There is too much garbage in the Play Store (the store for android devices), one could find blatant scams there and the moderators of Google do not seem to care enough.
You need to report the apps if you want them to check whether it is a scams or not. Google seems to use a bot with a preset that allows malwares to get listed as long as it passes some surface-level check. That being said, I'd also be cautious even if you use another app store like FDroid as long as the developer does not provide a way to check whether the apk is legit or not. I know how to check the integrity and encrypted certification of a website, not an application. So for now, it would be better to stick to the mobile web version of the most popular ones, like Stake.
It is not that difficult as far as I'm aware. Sometimes a developer provides an MD5/or other forms of a hash of the apk so you can verify it. Other times they provide the code so you can build it yourself. Just in case everyone is not yet aware, don't get fooled by SSL certificates. Some fake websites can use free SSL encryption to trick users. Make sure to double-check the address regardless if it uses SSL or not just in case you get phished. CMIIW. And there are about 93 countries where online gambling is not prohibited. So I don't think it will be a loss deal if any casino make their android application and publishes it on the google play store as their application can be used in 93 countries, which will be a huge number of users.
It's definitely not a loss, as long as the cost is justified. Some businesses probably only have one or two countries as their customer base, so it is also understandable if they don't think an app is necessary when the website is good enough. |
|
|
|
If you take a look at the reddit thread that OmegaStarScream posted, you have two people there confirming the mouse was the culprit for the issues. There are surely others and probably cases that don't get made public. Sounds like it affects many different kinds of mouses. On that thread, both wireless and wired mouse are mentioned (I assume it's from a different brand too). If this is true maybe the issue lies in the Trezor suite itself. I never see any complaints about it on my local board, so it is news for me too. There is something else I just remembered about this particular mouse. One of my laptops won't start if it's connected to a USB plug during booting. The picture doesn't appear on the screen and the fans act up. When I unplug it, everything calms down and the laptop boots up after a few seconds. Interestingly, this only affects that particular computer. I have a few other devices I use for different task and the mouse doesn't affect them at all.
My PC also has this kind of weirdness. Sometimes it won't boot up if I plug in a USB device on one of its USB slots, but after it boots up I can plug and play on that particular slot just fine. On rare occasions, it just decided to stop booting up unless disconnect my power first. Tried to see if anyone has the same issue on that motherboard but it seems that it only affects a minority of us. Hard to figure out what the issue is if it's hard to control the test environment, especially when it is never consistent. My gut feeling tells me that your mouse is probably fine, it's your laptop that is unique. CMIIW. |
|
|
|
The problem is solved yesterday with a change <server automatically> selected & downloaded the new file. The second problem of connectivity was solved by the restart total system.
Can you clarify which second connectivity issue are you referring to? In my case, I do have some occasional network issues with my Mac if I connect it to a dock, but this applies to the device itself and is not exclusive to Electrum. I find that with 12.2.1 my network is quite stable, so in my case, it is probably a dock incompatibility issue with the latest mac. |
|
|
|
From the way you post it, it sounds like this stablecoin project will be a major one, and they will use it for any transaction that happens in their country. Using a public blockchain, run by who knows who across the world, has no guarantee that they monitor it for malicious purposes or not, that probably has some bugs like the latest address poisoning attack, is very risky IMO. Unless they don't plan on having any control over the node/network, which I highly doubt is the case here. CMIIW. Solana claimed that it can make 50k per second. No other project so far claimed to be higher than this. But when it comes to security, Solana had so much downtime in the past and so is ETH congestion. That's to be solved first and the ETH layer2 solutions can provide better TPS such as Polygon.
There are also Harmony, and others altcoin project who promises high TPS but sacrifice some security. OP's friend can probably fork and modify it. Just make sure that some of these projects are also a fork of another (mainly ETH), and it might share some bugs because of that. Btw, since CBDC[1] is a trend now, maybe you can suggest your government ask for some feedback on how others do it, whether they want a shared blockchain or not, etc. [1] https://www.investopedia.com/terms/c/central-bank-digital-currency-cbdc.asp |
|
|
|
Their facial verification measure is just useless and pointless. I don't think it has anything to do with "suspicious activity". I think it's aimed at making someone give up withdrawing all their funds and keep them in their exchange.
Does this mean you did a face verification before, but this shows up again when you tried to withdraw your DOGE? That's really bad. I wouldn't be surprised if one of the programmers messed up and make the trigger for extra verification become stricter or something similar and then was too ashamed to admit it. Be careful if you're looking for another CEX. So many of them require personal data and keep requesting you resubmit every few months or so. Some even ask you to submit a passport and claim your national ID is expired even if the government stated it is valid forever. I believe collecting user data is probably necessary for them so they can 'share' it and earn extra income. It's unfortunate that there is still no great platform for altcoin trading that doesn't rely on a centralized party (by great, I mean with great liquidity, fast order, etc). |
|
|
|
Right now, it's too late to mine bitcoin.
