Bitpay is cancer. However, you can use this tool to get the address out of the stupid bitpay link: https://alexk111.github.io/DeBitpay/You can also download the tool itself and run it locally (to be safe against future changes etc.). Note that i didn't use this tool, so i can not guarantee that it works 100%. However, quite a few people already had success using this tool and i don't know a single case where it didn't work / something wrong happened. |
|
|
|
You do not understand that I cant find the reason for this theft, because i followed the basic rules in security or a lot more.
Obviously not. The mistake is that it's so easy to steal money. Paradise for hackers.
Only if you don't know how to protect yourself. The more you use Electrum the more you are exposed to theft. And this is fact, what I am deeply regretting
That is not a fact, but simply wrong. Electrum can not protect you from your ignorance. A software wallet can not be more secure than your overall setup / computer. Electrum is generally poorly protected against hackers, and these thieves will be more and more.
No, YOU are poorly protected. YOUR computer is poorly protected. YOU have chosen the wrong security measurements (if any at all). The most frequent collapse of the stock market was breaking into a cold wallet, write me in that case how is it possible?
Completely offline, of course. Or.. if the attack happened online, it wasn't a cold wallet. Poorly implemented then. Instead of blaming electrum, accept your mistakes and try to find your weak spot. |
|
|
|
I wasn't any other website to download anything.
Unfortunately you followed the URL in the message to a github repo which does not have any source code published, but just a single executable file. And obviously you have downloaded and run this executable. You might want to increase your level of awareness. It is always recommended to verify the signature of the file you download. Only trust files signed by the developer of electrum. |
|
|
|
That's dangerous sciolism. You can either 1) Strip off https completely, which is visible because you are connected via http then. And not every website allows http access. Any half-way attentive user should notice that or 2) Use a faked certificate. Your browser will show a warning in this case. The only way to do that without a warning is by installing a new CA on the targets machine (with access to a targets machine you have more trouble than just a fake certificate) Now, the question is, what can a MITM attack do on a Bitcoin Core?
Let's suppose we are on the same network and we start spoofing all data from the Core machine, since the transactions are signed on the computer and then broadcasted to the network the information the attacker could get is the signed transaction, so, in that part, there is no risk at all. But what happens if the node is connected with rpc, when we connect bitcoin node with some language like JS we need a user and password to make rpc calls, if someone spoof that data and gets that username and password, he could get access to bitcoin-cli calls and steal all the balance.
So, this was just theory, what do you think guys, is possible to affect bitcoin with this kind of attack?
Yes. RPC calls are not encrypted, afaik. Don't use RPC in an untrusted network or build something around it (e.g. simple encryption). |
|
|
|
I tried to use Electrum but the receiving address is not the same as the sending address.
Is there any software or app or a website that provides you with a Bitcoin wallet - where your Bitcoin Address remains the same for both sending and receiving without any changes whatsoever?
You can only send funds from an address which you received BTC to earlier. And address stay valid forever. So.. you can always receive BTC to the same address. And if you only receive funds to this address, you only can send BTC from exactly this address. Even if you receive funds to a different address, you can choose the inputs to consume from the 'coins' tab in electrum. Wallets do only create additional addresses for you. You don't have to use them. You can either only use one private key in a wallet or simply create 'pay-to-many' transaction spending the whole balance (one part you want to spend, the rest back to the same address). |
|
|
|
[...]
Ich halte für jeden Beteiligten eine Lösung wie CoinJoin für besser, weil es keine Möglichkeit gibt irgendeinem da irgendetwas anzuhängen.
Ok, geht halt erst ab 0.1BTC...
[...]
Coinjoin ist "ok", aber nicht wirklich gut. Das anonymity set beträgt (z.B. bei wasabi) gerade einmal 100. Das ist vielleicht gut genug um den neugierigen Nachbarn in die Irre zu führen, aber für Bundesbehörden (oder andere Akteure mit viel Macht / Wissen) ist es dennoch möglich (nicht einfach und immer, aber dennoch) jemanden zu tracken. Das 0.1BTC Limit ist auch bei Wasabi so "voreingestellt". Prinzipiell funktioniert Coinjoin auch bei kleineren Beträgen. Und ich meine, dass ich gelesen habe, dass sie das Limit auch senken wollen. Payjoin und Payswal ist, was wirklich einen großen Gewinn an Privatsphäre darstellt (Für Interessierte: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-April/016888.html). |
|
|
|
Worth to note: Do NOT use pywallet on your file without backups. The chance exists that the file won't be accessible / readable anymore after you run pywallet on it. There already were several cases. Always have one (or multiple) backups of your wallet file before trying to use some tools to gain access to your private keys. |
|
|
|
Here is my review. The mixing process itself went smooth and without problems. However, i still have some suggestions for improvement: - Google Analytics: Please don't use it. That's absolutely horrible. Especially for a mixer where user want some kind of privacy.
- Maybe remove accidentally pasted extra spaces at the end of an address (Your site shows '... is not valid BTC address') to prevent copy/paste inconveniences
- You got a misspelling diretly under 'precise payment mode': It is anonymously, not 'anonimously'.
- Personally, i don't like the fact that i have to trust 2 parties (you and [banned mixer]). Is there no way for you to build your own mixing service ?
- The data is not encrypted between the customer and you, but between the customer and cloudflare. Please use your own certificate. They are literally for free. That's a huge loss in privacy.
