Bitcoin Forum
July 04, 2024, 04:20:03 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 [143] 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 »
2841  Other / Politics & Society / Re: Coronavirus: How can YOU help? on: February 17, 2020, 05:14:52 AM

If you had to, would you be ready to self-isolate yourself for two weeks?
If I were to get infected, I wouldn’t have much of a choice if I wanted to not infect others.
2842  Other / Politics & Society / Re: Coronavirus: How can YOU help? on: February 17, 2020, 03:30:52 AM
Individuals need to educate themselves on how to protect themselves from contracting the virus and if they get it, educate themselves on how to avoid spreading the virus. They would need to take these precautions.
2843  Bitcoin / Hardware wallets / Re: Yes, the Keepkey is a worthless black bricklet on: February 17, 2020, 03:25:31 AM
Why do you need to buy bitcoin with a debit card? If you are willing to link your checking account, you can use a larger variety of exchanges. You would probably have to wait a few days each time you deposit money into your exchange account.

Accepting debit cards is risky for an exchange and you are going to have to pay a premium for that risk if you are buying coin with a debit card.

I saw marketing materials for the keepkey and my initial thought is it is a marketing gimmick for shapeshift. My guess is keepkey doesn’t support many altcoins that are not available via shapeshift.
2844  Other / Meta / Re: How to do private giveaways on: February 17, 2020, 03:02:06 AM
Would you consider allowing a random contest to be performed this way? For example, there will be only one item being shipped chosen from all entrants. If only one person is receiving an item, there is no reason for everyone to send their shipping address, and choosing out of unpublished codes can lead to possible claims of not actually giving anything away.

It could work like this, anyone eligible can claim a code until a deadline, a random function could be used to choose which code is the winner and the winning code could be published so whoever has that code can send their address to receive the item.

Another request would be to publish the number of eligible accounts that meet the criteria so anyone considering to participate can decide if they want to have their address associated with that small number of accounts.
2845  Economy / Currency exchange / Re: Selling 4.7 BTC - I want to sell integers or fractions on: February 16, 2020, 11:55:09 PM
Today wallet Screenshot
https://imgur.com/a/4c2UGZu
Your "wallet screenshot" has a QR code saying that 3Af5Jj7PoPDiMeYN34XQZcagWnXwpQQCxn is your address.

3Af5Jj7PoPDiMeYN34XQZcagWnXwpQQCxn has never received any coin...
2846  Bitcoin / Hardware wallets / Re: Kraken Security Labs just 15 minutes to hack both of trezor's crypto hardware on: February 16, 2020, 10:23:39 PM
I would argue that many people also use very simple encryption passwords out of convenience because of the frequency they need to decrypt their machine.
Yeah, agreed.

I use whole disk encryption on all my devices. The decryption key for my laptop which I use day-to-day for emails, work, etc. but not for my crypto wallets is around 100 bits of entropy, because as you say I have to enter it probably 5-10 times a day. The decryption key for my airgapped device which I store my cold wallets on is just short of 300 bits of entropy, because I wanted it to be at least as secure as a 24 word seed phrase. I only have to enter this maybe once a month, if that.
It really comes down to balancing security vs convenience. it is also a balance of security vs being able to memorize your password. If you have a complex password full of entropy, that is great and all, but it kinda defeats the point if you can't decrypt it because you forgot your passphrase.
Quote
I know that I'm an outlier here though. I also know from experience in my workplace that people are horrendous when it comes to password security. Same password for everything, names of their spouse, family members, or pets (or even their own name!), passwords written down in their notebooks, even passwords written on the underside of keyboards. I would be hopeful that if someone is technical enough to be using whole disk encryption they are also smart enough to be using long random passwords, though.
In many companies, writing passwords down as you describe would be a 'clean desk' violation. Many companies also utilize some kind of Single Sign On technology that allows employees to use a single username/password combination across (nearly) all services requiring authentication; in these cases, all the applications are run by the same company, so the risk of 'one' password leaking is not the same as it in normally, and companies usually keep track of unsuccessful login attempts, and will lock accounts upon a small number of attempts. Using a weak password to a service or application is bad, but not the same as having a weak encryption key.