Other than the cheap electricity mentioned above, you can also wait until the difficulty becomes much lower if you really want to mine and make a profit out of it. The bad news is, nobody knows just how much lower it will go, or if it will ever be at all. I've seen some news talking about miners selling all of their BTC just to keep mining, but it's hard to know how much is the truth on that report since we don't see any change in difficulty yet. Which graphic card would give good results with gpu mining ?
There are many tools that you can use to check them out. I suggest visiting the altcoin board for more details. For example, whattomine is a website that you can use to see which coin is mineable and how much profit you can earn daily if you use GPU A or B. While the cost is arguably lower, if you want to make a profit quickly, maybe you should look for other alternatives. CMIIW. |
|
|
|
It's why I like wallets like electrum, which let you add some personal notes like the name of the address you are sending funds to in the "Description field"
The address book/contact feature is really helpful. Sadly not every wallet has it, and not everyone uses it either. I don't know why but I found some users still copy-paste addresses from their transaction history or blockchain explorer. I don't think it's convenient at all unless their wallet is really terrible and has no built-in feature for copying addresses. CMIIW. Also, the so-called blockchains are really fucked up and half-baked. How they have worked on the solution since the bug was discovered is still beyond my understanding. The wallet or blockchain explorer could have a button to hide all 0-value transactions. That would get rid of this scam from popping up in front of your eyes. Blockchain explorers already tag these schemes as scams and malicious attempts. At least on Tron they do. Does that mean they don't plan on solving the 'bug' that allows address poisoning to happen in the first place? Improving blockchain explorer sounds good but I would rather stop using a network that allows a bug like this to exist in the first place. |
|
|
|
AES 256 is widely used, so your wallet should be secure by industry standard assuming you doesn't use weak password.
Is there any reliable tool to test whether a password is weak or not? I'm aware of some online websites that test your password entropy but I don't feel safe using an online website for it. While I can download the page, the question of reliability comes up. I've been using KeePass to generate at least 100 bits of password for every account that I use, but some websites or app, unfortunately, doesn't allow creating passwords with more than 8 characters. Fortunately, most wallets don't have such limitations. CMIIW. |
|
|
|
Gimana? Menarik?
Kalau ane punya duit banyak, ane bakal pake metode ini om haha. Ane rasa yang bisa melakukan metode investasi ini adalah mereka yang punya capital cukup banyak, plus punya kepercayaan tinggi atas aset yang mau dibeli. Kecuali valuenya dibuat kecil (misalnya 100 ribu per bulan). Entah kenapa ane jarang lihat hal ini disarankan ke user yang minta nasihat trik investasi di board luar, mungkin karena risiko yang lebih tinggi dibandingkan DCA. Namun, ada resiko loss duidnya, karena gak ada usaha yang gak ada resiko.
Memang sulit untuk mengambil risiko ketika ga punya dana cadangan yang cukup. Blind faith malah bisa bikin hidup makin susah, belum juga tidak setiap orang punya kepribadian yang mendukung kalau mau terjun ke dunia yang risknya sangat tinggi. Ane yang sudah beberapa tahun di kripto juga kalau kadang masih ragu kalau mau day trading karena tingkat stress sehari-hari bisa naik. Tentu saja, selama agan tahu risiko, punya plan kalau kondisi terburuk terjadi, dan mau bersabar kalau ada masalah lainnya, by all means do it. |
|
|
|
Ohhh begitu toh, saya hanya bingung saja diawal, kenapa address poisoning malah kemudian membahas tentang kode perintah pada kontrak, padahal menurut saya pribadi, secara sederhana ya address poisoning itu meracuni sejarah transfer calon korban Diskusi tersebut hanya memperdalam bagaimana attacker bisa melakukan serangan tersebut, karena sebelum model serangan ini familiar kita jarang menemukan sebuah token yang bisa melakukan transaksi tanpa ada input dari user sama sekali. Karena dari segi transfer yang tidak diizinkan oleh user ini agak mirip dengan kasus smart contract scam di exchange" scam, makanya diskusi tersebut terjadi. Jadi, kalau dari yang ane pahami sih, semuanya kurang lebih sepakat dengan deskripsi model serangan address poisoning tersebut, hanya pengen tahu lebih dalam saja. Perlu diketahui bahwa dengan men-generate address, kita sebagai user bisa membuat address secara spesifik, jadi tidak hanya depan dan belakang saja seperti yang om @masulum contohkan, even kita bisa membuat address yang bahkan hanya berbeda 1 angka/huruf ditengah address dari address aslinya, namun tentu itu akan membuat tingkat kesulitan generate akan semakin meningkat.
