There are contradictory statements between the information on your website and in your FAQ section. Regarding fees, your website states: With Lipa there are no fees for the use of the app and for receiving transactions. We only charge 0.98% for the exchange of Bitcoin into your currency (EUR, CHF) https://lipa.swiss/en/for-business.htmlBut then on the FAQ we have this: How much will it cost me to use lipa?
There are no basic fees. Costs are incurred through the use of lipa. We charge the minimum fee of 0.98% of the invoice amount of each transaction. https://lipa.swiss/en/faq.htmlIn the first example, it sounds like all wallet operations are free, and users only pay when exchanging BTC into fiat. But in the second example, you say you charge a minimum fee of 0.98% from the invoiced amount. That also means that the fees can be higher. How much higher? How exactly does your fee system work? The business version of your app is available for Android, while the regular one still isn't. Could Android users (if they wanted) use the Business version in the meantime, and what pros/cons would there be for doing that? If you claim certain parts of your code is open-source, I think there should be a link on your website to the GitHub page. I don't see it among the social media buttons or elsewhere. I see that you posted a link in one of your previous posts, but you should link to it on the website as well. |
|
|
|
Pmalek, the OP has already confirmed that he is not an official representative of NanoGames casino but rather a fan (using this forum to share his referral code). It might be best to direct such questions to the official customer support on the website or through their email. Yes, I know. I saw that post in which he said that. Still, he might know more than me, so I thought it was worth asking. Let's see what happens and if he has any information. |
|
|
|
|
Two questions for NanoGames:
1. Your current minimum withdrawal amount in BTC is 0.000868 which is around $25. Is the minimum always the equivalent of $25 in BTC or what is it exactly?
2. The current BTC withdrawal fee is 0.000168 BTC, around $5. Similar question to the above. Is the fee equivalent to $5 in BTC?
|
|
|
|
What's zkSNACKs going to do if they know a user's got stolen cryptocurrency. I don't think they are going to do anything. Blockchain analysis is mostly a guessing game and trying to connect the dots based on certain criteria no one knows anything about. It's nowhere close to being considered as the absolute truth or any truth at all. You being n possession of an UTXO that originates from criminal activity doesn't mean you were involved in said activities. There are many ways you could have come in possession of that particular UTXO. It's the same as with paper bills in your wallet. Traces of cocaine on it doesn't make you a drug lord or a drug addict. Money moves from person to person and so does bitcoin. These blockchain analysis companies have created a bullshit business model of selling their interpretation of events and the truth to those willing to purchase it, be that governments or Wasabi and its coordinator. |
|
|
|
when you say "For 18 words, 1500 years", you mean to just generate ALL possible combinations, right??
if my secret/mnemonic phrase is:
"cat15 cat2 cat3 cat4 cat5 cat6 cat18 cat8 cat9 cat10 cat11 cat12 cat1 cat14 cat7 cat13 cat16 cat17"
and my script generate that exact sequence as the 4th result, is it not the same ??
have i found it in some seconds? Yes, in theory you could find the right combination with the first attempt as soon as you begin brute forcing the seed phrase. But the chances of you doing that are so small that it's not worth trying. It could also take thousands of years. Knowing all words (but not the order) significantly makes the task easier. I am not a mathematician, so someone who knows will drop by to mention how much easier. Not knowing any of your words is an impossible brute forcing task though. But if you are only missing the order and have powerful machines, I think it's double within a few years of brute forcing. This is just my amateurish guess. |
|
|
|
Regarding the second part, the bx seed instructions and appendix in the book was a pull request by a libbitcoin developer in 2015.
At the time, it did not use a pseudorandom generator. But about a year later, they changed it, which unfortunately was soon after the book was published.
