<p>There lies the problem.  For a $100 a month, you can have a server administrator manage your Linode.  If his system gets compromised, you are now at risk for an attack.  In my case, I manage my entire server on my own.  I even went as far as setting up an SSH key for log in, so an attacker would have to get a hold of my system directly and find my ssh keys.  Considering I have all the latest antivirus software, firewall and common sense not to open up malicious email attachments, I should be fine.</p>

CC BY-SA 3.0
2015-03-14T21:13:53.597Z
2015-03-14T21:13:53.597Z
Justin N
<p>The "Linode problem" is storing Bitcoins on a managed device.  That managed device might be <a href="http://bitcoinmagazine.net/the-bitcoinica-linode-theft-and-what-it-means-for-bitcoin/" rel="nofollow noreferrer">server hosting</a> from Linode, for example, or a <a href="https://bitcointalk.org/index.php?topic=81045.msg910403#msg910403" rel="nofollow noreferrer">cloud server at RackSpace</a> for another example.  In both instances, by simply gaining root access using the service provider's systems, tens of thousands of bitcoins were stolen.</p>

<p>The incident in which the "Linode problem" term was coined, more than 46K BTC were stolen in a security breach at Linode, including 43K from Bitcoinica's wallet alone.</p>

<p>Linode hasn't disclosed the exact scenario but it is believed that an employee's system was compromised remotely and that system had access to a back door that allowed administrative access to every Linode host.  With administrative access. wallet.dat's are vulnerable.</p>

<ul>
<li><a href="http://arstechnica.com/business/2012/03/bitcoins-worth-228000-stolen-from-customers-of-hacked-webhost/" rel="nofollow noreferrer">http://arstechnica.com/business/2012/03/bitcoins-worth-228000-stolen-from-customers-of-hacked-webhost/</a></li>
<li><a href="http://bitcoinmagazine.net/the-bitcoinica-linode-theft-and-what-it-means-for-bitcoin/" rel="nofollow noreferrer">http://bitcoinmagazine.net/the-bitcoinica-linode-theft-and-what-it-means-for-bitcoin/</a></li>
</ul>

<p>There are all sorts of managed systems.  Most enterprise computing systems have administrative access for not only their systems in their data center but also for managing their employee's devices.  This might allow a thief, or rogue employee or contractor even to gain access to Bitcoins.</p>

<p>Even <a href="https://bitcoin.stackexchange.com/questions/3383">mobile devices could be totally vulnerable</a>.</p>

CC BY-SA 3.0
2012-05-11T00:39:09.813Z
2012-05-20T18:32:56.200Z
2017-04-13T12:47:33.660Z
Stephen Gornick
<p>What is the story behind the "Linode problem"? How did the service become compromised and what has exactly happened because of it?</p>

CC BY-SA 3.0
2015-01-24T17:06:32.650Z
Related: http://bitcoin.stackexchange.com/questions/3765/what-is-the-story-behind-bitcoinica
Nick ODell
<security><attack><history><linode><theft>
What is the story behind the "Linode problem"?
ThePiachu
# What is the story behind the "Linode problem"?

(Asked by: username_0 on 2012-05-10)

What is the story behind the "Linode problem"? How did the service become compromised and what has exactly happened because of it?

**Tags:** security, attack, history, linode, theft

> **Comments:**
> **username_1**: Related: http://bitcoin.stackexchange.com/questions/3765/what-is-the-story-behind-bitcoinica  

---

## 2 answers

### Answer by username_3 on 2012-05-11. Score: 8 | Accepted answer

The "Linode problem" is storing Bitcoins on a managed device. That managed device might be [server hosting](http://bitcoinmagazine.net/the-bitcoinica-linode-theft-and-what-it-means-for-bitcoin/) from Linode, for example, or a [cloud server at RackSpace](https://bitcointalk.org/index.php?topic=81045.msg910403#msg910403) for another example. In both instances, by simply gaining root access using the service provider's systems, tens of thousands of bitcoins were stolen.

The incident in which the "Linode problem" term was coined, more than 46K BTC were stolen in a security breach at Linode, including 43K from Bitcoinica's wallet alone.

Linode hasn't disclosed the exact scenario but it is believed that an employee's system was compromised remotely and that system had access to a back door that allowed administrative access to every Linode host. With administrative access. wallet.dat's are vulnerable.

* <http://arstechnica.com/business/2012/03/bitcoins-worth-228000-stolen-from-customers-of-hacked-webhost/>
* <http://bitcoinmagazine.net/the-bitcoinica-linode-theft-and-what-it-means-for-bitcoin/>

There are all sorts of managed systems. Most enterprise computing systems have administrative access for not only their systems in their data center but also for managing their employee's devices. This might allow a thief, or rogue employee or contractor even to gain access to Bitcoins.

Even [mobile devices could be totally vulnerable](https://bitcoin.stackexchange.com/questions/3383).


---

### Answer by username_2 on 2015-03-14. Score: 0

There lies the problem. For a $100 a month, you can have a server administrator manage your Linode. If his system gets compromised, you are now at risk for an attack. In my case, I manage my entire server on my own. I even went as far as setting up an SSH key for log in, so an attacker would have to get a hold of my system directly and find my ssh keys. Considering I have all the latest antivirus software, firewall and common sense not to open up malicious email attachments, I should be fine.


---