Beberapa user baik didalam atau diluar forum sempat teledor ketika mengecek address memang. Saran ane sih jangan kopas address terakhir dari history transaksi wallet agan meskipun address tersebut mirip. Ane ingat ada user yang menjadi korban karena dia pakai wallet Android yang tidak menampilkan alamat address sepenuhnya di riwayat transaksi, jadinya dia kopas saja ketika melihat awalan address tersebut sama. Dikopas saja dari menu wallet utama agan, atau kalau pakai explorer bisa lebih mudah karena biasanya address bar mengandung alamat yang agan kunjungi. Alternatif lain adalah menggunakan kontak kalau wallet agan mendukung fitur tersebut, bisa sekaligus melindungi dari malware yang merekam apa yang agan salin di clipboard. |
|
|
|
Sebenarnya ini bahas yang mana sih? "Approval Token Scam" atau "Pengiriman bernilai 0 (nol)" ? soalnya bahasan yang cukup panjang ini diawali dengan postingan om @len01 yang bahas tentang address poisoning, lalu kemudian tiba-tiba membahas kontrak, apakah pembahasan address poisoning sangat erat kaitannya kepada kontrak secara spesifik?
Kalau agan merujuk ke post OP, itu membahas dua jenis scam. Diskusi yang ada di bawahnya yang agan rujuk itu adalah diskusi mengenai address poisoning (pengiriman nol), yang mau tidak mau harus membahas juga pemahaman tentang smart contract khususnya mengenai allowance dst supaya kita bisa memahami lebih detail bagaimana serangan tersebut terjadi. Dengan kata lain, jenis scam kedua yang ada di post OP dan yang dipost agan len itu merujuk ke realitas yang sama. Pada diskusi yang berlangsung tidak ada pembahasan mengenai jenis scam "approval token" yang di list di post OP agan masulum. CMIIW. |
|
|
|
Tidak ada yang membahas triv? Saya pengguna triv dari 2017 saat belum banyak platform exchange baru seperti sekarang. Fee nya untuk withdraw lebih murah dari tokocrypto hanya 5000 dan cocok untuk nominal yang tidak besar dan dana cair ke rekening dalam hitungan menit yang relatif instan.
Seingat ane Triv udah beberapa kali pernah disebut di thread ini, termasuk oleh ane sendiri. Dulu ane sering menggunakan Triv tapi pindah ke exchange lain dalam hitungan bulan. Ane tidak mengikuti update Triv jadi feedback/pengalaman ane dulu mungkin udah ga berlaku lagi. Setelah ane cari, berikut beberapa post feedback ane tentang Triv: - https://bitcointalk.org/index.php?topic=5223245.msg53776221#msg53776221@CucakRowo
1. Dari informasi yang beredar mereka menganggap udah terdaftar di Bappebti itu dari 'surat edaran', ini pun tidak jelas yang mana. Untuk lebih konkretnya ane rasa ditanyakan saja baik ke Bappebti ataupun pelaku pasar yang bersangkutan.
2. Sama saja kayaknya. Ane sendiri sering make Triv Pro malahan, gara-gara situs yang co.id sering kali error di network ane.
Kalau agan boldan masih menggunakan Triv dan ga menemukan isu atau ketidaknyamanan yang pernah ane alami, mungkin ga jadi masalah kalau Triv dijadikan exchange utama. Ane sendiri beralih ke Pintu sekarang, dan meminimalisir daftar" ke exchange lain meskipun rate bersaing karena banyak perusahaan yang tampaknya masih kurang kompeten dalam menangani data KYC. CMIIW. Yang pasti fitur saat ini saya lihat sudah semakin banyak, ini seperti pertukaran lainnya.
Fitur beli saldo Paypal menurut saya masih bisa jadi daya jual untuk user yang ingin lebih dari sekedar exchange. Mungkin kalau ada fitur jual beli code Google Play atau App Store dengan kripto saya juga bakal sering berkunjung ke Triv, walau tampaknya sih susah terwujud karena bisa berbenturan dengan peraturan pemerintah. |
|
|
|
Saya coba lihat link pada artikel referensi di atas, coba buka di App Store (macOS) tertera App not available
Kemudian coba cari di App Store (iOS) sama juga, aplikasi Telegram X tersebut tidak tersedia.