- You make 2 receiving addresses mandatory, but do allow the same address in both fields. -> Either allow using only one address or prohibit the use of 2 identical addresses.
- To receive 0.001 BTC, i need to send 0.0013 BTC. But at the bottom of the page, if i enter 0.0013 BTC into the 'You send'-field, i get 0.00109 shown in the 'You receive'-field. That's somewhat weird.
- Even after my transaction got 10 confirmations it still showed 'Awaiting confirmation'. Maybe change that to 'Transaction has X / Y confirmations'. How many confirmations do you require ? If the TX has enough confirmations, change that to 'Transaction confirmed, processing..' or similar.
Wasn't i supposed to receive 2 transactions? I have entered the same address in both fields and received one transaction. If the concept is to receive 2 transactions, it should also happen if i provide the same address twice.
My bad, missed the 2nd transaction.
- Don't use Google Analytics. Really, just don't.
Edit: I have received my reward. |
|
|
|
I'm not really good at this
Can you help me?
Then.. the question appears what you need that for. Most people here don't have time helping you in your silly attempt to bruteforce / crack some private keys. It simply is not possible. Why should we waste our time helping you doing some illegal stuff which isn't even possible to accomplish? This is a waste of time. For everyone. If you have valid reasons for that list, you probably should figure it out yourself. Since whatever you need that for probably requires basic knowledge regarding data processing. Feel free to outline what the purpose of that list is. |
|
|
|
A bit ugly since the formatting is slightly buggy, but does what it is supposed to do: https://archive.fo/vAhY0Supported. |
|
|
|
Personally I recommend you create an image of the drive before you start playing around as you might overwrite sensitive data
and have it as a backup.
Recovery attempts should never be done on the original drive. From a forensic point of view, one should create 2 images (raw copies) and perform recovery on one of them. Then after trying out a specific tool, a new raw copy should be created to try further recovery software on it. One backup should always be kept safe and the original drive should never be touched with recovery software. These are the basics of forensics. |
|
|
|
A list can be found on https://yadi.sk/d/b-Ap5lIoznL1IA. It has been posted by tkastet: It includes all addresses with balance until 17.06.2019. Note, that i can not guarantee what kind of file that is. It has been posted by a newbie. |
|
|
|
Is there a way to find/export all addresss, hash160, amount above certain number to TXT or other file?
addresss, hash160, amount
If you are - with 'hash160' - refering to the RIPEMD-160 hash of the public key.. that basically IS the address (at least all you need to get the address from). So.. currently you are basically asking for address, address, amount. What exactly do you need, and what for ? |
|
|
|
One option would be to use a trusted wallet recovery service (e.g. https://walletrecoveryservices.com). You don't explicitly need to give your wallet away. Especially do not answer newbies which claim to help you. Further there are some 'professional' wallet recovery services around here which seem to be not that professional at all (i.e. Trying to sound professional, but sharing way too many misinformation). I would suggest to be careful and not answer anyone via PM. Also don't trust every recovery service which had success in recovering a few wallets. |
|
|
|
If you want to be absolutely certainly 100% sure, just put some junk data afterwards on the mobile to fill up the storage which will lead to all data being completely overwritten (instead of simply being marked as free space).
You mean this should be done after I transfer (backup) all my files / privkeys / wallets to another device, right? You need to backup all important data first, of course. Then - since your mobile is encrypted already (automatically in android 7) - simply wipe your mobile and fill it with junk data. Afterwards you can be sure that no data can be recovered anymore. |
|
|
|
Alright, seems like you are correct. So their ToS were illegal from the first day. Doesn't change much IMO. |
|
|
|
If you come in my thread, accusing me of scamming, throwing shit on my work, i have all rights to defend myself, especially after i replied to every accusation in an educated way.
But unfortunately your 'replies' were nothing but hot air. The whole concept (a.k.a. your service) doesn't make any sense. Giving you control over funds so that you can make us rich, is retarded. And you argument that the winnings are higher if more people follow the same strategy is just absurd. Why not make it public so that every trader can use it? I guess everyone would win then, right? No more loser  If that really would be the case (which technically is not possible), the best you could do is to open source it so that a big amount of people can use it.. "more passive income" for you You are delusional if you believe you can catch someone with this obvious scam attempt. |
|
|
|
Then I knew little about the rules of the forum.
These are less 'rules of the forum' than common sense. You should have known that plagiarizing is not allowed and will be punished. Or how would you describe your behavior by copying posts 1 to 1 ? You didn't even add anything new.. you simply copied them. What was the reason for that? I later wrote a lot of constructive posts. Earned merit.
18 merit from 740 posts isn't much.. |
|
|
|
Livecoin is extremely shady and has multiple scam accusations open against them. Their ToS seem to be against law. While i do almost never agree with quickscammer, he has a point here (even if it plays into his hands regarding his stupid 'vendetta'). The scam accusation against livecoin is valid and the flag also seems to be appropriate. Silently changing their ToS to forbid talking about 'issues' is not acceptable. Neither is their behaviour regarding this (ignoring everything and threating to seize the funds). Anyone is up to do/think whatever he/she believes. But you should at least read the whole accusation thread and make your mind up. If you don't want to leave the campaign until there is undeniable proof and additional scamming happened, that's fine. But don't ignore the problem. |
|
|
|
I am up for reviewing your service, too  |
|
|
|
|
Show Posts