Back on topic....if your device holding coin is subject to a physical attack, I would suggest you consider it to be eventually compromised. If this is part of your threat model, you should create countermeasures that involve you discovering, or being notified of the physical attack quickly, and use other countermeasures that delays the time from the physical compromise to the compromise of the keys.

It bears repeating that a trezor allows you to have multiple passphrases, so you can have a simple of moderately complex passphrase securing a low to moderate amount of coin. If any attacker physically steals your trezor, and can discover your simple passphrase, they need to make a decision if they want to continue looking for an additional passphrase, and if they want to spend the coin they have discovered. You can monitor the coin being secured by the simple passphrase, and if this coin moves, you can move the coin being secured via a more complex passphrase.  

I wonder if it is even technically possible for Trezor to enforce passphrases by default in their wallet? The passphrase functionality is currently "hidden" in the advanced settings once you get the wallet setup and I believe it actually sets a flag within the device so that the web interface asks for a passphrase during wallet unlocking.
No, it is not. They could enable it by default, or prevent it from being disabled. None of this would prevent someone from using a blank passphrase, or a very simple one such as zzzz
2847  Other / Meta / Re: Save your nice merit records, here. on: February 16, 2020, 09:19:50 PM
500 merit!
2848  Bitcoin / Development & Technical Discussion / Re: Quantam: How Long Before Computers Crack Private Keys on: February 16, 2020, 09:15:40 PM
This is partly why I am concerned anytime I read about internet traffic getting routed through China temporarily in “error” as the Chinese government can capture the encrypted traffic and potentially decrypt it once they develop the technology to do so.

Bit of an aside, but China are probably the world leaders in quantum cryptography (using quantum mechanics to build quantum-safe solutions that are fundamentally unhackable due to the laws of physics). Have a look at their work with Micius, part of their QUESS (Quantum Experiments at Space Scale) project. They have already demonstrated quantum key distribution (QKD) wirelessly via satellite, generating a pair of entangled photons using an interferometer. Their aim is to have a global quantum network in place by 2030...

... and if they are that far ahead of the game here, I certainly wouldn't bet against them being first to develop a proper QC capable of real-world decryption.

You are describing something on the other end of the equation, that is something that would serve as a countermeasure to QC cracking encryption.

I don't know if the Chinese scientists came up with this technology/ability on their own, but I do know the Chinese have a long history of stealing technology from the West. If a western company working for a Western government originally created this technology, it may not be publicly known.

I also believe that QC and QC proof encryption are two separate and distinct technologies. I don't believe having the ability to do one does not necessarily make it easier to obtain the technology to have the ability to do the other.

Yeah first person to be able to crack keys 🔑 in a reasonable time will not want to do so in a blatant way.

Just a piece here or there. Better yet maybe take out an exchange wallet since they have claimed being hacked more then once.  Just think grab 10000 coins from an exchange. The exchange will claim hack we all will think bullshit. 💯 million score. No one the wiser.
This technology is very valuable. Its value will decline if it is known the technology exists. My prediction is the technology would be more valuable, and probably more costly to create than a few thousand coin. Someone with QC technology that can crack encryption quickly will not only target cryptocurrencies, they will likely be used by governments to steal rival governments' secrets.

The value in being able to trivially steal a rival government's secrets can probably not be measured in dollars, but rather in millions of lives (of its own citizens/military) possibly saved in the event war breaks out.

This technology would be very valuable to whoever creates it, and its value would decrease if it were to be known to exist.

We can't think only in terms of profit-based incentives. Some adversaries -- like nation states or a consortium thereof -- could permanently destroy faith in Bitcoin by releasing this sort of quantum computer in the wild. That may be incentive enough.

