So, anyone can install the apk and start mining without any cost? How will they prevent attacks like the 51% attack then?

I think you need to explain more about profitability and the cost. For example, how profitable is it to run this on a mid-range Android phone, how much you can earn per day, how much electricity is required etc. One of the most obvious issues is whether our phones can sustain the heat or not. I don't believe phone mining is sustainable and profitable regardless of what we mine, and I think I'm not the only one who believes this.

Did the app bypass the IP verification procedure? If it doesn't then I don't think it can solve OP's problem. OP can't log in because he uses a new IP, so the client he uses doesn't really matter afaik. CMIIW.
That's really weird. Have you tried mentioning them in one of your tweets before you sent a DM? Maybe they never check DMs unless you ping them first. But if you don't have a ticket ID, I think it will be a bit difficult for them to follow up since they always ask for it. It's horrible customer support for sure. I also suggest checking the Reddit account posted above. They don't seem that active but they respond in a timely manner if there's a new thread about them.

I don't think rooting a phone is necessary just to remove some apps. Unless you want to remove system-protected apps, which in most cases will likely brick your phone even if you use a custom from. Not to mention those big apps are mostly web browsers, games, and so on. Chrome for example takes around 1 GB (IIRC) just for the installation files and necessary data, so if you have multiple web browsers removing some of them will give you a decent amount of free space.

That's so short IMO. Personally, I change my phone every 5 years. Even that is not always the case since some of my phones still run great. If it's not because of the limited storage I'd probably never change my phone. I miss the time when SD cards is always supported on new phones so I don't have to resort to self-hosted cloud storage to store some of my data.

I don't see an exchange rate on your website. How would you determine how much 1 BTC is worth, or how will the user knows if their order will go through or not if the exchange rate, open order/order history etc is not visible? Do they have to wait until their transaction gets confirmed on the blockchain?

If that's the case, then the risk for them will greatly increase since they need to depend on you to be trustworthy. I don't think this is the right choice to make since you'll never get any customers by doing so. You should rework this a bit, at least make it so that users can see the liquidity of your market.

Also, what does the 0.00001 BTC/XMR at the bottom of the page mean? Is it the fee you take for every withdrawal and refund when a user can't buy/sell their coins? I understand that you want to take profit from every withdrawal, but why would you request additional funds when a refund is issued (assuming the cause is the inability to fulfill the order)? That would discourage traders instead. CMIIW.

It would be great if the reports mention detailed information about this. But then if this is not what happened I'm pretty sure people will post on social media rebutting their statement. I'm not sure how APK update work in detail but Android should add something like an update will be rejected if the apk is not signed by the same publisher. This should help prevent installing a fake app on top of the real one. However, no one should rely on this and download/verify the apk themselves.

Another option would be to build it on your own. I don't think this would become mainstream since a lot of people are using closed-source app nowadays. At the end of the day, every method has its own risk. We just gotta deal with it.

IMO some people still don't understand what decentralized means. Whether the app is terrible/secure or not, expecting reimbursement from a decentralized wallet app when things go south should not be the guarantee for the security of their funds.

Have you read these threads from Reddit yet?
- https://www.reddit.com/r/TREZOR/comments/c9kh7x/the_touch_screen_of_my_trezor_t_is_not_working/
- https://www.reddit.com/r/TREZOR/comments/m1q208/trezor_model_t_touch_screen_issues/
I've found at least three more threads talking about more or less the same thing. This sounds like an old issue that persists after firmware updates on some devices. While the context surrounding each case is different, imo hardware is likely the cause of this. Asking for a replacement is probably your best bet to get it fixed, unfortunately, you'll have to contact support and probably wait some time. CMIIW.

Since you said it was an experiment, why don't you take a break and wait until the power stabilizes? In the meantime buying a UPS might be a good idea so you can turn off your PC in the future when this happens again. I don't see the point of continuing your mining experiment since I suppose profit is not your goal here. Risking to brick your computer is definitely not worth it.

In addition to this, I think you should check all electronics in your house. Based on your explanation this affects your whole power network and your computer is not the only thing that was affected by it. I'm not an expert in electronics but I heard inconsistent power off and on can damage an electronic device[1]. CMIIW.

