Hey guys... i wonder if anyone of you noticed but cryptostocks went down on july 17th. Luckily it came back on july 22 but while checking things out with the issuer of cannabit, when cs was down, we found that kumala, who runs cryptostocks.com, did implement a very poor security against the exchange going missing.

When glbse.com went down all exchanges implemented a security measure to ensure that shareholders and their shares are known to the issuer. To do so the exchanges sent a daily email with the shareholders bitcoin address and his shares. The shareholder could proove the ownership of the shares by signing a message with that address.

Unfortunately kumala only implements the cryptstocks email into that list. On top some shareholders are missing totally. Oo Thats a really stupid security measure, but nothing new. Cryptostocks has override codes for 2FA codes for example too.

Anyway... when you want to be identifyable i suggest that you go into your account and check the option that your email is allowed to be seen by the issuer. You might change your account email if you want to stay anonymous before. But you need to show an email you control.

If you dont do so you will not be able to proof you own shares.

So i would like you to do that in the meanwhile. I hope that soon a more detailed post will appear here about the future of cannabit. There is one... So secure your shares for now.

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

And who did you the favor of teaching you that life lesson? Relatives, work buddies or what?

At the end... having such friends would mean they would steal your money too when they could... i guess.

Also wenn ich mich nicht irre dann sich Lieferservice und Lieferande keine Pizzafirmen wie pizza.de sondern einfach nur Vermittler für Fastfood bzw Bestellessen. Die besitzen keine Pizzaläden, die haben nur Verträge mit den Läden. Nach dem Motto "Wenn wir euch 80% dessen geben was ihr normal für eure Pizza verlangt, liefert ihr die Pizza dann aus?" Sie behalten die 20% (Vielleicht auch weniger) und die Pizzafirmen haben ein paar Pizzen mehr verkauft, wenn auch für weniger Gewinn.

Monopolisierung kann es daher eigentlich nicht geben.

Kann mich irren.

Yeah, i even think it could become a service. Either selling such bot for cheap, since its usefulness is limited, or having a website you enter the profile id and it counts the potential activity.

Guess someone needs to work on that idea and he could charge some pennies for a count. I think there are many professional account traders. They might use that service, and get a screenshot. Or, when it is a website, then the website owner could create a service thread an post a signature signed with a bitcoin address he posted. Then, on the website, automatically a signature is created that states the potential activity. The text can be copied and the escrow can verify that the account, named in the signature message, really has the mentioned activity.

Oh, is bitaddress.org yours too or did you rip their design only? I used bitaddress quite some time already.

Thanks everyone for the kind reviews. Till next time...


Yes iam. Its fastest du send me a pm and tell me the details.

Though you can get it back. Thats an advantage with credit cards. If someone stole from you then you make a chargeback. Thats it. Bitcoins are gone when stolen.

So really... one has to watch over his bitcoins very much.

I doubt they were created that way. But it doesnt matter. They are a honeypot anyway since since edward snowden we know that all the big providers of internet service are forced to let the NSA read every traffic they have. They are forbidden to speak about otherwise they would get real problems. There was a guy that ran an anonmous email service. He was forced to do the same but since he didnt wanted and there was no solution he simply closed the service. Even though it was a good business. Guess there are some standup persons in the US still.

Im not sure if its possible when you solomine, though i think there is no reason why not, but most probably he used a pool where he mined. He had an referrer and he added his referrers bitcoin address as the address where the mining income is sent to. So he lost the coins to his referrer.

They need to know the private key. Maybe they dont want to look into it but the wallet only can work when they know the private key.

So maybe an employee thinks he can steal a bit by withdrawing 1 bitcoin there, one bitcoin there and so on?

Besides that... why were the address emptied with 2 transactions then. Doesnt sound like op would have done it. And a hacker not too, because they would take all.

This address is empty now https://blockchain.info/address/19BWxdCtmTcWupG6tQjXZD7F4hDd6ftEri

Did you clear it? Then why in small jumps? And is 0.0001 Bitcoin the standard fee on blockchain.info wallet? If so then it might be a hint that it was sent from there and not with a private key. A small hint though.

But in fact i think the most probably answer is that you sent it yourself and forgot that you paid something at that time. Can happen for various reasons when you overworked.

Maybe you wanted to send from another address and chose another one?

By the way... is this address maybe part of a shared wallet? Your deposit address maybe? If its a shared wallet then this address doesnt belong to you.

Im  not sure now if blockchain offers that possibility.

But these percents arent exactly the price, right? These fibonacci rays are drawn on up and down trends. So to the eye of a trader it should look different all the time. Why still changing there?

I often watched price of bitcoin go that way from volatile to smaller curves... at the end trading nearly stopped in comparision to before. Mostly it will drop at that point.

I think the work involved is already very few. And all can participate. Creating automated processes might be more work and not help much afterwards.

Maybe too few know this project so that not so very much projects get suggested.

Thats how kumala handled cryptostocks since a long time now. Many had emailed them about things that are rather important but no support was given. Seeing that... i would not feel well knowing a dividend for shares of mine would be paid out there. What if something goes wrong? I would not know if i could do anything about that then.

This sounds interesting but i cant wrap my head around what you mean exactly. Can you maybe make a graphical example of how you would use the golden ratio with corrections?

Thanks!

So he wanted to post the second part 1 month ago. He still logs in but nothing happens nor does he come and write whats going on.

I wonder how many signed with the referral links he posted into each second sentence.

Interesting... thats good. That would allow shareholders to be informed by issuers that they NEED to set up the option that their email address shows up in the list of shareholders the issuer gets mailed daily.

Without that option the shareholder will simply not be in the list. No entry without an email, so that it would be easier to identify a shareholder that claims he is not in the list and has X shares. If it would be the case then the shareholder could be identified by knowing his exact shares. Though it isnt the case.

So at least this option can be enables so that the issuers know who is owning shares.

Still... the list is stupid. The only verification it gives is an email address. The one you registered with on cryptostocks. So when shareholders have to be identified through this then i already see issuers being fooled by scammers sending out emails with fake sender email. Through smtp.

Why didnt kumala include a bitcoin address? He could have made it mandatory to insert a bitcoin address you control and you can sign a message with. It would be so much more private than sending out email addresses. And safer.

Its a bit of luck that cryptostocks is back.

When i would knew the seller told the account to others then i would not buy anymore. So i would ask him. When he tells me then im out.

Why? There are some people on the forum that give sold accounts negative. If one of these asks the seller, they dont have to be interested in fact, then the account is at risk. Why should i buy such account then?

Its simply not worth then. So i think its not smart to reveal the accoun to anyone other than the escrow. He can check everything and the account is safe until its really sold.

I still search a fast way to check for potential activity. Anyone knows one? Accounts with high post counts are no fun to count the 2 week periods.

Möglicherweise hat es ja wirklich gewirkt dass sich so viele beschwert haben? Wer weiß wie viele diesen Thread gelesen und gehandelt haben. Ich denke für gewöhnlich werden die ziemlich wenig Beschwerden kriegen. Daher sah es vielleicht aus wie eine wirklich wichtige Sache Bitcoins wieder zu akzeptieren.