Bitcoin Forum
May 24, 2024, 04:41:03 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 [21] 22 »
401  Bitcoin / Bitcoin Discussion / Re: Hacker got to my MTGOX account, he converted the USD I had...... on: June 16, 2011, 11:14:39 AM
The only way to be sure is to start completely fresh. Including BIOS flashes and viewing old backups as compromised too. And changing Bitcoin addresses, obviously.

Perhaps I misunderstand but there have been a few threads like this and it seems a common presumption here that the user is compromised.   People have every reason to be wary of a site like mt gox that suddenly has huge volumes of money moving through it and the operators are relatively inexperienced.  I'm not saying they have a security problem for sure, I just think it would be unwise to leave large balances on there.
Which is also why I find it unlikely that the compromise was on my side. For example:


I don't see how a login sent using GET should ever be considered secure - someone looking over your shoulder, being saved in browser history, to name a few.
There is no two factor authentication of any kind either.

Now I'm not directly accusing Mt. Gox of being "at fault" here, don't get me wrong, but I think it is reasonable to consider the issue being on Mt. Gox' side as well.
402  Bitcoin / Development & Technical Discussion / Re: Proposal: UI for "create wallet" and "open wallet" (and also crossed cheques) on: June 16, 2011, 10:32:45 AM
This actually sounds like a really good idea.
I am not sure however if it's possible to just "read out the balance" from all wallet.dats in a folder, and an additional issue would be that if the computer of said other person was somehow infected, it could just steal all your wallet.dat files. It would probably be a good idea to have these external wallets be encrypted by default so that even if someone steals all the wallets, they can't do anything with it.

Another good addition would be to automatically make a local (encrypted) copy of every external wallet you create on an external device (such as a USB drive) so that even if you lose your USB drive, or said other person wipes the files from it, you don't lose the bitcoins.

As for the second idea, I am not sure how feasible it is.
403  Bitcoin / Bitcoin Discussion / Re: Hacker got to my MTGOX account, he converted the USD I had...... on: June 16, 2011, 10:01:34 AM
My password was a KeePass-generated password of 20 randomly generated alphanumerical characters (mixed case). Needless to say the password has been changed.

I've done a full antivirus scan of my system which found nothing. I've also used various tools such as TCPView, Wireshark, and Security Task Manager (as well as the Windows Task Manager) to see if any suspicious services or processes were running, and it seems my system is clean. I'm not sure what happened here, but it seems unlikely that the issue was on my end.

You are assuming your system is OK after *something* got compromised? Any password is useless against a keylogger (that includes a future Bitcoin cient offering wallet encryption).

Today crimeware kits are sold with a nice GUI for the thump your head variety criminal who barely knows left from right mouse button. A Bitcoin tailored kit will have some kind of exploit to get in, a module for uploading wallet.dat, keylogger/VNC etc. functionality if needed, a module for cleaning up after itself as if it had never existed and one for hiding itself from the usual suspects (all antiviruses, Spybot S&D, Wireshark, process explorer etc.) until such time that your wallet contains enough coin. Hell, the specialists already own a sizable number of machines and the crimeware might function as a search engine for interesting data on the botnet. They may even fix other vulnerabilities to keep the competition out and keep your system in shape to guarantee uptime (a dead zombie is worthless, heh).

The only way to be sure is to start completely fresh. Including BIOS flashes and viewing old backups as compromised too. And changing Bitcoin addresses, obviously.
I'm aware of how malware works, thank you. My bitcoins in my wallet have already been moved to a different machine, and seeing as this is not the machine I usually work on (I usually use my Windows machine for websites testing purposes only) the system being compromised is really not that big of an issue.

Regarding "hiding until there are enough coins" - you do realize the theft was from a Mt. Gox account and not from a wallet file? Did you even completely read my post?

What does KeePass do, is that one of those things that saves your passwords so you don't have to type them in?  Sort of defeats the point, no?

I would say good thing you learned your lesson at 10 BTC instead of 100 BTC or 1000 BTC.
KeePass (and other password safes) are actually one of the few proper methods to manage randomly generated passwords. You can't just "grab someones passwords".

Mt. Gox also really needs to add some sort of secondary verification.
Yes, I was thinking about this too - maybe a confirmation e-mail for every account withdrawal, whether in BTC or USD?
404  Bitcoin / Bitcoin Discussion / Re: Hacker got to my MTGOX account, he converted the USD I had...... on: June 16, 2011, 12:18:35 AM
I've had the exact same happen to me.

A few days ago I exchanged 10BTC for USD, and when I wanted to withdraw it to my bank account I couldn't reach Mt. Gox anymore (either through Mt. Gox being DDoSed or my own IP getting attacked, not sure). When I was able to reach it again yesterday, I logged on and found that a few hours before that (I'm not sure of Mt. Gox' timezone) someone had converted the USD in my account back into BTC, and transfered it away.

Screenshot below:


My password was a KeePass-generated password of 20 randomly generated alphanumerical characters (mixed case). Needless to say the password has been changed.

