Bitcoin Forum

http://pastecoin.com

Genjix, Please refrain from making my customer wait for a confirmation.

I wouldn't mind the confirmation so much if it was made obvious that I would have to wait.

On Kiba's file, it said: "send at least 0.102 coins to <address>"

So I went to my bitcoind and did sendtoaddress <address> 0.102

Everything seemed fine and I kept refreshing but it still wouldn't let me download the file. Then I remembered that bitcoin still only works in cents so I had to send another .01 and then wait for a confirmation before I was able to download the file. It was pretty confusing - maybe you should round up to the nearest .01 so that I can actually send the amount you require, since bitcoind didn't inform me that it only sent 0.10 when I tried to send 0.102.

And please take your share out of the price posted by the uploader, rather than adding it on.

If the uploader prices something at BTC 0.1, that's what it should cost, not BTC 0.102.

How is that possible? The site has to confirm the payments were received first before it's possible to download the file.

Your other suggestions were all good, and I've updated the site now. A file for 2 BTC costs 2 BTC. The uploader receives 1.96 BTC.

It said that it was taking a share before but I had that line commented out. ;D

I'm lurking #pokerface when not on #bitcoin-dev so let me know of anything else if I don't respond here.

This was just a weekend project. We're working on something else:
http://forumserver.twoplustwo.com/28/internet-poker/rake-free-open-poker-room-run-poker-community-938389/
Come to our meeting tomorrow 2200 GMT on #pokerface ... good to share ideas.

cya

Accept bitcoins when it's 0/confirmation, not 1/confirmation. This is what ubitio.us and I think bencoder did too.

It's an acceptable risk for what is...0.10 BTC at the time of this post.

I'm a long time reader of 2+2. I see a lot of people 'seeing the light' about bitcoins in that thread. Best of luck to you.

So, new owner of pastecoin...

Will you be implementing 0/confirmation downloads?

I'm definitely open to new ideas like this.

bitcoin really needs a transaction processor that works to detect double-spends, sampling all over the network.

How would this detection work?

Is the target to be able to function comparably to payment card authorization, which averages 2 to 3 seconds?

Would this be a separate service, or something built into the client?

If bitcoin is to compete with credit cards it has to be a lot faster than it is now. Waiting 10-30 minutes is out of the question for any payment processor.

The answer is simple imo. Trust 0/unc for small amounts unless it becomes a problem, keep credit on account if that doesn't work. For large amounts you have plenty of time, those fancy dildos don't need to ship until morning.

haha that is a good point

Jgarizk: Progress report?

Let the uploader choose how many confirmations they want to require. Some might be satisfied with zero; some might want as many as ten. Probably most should choose 0 or 1.

If an uploader is satisfied with zero confirmations, does that mean I can send the coins to the site, send the coins somewhere else at the same time, and have a chance of getting the file for free depending on which transaction ends up in the block chain?

In theory, yes. In practice, the effort required probably exceeds the price of the file. More expensive files should require more confirmations.

Is the new owner doing anything with it?

Yes, but it is Christmas holidays right now.

pastecoin got hacked, before I had a chance to review any of the code.

The Apache web server has been shut down until this is fixed.

fabianhjr PM me on IRC, but he is confused as to who is actually the owner of pastecoin.

But he left before I have the chance to inform him that genjix is not the owner of pastecoin.

Good to know you are taking action. :) Now I am sure who is the owner. As a matter of fact I realized this had some time now. The API showed me that many other people had uploaded some PHP files since ID 15 think. "BoBeR182" takes responsibility of the "hacking". :/ Damn kids.

EDIT: Oh, he is a member in this forum. xD bober812, can you explain?

Hey, if he found a security flaw and used it for fun and profit then more power to him!

Someone has to find the security holes so that we can patch them ;) And so the software gets better.

I will when the site gets back online. Already found 2 bugs. :-)
I am sure I will find any remaining ones.

Um i found an exploit a while ago I was temped to share it and get it patched but didn't know if i was gonna make any money.
So instead a used it to view kibas art for free and other files I did not deface or stop the server from working. After the trade of ownership someone else found the same exploit using g00nshell under the name of c.php I deleted it and secured the site on that part. Since then i have only used it to creep on kibas art without paying and actually keep the site safe.

Oh, ok. Thanks for that, you did alarm me when I was poking around. Why didn't you notify the admin?

Read ^^^.

Notifying the owner of the security flaw is the most ethical choice, and yet you hesitate just because you want to look at my artwork for free. You refuse to pay an equivalent of 3 cents(.10 BTC * .25) each time. You didn't even make me famous.

What kinda of person are you, bober182?

But anyway, disclosure of a security hole is most ethical thing you can do. Assessing my artwork where you aren't allowed on server is a minor ethic violation, probably.

bober didn't do anything wrong. If anyone should get the blame, then it's me for selling a faulty service.

It was not the most ethical thing I agree but i could have defaced the server, stolen money, or leaked your artwork.

All of 2 BTC. Don't spend it all at once.

Hey, the big companies should learn from you. :-) You are a great service provider and I am very proud of using your/jgarzik service.

jgarzik: is this site dead?

Patience.  The store is closed for the holidays.

He is basically on holidays and won't address the issues until January. Then he fix the holes and it gets back online. :)

BTW, are you going to open source the code? I took a pick look and it is really well coded.(Though, I am sure I can improve it a bit)

O_O no it's not. Inside is very messy. :)

The code was originally free, but jgarzik asked me to close the repo when I transferred it over.

Could you give me the old code? :P Also, I am a newb so it is really well coded from my point of view. I generally just put everything in 1 file and no functions xD

No. It was unlicensed, and belongs to jgarzik now. His decision whether to release it or not. I'd hope he would.

Oh, ok then./me crosses fingers.

so what is the matter with pastecoin?


it's been a while now.

It died, the admin never went around fixing the security issues and left it close.

I once tried to buy and he simply said he had plans and asked me a bit more than I was willing to offer.

What is this website?