[1] https://en.wikipedia.org/wiki/Failure_of_electronic_components

Whether his project is successful or not, building his reputation on this forum should be a good thing to do if he plans to stay longer and want to get customers from here. If it fails, sure there might be some "bad" projects in his CV, but if he's honest then people have some history to look into.

BTW, OP mentioned he used to work for FAANG in the past. If this is true, I think putting a LinkedIn or something similar is a good idea. Your current about page tells so many things but it is hard to look into detail about it. Since you decide to open up about your identity, posting your work history in detail should not be a major problem for you right? That way users can have an easier way to check your CV without waiting for days for customer support to answer their query.

Consider improving your UI design too. Your website looks very simplistic and it is hard to sell to young people nowadays. If they are your target audience, UI is important. But of course, it should not be a priority if there is still a function/feature that you need to implement asap, such as a possible threat of invalid data mentioned above. While it is unlikely, you should not underestimate people's carelessness on the internet. CMIIW.

Is this really a thing?

Never heard about it for at least 3 years I'm involved with crypto. It is similar to gacha gamer behavior where they keep pulling even if they don't have enough pulls left just because they hope they can get some decent units. The motivation is clearly different though. I don't understand why you pull keep making more losses just because you're angry unless you're fine with burning money.

Lots of good tips have been posted above. I'd strongly suggest they learn more emotional control at least. It's difficult to suggest trading tips when they don't even bother to learn or manage their emotion when the result is not in line with their hope. For example, the simple tips of using the money you can afford to lose are probably not gonna help them at all.

There are many goods emotional intelligence books out there. Even on Youtube, you can find some decent videos. That should be good enough for a start if they don't know a single thing about emotion management.

Does this mean you were able to successfully recover your password but failed to get the 2FA access? If I follow the discussion above, it seems like Block.io can only help you with 2FA, but not the password. I don't see passwords being mentioned either at https://block.io/faq. I assume the forgot password feature is for an account created on block.io itself, not dogechain.

I think your last shot is your old laptop which you believe at some point store your seeds data. If that is unrecoverable then brute-forcing your password would be the next step.

The add favorite feature is quite difficult to use unless the user spends some time doing trial and error. I think adding a separate page would be better, or making it more user-friendly with additional UI after they click the plus/minus sign. Something like clicking + -> New pair -> save. It's probably unclear just by text but I hope OP can get what I'm trying to say here. I also don't know what the 'Edit' at the bottom left does so you can also work on that.

Also, consider adding a dark theme as mentioned above. I use dark reader/dark them on all of my web browsers and your site looks good with a dark theme. It's definitely too simplistic though, but if your goal is just to provide a quick crypto calculator then it is enough. IMO, at the moment, the current UI and UX feel like it is a custom website for personal usage instead of public use.

Nobody can predict that far to the future. Too many variables to consider starting from mining equipment, electricity/energy cost, Bitcoin price, etc. For example, if we found a new way to generate electricity at a low cost, and there is a new device/quantum device that can do calculations at exponential speed to an existing rig, that number you consider insane might be nothing for them. So, people will just keep mining without any care.

Or, the opposite happens. Electricity becomes more expensive, no more cheap rig is found, BTC tank heavy, nobody no longer uses it and so the difficulty is so low that you can mine with CPU again. I think this is unlikely but I won't be surprised if difficulty falls in the future if the profit becomes too small for small-medium mining farms. At the end of the day, the market will correct itself. If mining becomes too difficult difficulty will get lower, when profit increases more people will mine again, and so on.

If you plan to mine BTC right now, consider buying them instead if you can't play the long game or has cheap electricity. It is probably not worth the trouble to set up a rig if profit is your goal. CMIIW.

Removing the credit/debit card information for registration is a good move. But after the "promo" period is over, will you bring it back? Honestly, I don't think anyone would feel safe if they need to input sensitive data right at the gate just to make an account. You can probably make a "free" tier where people can simply log in and check the last few data, so they will have to pay to access the full data to get the full picture. If that's not possible, then simply removing the credit card for registration would be better.

I'm not sure if it is possible but copying Mullvad's model of business sounds good too. They don't need personal data and just provide an account number to register and log in, and then the user needs to pay if they want to use the service. With how people's awareness of privacy increases, it might be worth a shot to look at it. Just my 2 cents.