Using QC technology to destroy faith in cryptocoins might allow a country to collect more tax revenue, or maintain better control over its citizens, but this is nothing compared to a country's ability to learn what other countries are doing and know. This technology would also prove useful in warfare:

Last year the US downed an Iranian drone near one of it's warships with technology that disabled the drone. I don't know the specifics of what the US ship did, nor the underlying technology. Imagine a country could prevent another country's war planes from taking off (or from continuing to fly), or could send a signal to change the course of another country's missiles that have been launched.
2849  Economy / Reputation / Re: Spineless cowards making posts on: February 16, 2020, 08:42:53 PM
There have been many questionable tags given to users,
I think you answered your own question as to why the person referenced in your OP created a new account to voice his concern.

If you don't want to see this type of thing happening, you must push back against every tag that is questionable, and other people need to do the same. This will continue until it has been a long time since that have been any tags you describe as "questionable".

I have noticed your aversion to participating in forum drama, and I don't find this unreasonable. There are plenty of reasons to want to avoid participating in drama....it is exhausting, it is often childish, this is not the reason why most of us have come to participate in the forum, and applicable to the liberals, it means someone disagrees with you.

How often does a fake newbie brought up a credible accusation that results in some sort of benefit for the forum,
I think it is probably safe to say Hhampuz appreciates a "fake newbie" (I don't believe that person ever claimed to be a new user) bringing up the subject. Based on his response, it is safe to say that Hhampuz felt obligated to repay the campaign participants.

Taking this presumption, it is much more reasonable to delay paying participants two weeks today than it would be if someone else complained six months from now.

versus just some random drama bullshit?
Don't you think this is a little bit like the pot calling the kettle black?
2850  Economy / Auctions / Re: MoriartyBitcoin.com - Hottest domain is for sale on: February 14, 2020, 09:41:35 PM
Are you the original owner of this domain? If not, who did you buy it from?
2851  Economy / Services / Re: [CFNP] SmartMixer Signature Campaign | Sr./Hero/Legendary Members on: February 14, 2020, 08:46:15 PM
In light of this announcement, I would like to request that the address for next weeks payment be updated to one belonging to Hhampuz, on the condition that if Hhampuz is reimbursed from that company (fully, or in part), that the first $25 be sent to me. After next weeks payment, I will update my payment address.

I believe Hhampuz is doing the right thing and he should be recognized for doing so. This is true even if this isn’t something he has any obligation to do. 

I’ll message him now, but in full disclose it’s frifau and I’m getting fucked up.  Anything from me at this time on a Friday is likely to be controversial or inflammatory. Give me 12 hours and I’ll post again on his behalf and ask for signed messages and the likes..

Cheers all

Signing of
Hhampuz’s temporary bitch assistant
The payment is not due to be paid for a week and if he ends up sending me the payment I will just forward it to him after getting an address.
2852  Economy / Services / Re: [CFNP] SmartMixer Signature Campaign | Sr./Hero/Legendary Members on: February 14, 2020, 08:34:04 PM
In light of this announcement, I would like to request that the address for next weeks payment be updated to one belonging to Hhampuz, on the condition that if Hhampuz is reimbursed from that company (fully, or in part), that the first $25 be sent to me. After next weeks payment, I will update my payment address.

I believe Hhampuz is doing the right thing and he should be recognized for doing so. This is true even if this isn’t something he has any obligation to do. 
2853  Economy / Reputation / Re: Is Hhampuz responsible to pay $850 to Blender.io participants? on: February 14, 2020, 04:35:45 PM
Disclaimer: I am currently participating in a signature campaign run by Hhampuz and have been for some time.

I looked at the OP of the campaign thread and don’t see anywhere that says Hhampuz is guaranteeing payments, nor that he is escrowing the coin to pay participants. There is the quote LoyceV posted above, but that is ambiguous. For these reasons, I don’t believe Hhampuz is obligated to pay participants. I also believe it would be wrong for someone to demand payment from Hhampuz.

