How Do You Buy Bitcoins And Then Transfer Them??

Damn, I just realized I can use BTC to move cash between US and, er, non-US accounts. I hope I can control myself. This is dangerous knowledge this close to the end of the year.
 
I haven't been doing this that long, but I've only gotten the IP blocked error a couple of times.

It seems like it has gotten worse for me lately, I used to be able to just reload tor a few times and I was good, I tried for 5 minutes straight the other day, reloaded tor numerous times and I couldn't get the site to load.
 
Do you ever have trouble logging into blockchain wallet using tor browser? 9 times out of 10 I cannot log into it while on tor because it says that the IP is blocked. Sometimes I have to log in w/ out tor, which I don't like to do.

I haven't been doing this that long, but I've only gotten the IP blocked error a couple of times.

It seems like it has gotten worse for me lately, I used to be able to just reload tor a few times and I was good, I tried for 5 minutes straight the other day, reloaded tor numerous times and I couldn't get the site to load.

Blockchain has been known to block specific TOR exit nodes in the past. But they've previously denied attempting to block TOR completely.

It has been sporadic in the past; yet in the past few days it appears to be almost complete. Today, Blockchain has stopped allowing users to access their wallets via TOR due to a lot of wallet thefts; it advised users NOT to use TOR anymore for any Bitcoin website:

"A number of users have reported having their wallet stolen when connecting over TOR. We recommend you do not login to any bitcoin websites using tor."
 
"A number of users have reported having their wallet stolen when connecting over TOR. We recommend you do not login to any bitcoin websites using tor."

Also, Bitcoin over Tor isn't a good idea because of "man in the middle" (MITM) attacks. This still doesn't explain how anyone could steal Blockchain wallets since it is not supposed to compromise private keys.

according to a paper published by two researchers at the University of Luxembourg, Alex Biryukov and Ivan Pustogarov, it is possible to initiate a man-in-the-middle attack. An attacker can gain access to all of a bitcoin user’s transactions irrespective of the pseudonyms used; however, even this attack does not reveal a user’s private keys, it just negates the anonymity granted by using Tor.

Source: https://www.cryptocoinsnews.com/bitcoin-tor-may-good-idea/

Additional info: http://www.researchgate.net/publication/267272205_Bitcoin_over_Tor_isn't_a_good_idea

http://arxiv.org/abs/1410.6079
 
OK, no more Tor with Blockchain. I guess I will switch to VPN. Thanks Millard.
 
Blockchain has now improved security for Tor users. It has a new .onion address at blockchainbdgpzk.onion :

In response to recent attacks on Blockchain users by malicious Tor exit nodes, Blockchain has begun working with some of the world’s leading Tor Project researchers and security experts to improve security for users that choose to utilize Tor’s privacy enhancing software.

We are happy to announce our new .onion address – blockchainbdgpzk.onion.

Source: http://blog.blockchain.com/2014/12/03/improved-security-for-tor-users/

What was done to secure Blockchain.info Users with Tor and SSL:

Over the past couple of weeks there has been a marked increase in the number of man-in-the-middle (MITM) attacks against Tor users of web based Bitcoin wallet provider Blockchain.info. One user reported 63 bitcoin stolen, and there were many other examples as the thefts continued despite warnings to users. The attacks were so successful that Blockchain resorted to blocking all traffic to the wallet service from Tor exit nodes.

I’ve been working with Blockchain since Saturday to implement a number of security measures to better protect users. The main result of these efforts is that today we are announcing that Blockchain is now available as a hidden service on Tor with a signed SSL[1] certificate (provided by DigiCert) and HTTPS enforced across the site. The address is https://blockchainbdgpzk.onion/

...

Along with the hidden service and signed certificate, Blockchain has switched to HTTPS across the site and enforced secure connections on both the clearweb domain and the onion site with Strict Transport Security (HSTS) (which will be preloaded for the clearweb domain in all major browsers, and hopefully also for the onion domain), and will also implement dynamic public key pinning with Public Key Pinning (HPKP).

With an authenticated hidden service Blockchain users are able to access their Bitcoin wallets with the added anonymity of Tor while avoiding exit nodes. For users of the regular clearweb Blockchain service the addition of HSTS and HPKP provide additional guarantees against MITM attacks and rogue or stolen site certificates.

Source: https://www.nikcub.com/posts/securing-blockchain-users-with-tor-and-ssl/
 
I always use localbitcoin. It's a little bit steeper but It has never steered me wrong. Too bad I never got into mining. That was some good advice I just did not take...
 