According to their latest Tweet, it does not seem like an inside job after they did their investigation. But it is unclear if the lack of evidence is the result of no inside job or simply a good job from the cracker to clean their history. Not really a good look at their image after they told their users that they got phished.

Since then they have posted an update here: https://3commas.io/blog/notice-on-api-data-disclosure-incident. Suggesting their users request new keys is definitely not enough to get back the confidence that the API keys are safe since they still can't be sure if the hacker left something and will just leak the new keys. Might as well stop using them for the time being.

Just a suggestion, if you want to make multiple wallets maybe you can rename them according to the purpose. For example, "cold wallet", "hot wallet", "temporary wallet", signature wallet, etc. I make a mistake in the past where I just name them wallet1, wallet2, etc, and then forgot which one is important and which one isn't. It is not a big deal but a little bit annoying.

Obviously, this might affect your privacy a little bit if bad things happen, so just keep it in mind. Might not be the best practice so if anyone has a better way to manage them you should check them out too. CMIIW.

Saya coba ikut periksa dan totalnya masih sama, 0.00169076 BTC. Dulu saya pernah ingin beli copper membership dan sudah visit ke link tersebut, tapi saya lupa untuk screenshot/buat catatan tentang harganya, jadi ga bisa verifikasi juga. Tapi dari beberapa thread yang ada di forum mengenai membership ini, sepertinya harganya berubah-ubah. Berikut beberapa thread yang saya temukan:

- https://bitcointalk.org/index.php?topic=5282467.0
- The cost of copper membership will rise considerably

Mungkin fee yang om Husna bayar itu ada di saat harga BTC sama dengan harga sekarang, atau memang sudah ada perubahan mengenai kalkulasi fee itu sendiri. Terlepas mana yang benar sepertinya harganya dipengaruhi harga BTC, signifikan atau tidak.

Mungkin kasusnya sama dengan fenomena hacking dengan mengirim gambar di WA yang pernah trending dulu om, memanfaatkan eksploit ketika aplikasi WA/Android pada umumnya membaca file gambar atau audio. Terlepas ini bug app atau Android itu sendiri, paling aman ya menghindari membuka file dari orang asing daripada gambling dengan kemungkinan file yang dikirim malware atau bukan.

Saya coba cari update terbaru sepertinya masih simpang siur. Ada yang bilang bug atau fitur yang dieksploitasi oleh hacker tersebut sudah diatasi, ada juga yang bilang tidak.

Agak kecewa juga dengan Telegram mengenai paywall filter pesan ini, karena saya rasa ini bukan hal yang seharusnya opsional tapi wajib mengingat penyebaran malware sangat mudah dilakukan. Untungnya fitur nonaktifkan auto-download masih free jadi masih bisa diakali. Kalau fitur itu juga dijadikan paywall saya rasa waktunya pindah dari Telegram tiba.

Correct me if I'm wrong but even if others play games with stolen money, there is no direct harm to you or anyone. Isn't the real "loser" in this case the casino itself if those users can win big and then never bet again (or complicate them with money laundering issues)? Why do you want them to play with you on "equal ground"? To borrow from a gaming term, this is not a PVP gacha game where more money equals more wins by beating other players (except for getting bonuses when they make profits).

Also, I don't think the "I have nothing to hide so here's my ID" is really a good stance in this case. There are tons of sites that use those data for malicious purposes. I definitely would not prefer a site over another just because they offer KYC verification if the team itself is not clear. This might sound like a contradiction, but it is really hard to "trust" new businesses if they don't show anything that can be traced back to them if things go south. In this case, I'd rather wait and see or use them carefully with less money and always withdraw my money when I finished my business. Which is why I think a trustless platform would be great to have.

That sounds capitalistic. I doubt China loves something like that (the ideology itself, not the economic system). There is so many news on the crackdown on gambling platforms so it makes sense that those players will use overseas platforms if they want to gamble. I don't think this is surprising anyway, people would try to break the law if opportunity arise when they consider it is worth the risk.

Thanks for accepting me. Latest posts count: 8461

Reposting just in case you miss this. I can accept the new payrate.