Bitcoin Forum
June 01, 2024, 10:27:31 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 [366] 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 ... 463 »
7301  Bitcoin / Bitcoin Discussion / Re: Use cases. What do you actually use Bitcoin for? on: June 12, 2015, 02:44:50 PM
I use Bitcoin for everything I purchase online. Main reason being I can't have a credit card yet and I the transaction fees are low and refilling paypal is a hassle.
7302  Economy / Service Discussion / Re: Recent breach at Blockchain.info -- Android App did a stupid. on: June 12, 2015, 02:32:52 PM
 http://www.theregister.co.uk/2015/06/01/blockchain_app_shows_how_not_to_code/
  http://arstechnica.com/security/2015/05/crypto-flaws-in-blockchain-android-app-sent-bitcoins-to-the-wrong-address/
  http://dillingers.com/blog/2015/06/09/ce-random-numbers-and-response-parsing/

Short version of the story:  They were getting "Random" numbers over HTTP (WRONG!) from a third-party (WRONG!) to initialize a PRNG and generate keys (WRONG!).  

The third party - random.org in this case - discontinued its HTTP service because, well, random numbers over HTTP is WRONG!

But the clients Blockchain.info had deployed for Android didn't parse the response to see whether it was an error message; they just read the "301 service permanently moved" error message and treated it as a "random" number.(WRONG!)

This left all those Android clients initializing their key generators with the same not-very-random number.   And for some of them, where the sole other source that they attempted to use failed, that was the ONLY initialization.  

The result was that all of those clients generated the private key corresponding to 1Bn9ReEocMG1WEW1qYjuDrdFzEFFDCq43F and sent bitcoins to it.

And somebody who noticed a whole lot of coins accumulating at "his" address, spent them.  

" There are more ways to get security wrong, Horatio, than dreamt of in your philosophy. "

Ok, thats a real hefty story. Blockchain.info's wallets are seen as very secure since they exist since such a long time but this amount of amateurism is unbelieveable. Random number over http from a third party and then the message is not even parsed in any way. Thats simply only unbelieveable.

Never ever will i think about using a wallet from them. This things shows way too big problems.

Ok, one might think it could have been a third party coder. But even then, they are responsible, they handle the money from others and they showed a real high level of stupidity.
Blockchain.info has a good amount of security breaches since it started. Most of them are due to the developer's negligence and not ensuring the methods used are foolproof. If a person judges the trust based on the age of the product, it would be totally wrong. Even though it is opensourced, the track record should show their efforts put in to secure the customer's funds.

If they used random.org as a process for generating their RNG, they could ask the site to give them updates on the changes made or at least, monitor and debug their software regularly. [Bug existed for more than 5 months]
7303  Other / Beginners & Help / Re: Increased Block Size - how will it affect me? on: June 12, 2015, 02:20:36 PM
I am interested in that question, too. Doesn't it mean that the blockchain will blow up and thus, a normal user need to download a larger blockchain?

AFAIK you will be able to use SPV clients like Multibit.
MultiBit isn't able to provide the full security/features that Bitcoin Core have. [Still a good choice for a person using a wallet to only send and recieve] It is more important to say that devs should be working harder for the blockchain pruning to be able to be pushed to the public.
7304  Bitcoin / Bitcoin Discussion / Re: Bitcoin Confirmations on: June 01, 2015, 05:36:22 AM
yes it can
if you pay more transition fee  Wink

yup its depend your fee to,as long as your fee very low the confirmation would be slow,but in blockchain you can adjust it Cheesy cmiiw
Transaction fees only affect the ranking of your transaction, based on the fees per kilobyte*[Highest fee included first] . However, 50kb in the block is reserved for the transactions with the highest priority. The miner that mined the block have the last say whether to include your transaction into the block. However, high priority and/or transaction fees may not mean that it will be confirmed very fast. It may get confirmed at the next block but it would depend on the time that it gets mined.

*Only if they pay the 0.00001BTC/KB
7305  Other / Beginners & Help / Re: Forgotten password to wallet on: June 01, 2015, 04:16:29 AM
well we all can learn with this if a password its forgoten the wallet if not in some good site online of recover pass then you can not acess your wallet so guys do keep your passes into good papers and pens and harddisks well pointed as the addy

Honestly paper wallet would have solved this. Sad to hear OP lost money but bruteforcing will take so long it's not going to happen (most likely).  If OP new part of password it could be narrowed down and depending on how much he knew could be possible.  But I think it's gone.