With that being said, Hhampuz is going to have difficulty attracting quality participants if this kind of thing happens on a regular basis. I think the right thing to do is warn participants that he doesn’t have the coin from the business owner and participants can decide for themselves to take the risk of not getting paid, if Hhampuz does not want to guarantee the weekly payment.

I have zero interest in managing signature campaigns, but if I were in his position, I would extend credit to the business for one week to pay participants out of my own pocket.  I would also structure what I get paid so that if businesses don’t pay me, I am still making money and would set the expectation that businesses should pay upfront.
2854  Bitcoin / Development & Technical Discussion / Re: Quantam: How Long Before Computers Crack Private Keys on: February 14, 2020, 03:21:38 PM
If the technology ever exists with the ability to crack private keys ever exists, it will probably not be used to steal any crypto, and probably not on a large scale. QC will not be able to calculate your private keys if you have never published a signed transaction with the specific private key securing your coin. This distinction may be moot if technology exists to calculate a private key within under 10 minutes.

This technology would be very valuable to whoever creates it, and its value would decrease if it were to be known to exist. If someone can use this technology in private, they can secretly decrypt certain communications and continue doing so, keeping this advantage. If the technology is public, companies and people will move to new and better encryption that QC cannot break. If someone were to use QC to steal coin, it would be obvious that someone has developed the technology and people will move to better encryption.

This is partly why I am concerned anytime I read about internet traffic getting routed through China temporarily in “error” as the Chinese government can capture the encrypted traffic and potentially decrypt it once they develop the technology to do so.
2855  Other / Meta / Re: Self Mod Topics In Politics & Society Are For Weak Children - Change My Mind on: February 14, 2020, 02:36:19 PM
When I open a topic in P&S, I want to have a serious discussion. I don’t mind educating someone on the background of a topic, but expect they have at least minimal knowledge of what my topic is about. There is also the type of people like the flat earth guy who is posting in the coronavirus thread; he is not a serious person and I believe is trolling and is being successful in derailing any serious discussion (even if what he says is technically on topic). Additionally, as of recently, I don’t like reporting posts that are posted incorrectly or otherwise break the rules, and self moderation allows me to remove posts myself that should be removed by a moderator if I had removed them.

I believe the above reasons are all valid reasons to create and use a self moderated thread. As long as you are not removing posts because you disagree with the content, I have no concerns with self moderated threads.

I also have seen some liberals using self moderated threads as a means to censor thoughts and ideas. This is a very good example of how self moderation should not be used and of people being unwilling or unable to defend their ideas.
2856  Economy / Exchanges / Re: Kraken issue a privacy invading subpoena against Glassdoor on: February 14, 2020, 05:55:25 AM
I read the reviews on Glassdoor, and I found a couple of things interesting:

*there is a litigation warning at the top of Kraken's page. IMO this warning is far more harmful than any of the reviews
*I read the negative reviews on Glassdoor, I would say they sound a lot like opinion to me, and as such are protected speech, and are not actionable
*In order to read the negative reviews in question, I had to scroll (sorting by date, descending) past several pages of positive (and few neutral) reviews, that appear to have been given in 'bursts', all given last year. This is after only having a small handful of reviews prior to the negative reviews in question being given. I found this to be very suspicious.

Business is slow for most (all) exchanges, and has been for close to two years now. It is understandable that Kraken had to downsize, and it is understandable they had to cut off access immediately. It doesn't sound like their severance plan (if they even offer severance) is particularly good. It doesn't sound like the terminated employees were treated particularly good after they were let go. If Kraken wants to remain competitive, and retain competent employees, they should treat their employees better when they lay them off, otherwise the ones that remain will look elsewhere for employment. 
2857  Economy / Service Discussion / Re: Some exchanges accepting Lightning Network on: February 14, 2020, 05:32:04 AM
From that list I only know bitfinex but it is still good to know there are others.
It has to be pointed out that whenever you deposit Lightning Bitcoin on Bitfinex, it posts in your account as a seperate (LNX) token. That token has to be converted to Bitcoin on the wallet page and vice versa if you want to exit through Lightning. I find it a bit weird that they don't credit it as Bitcoin right away, but perhaps there is a valid (security?) reason for that I can't think of right now.

