Two-factor Authorisation is useful for some people, but other things that have been suggested are useful too and would stop this. Its possible to make the account secure, even IF the password becomes known to a dishonest person, so why not do that? 2FA certainly does not suit everybody.
Actually its hard to say vote with your feet because thats the problem: there are not that many exchanges, and for many practical reasons the choice often comes down to 1 or 2. The exchanges therefore become complacent because people dont vote with their feet.
But you can be sure it reflects or will reflect badly on bitcoin even though actually it has nothing to do with Bitcoin. If someone using Bitcoin for a year can loose 200 BTC, then they are hardly a Noob.
I would strongly and politely suggest to the exchanges that it is very much in their own interest to implement these things. And it will be all the better for Bitcoin if they do, so lets start writing emails to our favourite exchange. I already have!
So when do you actually take responsibility for securing your funds? First off IP geo will be a pain for most people, I know I change my location a lot thru my VPN's and just internet connections, now if I am using Mt Gox, I can't. So that option is out. Second now you want to setup withdrawling that takes a couple days, that defeats the purpose of bitcoins. It suppose to be quick transfer of wealth. Do you not see how these while you may think better protects the user, are the users responsibility and if you can't setup up Google 2 Factor Auth or buy a Yikub key then maybe you shouldn't be using an exchange. Look at ATM's it is one pin code, that you have and if someone gets hold of it then your screwed but do you line up at the bank going add that they have to show there driver's licenses no you accepted it because you know that is your responsibility to not share it. You expect the job of the bank to be secure inside, you deal with outside. TAKE RESPONSIBILITY FOR YOURSELF, I THINK TOO MANY BITCOINERS DON"T UNDERSTAND IT and frankly it is boring to keep iterating this point to people. |
|
|
|
If you really mean small then they might not be for you, but OrangeWebsite.com is in Iceland and has been reliable and helpful for over a year. They accept bitcoin.
By small I mean big, hehe. Are there other bitcoin casino sites hosted with Orangewebsite? I cant seem to find any information like "the best would be to host in this country.." etc or something similar, I hope someone has some information or know what steps to take. Any good advise will be rewarded once we are up and running  Any country with legal online gambling should be fine, UK could be one place. |
|
|
|
You're talking about separate users of a Windows computer in your household? I think that the standard installation of Bitcoin-Qt already has separate wallets and seperate copies of the blockchain for each user, doesn't it?
It has "accounts" which is an arbitrary implementation of bitcoin-qt, you cannot however encrypt individual users and you cannot let every user download his wallet file if need be. Are you trying to create a web hosted wallet service like https://blockchain.info/wallet or are you just trying to allow multiple people who are sharing a computer each have their own wallet on that computer? I am looking for something more geared towards blockchain.info although not the same at all, performance wise it should be just as efficient as a commercial product. If your trying to create a blockchain.info like site, I highly discourage it cause the reasons blockchain.info is so good is the hybird wallet system, which I don't think you have full grasped the concept of yet from this thread. |
|
|
|
So, I guess we all agree that MtGox is making a half-assed job of their security, can anybody tell us why they aren't upgrading this?
Half-assed job of security is kinda strong don't you think? I mean where does security on the consumer side start? 2 factor auth is the saving grace if you don't have that you can kiss your coins goodbye. Then you don't need all those bells and whistles which would probably cause more issues then they are worth. I think as long as Mt Gox isn't getting hack and leaking bitcoins from there wallet, I say security is good then. Take some responsibility, don't make Mt Gox your mom. Well perhaps it's a bit too strong worded, they did gave me a free yubikey after all. However, since Bitcoin transactions are non-reversible and it is a lot harder to find out who stole your coins compared to fiat, I think their security should at the very least match that of traditional banks. And when I see that simple solutions as IP restriction aren't implemented and 2FA isn't required, even for very large transactions, I can only say their security just isn't good enough. And let's face it, there is ample evidence of people losing their money on MtGox, so much that it's hard to maintain it's all the consumers fault. So can you show me an example of someone that has used 2FA and has been rob? It is the carelessness of people that use the service. I am sorry but I don't see any reason why they need all these bells and whistles when they have something that is proven and works the best. You also can't require 2FA cause not everyone has a smart phone, trust google, or can afford an yikuby key. |
|
|
|
You need to do, $ ./Applications/Bitcoin-Qt.app/Contents/MacOS/Bitcoin-Qt -rescan
|
|
|
|
Anybody can fork the Satoshi client or create a compatible client, and in fact several forks and compatible clients exist.
But think of this Satoshi Client is the only full node there is no other node that is a full node, they have a monopoly on that client. |
|
|
|
So, I guess we all agree that MtGox is making a half-assed job of their security, can anybody tell us why they aren't upgrading this?
Half-assed job of security is kinda strong don't you think? I mean where does security on the consumer side start? 2 factor auth is the saving grace if you don't have that you can kiss your coins goodbye. Then you don't need all those bells and whistles which would probably cause more issues then they are worth. I think as long as Mt Gox isn't getting hack and leaking bitcoins from there wallet, I say security is good then. Take some responsibility, don't make Mt Gox your mom. |
|
|
|
|
Bitcoin foundation it is one thing that you want to believe is a good thing but makes it so hard to do that. I have yet to see anything being done, but to throw a conference that would still cost $300 to attend.
To pay Gavin a salary which we then learned cause he is in deposable, which then makes bitcoin really centralized in that fact.
Two of the biggest bitcoin businesses both hold seats on the foundation which are monopolies since there is no checks or balances, at least get another exchange on there like btc-e or bitstamp CEO, and a another cash to bitcoin site CEO.
I could go on and on but it has been hashed again and again.
