Bitcoin Forum
July 11, 2024, 02:04:42 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 [189] 190 191 192 »
3761  Other / Meta / Re: KYC?? on: April 01, 2019, 01:06:00 AM
It seems as if this was a joke. As of now, not giving this information does not prevent you from posting or reporting a post.
3762  Other / Meta / Re: KYC now required on: April 01, 2019, 12:53:43 AM
My selfie

3763  Other / Meta / KYC?? on: April 01, 2019, 12:52:36 AM
I am being asked to submit my KYC information to continue using the forum.

Obviously I am not going to give this information.

edit: This is an April fools joke, and any information submitted will not go to this site's owner:
I am wondering how many people will actually fill in the form with their real information not even thinking Huh

It's fine, the data is only locally submitted:


3764  Economy / Services / Re: [Open] Microlancer.io Signature Campaign Accepting Jr to Hero $4-$8 a week on: April 01, 2019, 12:46:41 AM
Would you consider paying via the blockchain instead of via the LN? There isn't very much that I can use with a LN balance ATM, and it is somewhat expensive to settle a LN channel if I wanted to use what you pay me via a blockchain transaction.
3765  Economy / Reputation / Re: A list of top scammers on the " Digital Goods " market. on: March 31, 2019, 06:39:27 PM
I think this person was probably on the list by mistake, OR it is a mistake that he is not banned.

He has zero posts ATM. I presume it is the later.

Also helpful would be links to all of these people's threads, so that readers can see examples of what constitutes a scam attempt in Digital Goods.

I have looked at the Digital Goods section multiple times recently, and nearly every thread on the first several pages was a clear scam attempt, or a clear attempt to launder money, or both.
3766  Bitcoin / Development & Technical Discussion / Re: Are there people attempting to brute force random keys? on: March 31, 2019, 05:57:29 PM
This is assuming the brain wallet is chosen at random, and most are not.
Many wallets use very common sayings and phrases which would be easily guessed by a human, let alone brute-forced by a computer. Some are even simpler than that:
Some of these brainwallets had coin sent to them in the early days of bitcoin when maybe not many people, if anyone was actively trying to find brainwallets with coin they could steal. For example, passphrase "bitcoin is awesome" had 500 btc sent in November 2012, and a minute later, the coin was sent back to the same address that sent the 500 btc.

Forum user Taras was one of the early people to use passphrase "" (i.e blank - literally no passphrase), but it is unclear to me if he was using it on his own account, or was stealing others' money from that address.

The other two examples you gave, passphrase "the" and passphrase "wallet" appear to be part of the 2015 stress test "attacks". Both of these addresses had many transactions of small financial value sent to them, starting near the time the stress tests started. After one of the "stress tests" they published the private keys associated with many of the addresses with unspent outputs, and maybe they were using weak brainwallet addresses as well so those "hunting" for brainwallets would try to spend those unspent outputs.


Regardless, even if you do pick 4 or 5 seemingly random words, or use a random string of characters, as you say, you are reducing the total entropy by many many orders of magnitude. It's not worth the risk.
Correct. There was some research done in 2015 that highlighted the risks of using a brainwallet, that were severe enough that "brainwallet.org", a then-popular website used to create brainwallets, decided to shut down.
3767  Economy / Exchanges / Re: Binance a “high” regulatory risk on: March 31, 2019, 05:20:00 PM
Out of all the exchanges operating in the Eastern part of the world (operating out of Asia), I am most comfortable with Binance. The primary reason behind this revolves around the lack of fake trading volume on their exchange, and the prevalence of fake trading volume around other exchanges.

Even though the New York State AG sent an inquiry to Binance, I do not believe the NYAG has jurisdiction over them.

Allowing customers to withdraw any amount without being subject to KYC can theoretically allow someone to launder an unlimited amount of money if they create multiple accounts. They may do blockchain analysis to somewhat prevent this if someone is clearly depositing coin owned by the same entity via multiple anon accounts.
3768  Economy / Auctions / Re: [AUCTION] [IMP] AWS $100,000 credits account for sale on: March 30, 2019, 09:23:51 PM
AWS account with $100,000 credits for 1 year.

There is no way this is anything except legitimate /s

don't worry about legitimacy, i will provides all proof , let the auction finish
A bit of unsolicited advice: no one is going to bid on this unless and until you provide evidence of the legitimacy of what you are selling. This is true even if you have lots of reputation, which you do not.

I cannot imagine anyone ever loading a hundred grand onto any kind of account with the intention of selling the balance unless the money is stolen, laundered, or otherwise illegitimate. This of course assumes you are not entirely entirely lying about the existence of what you are selling, which may be the case.

see the proof, its 100% genuine, i am assuring you for that

Your screenshot is not for an AWS account. It claims to be giving some kind of credit for a "Google Cloud Startup" account.
3769  Other / Meta / Re: Mods now deleting posts regarding them supporting scammers? how far can it go? on: March 30, 2019, 08:59:46 PM
OP - a big of unsolicited advice to you:
Instead of attacking the person who took action against you, it would be better to attack the action taken against you.
Instead of challenging the mod, you should dispute the fact your post was deleted.