I've done a full antivirus scan of my system which found nothing. I've also used various tools such as TCPView, Wireshark, and Security Task Manager (as well as the Windows Task Manager) to see if any suspicious services or processes were running, and it seems my system is clean. I'm not sure what happened here, but it seems unlikely that the issue was on my end.

I've submitted a ticket to Mt. Gox but haven't had a response yet.
405  Bitcoin / Bitcoin Discussion / Re: This forum is waaaay to slow help is on the way! on: June 15, 2011, 11:08:12 PM
Good idea for more bitcoin forums. 

That huge blue banner at the top of your forum is distracting, you might want to make it less prominent if you want people to spend time there.
I can't make it any smaller Sad
Make your logo smaller Smiley
406  Bitcoin / Bitcoin Discussion / Re: This forum is waaaay to slow help is on the way! on: June 15, 2011, 08:39:23 PM
The reason this forum is so slow is because it is getting DDoSed.

If your Forumotion forum is going to get a similar amount of DDoS, Forumotion is just going to kick you off their service.
407  Bitcoin / Project Development / Pure CSS/HTML (no images) Bitcoin donation logo/button for your website on: June 15, 2011, 12:54:34 PM
A button / logo to show that you accept Bitcoin donations. Using only HTML and CSS, no javascript (obviously) or images are used.
Displays as intended in Chrome and Firefox. Surprise surprise, doesn't work properly in IE9, but doesn't look too bad, although I have no clue why the border is not showing correctly.
Not tested in other browsers, all feedback is welcome Smiley
(I know the code is a bit messy, but it should work alright)

If you like it, of course donations are always welcome at 13m9CAKrYsdLKhqsNm4UkHHJqDM19F4oKv Tongue

EDIT: Obviously when placing the code on your site, you should edit the Bitcoin address to have your address Smiley

EDIT2: Forgot to set a background color for the white part of the "button", that is now fixed. If you have a non-white page background, please update your code Smiley

Screenshot of how it looks in various browsers:


Code:
Code:
<span style="overflow: hidden; border: 1px solid black; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; padding: 4px; padding-left: 0px; font-family: Arial; font-size: 12px; font-weight: bold; background-color: white;">
<span style="padding: 4px; padding-left: 8px; background-color: #E98A0A; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; color: white;">
<a href="http://www.bitcoin.org/" style="text-decoration: none; color: white;">
<span style="-webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; font-weight: normal; color: white; font-size: 15px; background-color: white; color: #E98A0A; padding: 1px 5px; padding-top: 0px;">&#3647;</span>
Donate using Bitcoin!
</a>
</span>
<span style="padding: 5px;">
13m9CAKrYsdLKhqsNm4UkHHJqDM19F4oKv
</span>
</span>

I may work on some other buttons soon as well Smiley
408  Bitcoin / Bitcoin Discussion / Re: Compounded Networked Identity and Bitcoin for grown-ups on: June 15, 2011, 12:05:14 PM
I quickly scanned the text and while I think it's a reasonable proposition (as a voluntary system, obviously), condescendent wording like "Bitcoin for grown-ups" and "cut its hair and get a job" is... not very appropriate in my opinion, and actually rather offensive.
409  Economy / Service Discussion / Re: Bitcoin7.com - Brand new exchange market! on: June 15, 2011, 11:55:00 AM


Maybe they cut corners on the text, but they don't seem to be outright thieves.

Jere

Cut corners on the text = copied all the text on the entire site and did find and replace with TradeHill for Bitcoin7.

Maybe not outright thieves in regards to cash yet but they've obviously proven they don't mind taking from other people.
Also I wouldn't trust an exchange that couldn't even proof read the text they copied.




I am pretty sure that at least part of the text on TradeHill itself was also copied from elsewhere. The FAQ for example.
410  Bitcoin / Bitcoin Discussion / Re: Bitcoin Worldwide Exclusive: New Competitor to MtGox: http://TradeHill.com on: June 11, 2011, 01:47:08 AM
Now I don't know if someone mentioned it before.... but Tradehill looks an awful lot like Mt. Gox in terms of layout. As in, it looks as if the CSS was straight out copied and modified.
411  Economy / Economics / Re: How serious is BitCoin - strong points on: June 01, 2011, 11:48:54 AM
I can't answer everything completely, but I'll have a go:

About backing:
I believe fiat currencies do not have any actual backing either - and from what I know the only thing that ensures your money has any value is a government promise. Personally I'd rather rely on a currency that can not be influenced by one central entity, and whose integrity is guaranteed by an algorhithm.

How big the economy is:
Even if there is already a significant amount of bitcoins in circulation, the amount of other currencies/goods that has been "invested" in this collection of bitcoins is relatively small. If the value of a bitcoin would rise even more because more people want them (and thus more other commodities/currencies are "spent" on the entire bitcoin economy in total), the market would become bigger, even if the amount of bitcoins would stay the same. I'm not an economic so I won't be able to use the exact terminology for this, but I'm sure someone else will be able to correct me on that.

Who will buy bitcoins: http://www.bitcoincharts.com/ has a nice list of exchange rates for a lot of exchanges, you should be able to find a few exchanges there. You can always use things like OTC or even Google to find individuals that are willing to trade Bitcoins for other currencies/giftcards.

