Bitcoinica MtGox account compromised

Bitcoinica MtGox account compromised

We regret to inform you that there has been another huge breach of Bitcoinica. While all passwords were changed after the theft which occurred May 11th, the password for LastPass was not compromised and thus left unchanged. The breach today occured because the password for LastPass was in fact a duplicate password which had been compromised during the hack. Unbeknownst to us, Tihan was using the mtgox api key as the password for a website called LastPass. LastPass contains all your passwords. The username was [email protected] . After the initial compromise, the sourcecode would have been tainted. But the password for LastPass was not changed. The operators of Bitcoinica probably did not think to change it because they may have assumed that the LastPass password was not the same password as the MtGox API key. Such a flaw is a huge security breach. The original hacker cou...

Full article: https://bitcointalk.org/index.php?topic=93074