I believe this has to do with their security precautions.

I understand they keep track of their wallet balance as per the blockchain, and compare that balance to total wallet balances as per their business records. I can't speak to their current specific procedures, but my presumption is if there is a large enough variance, they will stop processing withdrawals, and stop crediting deposits until they figure out what is wrong.

They probably have similar safeguards in pace for LN balances.

It is easier to keep track of various coin balances, and troubleshoot any problems they encounter if all balances are kept separate.
2858  Other / Meta / Re: Accusation topic removed? on: February 14, 2020, 04:47:35 AM

It might be a good idea to revise the later action to instead generate a report on the thread if any post on the thread has received any merit, so it can be manually reviewed to see if removing the thread really is appropriate.

I have no idea why the OP was nuked.
Thread received 2 merits, 1 from timelord and one from...quickseller.
Yes, I saw that, and that is why I made the suggestion. I rather a thread with good enough posts to receive merit to not automatically get deleted if the OP happens to be a very new user, and gets banned.


 User wrote 7 posts:

[img ]https://i.imgur.com/lE8FTxe.png[/img]

There are 4 posts dated in September 2019. (going to use google translator for this...context Huh):

Quote
brexit bence avrupanın başına bela olacak uzadıkça uzuyor
Quote
I think brexit is getting longer as Europe will get into trouble

Quote
1 milyar dolar iyi para. bitcoin artık bir çok yönden yatırımcı çekiyor hacim arttıkça fiyat da artar
Quote
1 billion dollars is good money. bitcoin is now attracting investors in many ways, the price increases as the volume increases

Quote
düzgün araştırma yapmadan yatırım yapılarak
Quote
investing without proper research

Quote
değişik bir projeye benziyor e ticaret çağımızda çok yaygın
Quote
It looks like a different project, very common in our e-commerce era.

....and 3 posts are accusations, third post in topic is "reserved" post. There are some other accusations and investigations in that topic, which are on topic. Account is nuked shortly after accusations (not after they posted 4 replies 5 months ago), but this stuff is not moderated.
As of when his thread was archived on jan 26, the 4 posts were deleted/removed, based on his activity count. Unless he made some additional posts, or sent some unsolicited PMs that broke the rules, he was nuked because of the thread referenced in the OP.

I think there is a good chance there may be a scandal in bitcointalkland in the near future.
2859  Other / Meta / Re: Deleted topic? on: February 13, 2020, 06:26:25 PM
The OP of the thread was nuked, which automatically deletes all their posts and removes all threads they have created.

It might be a good idea to revise the later action to instead generate a report on the thread if any post on the thread has received any merit, so it can be manually reviewed to see if removing the thread really is appropriate.

I have no idea why the OP was nuked.
2860  Other / Meta / Re: Do we need merit sources for low ranks? on: February 13, 2020, 05:33:16 PM
No. This is asking to either have a lot of abuse or a situation in which it would appear there is a lot of abuse (which would make actual abuse more difficult to detect). The majority of lower rank users post nothing other than crap and don’t deserve merit.

I have given out hundreds of merit based on merit (no pun intended), and most of the time, lower rank users are not deserving of receiving merit. If I was a merit source, I would give out merit based on if a lot of effort is put into the post, if the post makes a good point, if the post presents an interesting perspective, if the post is one that “we want more of” and similar reasons. I would not base sending merit on if they are a low rank, the only exception being if they make generally very strong posts and need merit to rank up to a high rank.  If merit sources follow this (I believe they mostly do, with few exceptions) low ranked users will naturally rank up.
Pages: « 1 ... 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 [143] 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!