Wah, baru tahu saya. Pengalaman saya soalnya di Android aplikasi ini masih tersedia, dan masih diupdate walupun rentang antara update satu ke yang lainnya sangat panjang. Kalau keamanan dan fitur terbaru jadi alasan agan pake Telegram, mungkin memang bukan jadi pilihan yang baik. Sementara pilihan terbaik adalah mengecek manual kalau agan tidak mau bayar. Semoga saja fitur filter voice message dan fitur" penting lainnya bisa dibuat free lagi. Signal mungkin bisa jadi pilihan, sayang pengguna Signal tidak terlalu banyak sejauh yang saya tahu.
Btw beberapa hari terakhir dari berbagai web terkait berita kripto kabarnya ada malware baru dengan nama Godfather yang menyerang aplikasi perbankan dan juga crypto di Jerman (mungkin penyebaran juga ke global). Kalau ane baca" dari Bitcoin.com sih, sepertinya modusnya masih sama dengan fake app lainnya, yaitu menyerupai aplikasi dari developer yang diserang untuk kemudian merekam keystroke dan 2FA yang diminta ketika user login (jadi request login dikirim ke URL yang benar, hanya saja datanya diintai agar penyerang bisa login sendiri di device yang lain)[1]. Setelah malware ini berhasil terinstall, mereka juga akan menginstall/download malware lain seperti aplikasi pengirim pesan, jadi bot untuk serangan DDoS, dsm. Untuk melindungi devide agan dari malware ini, masih tidak jauh berbeda dengan tips" sebelumnya. Selalu download dari sumber resmi, kalau pake App Store pastikan agan mendowload aplikasi yang benar, kalau developer menyediakan hash untuk verifikasi pastikan verifikasi sebelum install, pastikan jaringan agan bebas dari DNS hijack atau serangan MITM lainnya, jangan percaya dengan hasil pencarian di Google terutama yang berasal dari iklan, dan lain sebagainya. Stay safe! [1] https://news.bitcoin.com/germanys-financial-watchdog-warns-of-godfather-malware-attacks-on-crypto-apps/ |
|
|
|
Btw, hardware wallet yang menggunakan baterai memang lebih cocok untuk pengguna yang cukup sering menggunakannya bahkan untuk keperluan mobile. Sementara untuk tujuan hold jangka panjang sebaiknya memilih jenis hardware wallet tanpa baterai.
Kalau dipikir" lagi, saya agak menyesal membeli Nano X karena ternyata HW tersebut tidak terlalu sering saya gunakan tanpa terhubung ke USB. Melihat bagaimana Ledger mengelola informasi pelanggan, kepercayaan saya pada mereka juga jadi turun. Mungkin ke depannya daripada beli HW karena tertarik fitur nirkabel atau wifi, perlu dipikir" lagi apakah selain masalah storage internal yang kurang fitur tersebut sangat dibutuhkan atau tidak. Buat user yang punya HP atau device lain yang bisa dibuat air-gapped, mungkin membuat mereka jadi "hardware wallet" lebih ekonomis dan lebih aman. Saya pribadi baru sadar kalau LiveOS di USB stick mungkin lebih cocok untuk kebutuhan saya daripada beli Nano S kedua selama pengamanan seed dst ane lakukan dengan benar. |
|
|
|
I received the 5 CRP to review the app yesterday from the team. Here's my review, hope it helps.
