Bitcoin Forum
June 23, 2024, 11:54:13 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 [106] 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 »
2101  Alternate cryptocurrencies / Altcoin Discussion / Re: New coins on: May 23, 2013, 01:56:22 PM
There are still more coins to be made. Skycoin, Watercoin, Aircoin, hell even Lavacoin.
2102  Other / Off-topic / Re: Just got an S4... any must-have apps? on: May 23, 2013, 10:28:07 AM
My S2 feels old.
2103  Alternate cryptocurrencies / Altcoin Discussion / Re: [ATTN] Is your Pool a Scam? on: May 23, 2013, 01:09:32 AM
Most of these issues come from not using Transactions.

Let's check this piece of code from mmcfe from Greedi's git.

Code:
if($isValidAddress){
//Subtract TX feee
$currentBalance = $currentBalance - 0.1;
//Send money//
if($bitcoinController->sendtoaddress($paymentAddress, $currentBalance)) {
$paid = 0;
$result = mysql_query("SELECT IFNULL(paid,'0') as paid FROM accountBalance WHERE userId=".$userId);
if ($resultrow = mysql_fetch_object($result)) $paid = $resultrow->paid + $currentBalance;

//Reduce balance amount to zero & make a ledger entry
mysql_query("UPDATE `accountBalance` SET balance = '0', paid = '".$paid."' WHERE `userId` = '".$userId."'");

                                 mysql_query("INSERT INTO ledger (userId, transType, amount, sendAddress) ".
                                            " VALUES ".
                                            "('$userId', 'Debit_MP', '$currentBalance', '$paymentAddress')");

$goodMessage = "You have successfully sent ".$currentBalance." to the following address:".$paymentAddress;
//Set new variables so it appears on the page flawlessly
$currentBalance = 0;
}else{
$returnError = "Commodity failed to send. Contact site support immediately.";
}
}else{
$returnError = "Invalid or missing Litecoin payment address.";

Let's look at this bit right here

Code:
					if($bitcoinController->sendtoaddress($paymentAddress, $currentBalance)) {
$paid = 0;
$result = mysql_query("SELECT IFNULL(paid,'0') as paid FROM accountBalance WHERE userId=".$userId);
if ($resultrow = mysql_fetch_object($result)) $paid = $resultrow->paid + $currentBalance;

//Reduce balance amount to zero & make a ledger entry
mysql_query("UPDATE `accountBalance` SET balance = '0', paid = '".$paid."' WHERE `userId` = '".$userId."'");

                                 mysql_query("INSERT INTO ledger (userId, transType, amount, sendAddress) ".
                                            " VALUES ".
                                            "('$userId', 'Debit_MP', '$currentBalance', '$paymentAddress')");

So we see that our money gets sent before the balance is deducted. Depending on how PHP works, an attacker could execute a timely(albeit possibly very hard) attack and prevent
this code from executing
Code:
						//Reduce balance amount to zero & make a ledger entry
mysql_query("UPDATE `accountBalance` SET balance = '0', paid = '".$paid."' WHERE `userId` = '".$userId."'");

                                 mysql_query("INSERT INTO ledger (userId, transType, amount, sendAddress) ".
                                            " VALUES ".
                                            "('$userId', 'Debit_MP', '$currentBalance', '$paymentAddress')");

Balance never gets deducted, attacker still has coins, depending on how often this attack can be done, a user can simply milk the pool till it's dry.

A simple solution to fix this would be to use Transactions, and instead of instantly querying bitcoin to send the coins, create a payment_queue in MySQL that a cronjob checks every few seconds and executes a few sendmany commands.

Funny note, prior to changing my nick to the current one, it was mcfe which I coined back in 2007ish waay before all this happened.
2104  Alternate cryptocurrencies / Altcoin Discussion / Re: WorldCoin Seen as a Threat? on: May 22, 2013, 10:22:21 PM
I've never seen a single coin cause so many altcoin holder to try and attack it here on bitcointalk and in every chat window I've seen.
Sounds like everyone see's it as a threat, else they'd ignore it (like many coins they aren't currently trolling).
There's talk about LTC members planning to take a fight in the battle.
It actually says a lot about WorldCoin.
What are your thought... let the trolls commence  Cheesy
Yeah...forked chain is all one needs to know.
The Main chain didn't fork only the pool forked. BITCOIN AND LTC have forked before, any coin can fork and most likely will in the beginning.
That was exactly my point. That shouldn't happen...for too long.
2105  Alternate cryptocurrencies / Altcoin Discussion / Re: WorldCoin Seen as a Threat? on: May 22, 2013, 10:18:44 PM
I've never seen a single coin cause so many altcoin holder to try and attack it here on bitcointalk and in every chat window I've seen.
Sounds like everyone see's it as a threat, else they'd ignore it (like many coins they aren't currently trolling).
There's talk about LTC members planning to take a fight in the battle.
It actually says a lot about WorldCoin.
What are your thought... let the trolls commence  Cheesy
Yeah...forked chain is all one needs to know.
2106  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANN] [PPC] PPCoin Released! - First Long-Term Energy-Efficient Crypto-Currency on: May 22, 2013, 09:59:48 PM
Ok, wait a minute. When PPCoin was first released, I bought a few K coins, and when a month passed, I had generated two PoS blocks with around 900 coins each. I look at a PPCoin blockexplorer, and most PoS blocks are less than 1 PPcoin. Has something changed that I don't know?
2107  Alternate cryptocurrencies / Altcoin Discussion / So what happened with all the "belief" in WDC? on: May 22, 2013, 09:37:10 PM
It appears more than half the people in this section can't get their facts straight. They said Worldcoin was the best, now the same people are bashing it....