Paper wallets are great.  You can make copies store them in safe places.  And can use public address to look at them to "check" ballance.  Or even usb drive's again keep them safe. 
They are great for security but they should be secured nevertheless. Paper wallets should be secured in case someone cracks into your safe or find your paper wallet itself. Take note that if there are lots of copies, people can have more chances of finding them. CPU cracking is almost impossible but GPU cracking is possible depending on length and characters used.
7306  Bitcoin / Bitcoin Discussion / Re: Bitcoin Confirmations on: June 01, 2015, 04:03:38 AM
Wrong, the attacker can possibly hack a large mining pool or use his own pool for such attacks.
As soon as people begin noticing that one pool is nearing or has 51% of the hashrate, there will be shitstorm on this forum, and the miners will switch off of that pool to prevent the attack. This happened to Ghash.io a while ago.

Quote
If the attacker is afraid of someone finding out, then he can create seperate mining pools and merge them during the attack.
How do you "merge" mining pools?

Quote
If the attacker owns a cloudmining service, such attacks can be easily executed without much cost since they are beared by the customers already.
Assuming that it is not a scam like most cloudmining services, it still costs a significant amount in order to start up and then the service needs to profit in order to buy more equipment. Profiting would be rather difficult because the service needs to constantly payout.

What hasn't been mentioned is that it is more profitable to have 51% and mine normally than it is to have 51% and try to attack the network.
True that there was a lot of argument about the 51% attack but it actually took sometime for a lot of miners to shut their machines down. Even though many people were scared that there may be a possibility of 51% attack, many didn't take actions and even after a day, the pool was still in the high 40%.

I'm pretty sure that can be done if you redirect the shares to one pool. (Correct me if I'm wrong but people has been talking about how this can be done).

If you are going to host a cloudmining service, it can take sometime before you can even ROI. If you are in need of money, you would consider to do an attack since revenue is going to be generated slowly. There is also a possibility of decline in the purchases which will impact your revenue. After the attack, you can still sell off your equipments fast.
7307  Bitcoin / Bitcoin Discussion / Re: Bitcoin Confirmations on: June 01, 2015, 02:44:19 AM
Just to add on, a confirmation doesn't automatically secures you from a double spending attack. It only prevent you from race and finney attack. If a single entity controls more than 51% of the network hashrates, even with a lot of confirmations, the transactions can be reversed. Note that attacks can only be 100% successful if attacker controls more than 51% even if the confirmation is 100. If the attacker controls less than that, the probability will decrease gradually.
However, for everyday transactions, 0-1 confirmations is enough depending on the price of the items sold. If the transaction is 1000BTC, you would more likely be looking for 20+ confirmations. If its only 0.01BTC, you can even accept it at 0 confirmations. Special precautions can be made, for example, you can wait for a few minutes or seconds to check for competing transaction and make sure it propagates well. POS systems like bitpay does this well.


wrong.


An attacker that controls more than 50% of the network's computing power can, for the time that he is in control, exclude and modify the ordering of transactions. This allows him to:

    -Reverse transactions that he sends while he's in control. This has the potential to double-spend transactions that previously had already been seen in the block chain.
    -Prevent some or all transactions from gaining any confirmations
    -Prevent some or all other miners from mining any valid blocks

The attacker can't:

    -Reverse other people's transactions
    -Prevent transactions from being sent at all (they'll show as 0/unconfirmed)
    -Change the number of coins generated per block
    -Create coins out of thin air
    -Send coins that never belonged to him

An attacker's capabilities are limited to taking back their own money that they very recently spent, and preventing other people's transactions from receiving confirmations.
Attack like would be very costly in resources, and for such not-so-great benefits there is little rational economic drive to do such a thing.
Wrong, the attacker can possibly hack a large mining pool or use his own pool for such attacks. If the attacker is afraid of someone finding out, then he can create seperate mining pools and merge them during the attack. If the attacker owns a cloudmining service, such attacks can be easily executed without much cost since they are beared by the customers already.
7308  Other / Beginners & Help / Re: Where to get highest free BTC? on: May 31, 2015, 01:22:30 PM
I do not think, you can get a lot from BTC faucets. Free BTC do not exist in fact. Better choose good BTC mining company. They also offer sometimes free trial BTC mining too.  Grin
This thread is talking from a owner's perspective. A lot of BTC mining companies are in fact generating profit for themselves rather than the others. It just doesn't make sense if the mining plans will make guaranteed profit and the owner don't mine for themselves. Free trials are equal to faucets, they offer very low hashpower and you probably won't meet the withdrawal requirement or they require you to invest some money. There are lots of cloudmining companies turning into scams. The biggest one recently is probably AMHash.
7309  Other / Beginners & Help / Re: Where to get highest free BTC? on: May 31, 2015, 06:06:50 AM
From my experience, many of the highest free BTC are from casino promotion.
Like Primedice did few months ago, giving out 0.03 BTC for several members here Cheesy
Really don't go for faucets .
They pay in pennies. It's better to go for a signature campaign. They will pay you better than faucets.
I myself started with faucets but cant afford it then started signature campaign

