Jujur, saya pribadi lebih nyaman kalaupun untuk pentest dilakukan di PC dengan layar lebar ketimbang di smartphone; Jadi, kalaupun memang mau mencoba Kali NetHunter via android saya kira nyamannya tetap disambungkan ke Monitor yang lebih besar dalam hal ini menggunakan Kali NetHunter Desktop Experience (KeX) nya yang di mirror via HDMI.  Sumber: https://www.kali.org/docs/nethunter/ |
|
|
|
1b. Digital Signatureback to the table of contentsDigital signatures are an essential component of cryptocurrency systems. In general, the benefits of digital signatures are as follows: • Authentication: Ensure that a known party creates the digital signature. • Non-repudiation: ensuring that the creator of the signature cannot deny that they have created the signature. • Integrity: ensuring that the information to which the signature is affixed has not undergone any unauthorized changes. These three elements are essential in cryptocurrency, as the user's real identity is not required for financial transactions (except for anything related to the cryptocurrency market, which requires proof of identity). Digital signatures ensure that only the money's rightful owner can use it. While digital signatures are not the only method of authenticating transactions, they are the primary method highly recommended. In addition, digital signatures also ensure that the transaction data is unaltered. For example, Alice wants to send 0.5 XBT (one of the symbols of Bitcoin) of cryptocurrency to Bob. With a digital signature, Alice cannot deny that she sent the money to Bob. Using the same example, it happens that Carol, who controls Alice's Internet network, can capture Alice's transaction information. Tempted by the high price of Bitcoin, Carol tries to modify the transaction data, which should be sent to Bob to Carol (herself). Digital signatures can detect this change, and the system can reject the altered transaction. Digital signatures are one of the products that use asymmetric cryptography technology. How it works can be seen in the following image:  Figure How a digital signature works. Source: https://en.wikipedia.org/wiki/Electronic_signature#Digital_signature.The two algorithms associated with digital signatures are the signing and verification algorithms. If you look closely, the process in the signing algorithm is a modification of the encryption process, as shown in the Asymmetric Cryptography figure (see section 1a. Asymmetric Cryptography) and a combination with hash techniques. In the signing process, the signer uses his private key to encrypt the hash value of the signed electronic document. This process results in a digital signature that can be attached to the electronic document. The digital signature verification process is the reverse of the signing process. First, the electronic document and the digital signature are separated. The digital signature is then decrypted using the signer's public key, which was obtained previously. The result of this process is a hash value, which is then compared with the hash value of the electronic document. If both hash values are identical, then it can be said that the digital signature is valid.
Referenceback to the table of contents- https://en.wikipedia.org/wiki/Digital_signature- https://en.wikipedia.org/wiki/Electronic_signature#Digital_signature- Dimaz Ankaa Wijaya - Bitcoin Mining dan Cryptocurrency lainnya ...., Jasakom 2018, page 7-8
|
|
|
|
|
#Authentication Post
Type of campaign: Signature
Bitcointalk Username: Husna QA
ERC20 wallet address: 0x28bb56a01D9C7e15c997F964CD81ad4418Ea964e
|
|
|
|
Baru kali ini saya denger ini barang, mungkin akang bisa jelaskan dulu pengertian dari Kali NetHunter. Tapi kalau saya baca kata-katanya sih kayaknya ini barang linux yang diinstall di android. Yups benar, [1] setelah saya baca referensi di sana, Kali NetHunter adalah distro linux yang dijalankan di ponsel android. Dan kegunaan utama dari Kali NetHunter ini adalah untuk pengujian keamanan pada sistem dan jaringan. So far saya belum mencoba tutorial di atas, apa lagi untuk PGP, karena bagi saya lebih mudah mengeksripsi PGP di perangkat PC. [1]. https://sawahmaya.com/kali-linux-dan-nethunter-kelebihan-dan-kekurangannya/Untuk Kali Linux versi PC saya sudah cukup familiar dan pernah menggunakannya juga, dulu namanya Backtrack Linux ( https://www.backtrack-linux.org/). Distro Linux ini lebih dominan untuk keperluan Penetration Testing atau pengujian Security lainnya. -snip-
Kali Linux itu yg gambarnya Naga Keemasan ya?. Backtrack bukan?. Kl iya ituu, powerfull sekali buat Networking. -snip-
Ya om, dulu saya juga mengenal namanya Backtrack namun pada 13 Maret 2013 berubah menjadi Kali Linux ( https://www.backtrack-linux.org/). -snip-Sementara untuk NetHunter yang merupakan bagian dari Kali Linux, secara konsep sama juga namun memang dikhususkan untuk Penetration Testing di platform Android. Saya belum bisa mencobanya sendiri karena belum punya lagi smartphone Android-nya. Dilihat dari fitur-fitur nya disini: https://www.kali.org/docs/nethunter/ nampak belum se-banyak seperti yang ada di Kali Linux.-edit- The core of Kali NetHunter, which is included in all three editions, comprises of:
• Kali Linux container that includes all the tools and applications that Kali Linux provides
• Kali NetHunter App Store with dozens of purpose-built security apps
• Android client to access the Kali NetHunter App Store
• Kali NetHunter Desktop Experience (KeX) to run full Kali Linux desktop sessions with support for screen mirroring via HDMI or wireless screen casting
|
|
|
|
I support this project, although, unfortunately, the PeachBitcoin application is not available in the AppStore region of Indonesia.