Nobody has audited libbitcoin explorer for security weaknesses previously as far as I know. So, would it be fair to say that the vulnerability where you could generate a seed using weak and not random enough entropy was there from 2016 at earliest? I am asking because according to the report, the first misuses are believed to have been recorded in May 2023. If it was there for such a long time before someone figured out what they could do with it, it's quite positive that they figured out what was wrong. Additionally, it's share luck that someone didn't understand how to abuse it earlier or they did but no one knew about it. |
|
|
|
Also if you can, you can use them, b ut in the long run who can assure you they are not gonna change something and make a backdoor in one update? and yes you can check that, but are you gonna be always checking every update in a cellphone? most people no. No one can guarantee that. The difference is that if you want to and know how to, you can check what the software does and what was changed in the newer versions. There are no guarantees that the code is safe or free of bugs and vulnerabilities. Turn off automatic updates and download those that you want manually. Most people don't have the skills to check and read code. The best you can do then is to wait with installing the newer versions until some weeks or even months have passed. If no one reports anything suspicious, go ahead and upgrade. I doubt keyboard apps have many updates anyways. There isn't much to update. |
|
|
|
As we speak, I am looking at the codebase of bx and it has an AGPL v3+ license, so yes it is open-source Do we know of any security experts or companies that have reviewed that open-source code and given it thumbs up as being safe with strong-enough entropy generation? It's too bad that Andreas recommended or talked about this Bitcoin library in his Mastering Bitcoin book. I wonder how long it was out there before someone realized how it can be exploited... |
|
|
|
|
The passion that Kruw shows in defending Wasabi's business model is amazing to me. He has no problem defending a so-called privacy tool that asks a non-privacy entity to check if selective privacy is allowed for user X. Before privacy is approved, the user's privacy will be violated by checking the history of their UTXOs and finding as much information as possible. If the history is considered to be bad and checks any of the secret checkmarks no one knows anything about, the person using the privacy tool (for privacy reasons) will be rejected. Amazing!
|
|
|
|
|
If you want a wallet where you can safely store your coins and keep them in your custody and control, you will have to forget about earning interest. Interest is earned on coins that aren't being stored, but are "moving around" between partner services. You don't know what's happening with them or where they are. Recent history has shown that it can quickly go wrong.
I would never consider NEXOs 5%, 10%, or 20%, regardless of how tempting it might seem at first. The risk isn't worth it.
And when Bitcoin starts its next bull run, it will earn holders much more than what NEXO and similar custodian gamblers offer their clients.
|
|
|
|
One other thing is educating people to never use closed source tools to generate private keys. I don't know much about Libbitcoin or under what license the code was released, but I was under the impression that we are talking about a publicly verifiable library of tools for the Bitcoin blockchain. Was the code not publicly available for scrutiny?
The source says the first thefts started occurring in May 2023, but how long was the software available in that form before someone found out how to exploit it? What crypto wallets use this library? |
|
|
|
|
Bitcointalk was instrumental for Bitcoin in the beginning because this is where the serious discussions were held. There was nothing like it in those days. Nowadays, I am sure that many members of the newer generations haven't even heard of Bitcointalk. This forum is still a place for interesting technical discussions and a go-to-venue when beginners run into problems. However, the newer generations aren't interested in a forum culture. They spend their time elsewhere. Twitter, Telegram, Discord, reddit, etc. The only other similar community where you can find quality content is Stack Exchange.