I have no idea what your deal is, or if it was right to delete your post or not. I have no interest in investigating if your post was deleted wrongly, and will not take a position for or against deleting your post.

From what I can see, you are involved in creating a lot of drama, and should cut back some.
3770  Bitcoin / Development & Technical Discussion / Re: Are there people attempting to brute force random keys? on: March 30, 2019, 08:32:23 PM
How about if you generated a vanity address? Would it be more feasible for someone to crack the private key if they used the same vanity address generator? Or are random generators so good these days that any bias is negligible?
A vanity address generator is bruteforcing private key --> address combinations, but instead of looking for addresses with unspent outputs, they are looking for an address that starts with, or contains a specific critera.

There are many possible addresses that start with 1b0ne for example, far more addresses than have ever been used in the history of bitcoin. Using the same example, it is exponentially more difficult to find an address that starts with 1b0nes than 1b0ne -- with each additional criteria, it becomes exponentially more difficult to "find" a private key associated with the address that matches your criteria.

Unless your computer is using a broken RNG, it should not generate the same vanity address twice using a vanity generator.

Not strictly what you asked, but there are plenty of examples of people brute-forcing brain wallets. Given that these are frequently protected by common passwords, sayings, phrases, quotes, song lyrics, etc, there have been many thousand which have been "hacked". Indeed, some people have set up bots to monitor the most commonly used brain wallets, and will steal your funds within seconds if you are naive enough to use them.

According to lingolics analysis, there are 3,000 words that make up 95% of literature, even though there are over 170,000 english words.

If you use a 5 word brain wallet out of a 3,000 word vocabulary, using words picked at random, you brain wallet will be one of 3000^5 combinations, or ~2^58 combinations. This is much smaller than the 2^160 possible private keys, or is (1.97 * 10-29)% of total possible private keys. This is assuming the brain wallet is chosen at random, and most are not.
3771  Bitcoin / Development & Technical Discussion / Re: Are there people attempting to brute force random keys? on: March 30, 2019, 05:28:24 PM
I would refer you to the below picture to help you understand the probability of finding a "random" private key with coin in it:


There are 2^160 possible private keys. For comparison, there are currently approximately 2^26 unspent outputs, however some addresses have multiple unspent outputs.

If a private key was generated randomly, for all intents and purposes, it is not going to be found out via a brute force attack.
3772  Economy / Exchanges / Re: the hack of popular South Korean cryptocurrency exchange Bithumb on: March 30, 2019, 05:00:15 PM
I think yes, this is pretty disappointing to most of the crypto community overall.
In 2018, and late 2017, there were billions of dollars worth of crypto stolen from major exchanges, that mostly covered the losses out of operating profits. Some may have been operating with fractional reserves, it is hard to know for sure. In comparison, this hack is nothing.

Many exchange operators do not  have sufficient risk management experience to keep themselves safe from theft. High profit margins and trading volumes have previously kept exchanges solvent after hacks. A good rule of thumb for exchanges is to keep no more than one month's profit worth of crypto in hot wallets, so the exchange could "earn" their way out of a hack within a month, but I cannot imagine Bithumb making more than $30 million/month in the current downturn. Bithumb is also most probability faking most of their volume, but that is another story....
3773  Economy / Auctions / Re: [AUCTION] [IMP] AWS $100,000 credits account for sale on: March 30, 2019, 04:49:21 PM
AWS account with $100,000 credits for 1 year.

There is no way this is anything except legitimate /s

don't worry about legitimacy, i will provides all proof , let the auction finish
A bit of unsolicited advice: no one is going to bid on this unless and until you provide evidence of the legitimacy of what you are selling. This is true even if you have lots of reputation, which you do not.

I cannot imagine anyone ever loading a hundred grand onto any kind of account with the intention of selling the balance unless the money is stolen, laundered, or otherwise illegitimate. This of course assumes you are not entirely entirely lying about the existence of what you are selling, which may be the case.
3774  Economy / Auctions / Re: [AUCTION] [IMP] AWS $100,000 credits account for sale on: March 30, 2019, 08:06:26 AM
AWS account with $100,000 credits for 1 year.

There is no way this is anything except legitimate /s
3775  Economy / Reputation / Re: Hacked accounts and stolen credit card sellers in marketplace on: March 29, 2019, 07:09:34 AM
I have not looked around in Invites & Accounts very much, but have reviewed Digital goods a couple times over the past few weeks. Each time I visited, the first three or so pages were full of transparent scams and likely money laundering schemes. Oh, and CSW is apparently trying to buy some old wallets, but some people consider him to be a scammer.

I don't think it would be a crazy idea to close or somehow restrict Digital goods to solve this problem.
Nah, censoring the sub wouldn't be a good option. There's plenty of other places that have restricted and heavily moderated forum markets. Just gotta have faith in the trust system and that market users will pay attention to it.
I am just saying that ~99% of the threads in Digital goods are illegitimate in one way or another.

