@CCCMike

Not saying anything bad about the YubiKey, it's a great little device.

A web translator will not misspell words or speak in American slang. I am not a native English speaker, I am Chinese. I know "real" broken English when I see it. This is as fake as when as native English speaker tries to talk in broken English.

I doubt seriously that this guy's account was hacked at all.

The whole thing was to drum up sympathy for Mt.Gox by accusing them of a security breach with zero evidence, expose it as user error and fix it with YubiKey.

Honestly you can't blame them for thinking Bitcoin users are stupid. Rip them off, claim a hack and they come back for more!

Hi, I checked the account history quickly, and saw the hack had nothing to do with your account email. The attacker used the reset password function and got the right reset key right after, which he used to change your password. Therefore here are my questions for you:

• Was your email password strong too?
• Are you sure you NEVER logged into your email from any other place than your home, on a safe computer (ie. never used that email from a mobile device, for example)

perhaps it should not be so easy to reset a password on mtgox then?
perhaps it should be more painful for those who forget their passwords and have to wait
for a call from a mtgox employee who will then quiz them about details of their account?

J, Aug-05 02:51 (JST):
my account has been hagget, my code did not work more because I wanted to go today, so may have sent an email with a new code .... HEVEDERES what happens to your ridiculous shitty site ...

119 bitcoin stolen and
300 USD.

what the hell is this bullshit.

send to this address:
Thu 28 Jul 2011 04:56:57 PM GMT   withdraw   Bitcoin withdraw to 1LxTV74oksinziDR3fgvvLUf6jdsnwSUiP   100.00000000 ฿TC

Thu 28 Jul 2011 05:15:42 PM GMT   withdraw   Generate redeem code: MTGOX-USD-4K7SA-UYVH8-UH85P-50E3D   $305.49932

Accound balance$0.00000
Accound balance BTC 0.00000

it also seems that there have been several sales and purchases in the last few days where I have not been inside ... it can not be true ... I expect all my money and bitcoins is back on my account.

Otherwise, the refund all my $ 4000 which I have added to your shitty site and lost because of your incompetent security.

_______________________________________________________________________________ __________________________________

Jasmine, Aug-05 10:39 (JST):
Hello,

I apologize about your recent theft. We do not have the ability to "reverse" any transfers. The IP addresses of both transactions are 115.133.198.86 and 64.120.79.136. At this point, I strongly advise you to change your password to a more secure one; using at least one upper case, number, and special character will prevent anyone and any computers from guessing your password. Also, please change the password to any connecting email addresses.

I also strongly encourage you to obtain a Yubikey, which we can offer it to you for free. Unfortunately, that is the only thing we can do for your situation. You may file a police report, which we can try our best to cooperate with the investigation.

I apologize for any inconvenience this has caused.

Thanks,

MtGox.com Team

The IP addresses of both transactions are 115.133.198.86 and 64.120.79.136.
MY IP Adress i 192.168.2.103

I strongly advise you to change your password to a more secure one, using at least one upper case, number, and special character will prevent anyone and any computers from guessing your password.
Me password was (have been changed) J08-uU33-1604-82-xXx

So basically, the attacker gained control of his email account, reset the MtGox password, then stole the coins.

I see this as a definite possibility, especially if his email password wasn't very strong.  As soon as that MtGox list got out, his email address was out there too.  Someone may have brute-forced (or otherwise extracted) his email address password.

Isn't it true that IMAP email/passwords are sent in plaintext unless a secure connection is specified?  Maybe someone was sniffing his data when he connected to his mailserver, and retrieved his account password that way...

J., do you have a "Reset password" email from MtGox in your inbox or deleted mail folder?  It was probably fully deleted, but you never know... not that it would really solve anything, it would just give confirmation to MagicalTux's investigation.