能买房了。

在攻击前，BIPS首席执行官克里斯·亨利克森对他的服务显得也不是很有信心。“我们不会免受攻击，如果你在第三方存储了大量比特币，你最好尽快找到其他存储方式，”他对客户说。“网络钱包就像你每天带在身上的普通钱包一样，你不应该在里面放很多钱。”

一名客户在回帖中说，亨利克森的公司曾经承诺他们的服务是安全的：“事实上，你的网站写道："你的数据在BIPS上是安全的"。所以，我当时觉得把比特币存在这里是很安全的。”

这里的教训很简单：不要把比特币存在网上—特别是现在汇率正在飙升（以后可能暴跌）。即便想BIPS这样的网站说他们有多安全，事实越来越清楚地证明这种加密货币是黑客们盗窃的最佳目标。而且这种事总在发生。事实上，就在这次攻击前一个星期，针对比特币钱包inputs.io的攻击导致价值120万美元比特币失窃。《连线》杂志的头条新闻说到：“120万美元盗窃行为证明你永远不应该把比特币存在网上。”

如果你打算把自己一辈子的血汗钱都换成比特币存款（不考虑波动性和安全性），你最好把这些神奇的代码存在一台不上网的电脑上。甚至还可以打印在纸上，木头做的纸。

译者：林杉

百度新闻与新华网国际频道合作稿件，转载请注明出处。

$1 Million Heist Reminds Us That Bitcoin Is Neither Safe nor Secure

Let"s play a little game called Good Idea/Bad Idea. Round One: Saving money. That"s a good idea! Round two: Saving thousands of dollars in a Bitcoin wallet that"s highly susceptible to hackers and heists. As the customers of Bitcoin payment processor BIPS will tell you, that"s a bad idea.

A bunch of cybercriminals just broke into BIPS and stole 1,295 Bitcoin. At the present exchange rate that"s about $1 million. These Bitcoin didn"t belong to BIPS, either, but rather to many of its 20,000 customers. According to postings in a Bitcoin forum, one customer lost about $73,000 worth of the cryptocurrency in the series of Distributed Denial of Service (DDoS) attacks that took place between November 15 and 17. You can buy a house for that amount of money in many parts of the country.

After the breach, BIPS chief executive Kris Henrickson didn"t exactly instill confidence in his service. "Attacks are not isolated to us, and if you are storing larger amounts of coins with any third party, you may want to find alternative storage solutions as soon as possible," he told his customers. "Web Wallets are like a regular wallet that you carry cash in and not meant to keep large amounts in." One customer pointed out in a reply that Henrickson"s company did, in fact, claim to be secure: "In fact, your website said: "Your data is secure at BIPS." So yeah, I felt pretty goddamn secure leaving my BTC balance there."

There"s an easy lesson to learn here: Don"t store your Bitcoin on the internet—especially as the exchange rate continues to skyrocket (and subsequently crash). As much as companies like BIPS might talk up their security, it"s become glaringly obvious that the cryptocurrency is an easy and much sought-after target for hackers. These kinds of breaches happen all the time. In fact, just a week before the BIPS hack, an attack on the Bitcoin wallet company inputs.io led to $1.2 million in stolen Bitcoin. Wired went with the headline: "$1.2M Hack Shows Why You Should Never Store Bitcoins on the Internet."

If you do decide to put your life savings in Bitcoin—despite its volatility and lack of security—the best thing you can do is store those magical codes on a computer that"s not connected to the internet. Or, even better, print them out on paper, the kind made from trees. [Mashable]