I don't want to derail this thread, but IMO you can still install it via the apk file no? https://peachbitcoin.com/apk/ I don't have an Android device, so I only mentioned the AppStore above. However, I'm trying it via TestFlight |
|
|
|
Topik Asli : [Eng: Tutorial] Kali NetHunter - Linux on Android
Penulis Asli : DYING_S0UL
Terinspirasi dari panduan komprehensif Learn Bitcoin tentang PGP, saya memutuskan untuk membuat sebuah tutorial untuk menginstal Kali NetHunter di perangkat Android (Rootless). Dengan menggunakan ini, pengguna Android akan mendapatkan kemampuan untuk menggunakan enkripsi PGP pada perangkat mereka dengan NetHunter. Dengan demikian melengkapi trilogi panduan tentang PGP di platform Windows, Linux dan Android. Tutorial ini dibuat untuk Android 11, tetapi seharusnya juga dapat digunakan dengan lancar pada Android 12, 13 dan 14. Persyaratan instalasi minimum: - 1. Penyimpanan minimal 15-20 GB
- 2. Pengetahuan tentang aplikasi Command Prompt dan Terminal
- 3. Otak yang bekerja
➥ Langkah 1: Instal aplikasi Termux dari github/ F-droid (Gunakan VPN, jika proses download lambat). ➥ Langkah 2: Buka termux dan masukkan perintah berikut untuk meng-update package➥ Langkah 3: Saat diminta untuk melakukan tindakan, tekan Y dan <Enter> untuk menginstal versi pengelola package (6 kali) ➥ Langkah 4: Izinkan storage permission➥ Langkah 5: Install wget ➥ Langkah 6: Download file instalasi NetHunter wget -O install-nethunter-termux https://offs.ec/2MceZWr Ubah izin untuk menjalankan file chmod +x install-nethunter-termux Menjalankan file ./install-nethunter-termux Masukkan gambar yang ingin Anda instal. Anda bisa memilih full, minimal, nano. Saya akan memilih no 1. ➥ Langkah 10: Tekan N ketika diminta untuk menghapus rootfs (Instalasi akan memakan waktu cukup lama, 15-30 menit tergantung kecepatan internet Anda). Setelah langkah 10, Anda harus memperbaiki dbus-x11 error. Pengguna kemungkinan besar mendapatkan error ini setelah instalasi pertama. Untuk memperbaiki masalah ini, Anda hanya perlu mengubah server DNS dan memperbarui beberapa package.Fix dbus-x11 error ➥ Langkah 11: Jalankan perintah berikut ini ➥ Langkah 12: Buka file /etc/resolve.conf ➥ Langkah 13: Edit ip address menjadi 8.8.8.8, lalu tekan ctrl + x dan enter Y untuk menyimpan ➥ Langkah 14: Jalankan apt update dan apt install dbus apt update
apt install dbus-x11 -y
Masuk ke NetHunter dan Tetapkan password untuk Kex VNC (tekan N untuk memasukkan view-only password) ➥ Langkah 16: Catat nomor port, Anda akan memerlukannya pada langkah 19. ➥ Langkah 17: Download Nethunter app dan instal. ➥ Langkah 18: Buka NetHunter app dan cari Kex, instal, dan buka aplikasi tersebut. ➥ Langkah 19: Enter nomor port, username sebagai kali, dan password anda dari langkah 16, lalu tekan connect. ➥ Langkah 20: Voila!!! Sekarang Anda memiliki GUI Kali NetHunter tanpa root pada perangkat Android Anda.
