That said... stay tuned, and I'll say more when I can.
oh my god we just figured out the announcement!
My guess would be that the project is going to be picked up by some OSS foundation - Apache maybe? |
|
|
|
|
CampBX hasn't been hacked yet (as far as I know)
|
|
|
|
A separate daemon can be written to run on the wallet box and reach out regularly (every second?) to a database held on some other box. Entries in this database can indicate actions that should be taken on the hot wallet (procedure numbers to indicate which function to run, additional columns or tables to hold parameters). The daemon can be written to validate the database entries against a set of sanity checks (size, frequency, destination, etc). It can then trigger an alert (pager, txt msg, phone call) to system administrators and refuse to process the request from the database when any transaction, or set of transactions, exceeds any sanity check. System administrators can then determine if the attempted interaction with the hot wallet is legitimate and handle the situation as needed. If the private keys for the hot wallet are known to be kept offline in cold storage, the daemon can even shut down bitcoind and delete the local copy of wallet.dat when it detects any obvious sign of intrusion.
Yep, this is a no brainer. I've been thinking about a similar method as part of the code for an exchange I'm working on, and it's almost correct other than if somebody has access to your database and knows your rules, they can insert or alter records in the database table that controls your payment processing service. The solution here would be to have the requests (database records) be nonced & signed. Preferably with both a server/application private key and a per-user private key derived from the users password. |
|
|
|
1nject0r,
The grown ups are talking please STFU! The nonsensical ramblings of a 2bit warez seller are not welcome or needed.
fastcash4bitcoins.com lOl javascript 1njection lOL <snip standard ASP.NET error page>
All this shows is that you managed to create a server-side error and he doesn't have any custom error pages. As a matter of fact, the server side error generated was probably because of your attempt at Javascript injection (caught harmlessly by ASP.NET) So what exactly are you trying to show with this? |
|
|
|
your server were not hacked i didnot see any defacing issue some account were compromised only but your server are not hacked those were not a russian hacker's they were some other countries hacker
This makes absolutely no sense... |
|
|
|
Got an e-mail last night from bitfloor support that my API keys may have been compromised. So seems there may have been some sort of hack. A bit concerning, but good to see that he was proactive about revoking the keys just in case. After reviewing some of our system logs and server access I believe there may have been some recent unauthorized activity which may have compromised the security of your api key. As a result I am revoking all of the API keys for your security. After your key is revoked you will be able to login and create a new key using the web interface.
No accounts were compromised financially nor was there any access to coins or any funds. Our system are separated to protect against this. I am revoking the keys as a precaution for your account security and trading security.
I apologize for any inconvenience this causes in your trading, but after review I felt it appropriate to take this action as a safeguard. If you have any questions please feel free to contact me by replying to this email.
cheers,
~Roman
|
|
|
|
so:
>zhou tong was retweeted by
>george henderson who invested in the same company as
>jared leto who likes pirates and who's picture is the avatar of
>charles lauzon who knows about bitcoin, resembles a man named Trenton Shaver, and is friends with
>zach nasakasanasa who worked with
>trendon shavers aka Pirateat40
Is that right?
Seems pretty far out there IMHO.
I think the 6 degrees of separation you have here could connect just about anyone to just about anyone else. |
|
|
|
|
Seems to me that all those that set up Pirate pass-thrus investments were very clear about what they were. If they were trying to hide the fact that they were Pirate pass-thrus then that would be suspicious, but otherwise I can't see any reason to place blame on them.
|
|
|
|
|
Thirded - liquidity isn't that great, but deposits and withdrawals never seem to be a problem.
|
|
|
|
|
I ran into the same issue. They recently changed the rate limits on the API calls. You can call the regular depth API at most once per minute and the full depth api at most once every five minutes.
Anything more than that and their PDP-11 can't keep up.
|
|
|
|
|
I'm thinking this would work similar to the Gox order book and socket.io API where the order id's aren't provided either.