Volatile prices:
I believe that, the more "accepted" bitcoin is, the less volatile the price will be. Right now the market is small, and the fact that large groups of people can suddenly "discover" bitcoin at once, makes strong price fluctuations possible. When bitcoin gets bigger and the spikes in supply and/or demand will be smaller, the price will be less volatile. A useful method to determine pricing right now is for example using the Mt. Gox API to calculate bitcoin prices based off the current exchange rate (and actually defining your prices in dollars), and if you do not want to keep your income inside the bitcoin economy (for example, when you need USD to pay _your_ service provider when you are a hosting company) you could even sell it off on Mt. Gox directly against the current exchange rate.

Project falling apart:
I don't believe Bitcoin will ever completely fall apart. The only way for Bitcoin to die completely would be because of lack of interest, or because a better alternative is presented. Bitcoin does not rely on a single point of failure; Bitcoin is basically what people make of it. You don't need a central entity to arrange things for you, so if a large entity (say, Mt. Gox) disappears, someone or something else could simply take its place. If a better system is designed and people flock to that system instead, then it would be possible for the Bitcoin economy to fall apart - however, would that be any more likely than the dollar economy falling apart?

TL;DR Yes, it's (relatively) new, and it's experimental... but it is technically sound, and I do not believe it to be any more risky than using fiat currencies. In fact, I think the Bitcoin economy would be less risky, as there is not a single point of failure.

EDIT: Legality.
I believe that unless Bitcoin would be acknowledged by an organization like the IMF as being a "real" currency, trading Bitcoins would be considered barter in most jurisdictions. Barter tax may apply; you'll have to check local laws for that. However, to my knowledge there is nothing prohibiting Bitcoin, at least not in the "western world".
412  Bitcoin / Bitcoin Discussion / Re: What to call 0.001 BTC? (5 BTC Bounty) on: May 22, 2011, 08:31:23 PM
Here are submissions so far, in roughly reverse alphabetical order:

< list >

I'd encourage people to look over all of these and continue the discussion about what is the most useful name.  Spelling isn't so relevant for now, its the phonetic sound I'm curious about, I've doubled up those suggestions that have the same sound.

You didn't include my "coinbit" Sad
413  Bitcoin / Bitcoin Discussion / Re: What to call 0.001 BTC? (5 BTC Bounty) on: May 15, 2011, 02:51:15 PM
A coinbit Smiley
414  Economy / Marketplace / Re: Earn 144BTC or 5BTC for getting shops/organisations to accept Bitcoin! on: May 01, 2011, 11:57:48 AM
Contacted www.jamendo.com Smiley
415  Economy / Marketplace / Re: CoinPal beta - Buying bitcoins with PayPal on: May 01, 2011, 11:48:13 AM
From the little I understand, I don't think mndrix's service can scale very well unless he can exchange in both directions.

Reloadable debit cards come to mind, though you have the problem of getting one into someone's hands.
Yes, but that would partly be solved by accepting Ukash/PSC/Wallie/Creditcard, and giving out gift cards for various different stores plus potentially VCCs.
416  Economy / Marketplace / Re: CoinPal beta - Buying bitcoins with PayPal on: May 01, 2011, 11:36:34 AM
Have you considered accepting Ukash/PaySafeCard/Wallie/other prepaid vouchers in exchange for bitcoins? These are anonymous already (in general) and at least in Europe you can easily buy them in physical stores, although I am not sure about the US.
417  Economy / Marketplace / Re: CoinPal beta - Buying bitcoins with PayPal on: April 30, 2011, 11:43:26 PM
Maybe you could try a payment processor like Plimus or 2Checkout as a "middleman" between you and Paypal?
418  Economy / Marketplace / Re: Earn 34BTC or 20-21BTC for getting shops/organisations to accept Bitcoin on: March 28, 2011, 07:11:31 AM
I'm going to contact Heihachi (that Russian hosting company) and ask them if they would accept BTC... currently they only do PSC, Ukash, WebMoney, and LR... so Bitcoin would probably be a good addition. I'll let you guys know.
419  Economy / Marketplace / Re: Want to set up bitcoins acceptance on: March 20, 2011, 07:12:29 PM
Hi to all,

our website www.privacy.li and http://privacydomains.privacy.li/ wants to accept bitcoins.
Is there any guide how to set this up?
Are there any SCSI already?

Please point me to the right information

Best
Adminus

I am currently working on setting up a Bitcoin payment gateway - a bit like PayPal works, with callbacks after a payment is completed - that should allow you to accept Bitcoin without really having to set up anything. There will be no transfer fees, and it should be done in a few days.
I believe someone else is also working on a payment gateway for Bitcoin, so you could just pick which you want to use. As far as I know, that gateway will also be available soon.

You could also set up your own system, but it would require you to run bitcoind on your server and use the API, as far as I know. I'm not sure if there are any guides on it (maybe someone else here will know).
420  Bitcoin / Project Development / Re: Get shops to accept Bitcoins on: March 19, 2011, 02:15:52 AM
Flattr.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 [21] 22 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!