➥ Tutorial terkait:➥ Referensi yang digunakan:https://www.youtube.com/davidbombalhttps://www.kali.org/docs/nethunter/nethunter-rootless/https://store.nethunter.com/https://github.com/termux/termux-app/issues/236
Terjemahan ini diinisiasi oleh Tim AoBT (The Alliance of Bitcointalk Translators). |
|
|
|
|
Username: Husna QA
I support this project, although, unfortunately, the PeachBitcoin application is not available in the AppStore region of Indonesia.
|
|
|
|
-snip-Here we'd need 7 more translations. I liked this article, and I have previously used Kali Linux on a PC (formerly called Backtrack Linux: https://www.backtrack-linux.org/). I will try to translate it, although I can't try it directly because I don't have an Android smartphone. |
|
|
|
-snip-
Halo terima kasih telah memeriksa dan memberikan masukan untuk imporvent. Ya, kami punya rencana untuk TOor mirror itu akan segera ditayangkan. Dan mengenai tarif yang saat ini kami berikan tarif tetap untuk saat ini dinamis, kami memiliki rencana untuk segera Terima kasih atas responnya, semoga kedepannya ChainSwap bisa mendapatkan reputasi dan kepercayaan yang baik dari komunitas, khususnya komunitas di Bitcointalk. Kemudian mengenai pertanyaan dari @ joniboini, bisa dijelaskan maksud dari "Featured on" yang tertera di Website, apakah ChainSwap di endorse oleh developer coin-coin yang tertera tersebut? |
|
|
|
Post count for Week#23 is complete. As announced a few days ago the campaign is ending officially from today. Feel free to remove the signature and other bio information. Thanks SWGT team and everyone who participated in this campaign. It was a successful campaign. The team managed to receive good funding in their pre-sale, they were able to list with 4 CEX during the campaign. All was possible for the campaigners and the community of SWGT. Keep up the good work. I will see you with another campaign. Thank you, Royse, and success for SWGT and the team. |
|
|
|
-snip-
It would help if OP could disclose which particular software or whatever he used to create his "paper wallet". (I wouldn't use this term for a wallet with recovery words that lead to a HD wallet. For me a paper wallet is an individual private key and its derived public address, not a complete HD wallet recovered from its mnemonic recovery words.)
As far as I know, the information in the paper wallet is the public and private keys. This type of wallet usually does not include a seed phrase. In addition, if the OP gets a Bitcoin Paper wallet like the one listed at https://en.bitcoin.it/wiki/BitcoinPaperWallet, he should be careful. If there are still assets, moving them to a new wallet immediately is best instead of using them even with seed/private key imports into Electrum. |
|
|
|
Kebijakan pengungkapan keamanan Bitcoin Corehttps://bitcoincore.org/en/security-advisories/https://groups.google.com/g/bitcoindev/c/Q2ZGit2wF7wSelama ini, security-critical bug yang ada di Bitcoin Core jarang terungkap ke publik, baik itu yang dilaporkan secara eksternal maupun yang ditemukan oleh kontributor Bitcoin Core. Jadi, banyak user yang menganggap kalau Bitcoin Core itu jarang memilki bug, padahal persepsi ini cukup berbahaya sehingga mereka tidak menyadari terhadap bug pada Bitcoin Core yang mereka gunakan terutama versi yang sudah cukup lawas. -snip-
The vulnerabilities disclosed today were fixed in 0.21 and earlier. At the end of July, those that were fixed in 22.0 will be published, in August, 23.0, and so on until there are no remaining undisclosed vulnerabilities in end of life Bitcoin Core versions.
Past Security Advisories
Disclosure of crash due to malicious BIP72 URI (≤ version 0.19.2)
The BIP70 implementation in Bitcoin Core could silently crash when opening a BIP72 URI.
Disclosure of CPU DoS due to malicious P2P message (≤ version 0.19.2)
A malformed GETDATA message could trigger an infinite loop on the receiving node, using 100% of the CPU allocated to this thread.
Disclosure of memory DoS using low-difficulty headers (≤ version 0.14.3)
After Bitcoin Core 0.12.0 and before Bitcoin Core 0.15.0 a node could be spammed with minimum difficulty headers, which could possibly be leveraged to crash it by OOM.
Disclosure of memory DoS due to malicious P2P message (≤ version 0.19.2)
Public disclosure of a DoS vulnerability affecting old versions of Bitcoin Core
Disclosure of CPU DoS / stalling due to malicious P2P message (≤ version 0.17.2)
A node could be stalled for hours when processing the orphans of a specially crafted unconfirmed transaction.
Disclosure of netsplit due to malicious P2P messages by first 200 peers (≤ version 0.20.1)
Disclosure of the details of an integer overflow bug which risked causing a network split.
