Quote from: r0d3r1ck on January 06, 2015, 04:09:52 PM

Quote from: aztecminer on January 06, 2015, 03:32:57 PM

m

from the sound of what the ceo said that they are moving the bitstamp environment to a more secure server location means that the physical servers were not so secured.
where do they keep their physical servers ?? in their moms basement ?? seems like bitstamp should at least be PCI compliant which means their servers need to be physically secured.
when they do an 'audit' then they need to do a security audit. if their stuff is not secure then they should not be in the business. hiring the engineer is expensive but cheaper than losing 5M a year.
from what i have read it sounds like someone walked in to their datacenter (or moms basement) and stuck a flash drive into the server and walked away with the wallet.dat file.
i not saying that is what happened but gathering what the ceo said and what i have read it sounds like maybe that what happened. whatever the case is they did not have sufficient security.

and what to do if the engineer or auditor cannot resist £5m?

if someone walked into their datacenter and used a flashdrive, then they are probably in a police cell as we speak. unfortunately the law in the uk takes a long time, which doesn't bode well for a quick resolution.

well that is why we only have one engineer and we keep everything in house rather than in someone elses "cloud" .
if you have your stuff in someone elses 'cloud' then you have a security weakness right there.
if you have a 5M file then that datacenter should have guards behind plexi glass, metal detectors, revolving doors, badge swipes, and video surveillance.
if your running a fly by night operation then you got your stuff in moms basement or in someone's cloud who promised your stuff was secure.
if these guys had their physical servers secured then no one could walk in and insert a flash drive and take their stuff.
of course if your security is too good then nothing could happen to the bitcoins. i mean its not their fault they were hacked right ??