|
Ive got an idea for tracking down if this windows based close source vanity program is the source of the theft. If the user who was stolen from can pull the installer from his hard drive and send it to me, I can install it and use ethereal (IP Packet sniffer) to see if the program phones home anywhere.
It must be originally pulled from the users HD. I dont want to DL it from anywhere where it may have been changed.
Obviously I will blow the PC away with a fresh OS load after im done testing
|
|
|
|
Ive modified Jean-Lucs awesome vanity generator that lets you search for consecutive digits. The modification allows you to search for short account numbers (accounts with lots of leading zeros). I have a .zip file of the .java source and the compiled .jar attached to a post on nxtcrypto forums. While I can assure you this will not send any passphrases to any remote server, I cant assure you this will not set your computer on fire (Im just pretending to be a programmer here). So far I've been able to generate an account with as few as 11 digits! Usage: java -jar Vanitylen.jar [MAX_ACCT#_LENGTH] [SECRET_PREFIX]
if only 1 option is specified it is assumed to be [MAX_ACCT#_LENGTH]
As Jean-Luc's previous warning also applies I will repeat it: For a given user-supplied secret prefix, the sequence of generated account numbers is always the same. This is in order to keep the number of characters appended to the secret prefix small. So it is extremely important that you pick up a strong secret prefix. Anybody who can guess your secret prefix can just run this program with it to arrive at your full secret phrase. This obviously doesn't apply when you let the program generate the secret phrase randomly (i.e., running it without any parameters).
The sha256 for my .zip file is 250ba45db957575d93d239aab523eae82e9001efdc8953b98452a96fa55e7957 The .zip file is available at https://forums.nxtcrypto.org/viewtopic.php?f=2&t=652#p3071 |
|
|
|
the asset exachange ones only work on the dev server holms.cloudapp.net get me your account ID on there an I can send you some text NXT |
|
|
|
of course not; just explain how its ok for a "company" to do an audit of our curve signing implemenation, but not ok for a private competent individual to do it, just because he happens to teach at a university?
Ok, I'll try one more time (by the way, nice example from utopianfuture about the rating agencies). When you pay a company, it does the audit and hands results to you. When an (already-on-a-salary) academic does a review, he announces it to the whole world. Small, but crucial difference. The plan has never been for whoever we hire to write a paper and announce it to the world. In my discussions with Ittay, this never came up. The results of the work were just for our community's peace of mind on our code's security. |
|
|
|
thats ok, we all think you are a bit nutso yourself
Oh, thank you for your kind words. Do you want me to leave? of course not; just explain how its ok for a "company" to do an audit of our curve signing implemenation, but not ok for a private competent individual to do it, just because he happens to teach at a university? |
|
|
|
I dont think you understand the meaning of the term "RESPECTED academic". I capitalized that important word there to stress the emphasis on that word for you.
Oh no, I understand it. Part of RESPECT is not taking money from people, whose work you are reviewing. this makes no sense whatsoever. It directly conflicts with any common sense, and also with your very last statement Or maybe it's just my right-and-wrong model is outdated, judging by the number of people here, who think it's totally Ok.
thats ok, we all think you are a bit nutso yourself And if you plan him to go through source, then shouldn't you just hire a company to do your security audit, not an academic?
wait, I thought it was immoral to "taking money from people, whose work you are reviewing" yet you are suggesting a company to do exactly this. Isnt then any company that would do this work for us immoral?  Wait, do you mean to say that its fine for a company to do the work, and it not be immoral, yet it would be immoral for a academic type to provide the same services? Its not your "right-and-wrong model" that is outdated, nor your moral compass. its your whole ship that is upside down |
|
|
|
... a respected academic to thoroughly review Nxt and write a paper on it...
That's still unclear. What is he gonna do? Go through source code? EXACTLY
We don't have a whitepaper to review yet, right?
not needed for this operation, since they are reviewing source
And paying $16,000 to a "respected academic" to review your whitepaper just doesn't feel right.
It reduces it to "9 out of 10 dentists recommend" kind of thing... Well, not exactly, but a step in that direction.
And I certainly wouldn't want people to say "oh, and that review they did? They paid $16,000 for it, so...".
I dont think you understand the meaning of the term "RESPECTED academic". I capitalized that important word there to stress the emphasis on that word for you. |
|
|
|
|
a few different topics now that Im caught up after a nights rest...
1) on the subject of finding someone to look for a flaw in NXT's implementation of curve transaction/block signing: Perhaps is best to offer a base fee for the work, with bonus paid for each flaw? This seems least shady.
2) Perhaps whoever represents NXT in Miami this weekend can look for someone. Id really like to go an meet NiftyNikel, especially since I just found out hes a network engineer as I am. But this is the last weekend of deer season, its the rut here locally, and Im not going to miss it.
