Coinbase 誤向12.5萬名客戶發佈2FA 更改信息，引發用戶恐慌和拋售

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"8月27日，加密貨幣交易所Coinbase誤向其12.5萬名客戶發送了電子郵件，稱其雙因素認證（2FA）設置已被更改，導致了大批用戶恐慌。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"雙因素認證是一種採用時間同步技術的系統，採用了基於時間、事件和密鑰三變量而產生的一次性密碼來代替傳統的靜態密碼。每個動態密碼卡都有一個唯一的密鑰，該密鑰同時存放在服務器端，每次認證時動態密碼卡與服務器分別根據同樣的密鑰、同樣的隨機參數（時間、事件）和同樣的算法計算認證的動態密碼確保密碼的一致性，從而實現用戶認證。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"據"},{"type":"link","attrs":{"href":"https:\/\/twitter.com\/coinbase\/status\/1431729517475758083","title":null,"type":null},"content":[{"type":"text","text":"Coinbase"}]},{"type":"text","text":"表示，其系統在太平洋時間週五下午 1 點 45 分開始發送錯誤消息，並一直髮送，直到下午 3 點 07 分錯誤得到緩解。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"8月29日，Coinbase在Twitter上爲這次失誤道歉，但許多用戶報告說，在擔心賬戶被黑客攻擊的同時，採取了重大措施來應對此事，包括徹底修改安全設置以及清算加密貨幣持有量。53 歲的退休警官唐·皮特爾 (Don Pirtle) 在採訪中表示，這個錯誤使他恐慌性地拋售了超過 60,000 美元的加密貨幣。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Coinbase 發言人安德魯·施密特( Andrew Schmitt)在接受"},{"type":"link","attrs":{"href":"https:\/\/www.cnbc.com\/2021\/08\/30\/coinbase-sent-erroneous-account-security-notifications-to-125000-customers.html","title":null,"type":null},"content":[{"type":"text","text":"CNBC"}]},{"type":"text","text":"採訪時表示，“系統突然間開始發送錯誤的信息，但這不是惡意或第三方錯誤。”事情發生後，Coinbase 隨即發送了第二封電子郵件，稱該通知“發送錯誤”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"該交易所社交媒體上的評論也表明，許多客戶在事件發生後的幾天內無法訪問Coinbase應用程序。對此，Coinbase宣佈，將向用戶償還價值100美元的比特幣。但目前而言，客戶反應不一。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Bitfloor、Mt. Gox、Bitfinex、CoinCheck、QuadrigaCX等很多加密貨幣交易所都曾遭受過攻擊。Coinbase 在對被黑客攻擊客戶的反應方面也被已久。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"大多數大型金融機構都有網絡欺詐保險單，其中包括被黑客入侵的支票或儲蓄賬戶。Bankrate.com 金融分析師 Greg McBride 表示：“如果非自己過失成爲網絡盜竊的受害者，多數大型銀行都會保證用戶賬戶金額完整。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"但Coinbase 的情況並非如此。Coinbase 最近在回覆被黑用戶時表示，“沒有可靠或可支持的證據表明您登錄憑據的泄露是 Coinbase 的錯。因此，Coinbase 無法補償您要求的損失。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"此外，Coinbase 還多次被指責對客戶問題反應極其緩慢。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"據Coinbase表示，其在 100 多個國家擁有超過 6800 萬用戶。但大約從2016 年開始，Coinbase 逐步淘汰"},{"type":"link","attrs":{"href":"https:\/\/www.cnbc.com\/2021\/08\/24\/coinbase-slammed-for-terrible-customer-service-after-hackers-drain-user-accounts.html","title":null,"type":null},"content":[{"type":"text","text":"實時聊天"}]},{"type":"text","text":"，並啓動了一個常見問題答案庫，以實現客戶服務的自動化。但自動化客服並沒有提高服務效率，因爲回覆電子郵件花費的時間比實時聊天要長很多。"}]}]}