Disclosure of CPU/memory DoS due to many malicious peers (≤ version 0.20.0)
Bitcoin Core maintained an unlimited list of banned IP addresses and performed a quadratic operation on it. This could lead to an OOM crash and a CPU Dos.
Disclosure of censoring unconfirmed transactions to a specific victim (≤ version 0.20.2)
Public disclosure of a transaction relay censorship vulnerability affecting old versions of Bitcoin Core.
Disclosure of memory DoS due to malicious P2P message from many peers (≤ version 0.10.0)
A node could be forced to allocate large buffers when receiving a message, which could be leveraged to remotely crash it by OOM.
Disclosure of potential remote code execution due to bug in miniupnpc (≤ version 0.11.1)
Public disclosure of a buffer overflow in miniupnpc which could have led to a remote code execution in Bitcoin Core.
CVE-2017-18350 Disclosure
Disclosure of the details of CVE-2017-18350, a fix for which was released on November 6th, 2017 in Bitcoin Core version 0.15.1.
CVE-2018-17144 Full Disclosure
A full disclosure of the impact of CVE-2018-17144, a fix for which was released on September 18th in Bitcoin Core versions 0.16.3 and 0.17.0RC4.
|
|
|
|
Everything is working fine on my side, and ninjastic.space is actually opening pages much faster than before, even after I did some stress testing. Its working now fine for me as well, but it wasn't a couple of hours ago. -snip-A few hours ago, I also got the same thing, unable to connect to ninjastic.space. There was no information like "under maintenance", so I thought the site was down for something else. But earlier, I tried to reopen https://ninjastic.space/ everything was working normally again. |
|
|
|
-snip- Selain itu BeliBitcoin.cash juga menyediakan platform lain seperti Mix dan Swap Service dengan Fee terjangkau!
Kemarin saya sempat melihat link-nya namun masih tertera: "Under Maintenance". Sedikit catatan mengenai Mixer service, sekitar awal tahun ini segala bentuk promosi tentang mixer tidak diperbolehkan di Bitcointalk (silahkan baca thread pada link berikut: https://bitcointalk.org/index.php?topic=5476162.0). Jadi, agan mungkin perlu juga terlebih dulu membaca-baca aturan forum termasuk aturan tambahan lainnya yang biasanya di umumkan admin di board Meta. |
|
|
|
Saya juga sudah sempat mencoba untuk melakukan transaksi Silent payment di Silentium. Awalnya saya coba untuk mengirimkan BTC ke address SP langsung dari Electrum dan Bitcoin Core, ternyata hal tersebut tidak bisa dilakukan karena sepertinya format address dari Silent Payment tidak dikenali oleh client Bitcoin core dan electrum. Untuk itu saya membikin 1 wallet lagi di Silentium, dan mencoba mengirimkan BTC ke address SP di wallet satunya.
Masih belum banyak wallet yang support, sekalipun hanya untuk mengirim BTC ke address SilentPayment. Wallet lain (selain Cake Wallet dan Silentium - https://silentpayments.xyz/docs/wallets/) yang support send namun belum support receive diantaranya BlueWallet: https://github.com/BlueWallet/SilentPayments
-snip-
Iya, saya juga sempat cek aktivitas di mempool di jaringan testnet dan melihat ada cukup banyak transaksi, namun masalah saya bukan disitu gan, lebih kearah saldo, saya meminta bitcoin testnet melalui https://bitcoinfaucet.uo1.net/ & https://coinfaucet.eu/en/btc-testnet/, tapi masih kurang banyak, benar yang agan bilang, perlu lebih banyak bitcoin testnet untuk melakukan uji coba. Punya saran dimana bisa dapat bitcoin testnet yang lumayan banyak? saya sudah cek di forum, hanya bisa kasih sedikit mereka. Penasaran mau cobain silent payment. Kalau melalui Bitcoin Testnet Faucet gratisan memang rata-rata sedikit BTC testnet yang didapat, jadi perlu bertahap kalau mau mengumpulkan dalam jumlah yang lebih banyak untuk keperluan agan tersebut. Btw, kalau mau yang lebih cepat dapat Bitcoin testnet dalam jumlah banyak, coba melalui exchange https://altquick.com/swap/. -DWYOR- |
|
|
|
We hope that our attack made it clear to you how important it is to finance the industry and recruit qualified specialists. -snip- Pesan yang sangat penting untuk segera disadari dan diterapkan. Apakah ini murni diberikan secara cuma-cuma atau ada imbalan dibalik pemberian decryption key. Apakah hacker memang sengaja untuk mendapat keuntungan untuk dipercaya sebagai vendor keamanan di PDN? Nampanya mereka juga tetap membuka donasi dengan Monero walau nampaknya mereka tetap akan memberikan decryption key secara gratis. Uniknya lagi mereka bahkan meminta maaf atas kejaian ini yang merugikan banyak pihak. Ya, pemerintah harusnya bisa belajar dari kasus tersebut. Biasanya setahu saya orang-orang semacam itu (programmer) berfikir rasional, logis dan tidak banyak basa-basi. Jadi ketika mereka menjanjikan akan memberikan decryption key-nya secara gratis maka kemungkinan besar mereka memang akan berusaha menepatinya.