Faucets are wonderfullll
I have members who without the faucets they could  have never be able to invest in my perfect game.

I do not say signature campagn is bad,but faucets are very interesting to start a wallet.


Yes, many people starting to know bitcoin from faucet. And they know how hard to collect bitcoin from it Cheesy
Soon or Later they will find this forum and begin to know how to earn bitcoin from this forum.
One of those method is Signature Campaign.

If they got payment from signature campaign, i'm sure they will leave faucet because the payment from signature campaign is higher than payment from faucet.
They won't spend their precious time on faucet anymore, i'm sure about it Smiley
Giveaways usually requires at least member and above rank to claim. Primedice gave away 0.03BTC to those who have more than 300 activity (Unfortunately, I was 14 activity away). These usually happens once in a blue moon and they shouldn't be your main source of earnings.

I agree with the signature campaign part. However, efforts are required to construct a post. This isn't a place where you can bullcrap about anything and not get banned. Since this is a Bitcoin forum, it is mostly about Bitcoin (Most off-topic post and local boards are not counted). If you can't get very involved in Bitcoin or the forum itself, signature campaign isnt the way to go.
7310  Bitcoin / Bitcoin Discussion / Re: Bitcoin Confirmations on: May 31, 2015, 06:03:09 AM
Just to add on, a confirmation doesn't automatically secures you from a double spending attack. It only prevent you from race and finney attack. If a single entity controls more than 51% of the network hashrates, even with a lot of confirmations, the transactions can be reversed. Note that attacks can only be 100% successful if attacker controls more than 51% even if the confirmation is 100. If the attacker controls less than that, the probability will decrease gradually.
However, for everyday transactions, 0-1 confirmations is enough depending on the price of the items sold. If the transaction is 1000BTC, you would more likely be looking for 20+ confirmations. If its only 0.01BTC, you can even accept it at 0 confirmations. Special precautions can be made, for example, you can wait for a few minutes or seconds to check for competing transaction and make sure it propagates well. POS systems like bitpay does this well.
7311  Other / Beginners & Help / Re: What is difference between Bitcoin, Litecoin, Dogecoin and NXT? on: May 31, 2015, 05:43:31 AM
Hi can you describe the details of digital currency such as Bitcoin, Litecoin, Dogecoin and NXT? Which is more secure?

Bitcoin = Gold
Litecoin = Silver (biggest Alt after BTC)

the rest is a scam.

some people call Litecoin a scam.

It is basically a copycat of BTC with some parameters modified, and the dev team is not really the most active we've seen around.
I wouldn't call it a scam. It is more like a experiment to try to give everyone a chance to mine with their GPU. They didn't merely modify the perimeter. They had to implement the entire scrypt algorithm into the blockchain. Note that they had made an effort to counter ASICs (even though it wasn't successful).
7312  Other / Beginners & Help / Re: Help with bitcoin pool on: May 31, 2015, 05:39:09 AM
the first link is wrong or what, because it talk about hacking a wi-fi

https://www.youtube.com/watch?v=n8XtwjgU6iw

real part 1 is this https://www.youtube.com/watch?v=l16tku_7g2A

it includes the website too, it is in the last video "front end"

Very odd it's not the first part of series, not sure why OP posted it.  Don't go stealing wifi.

Your VPS will bring cents a day.  I mean 4 or so dollars during the year?  Didn't do the math.   But CPU mining is just not profitable anymore, nor is GPU mining.

You will need an asic to mine, standard PC's just don't cut it anymore either.
Can anyone help me to set this on a VPS ? Smiley

It won't mine but cent's a day. Search the forums for "digital ocean" it will show a way to set it up in linux.

Again you might make 4 dollars or so for the ENTIRE year.  It just is not worth it.
Why are you talking about trying to mine? OP is trying to setup a pool[Unless I haven't get enough rest till now and am seeing things].