Bitcoin foundation is just for the elitest people that want to dance around and say look me I love bitcoin more than you...
|
|
|
|
Yes when you have over 200,000 bitcoin addresses, the bitcoind system starts getting slow, and I want to make it faster, this would be one way. I guess one day I will be taking to write a script to clear it out. did you once already had more than 1 million addresses? still looking for a solution to manage 46M adresses. sry for topic hijacking! what? did you manage to have a working wallet.dat with atleast 1m addresses? nope that was someone else I think I remember that thread or something |
|
|
|
Yes when you have over 200,000 bitcoin addresses, the bitcoind system starts getting slow, and I want to make it faster, this would be one way. I guess one day I will be taking to write a script to clear it out. did you once already had more than 1 million addresses? still looking for a solution to manage 46M adresses. sry for topic hijacking! what? |
|
|
|
May I disagree with the bold part.. IMHO greed is a distortioned value, before the years 1900, most poeples where not greedy at all. Gives everyone what they need to survive and be happy, (nice food, quality shelter, toys, leisure), greedy suddently become useless and more a burden than anything else. Greed is a by-product of a capitalist oriented society ! Sorry for this "may seems" excessive tought  Greed is doing things in your own interest. In humans the only way to keep your genetic markup in the gene pool is by surviving an procreating therefore humans are inclined to do things which: 1) Increases their chance to survive 2) Increases their chance to procreate 3) Increases the chance of their descendants (the closer the better, so preferably children) to survive 4) Increases the chance of their descendants (the closer the better, so preferably children) to procreate 5) Same thing for other non-descendant family This is what I define as greed. Gordon Gecko agrees Greed is good... I had to slip that line in But on a serious note, ever since human existence there was greed. It is competition of who is the best. Look at human history how many times a person screwed over another person just to be the best. A lot of that times is in monetary value so you can see greed is what drives us most the time. |
|
|
|
Im assuming you mean have a wallet in cold storage and use blockchain.info to watch your address and notify you of any incoming transactions?
That does not give you trustless verification.
You would have to trust blockchain.info to be telling you your balance and incoming transactions.
Lets assume the owner of blockchain.info or a hacker who compromises blockchain.info servers wants to get your goods without paying for it.
He can alter the blockchain DB and post fake incoming transactions to your address which you will trust and ship out your goods.
Without a full client running, you have to trust someone.
You could do it trust-less,it be a pain but could be done |
|
|
|
If you are running a Bitcoin business selling goods/services and need to receive Bitcoins, a full client is your only logical choice.
A full client is the only way to verify transactions, check for double spends without having to trust anyone else.
You could use cold storage and blockchain.info inside of a full client, I have implement that before. |
|
|
|
Eventually 2 naked women will debate something.
Not going to lie that sounds like it could be fun |
|
|
|
You'd have a hard time figuring out what addresses to remove. If you make a script to "remove addresses with 0 balance and all their transactions if they previously received coins", it may remove persistent receiving addresses like 1gweedo, etc, and such a task would only work correctly if the information in the wallet is actually correct. It would be much better to just dump the private keys of addresses you want to keep and send the balance to a new wallet.
well these addresses are for one off transactions, that people know about that. I also need to keep the accounts intact, I mean the worst case I can rebuild the accounts from the database. I guess it is back to testnet and see what works. |
|
|
|
I think you missed the point but I really getting annoyed by people that don't want to take responsibility this is kinda why our economy is messed up. BUT lets say you mail money to someone and someone intercepts it, no one cries the dollar is unsafe they blame the mailman and the person for not securing it properly.
That point is of course quite true, however, it is basically illegal to send money through the mail for that very reason. Although I agree with taking personal responsibility unfortunately I think that the majority of people in the world simply do not (that's why we have unions and government handouts, etc.). Bitcoin is not going to win any supporters if it just takes the attitude "sorry but you are just too stupid to use this" (this last was about attitude at not any sort of attack on the OP btw). I don't think we are calling anyone stupid or something like that. It is like the internet in general, you have to teach people a new type of security to protect themselves. I think people hate to learn those new steps and procedures to do that, but that is the price of this currency and really any new security or attack point should change your thinking. |
|
|
|
Yes when you have over 200,000 bitcoin addresses, the bitcoind system starts getting slow, and I want to make it faster, this would be one way. I guess one day I will be taking to write a script to clear it out. |
|
|
|
So a person robs a bank, do they go oh no the dollar is unsafe, lets not use it, or identify theft in a credit card scam. This is so false, doing transactions with a web site in any matter currency or just information, with out the proper security is at risk.
A bank is insured - it seems Mt. Gox has *zero* insurance for their BTC and another huge difference is that every other type of internet payment *can* be reversed (as anyone trying to *sell* BTC with another payment system knows all too well). I think you missed the point but I really getting annoyed by people that don't want to take responsibility this is kinda why our economy is messed up. BUT lets say you mail money to someone and someone intercepts it, no one cries the dollar is unsafe they blame the mailman and the person for not securing it properly. |
|
|
|
No one cares about that, what people care about is being able to use it as money. Thefts and scams are black eyes for bitcoin. Every person who loses 4k because of scammy bitcoin tells 100 people about it and do you know what they say?....They say well f@#$ bitcoin they dont ask.. well was it double encryption with yubikey did you have finger print verification, did you have retinal scans? did you print out your paper wallet then bury it in your back yard?
So a person robs a bank, do they go oh no the dollar is unsafe, lets not use it, or identify theft in a credit card scam. This is so false, doing transactions with a web site in any matter currency or just information, with out the proper security is at risk. |
|
|
|
|
Also can BTCJam add google auth for access to the account?
|
|
|
|
|
Show Posts