Penetration testing terkadang perlu dilakukan untuk mengetahui apakah masih ada celah pada sistem keamanan data, sebelum terlambat dan didahului diretas oleh yang tidak bertanggung jawab sama sekali. Contoh lain, theymos bahkan pernah juga mengadakan security bounties dan menyiapkan reward bagi yang berhasil menemukan kerentanan keamanan di Bitcointalk.org: https://bitcointalk.org/sbounties.php |
|
|
|
Previously, I tried the Ginger wallet, and it turns out that some wallets that I had created in the Wasabi wallet were automatically detected in the Ginger wallet.
It is understandable because the Ginger wallet is a fork of Wasabi. So, the hierarchy of folders and wallets can be used with each other.
This is a plus point for those that were using WasabiWallet but stopped because their default co-ordinator was removed. They could use GingerWallet and retain previous WasabiWallet folders or keep using WasabiWallet but modify the GingerWallet api link. Either way there is a benefit for those that want to keep using these wallets. Therefore, both wallets should not be run at the same time. In addition, previously, when I tried the Wasabi wallet and activated the Bitcoin Knots option, the setting automatically added configuration to the bitcoin.conf file in the Bitcoin Core file directory. The disablewallet setting becomes active (= 1), so the wallet is not displayed when Bitcoin Core is run. These settings must be changed manually to display the wallet on Bitcoin Core. |
|
|
|
I adapted the following article from several references; hopefully, it can help add insight. For a more detailed explanation, please refer to the source. Indonesian translation: Mata Uang Kripto - Husna QA
Table of contents:1. Basics of Cryptography a. Asymmetric Cryptography b. Digital Signature -in process- c. Hash Function 2. History of Cryptocurrencies a. Bitcoin Prehistory 3. Definition of Cryptocurrency 4. How Cryptocurrencies Work - Users - Cryptocurrency service providers - Blockchain - Transaction Data - Peer-To-Peer Network - Full Node/Server and Simplified Payment Verification/SPV Client - Miners (Verifiers)Reference
1. Basics of Cryptographyback to the table of contentsAs reflected in its name, cryptocurrency utilizes cryptographic techniques in its system. As an essential part of the cryptocurrency system, there would be no cryptocurrency without cryptography. Two cryptographic methods that are particularly important in a cryptocurrency system are digital signatures and hash functions. 1a. Asymmetric Cryptographyback to the table of contentsBy definition, asymmetric cryptography is a cryptographic technique using a public and private key pair. These two keys are used in different ways. The public key, like a phone number, can be shared with others. While the private key must be well guarded like guarding an ATM (Automated Teller Machine) PIN, of course, the private key does not need to be memorized one by one :)  Asymmetric Cryptography Image. Source: https://en.wikipedia.org/wiki/Public-key_cryptographyHow asymmetric cryptography works in general, can be seen in the figure above. Bob wants to send Alice a secret message that no one but Alice should know. The secret message is then encrypted by Bob using Alice's public key, which results in an encrypted message. The encrypted message is then sent to Alice, who can read the secret message after decrypting the information received from Bob. Definitions of Encryption and Decryption can be found here: https://en.wikipedia.org/wiki/Encryption.The assumption in asymmetric cryptography is that others cannot guess the private key even if they have information about someone's public key. One of the most recognized types of asymmetric cryptography is RSA, created by Ron Rivest, Adi Shamir, and Leonard Adlemen.
Referenceback to the table of contents- https://en.wikipedia.org/wiki/Public-key_cryptography- https://en.wikipedia.org/wiki/Encryption- R.L. Rivest, A. Shamir, and L. Adleman - A method for obtaining digital signatures and public-key cryptosystems- Dimaz Ankaa Wijaya - Bitcoin Mining dan Cryptocurrency lainnya ...., Jasakom 2018, page 5-6 |
|
|
|
|
Show Posts