Pools generally requires high uptime and connection speed. VPS lacks in both of these factors. VPS is a machine that is shared among tens or even hundreds of people. The connection speed and hardware is also shared. If anyone abuses any of the nodes on that machine, you are done for since the hardware will degrade (Possibly even causing downtime) and so will connection speed. With the competition among pools right now, unless you create a really attractive pool and attract a lot of big miners, you won't profit at all. Be mindful that several pools are offering 0% fees and high uptime. Looking at your server specs, you won't be able to even host a hundred miner without all of them lagging. If you are looking to mine, you are better off joining a existing pool as they are mostly free and offer a handful of features.

there are some vps that don't share ip(private vps) or the whole configuration but they are more expensive of course, he can use his vps to instamine cpu altcoin instead, it would be better used in this case

to the OP, to run a pool (for an altcoin) usually you need 32 giga a xeon and a ssd in raid 0 maybe, also a good speed connection

pools for bitcoin instead are not a thing you can do right now, too much competition

When looking into VPS mining the huge thing is processor and how many cores.  More cores = more mining.  

Unless you have free power and a huge server with lot's of cores it's a waste of time, not to mention electricity.  These free 1 core type stuff just is not good for mining.
Quite true for desktop and normal home computer mining. However, most of the time, the cores in VPS are shared. They merely display the amount of share that you can use in a VPS environment. Even if they say 1CPU core and the CPU is Xeon E3-1230V2, you may not literally get the whole core for yourself. If the provider oversells the VPS, the one core performance of that VPS and the performance of another VPS with similar advertised specs may differ. Furthermore, many VPS providers prohibit mining as they use up too much resources and reduce performance.
7313  Other / Beginners & Help / Re: i am newbie on: May 30, 2015, 02:48:10 PM
Bitin.io pays for Member status 0.0001 per month. Not much, but definitely more than any faucet out there that I know. But like other posters said, you need competent english if you want to get paid. If you don't talk english, you should search a signature campaign in your local language (if any).
No, Bitbin.io pays 0.0001BTC per post for member. It isn't really worth your time as they don't pay very high and member can't post very constructively with the 20 post per week goal in mind and furthermore, its only 0.002 for 20 post. A job at your local madonalds gets you more than that.
7314  Other / Beginners & Help / Re: Help with bitcoin pool on: May 30, 2015, 02:43:24 PM
the first link is wrong or what, because it talk about hacking a wi-fi

https://www.youtube.com/watch?v=n8XtwjgU6iw

real part 1 is this https://www.youtube.com/watch?v=l16tku_7g2A

it includes the website too, it is in the last video "front end"

Very odd it's not the first part of series, not sure why OP posted it.  Don't go stealing wifi.

Your VPS will bring cents a day.  I mean 4 or so dollars during the year?  Didn't do the math.   But CPU mining is just not profitable anymore, nor is GPU mining.

You will need an asic to mine, standard PC's just don't cut it anymore either.
Can anyone help me to set this on a VPS ? Smiley

It won't mine but cent's a day. Search the forums for "digital ocean" it will show a way to set it up in linux.

Again you might make 4 dollars or so for the ENTIRE year.  It just is not worth it.
Why are you talking about trying to mine? OP is trying to setup a pool[Unless I haven't get enough rest till now and am seeing things].

Pools generally requires high uptime and connection speed. VPS lacks in both of these factors. VPS is a machine that is shared among tens or even hundreds of people. The connection speed and hardware is also shared. If anyone abuses any of the nodes on that machine, you are done for since the hardware will degrade (Possibly even causing downtime) and so will connection speed. With the competition among pools right now, unless you create a really attractive pool and attract a lot of big miners, you won't profit at all. Be mindful that several pools are offering 0% fees and high uptime. Looking at your server specs, you won't be able to even host a hundred miner without all of them lagging. If you are looking to mine, you are better off joining a existing pool as they are mostly free and offer a handful of features.
7315  Economy / Micro Earnings / Re: Can you actually make a profit owning a faucet? on: May 30, 2015, 02:32:56 PM
how to create my own faucet?
do i need to know programming language?
making a simple faucet is not that hard, you can easily get a template or something and just change a couple of things and upload it, there are many of them available. and you have a running faucet.