Maybe now you learned a lesson about faster blocks.
2108  Bitcoin / Development & Technical Discussion / Re: Block 237226 on: May 22, 2013, 05:06:51 PM
That address belongs to a pool/entity/something called 'Eclipse' according to a search on the forums.
2109  Alternate cryptocurrencies / Altcoin Discussion / Re: Honest WorldCoin pool ? on: May 22, 2013, 02:27:30 PM
Which kind of solidifies some arguments about WorldCoin and other altcoins that faster block time and thus transactions != what is best for an altcoin.
2110  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANN] [PPC] PPCoin Released! - First Long-Term Energy-Efficient Crypto-Currency on: May 22, 2013, 02:19:55 PM
At least I mine and buy PPC because I think the PoS idea is interesting. But on the other hand I feel if PoS is the dominant idea why everyone is having PPC, then all the PPCs will be sitting in the wallet idling. That can't be good.

The transaction fee of PPC is destroyed so that miners will cooperate better. Isn't this like destroying wealth, or driving with the handbrake on? Why not use traction fee to fund PoS reward? The velocity of money is correlated to the intensity of economic activity which hopefully create wealth. If the transaction fee funds PoS it is like paying bonus to the participants of PPC economy.
Yeah, PoS is indeed very interesting but it endorses the idea of keeping your coins and never moving them.
2111  Bitcoin / Project Development / Re: Unable to do my own pool (target-miss) on: May 22, 2013, 02:19:30 PM
Some insight about the pool software would be nice. At this point, sounds like it has something to do with the pool sending the share directly to Bitcoind and it not matching the difficulty, or something similar.
2112  Other / Politics & Society / Re: Are Russian women more promiscuous? on: May 22, 2013, 02:11:39 PM
Being pretty much neighbours with Russia, and knowing some people(they don't know me) that married Russian women, I've heard that it's very hard to "leave"/divorce a Russian woman once you've married her. Has nothing to do with religion or laws.
2113  Bitcoin / Development & Technical Discussion / Re: Making a Backup Copy of the Blockchain created by Bitcoin-QT Client on: May 22, 2013, 11:56:43 AM
I'd say you need to backup wallet.dat first before anything else. But essentially, I see no problem in backing up the whole Bitcoin directory in C:\Users\<user>\AppData\Roaming. Just make sure bitcoind/Bitcoin-Qt isn't running before you do this.
2114  Bitcoin / Development & Technical Discussion / Re: SIGHASH_LIST proposal on: May 21, 2013, 11:47:00 PM
This solves what exactly?
2115  Alternate cryptocurrencies / Altcoin Discussion / Re: Ripples - I'd like to buy yours! 27 successful trades on: May 21, 2013, 11:08:51 PM
Considering that 1BTC == 6.5/6.8K XRP, I don't see how you would find someone for that price.
2116  Bitcoin / Bitcoin Discussion / Re: When do you think big distributers (like NewEgg) will start carrying ASICs? on: May 21, 2013, 03:31:57 PM
I was thinking about it, and it would help a lot, but something tells me it won't happen soon, especially when half of the ASIC makers don't keep their promises about schedule.
2117  Bitcoin / Project Development / Re: Qt Bitcoin Trader [OpenSource Mt.Gox client for Mac/Windows/Linux] on: May 21, 2013, 12:33:32 PM
This program's real world cost would be a couple of grands.
2118  Bitcoin / Development & Technical Discussion / Re: FTCVanity v1.07 on: May 21, 2013, 12:29:21 PM
Since this is in Visual Basic, It's probably really slow. Nevertheless, congratulations on the effort.
2119  Other / Off-topic / Re: Religious beliefs on bitcoin on: May 21, 2013, 11:55:00 AM
At least it isn't about some magical man from the sky that can make something out of nothing. Plus, we've been to the moon, and still no man from the sky.

No it's about a magical man from "Japan" that can make something out of nothing. Plus, we've been to Japan and still no Satoshi Nakamoto.
Touché.
2120  Other / Off-topic / Re: Religious beliefs on bitcoin on: May 21, 2013, 11:52:04 AM
We can all agree most religious people are nuts

That's pretty funny, considering that Bitcoin itself is pretty much a religion at this point
At least it isn't about some magical man from the sky that can make something out of nothing. Plus, we've been to the moon, and still no man from the sky.
Pages: « 1 ... 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 [106] 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!