TOR USERS CAN NOW CONNECT TO BLOCKCHAIN.INFO’S .ONION ADDRESS SECURELY WITH SSL

Updated: December 3, 2014 at 9:43 pm CET.

Blockchain.info today announced that they are the second website in the world to receive an SSL certificate for their .onion address. This is a huge win for privacy and Bitcoin enthusiasts around the world, and it answers growing concerns surrounding the security of using web wallets such as Blockchain.info while connected via the Tor network.

In the past, there have been several reports of Blockchain.info users losing their funds after using Blockchain.info through the Tor network. Rogue Tor exit nodes were being specifically used to execute man in the middle (MITM) attacks on users connecting to Blockchain.info through Tor. The common attack vector involved stripping the SSL from the website, which results in the user being on an http instead of an https page; however, this is an easily overlooked occurrence. The newest version of the Tor browser will display a yellow exclamation point if your browser is no longer displaying a valid SSL certificate, but many casual users of Tor that do not understand the known security flaws associated with rogue exit nodes have fallen victim to this exploit.

Last week, in response to the most recent wave of Blockchain.info via Tor robberies, Blockchain.info temporarily blocked all Tor exit nodes. The valid suspicion was that dedicated Bitcoinwebwallet hacking exit nodes had been created to systemically rob unwary Tor users blind. Blockchain.info has since started using HSTS as well as providing a dedicated Tor onion address to its Tor population.

Nik Cubrilovic, who helped Blockchain.info with the timely project, explained in his blogpost:

Over the past couple of weeks there has been a marked increase in the number of man-in-the-middle (MITM) attacks against Tor users of web based Bitcoin wallet provider Blockchain.info. One user reported63 bitcoin stolen, and there weremany other examples as the thefts continued despite warnings to users. The attacks were so successful that Blockchain resorted to blocking all traffic to the wallet service from Tor exit nodes.

I’ve been working with Blockchain since Saturday to implement a number of security measures to better protect users. The main result of these efforts is that today we are announcing that Blockchain is now available as a hidden service on Tor with a signed SSL[1] certificate (provided by DigiCert) and HTTPS enforced across the site. The address ishttps://blockchainbdgpzk.onion/.

Blockchain are now only the second site to offer an alternate service on the Tor network with a signed certificate after Facebook announced their ownhidden service last month.

Cubrilovic goes into much more detail in his post, which is a recommended read.

Also read: Blockchain.info Announces Growth, the Future, and New Partners

Blockchain.info Joins Facebook With Secured .onion Address

Blockchain.info has now joinedFacebook as one of the largest Clear Web service providers that maintain a dedicated presence on the Dark Net. Back in October, Facebook announced that it had created a .onion address specifically for Tor users. What’s more, Tor users that connect to the Facebook .onion address end up with end-to-end encryption to a server in Facebook’s data center directly via SSL. This is where the SSL certificate and DigiCert come in; Facebook’s Tor front door was the first .onion address to receive a legit SSL certificate. The SSL certificate lets users know, with confidence, that they are connecting with the service, be it Facebook or Blockchain.info, that they actually want to connect to. The choice to use Tor is a natural one for some: Those that live under oppressive regimes may soon find themselves using both Blockchain.info’s and Facebook’s .onion addresses just to stay connected and safe.
 
I use circle its simplest as shit debit setup takes minutes bank account 3-5 business days . Circle automatically converts amount to Bitcoin that way if the value drops which it does often you can get transactions done quicker . Buying coins from local person are whatever that person wants to charge . But crypto is the safest simplest method tk donate
 
Not sure on this, hopefully PI can chime in. Although I have a question for you. Do you ever have trouble logging into blockchain wallet using tor browser? 9 times out of 10 I cannot log into it while on tor because it says that the IP is blocked. Sometimes I have to log in w/ out tor, which I don't like to do.
It is possible that the site has blocked the ip address for some reason.
 
I always prefer buying from a local (physical also) source instead of over internet, even if it's a lil more expensive sometimes and often unavailable I rather wait as long as needed unless in a rush. Also there is the perk of receiving exactly when you need exactly how much you need while otherwise you often have to wait for upload and as coin price fluctuates a lot lately chances are you will be gambling. Not easy finding a source for physical handling of course...
 
It is possible that the site has blocked the ip address for some reason.

Yea, I believe Millard put up a thread about how there was potential security problems logging into blockchain w/ tor browser so block chain blocked the ip's. They have since then added a new .onion address for using tor browser. I just started to use a VPN instead of tor when I wanted to get into blockchain.
 
Back
Top