Test system: Macbook Air M1, 8GB RAM, 40 Mb/s fiber internet connection for connectivity. I boot the system (Mac Monterey 12.2.1) from an external SSD with 300 MB/s read and write speed. While this is arguably slower than internal SSD, I run other apps just fine (DaVinci Resolve, OBS, Gimp, etc) as long as it is not swapping intensive since it requires fast SSD read/write speed. User interface: - The login UI is clean, other than "Remember me" being a bit confusing since it doesn't save the password and only the username/account container, I don't find any issue. I use a password manager (KeePassXC in this case) to manage my password, but it doesn't detect the field of the Utopia wallet. I don't know if this can be solved by changing the code of the app or not, but I'd definitely like it if I can just automatically fill the form without doing manual copy-paste for security purposes. - The default window after logging in is windowed. I can change it easily either via manually resizing with my mouse or using an extension like Rectangle, however, it doesn't automatically change the size of tabs in the Mailbox section on the dashboard. It is not that much of an issue but if it also automatically changes size based on the window size the user currently has, it would be a nice QoL change. - If I right-click on any transaction history, under Copy Public Key there are three buttons/menus that have a long name with no clear functionality for end-users. The only thing that is clear is probably the "Copy" part, but it doesn't look really good. If this is intended, consider changing the name to something simpler instead, since other menus are quite clear (Copy, Deselect all, Export, etc). Please check the image for clarity.  - There is no option to check a transaction status from a mempool explorer or something similar from the wallet history. If there is, I can't seem to find it. I also tried to check the TX ID from any online Utopia explorer but it is quite difficult to do so. I used https://explorer.utopiaecosystem.com/txid to check it (don't know if it is official or not) but they only show block data without any individual detail. Since this seems to be an intended behavior if we look at the "Verify transaction" page, I hope the team considers adding the ability to see if a transaction is confirmed or pending directly on the wallet/dashboard page. I can imagine a situation where somebody claims they've sent CRP but the other party can't check it at all because they don't check the menu of the app and rely on the history page/block explorer to see them. Features: - I received 5 CRP to test the app. I used 3 CRP to create a new crypto card. The creation process is quite fast so that's a plus. Other than changing the color and name, there's no other customization feature available. I don't think it's a big problem for me, but some users probably expect more if they need to pay to issue it. Changing the font type is probably a good thing to add if the team plans to add more customization for this. - The requested feature needs the user to know the payer crypto card ID. At first, I thought it functions like other request invoices where anyone can pay the charge requested by the user, but since it wasn't, there might be some difficulties for users who want to request some payment with no specific payer in mind. That being said, they can still use the public key. There is also no copy/contact feature on the request page, so the user has to copy them from their contact list. I think it would be nice if they can access their contact's crypto card ID directly from the request page. - The second feature that I tested with the CRP is the uVoucher feature. I use 1 CRP to create a new uVoucher code and it processed instantly. Using the newly created code was also quick. Overall, I don't see any issue with this feature in my testing. - I tried to stake my CRP to miners, but I encountered some difficulties since I need to find their public key address and so on. It would be better if a user can access the miners' addresses directly from the app, with their information (if it is publicly available, such as their Telegram group, etc) to make it easier for them to decide which miner is the best for them. I find several projects do this from their mining/staking page, and it is very helpful for them. Performance: - I downloaded the dmg file from the website. The file is around 300 MB, and installing the app takes around 600 MB on my drive. Opening the app for the first time doesn't take that long. However, I find that it always lags a lot when opening the Channels tab. Opening the channel tabs always spikes the RAM consumption by a lot. At one point, the app just consumed 500 MB of RAM, but if I open the Channels page, it shot up to 4 GB. While my setup might contribute to the stutter/slow issue, I don't think requiring 4 GB of RAM just to open the channel page is a good thing. - I don't find any issues regarding network synchronization. It's quite fast and smooth. I notice that Utopia seems to be constantly downloading/uploading to peers with an average of 500 KB/s bandwidth. Personally, this is not an issue for me, but somebody with a limited internet quota might have to keep this in mind. If possible, I think the team should lower this bandwidth consumption or allows the user to limit the network usage of the app directly. While there is an option to opt out from contributing to the network on the Preferences page, I think it would be great if a user can participate with their own bandwidth rule. Overall impression: Overall, the app is quite nice. I can imagine using it daily if I interact a lot with the Utopia ecosystem to manage my CRP. Other than the performance issue when opening the Channel page, there is no other major issue that I find in my testing. Some quality-of-life changes would improve the app and make it easier for users to contribute to the network, mainly by delegating their CRP to miners or relaying the network data. |
|
|
|
|
Current number of post (Including this one): 8513
Rank: Legendary
bech32 address: bc1q2e9ekyt5zugaknf0tqw0zhwxnak8ym3u745jnc
Merit earned in the last 120 days: 60+
Sig & avatar updated.
|
|
|
|
|
#Authentication Post
Type of campaign: Signature
Bitcointalk Username: joniboini
ERC20 wallet address: 0x98431802E341318D06763d2C4BE5Bbd9EEaF1EbF
|
|
|
|
Casinos with ana android version or software will make it easy for gamblers to easily download and start using the app to bets without having the risk of getting to the wrong site. Casinos with softwares are more business inclined making customers to easily get what they want with a simple click. It is better than going through browser to search for casinos multiple times.
As others have mentioned before, it depends on how well-built their apps are. If a DNS hijack can make them access a phishing website then it probably won't offer additional protection. But even if that is true, making sure you download the right app can be a hassle on its own if you can't build it on your own and need to rely on a website to download it. The risk of getting phised will always exist regardless if there is an app or not. The existence of an app as a sign of competent business is also questionable since I don't think many gambling websites that promote their service here encourage users to use their app that much. Most of the time their users also use a laptop to access their website anyway, so focusing on an app is probably not in their best interest. CMIIW. |
|
|
|
|
Show Posts