You don't actually need to know the order id's, you just need to know the total volume at each price point. So you keep a map where the key is the price and the value is the volume at that price. Then you just update the values in the map at each price point as depth updates come in.
|
|
|
|
|
Probably BitFloor. You can deposit to your account there by making a cash deposit at any Chase branch.
Once there, if you place a buy order that doesn't fill immediately and goes on the books you'll get a 0.1% rebate. If you'd prefer to have your bitcoins immediately, you can place a higher bid that executes against the existing sell orders on the books and still only pay a 0.4% commission (which is cheaper than you would get anywhere else anyways).
Also helps that prices there are generally lower than at any other exchange.
|
|
|
|
Seems to me that if Pirate actually intended to pay back lenders that he would be buying up all of these below face value debts.
For example, lets say you have 10,000 BTC of pirate debt that you are willing sell for 6,000 BTC. If I was pirate, I would buy that debt for 6,000 BTC and make a 4,000 BTC "profit" instantly since that is 4,000 BTC that I no longer have to pay back.
The fact that he isn't buying up all these below face value debts himself tells me that either he is not interested in making free money (unlikely) or he has no intention to pay back.
What would stop pirate from doing this if he intends to pay back? (I understand he wouldn't use his identity for that because some would probably object but it's doable) Nothing as far as I can tell. Like I said, the fact that he isn't doing this (as far as I can see) seems to me like a strong indication that he won't be paying back. \ Should be as simple as creating an anonymous account on glbse.com and buying up all the various pirate pass-thru bonds/shares that are selling below face value. |
|
|
|
|
Seems to me that if Pirate actually intended to pay back lenders that he would be buying up all of these below face value debts.
For example, lets say you have 10,000 BTC of pirate debt that you are willing sell for 6,000 BTC. If I was pirate, I would buy that debt for 6,000 BTC and make a 4,000 BTC "profit" instantly since that is 4,000 BTC that I no longer have to pay back.
The fact that he isn't buying up all these below face value debts himself tells me that either he is not interested in making free money (unlikely) or he has no intention to pay back.
|
|
|
|
|
5BTC
198CqMMBkbJyFnS8zfDi7vNxRAswzo4o8T
I'm in.
|
|
|
|
|
Yup, seems their API has been down all day. And of course no announcements on the forum or on their site.
|
|
|
|
|
I'm buying like crazy, but seems gox is goxin - have about 15 orders that have been "pending" for at least 10 minutes or so.
|
|
|
|
|
Should we expect this to take 5-6 days from here on out? Or is this temporary while a backlog is being cleared?
I remember the good-ole days when Dwolla transfers were typically done within a few hours... Any chance we'll get back there?
|
|
|
|
|
My bot just sold .5 BTC for $16.90 on Intersango. This is getting insane.
|
|
|
|
Hmm.. I didn't know that BTC-e supported Dwolla...
I've never done fiat withdrawals at BTC-e so I can't confirm. The FAQ section on their website has these two questions and replies: " Do you accept any alternate forms of payment such as Debit/Credit Cards and Liberty Reserve?At this time, BTC-e is currently not accepting any of these payment methods. All transactions carried out on our website are irreversible; therefore use of payment methods that are reversible would be a detrimental venture for us. The presently supported payment methods are : US Bank Wire, EU Bank Wire (SEPA), Liberty Reserve, Visa, Mastercard, Liqpay.com, unikarta.com, PerfectMoney.com, WebCreds.com, Ukash.com, Webmoney.ru. " " Do you fulfill any requests to send money or carry out currency exchanges via government fiat?
Unfortunately, we do not fulfill any such requests. We choose to carry out business using registered companies such as Western Union, Dwolla, and other well-known financial companies to carry out our transfers. " ...so it's not clear. I signed up for an account and tried to do a deposit, and Dwolla was not listed as one of the options. Maybe they allow it for withdrawals and not deposits, but I'm thinking the FAQ is just outdated. |
|
|
|
|
Show Posts