|
|
|
|
But when it comes to money we are often deal with different starting positions people have. How can we compare the number of bitcoins two people have when, for example, one initially had the capital to acquire them, and the other put aside several years from his salary? It's like having a competition between an athlete and a man with a broken leg. This does not lead to anything but psychological problems and low self-esteem, since the conditions are not equal from the very beginning. We don't know what's the financial situation of that group of friends. Perhaps there are significant differences between them or each individual is earning a lot already. Obviously, if you can't play the game, be responsible and don't do it. It's like with anything related to gambling. If the stakes are too high for you, call it a day and walk away. |
|
|
|
<Snip> If the board looks the same and there is no evidence of any modifications, they should be ok. Also, if it connects with genuine versions of Ledger Live that you downloaded from the official website and not a fake one that you were instructed to use with information in the package, it's a sign you are using a real Ledger. We are yet to see a fake/modified Ledger that can connect to Ledger servers, install the needed crypto apps, update the firmware, etc. |
|
|
|
I remember that ChiMixer worked only with the TOR site for a long time. That's right. The clearnet site was sometimes DDOSed and unavailable. So they decided to use the clearnet site to advertise their onion domain and advise users to use that instead. Sinbad shouldn't give up on their clearnet site and each user should have a choice of what to use. But some sort of guide or recommendations wouldn't be bad. For example, one of their FAQs could explain proper mixing practices and mention TOR there. A link from the landing page could say how to mix with Sinbad and lead to instructions which mention using the onion site, and that sort of thing. |
|
|
|
In a thread someone said "Bitcoin is not all about happiness" can a little more light be thrown on this? As you gain more experience on these boards, you will learn how to filter the information, and what types of threads are worth reading and which aren't. Talking about Bitcoin and happiness isn't something I would pay too much attention to. Happiness is a subjective feeling you can experience with or without bitcoin. So discussing if your BTC bag makes you happy or not is, in my opinion, a waste of time. I would suggest you move on to topics that you can actually learn from. How bitcoin makes you feel doesn't belong to that category. |
|
|
|
|
Jako je teško na osnovu informacija koje si podjelio reči e to ti je zbog ovog ili onog razloga kad puno toga ne znamo. Ne znamo kako koristiš svoj novčanik, da li si odobrio neke dozvole koje nisi trebao, da li skupljaš neke sumnjive airdropove i povezuješ se sa stranicma s kojima nije pametno to raditi. Da li imaš neke tokene sa namjerno ili nenamjerno pogrešno napisanim pametnim ugovorima koji imaju mogućnost da pristupaju tvojim tokenima.
Ja jako malo radim sa ETH blockchainom ali ono što imam tamo je i dalje na mojim adresama. Dakle, ne postoji problem sa mrežom gdje nasumice nestaje lova. Sa BSC mrežom nemam nikakve interakcije.
U 99% slučajeva problem je kod korisnika koji su nešto pogriješili samo se treba otkriti šta, gdje i kako.
|
|
|
|
Jel itko gledao kakve Avatar only kampanje? Tko uopće nudi to? Sinbad ima avatar-only kampanju gdje su isplate fiksne ne $25 tjedno za 20 napisanih postova. Ali ne znam da li je kampanja popunjena ili primaju nove članove. A i icopress je u nekim svojim prijašnjim kampanjama imao avatar-only pozicije. Sječam se da sam kod njega bio u Betnomi avatar kampanji dok je još CM kampanja bila aktivna. Pa prelistaj njegove posljedne teme da vidiš jel ima išta. Što se isplata tiče, kod njega je bilo fiksno na 0.001 BTC tjedno. |
|
|
|
I would argue that decision is very dependent on the usage profile. I have no idea about percentage of people that access sinbad trough TOR, if it is small and I expect it is, I would argue that it shouldn't even be in the sig or that it should have been clearly marked as TOR link. Just be hovering your mouse over the skull containing the TOR link, you will se the onion domain at the bottom left of your browser. Those who know what it is will understand how to open it. My logic is that those that want to use TOR are usually expert users and will find their way to needed links while there is certainly some amount of newbies that could simply go to competition since they would think the page is not working after clicking on TOR link. More emphasize should be put in mixing through TOR as it's a privacy boost compared to mixing via the clearnet. Ultimately, it's Sinbad's decision to decide what they feel is the best for their business model. |
|
|
|
If your wallet is empty, with zero balance , there is no risk of using old utxo, if you don't reuse any address.
If you know how to work with your utxo , you don't even need to create a new wallet. Mistakes can happen, and since it doesn't cost anything to create a brand-new wallet only for mixed coins to separate it from the unmixed ones, I think it's better to do that.
I am looking at the new signatures and can't help to feel that more emphasize could be given to the onion link instead of the clearnet version of Sinbad. Only the part on the far left with the skull contains the TOR link, while everything else has the clearnet link. As a compromise, perhaps the far right box (MIX NOW) could also point to the onion link. That way we would have the ends of the sig pointing to the onion link, while the center of the sig contains the clearnet link. |
|
|
|
|
Show Posts