Keeping the status quo will only attract scammers and other people with bad intentions.
3776  Other / Beginners & Help / Re: Transactions ordering and confirmation problem on: March 29, 2019, 07:07:53 AM
There seems to be two options for retail stores. Accept zero confirmations with a very high fraud risk -- and maybe mitigate that risk by requiring ID -- or integrate Lightning.

I guess a third option would be to have a waiting area for Bitcoin payers who are waiting for confirmations. Cheesy

You can review my post, directly above yours for an additional option:
a merchant can choose to only accept unconfirmed transactions that meet certain criteria, and tell their nodes to ignore unconfirmed transactions that does not meet their criteria. The merchant may choose to ignore transactions that pay a fee under a threshold that is likely to quickly confirm, and transactions whose inputs are also unconfirmed. In your example, Target may choose to ignore the zero fee transaction entirely and tell the customer he needs to wait until it is confirmed.

Stores can also utilize CPFP transactions as explained in this post.
3777  Economy / Lending / Re: Looking for a loan of around £1k ($1300 approx) on: March 29, 2019, 07:04:44 AM
Someone is claiming you scammed them as reflected on your trust page:
Quote from: Parodium, 2018-12-10
Defaulted on a loan. Had to reverse to payment to get a refund, still owes me almost £1,000.
There is no reference link, but I would ask if this is true. If so, I don't think anyone should do business with you until it is resolved.
3778  Economy / Reputation / Re: Hacked accounts and stolen credit card sellers in marketplace on: March 29, 2019, 12:32:23 AM
I have not looked around in Invites & Accounts very much, but have reviewed Digital goods a couple times over the past few weeks. Each time I visited, the first three or so pages were full of transparent scams and likely money laundering schemes. Oh, and CSW is apparently trying to buy some old wallets, but some people consider him to be a scammer.

I don't think it would be a crazy idea to close or somehow restrict Digital goods to solve this problem.
3779  Other / Beginners & Help / Re: Transactions ordering and confirmation problem on: March 29, 2019, 12:19:16 AM
Target could spend the unconfirmed input they received from you, and attach a fee large enough to pay for transaction A and the transaction they are sending to themselves. In order for a miner to receive the second transaction fee, it must confirm both transactions.
This is called Child Pays for Parent, or CPFP. There is an interesting Blog Post by Coinbase on the subject.
Target could also have a special arrangement with one or more mining pools that involve Target paying the mining pool a special fee, offchain in exchange for the mining pool confirming transactions sent to Target with a low fee.
Great reply and thank you! This was another issue I was investigating. It's amazing how things seem to work much of the time but I have to wonder whether it really does. Essentially in this instance a CPFP can distort the transaction ordering in theory. Target (the first spend) basically protects itself by doing so. But if a less savvy merchant is first and a more savvy merchant is second and uses CPFP, essentially the second savvy merchant has protected itself and made sure that the double spend is far more likely to resolve in their favor even though technically they were the later, double spend transaction. In essence, it seems that in order for a merchant to be safe on the network, it really requires a good amount of understanding how the system works or they could be in for a very large surprise. This concept of paying a transaction processor a premium is counterintuitive to the standardization of the centralized system.
Yes, Target can protect itself by using a CPFP transaction. This is not unlike how merchants pay credit card processors a fee to process credit card transactions, and (somewhat/minimally) protect the merchants from fraud, only a CPFP transaction will generally cost pennies verses several percent of the value of a transaction for credit card processors.

In addition to using a CPFP transaction, a merchant can choose to only accept unconfirmed transactions that meet certain criteria, and tell their nodes to ignore unconfirmed transactions that does not meet their criteria. The merchant may choose to ignore transactions that pay a fee under a threshold that is likely to quickly confirm, and transactions whose inputs are also unconfirmed. In your example, Target may choose to ignore the zero fee transaction entirely and tell the customer he needs to wait until it is confirmed.
3780  Other / Beginners & Help / Re: Full Node Client vs Light Node Client on: March 28, 2019, 04:53:07 AM
We need to note that full nodes are the ones, which gives miner the transactions
Full nodes do not always relay, or always receive transactions if they have this setting turned off. The operator of a node can use the "blocks only" setting to only receive new blocks, and is a way to reduce bandwidth. There can also be instances when a miner will receive transactions to consider including in their blocks from not-full nodes, such as their websites, or from SPV clients (light nodes) if the miner's node is an electrum server for example.

A full node is one that validates each block in full, including that transactions included in said block contain valid signatures and have not previously been spent (are not double spends).

The decision between running a full node and a SPV client (a "light node") depends on the end user's value of security and privacy. A full node will use more resources, such as bandwidth, computing power, memory and hard drive space, and a SPV client will have incrementally lower security and privacy, but I am not aware of any thefts of coin that were stolen/lost because the end-user was using a SPV client. 
Pages: « 1 ... 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 [189] 190 191 192 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!