3)So I tried what you guys said yesterday, sent some NXT to BTER, converted to BTC then put in an order to buy NXT after it dropped. I make almost 100 NXT. Nowhere near enough to justify the stress on me this expedition took. I wont be doing it again.
|
|
|
|
is there a byte limit for an alias?
Alias - (0, 100] URI - [0, 1000] interesting... so forget about permanently spamming the blockchain with arbitrary messages that *may* eventually get cleaned out; just spam it with aliases to the tune of 1100 bytes per 1NXT per alias??? |
|
|
|
OK unity sucks. so I found some instructions to change to gnome
ITS WORSE. now NOTHING shows on my desktop! I cannot even find an app list of stuff similar to windows start.
Relax, take a cookie, listen to me  First off, you're right, Unity is the great Satan. But leave GNOME itself out of that judgment. A nicely config'd GNOME handles like a dream. That stuff you are missing you can get when you open https://extensions.gnome.org/ in a browser. There you can load all kinds of stuff. Or just do it like it's meant to, use the activities menu to start/find stuff (northwest corner / windows key). ok installed xfce4. life is good except now when i doubleclick on my symbolic link on my xfce desktop, the java client runs, but I get no console. |
|
|
|
Interested!
Need a poem?
Okay... double your distribution if you have a poem! I will update the rules. awesome I already put my poem, 2x me good sir! |
|
|
|
Nxt price now dgex @9079 bter @8580 Interesting  so, arbitrage between the 2 is doable? |
|
|
|
Try Zorin OS.
im pretty much stuck with ubuntu. only one ive found that supports drivers for my qualcom ar9565 wifi device. even the latest debian couldnt do it. oh sure i could try to load a backport kernel but those come with godknows what other dependencies that Id have to resolve via another PC and copying files over from a usb stick fuc*it |
|
|
|
|
roses are red
violets are blue
some poems rhyme
some dont
|
|
|
|
|
Let me tell you all how linux desktop environments SUCK BALLZ
j*sushti*tyfu*kingc*rist
WTF linux?
Now Ive used unix/linux/freebsd for years and years. Yes I am one of the few people who can actually say they've used 'real' unix. I used to run an AT&T 5ess central office switch. anyways, I also used to use openbsd desktop environment, successfully I might add, and have also run lots of misc little app/servers on freebsd/solaris.
so it not like Im some dumb tard off the street trying to try linux.
what is this BULLSHIT ubuntu 'unity' WM or X server or whatever the hell it is? dammit when I ln -s something to ~/Desktop and the target is a bash script I FUCKING EXPECT TO BE ABLE TO RUN THE GODDAM SHELL SCRIPT!!!! WTFFFFFF?
why does it always automatically mount my windows partition? hell i manually unmount it and a few minutes later there it is again.
OK unity sucks. so I found some instructions to change to gnome
ITS WORSE. now NOTHING shows on my desktop! I cannot even find an app list of stuff similar to windows start.
WTF linux why must you suck so bad?
|
|
|
|
I would love for 10 of these to be running at the bitcoin conferences we are planning to go to.
at least one running would be super PR Cool idea! Better would be running ONLY ONE, because you NEED ONLY ONE to forge Nxt Exactly, you could say, "I'm forging multiple accounts with this one RasPi." Theoretically & I think practically you could forge all NXT on that RasPi...if you had 999 million Nxt in your account. We should do an act where we come to an empty booth with just the raspi, plug it in, shrug, and leave for drinks. yes, for the demo you need to have a heavy stakeholder generate a weighty hallmark for you. first you'll need t find out the IP address to give to him though. then explain how that tiny box generates so much NXT |
|
|
|
hi , guys can anyone throw me the link with the asset exchange and the instructions , I also want to test it ...
wiki details all the asset exchangte APIs. use server:port of holms.cloudapp.net:6874 You'll need to have someone send you some NXT though. Im running kinda low here though. Post an address I'll send you some cool! thanks my acct on holms is 16155265664111966451 |
|
|
|
manipulation in action on Bter.
some one drove the price down to 7500 to buy 550,000 NXT
640,000 buy gggg
Such blatant marketmaniplulation only works if people act irrationally. I guess with such a young and volatile currency, it still does. i really wish i understood what you guys are talking about so i could track it an know what to watch for and how to react... |
|
|
|
hi , guys can anyone throw me the link with the asset exchange and the instructions , I also want to test it ...
wiki details all the asset exchangte APIs. use server:port of holms.cloudapp.net:6874 You'll need to have someone send you some NXT though. Im running kinda low here though. |
|
|
|
|
Show Posts