but making profit from a faucet and have a good traffic is something else that can not be achieved easily, and at the end you might lose more money than you can earn.
Same templates are generally used on lots of faucets. Newbies would find your faucet less interesting and go to another faucet which offers much more features. Without simple programming skills, changing anything can render the entire script unusable or open security holes.
7316  Other / Beginners & Help / Re: How safe is bitcoin address? on: May 29, 2015, 12:15:18 PM
Hello. How safe is it to input a bitcoin address into a site eg to receive bitcoins you need to give your bitcoin address. Can anyone then empty your account with this address? I use Coinbase address.
Thanks in advance.
As long as your using some good rated wallets you're good. It's pretty safe and you need not worry about your bitcoins getting stolen.
Welcome to the Crypto World Wink

More important then "good wallets" is cold vs hot.  You should keep most of your coins in cold storage this way even if infected a virus cannot jump from computer to a piece of paper.  If it's a hot wallet a virus or other could possibly get to it.

So the type of wallet is a big factor.
You missed a part. How are you going to spend it? True that cold wallet is the best way to keep Bitcoins but it doesn't help if you use an infected device to scan the code and make a transaction. Private key could be easily compromised if you do it this way. The best way is to buy a raspberry pi and reinstall the OS, download electrum and create a wallet [Don't worry nothing will ever happen if you connect it to a internet. Especially when its Linux].
You can then download electrum on a online computer and then create an unsigned transaction, transfer it to an USB drive then sign it there. Bring it back and broadcast it on the online computer. It's far more secure this way.
7317  Bitcoin / Bitcoin Technical Support / Re: BitcoinQT: it took more than half an hour to confirm my transaction details only on: May 29, 2015, 12:08:14 PM
The priority is determined by your coin age and transaction size. In this case, your priority was 17,503,540. The minimum required for high priority is 28,000,000. The main reason for this was because of the transaction fees. Even though the minimum fees required for relay is 0.00001/kb(By default in Bitcoin Core), the priority was simply not high enough. Another possible factor is the block varience which can cause slower confirmations (Not in this case).

Edit: Just saw the issue about proporgation. This might still have some relevance since the priority was below maximum.
7318  Economy / Micro Earnings / Re: Can you actually make a profit owning a faucet? on: May 29, 2015, 11:55:36 AM
We all know the trick is volume.  The higher volume you get the more your ads will pay.  But for this you need to pay "high" for a faucet which is still very little amount.

But as far as successful faucets sharing info I would not count on it.  Most likely they will keep sucess stories private and build new ones, making more and more.

this freebitco.in has been around a while and has a rather large userbase, i believe it also comes up first on a "bitcoin faucet" google search as well, but i may be wrong. with ads plastered everywhere, its definite that whoever owns the domain makes a pretty sum of money from the faucet.
The main factor is possibly the potential amount of coins given out and the features of the site itself. It offers a gambling section as well and many people can just lose most of their earnings there. The probability of getting the highest payout is really low but the thought of it makes it appealing to lots of people. The method of advertise is quite easy and I have even used it several times as it is integrated in the site itself.
7319  Bitcoin / Bitcoin Technical Support / Re: No Block Source Available Error-Bitcoin Core--Help Please!!! on: May 29, 2015, 04:22:18 AM
Is the machine with the wallet connected to the Internet? Is there some over-zealous firewall blocking port 8333?
Make sure that your firewall on your computer or router is not blocking port 8333. The warning just means that Bitcoin Core has not downloaded any blocks.
Both of you are wrong. Most home modem don't specifically block outgoing port 8333 hence, Port forwarding is not needed to run Bitcoin Core. You only need to open TCP 8333 if you are looking to help the network by running a full node. The warning means that Bitcoin core cannot find the node with the blockchain.

Edit: thanks to ciyam for the correction.
7320  Other / Beginners & Help / Re: What is difference between Bitcoin, Litecoin, Dogecoin and NXT? on: May 29, 2015, 03:38:20 AM
Hi can you describe the details of digital currency such as Bitcoin, Litecoin, Dogecoin and NXT? Which is more secure?
Bitcoin uses SHA256 algorithm for mining while litecoin and dogecoin uses scrypt and NXT uses POS. They have different market caps and all of them are pretty volatile. The block time will allow for faster confirmation but the security will be decreased. Bitcoin is currently the hardest to launch a 51% attack due to the hashrate of the network. It is still possible for the top pools to collaborate and launch one so it isn't 100% preventable. NXT is vulnerable to 51% too just like any other coin. It will happen if any single entity gain access to 51% of the network coins. It is much more easier to launch one since trading sites and gambling casinos control lots of coins. You also don't need space to launch an attack, you just need funds.
Pages: « 1 ... 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 [366] 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 ... 463 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!