Bitcoin Forum
May 24, 2024, 11:59:28 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 [42] 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 »
821  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 09, 2012, 08:30:08 PM
Server down captain!

One server just stopped responding, not sure why. Should be able to run without it until I can get a restart on Monday.
822  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 09, 2012, 02:13:11 PM

How do you mean?

------

Websocket API now documented at:

https://blockchain.info/api_websocket

Address pages will now live update.
823  Bitcoin / Mining / Re: Wonder who this solominer is? 88.6.216.9 on: March 09, 2012, 09:55:30 AM
Seems they have changed ip 88.190.236.238 Or blocked my node.
824  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 08, 2012, 12:51:15 PM
Small bug report. Total bitcoins in circulation in the realtime API is not correct (or I don't know how to interpret the number). I don't think that this is a new problem, it might always have been like this.

Thanks, I'll take a look.

Is this being offered primarily to serve those who cannot just receive an e-mail at their mobile phone's e-mail address (which gets delivered as a text message)?   e.g., 3456789012@tmomail.net for T-Mobile?

Yes for those providers who don't offer this service and for those who want immediate notifications, without the email to sms delay.

If I were to do SMS Notifications and Call for balance / spoken list of recent transactions using twilio (suggested by Stephen Gornick)

0.01 BTC per SMS
0.01 BTC per minute for balance enquiries

Minimum purchase 1 BTC (100 SMS's)

How many people would be interested in this?
This seems reasonable. I wouldn't be able to use it since I'm in Thailand and Twilio currently only supports SMS within US, Canada and UK (as far as I can make out). They do have an International SMS Beta though and if you sign up then they allow sending to 600 carriers worldwide for the same cost (for now, I'm sure costs will change after the testing). Their site says "currently Intl SMS is cost prohibitive" but that's clearly untrue as I've used Clickatell several times for SMS to Thailand.

I'll apply for the international beta and see what they say. Clickatell seems quite expensive and the API isn't quite as good.

I would be happy to pay the fee, and receive a simple SMS and an ad supported email.

At least that would be one customer Smiley

----------------

The site reached 5k wallets yesterday, that means...

New disclaimer: https://blockchain.info/disclaimer and privacy policy https://blockchain.info/privacy

Disclaimer may seems a little harsh, but I want to make it clear that the Site is not a bank. It is an Interface Only - I don't care what wallets are stored or transactions made through the site but equally will not be held liable for them. This is part of the reason I removed the transaction fees.

Uptime has been much better recently.


825  Bitcoin / Mining / Re: Wonder who this solominer is? 88.6.216.9 on: March 07, 2012, 07:36:46 PM
I've being trying to label 88.6.216.9 (and their old ip 88.6.208.35) for a while.

I hope they know about/support BIP30 and BIP16.
826  Bitcoin / Bitcoin Discussion / Re: Security update: duplicate transaction vulnerability fix on: March 07, 2012, 05:43:38 PM
Very unlikely.  Someone would need to plan the attack very carefully, have huge amounts of hashing power hiding offline, and gain essentially nothing from it.

Not really, during this protocol change they only need to mine one valid block.

But as along as the majority of hashing power is supporting BIP30 the difficulty on the forked chain would be left so high that it would probably die fairly quickly and would not be able to produce the 6 valid blocks needed for transaction reversal.
827  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 07, 2012, 01:53:10 PM
You can now choose the number of confirmations for alerts



If I were to do SMS Notifications and Call for balance / spoken list of recent transactions using twilio (suggested by Stephen Gornick)

0.01 BTC per SMS
0.01 BTC per minute for balance enquiries

Minimum purchase 1 BTC (100 SMS's)

How many people would be interested in this?
828  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 06, 2012, 11:14:48 AM
Please submit and vote for favourite suggestions at:

http://blockchain.uservoice.com/forums/152743-general-ideas

Thank you for the bug reports and feedback.
829  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 04, 2012, 04:55:09 PM
I've tried this out. Installed fine. I did a brief source code review to make sure nothing looked malicious (and I didn't notice anything suspect). But when I go to the login page I get a lot of warnings in the error console. I was expecting a "Verified" message in the console (since I saw it in the code) but didn't get that. Maybe that happens only for some cases.

Thanks for testing it out. I think maybe when I packaged it up something must may have messed up. I have uploaded a new version if you could try that:

Firefox: https://addons.mozilla.org/en-US/firefox/addon/mywalletverifier/ (Pending review)

Chrome: https://chrome.google.com/webstore/detail/kcapglakfcodkajgllmkiddclghogkic

Safari: https://raw.github.com/zootreeves/My-Wallet-Integrity-Checker/master/mywallet.safariextz (Pending acception into safari web gallery)

I've put up some info explaining what you should see in the console here:

https://blockchain.info/wallet/verifier

Quote
Below is a few of the the many many warnings in the error console. It would be nice if it didn't spit out quite so many but as long as errors aren't showing can we assume it was successfully verified?

The verifier does not check the css (perhaps it should, i'm not sure). These are "standard" firefox css warnings, there is not much I can do about them.
830  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 03, 2012, 10:56:13 PM
How did you setup your server to send a text when there is an SSH login? I'd like that for a couple of my servers.

Followed this:

http://askubuntu.com/questions/10294/run-system-script-on-ssh-login-and-or-logout

modified to call an AppleScript which tells Skype to IM me the ip and time.

-----

I made q quick port of the Java applet to a firefox add-on which serves the same purpose (to verify the javascript). It runs everytime you visit a My Wallet login page and will only alert when there is an error found but you can check it is working by viewing the javascript console.

https://addons.mozilla.org/en-US/firefox/addon/mywalletverifier/

https://github.com/zootreeves/My-Wallet-Integrity-Checker/blob/master/My_Wallet_Verifier.user.js

With two methods of verifying the javascript its highly likely any unauthorised modification would be found quickly.

831  Bitcoin / Bitcoin Discussion / Re: Who need free bitcoins? on: March 03, 2012, 01:56:43 PM
This script actually spells "script"

Op CodeDecimalAscii Code
OP_IFDUP115s
OP_IF99c
OP_2SWAP114r
OP_VERIFY105i
OP_2OVER112p
OP_DEPTH116t

http://blockchain.info/tx/41836560e2439f440514af96ca394a38bad6f3d9d0d11dba667c886b16e504ec?show_adv=true
832  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: March 02, 2012, 07:27:33 PM
In light of the recent hackings (I'm sure i've said this before Undecided ) I just want to add some clarity on security.

1) My Wallet is not vulnerable to hackings in the same way that happened to bitcoinica and slush. If the server root was compromised the attackers would not be able to empty any wallets as they are only stored encrypted.

2) What the attacker may be able to do is change the javascript files to intercept password overtime and then decrypt the wallets. This would only effect people who logged in during this time, but is weak point none the less.

I have made a small java app to help counter this:

https://github.com/zootreeves/My-Wallet-Integrity-Checker

Compiling from source is recommended but you can download here:

https://github.com/downloads/zootreeves/My-Wallet-Integrity-Checker/applet.jar

When you enter your wallet identifier it will download your My Wallet page and check:

a) The DOM for any inline javascript.
b) For any unrecognised external javascript file
c) Prompt for the user to review any inline javascript
d) Verify all local javascript files match those at https://github.com/zootreeves/blockchain.info

I have a cron job on my local machine to run this script regularly and alert me of any anomalies.

also note:

- It is recommended you enable double encryption which would keep your wallet safe if you only logged in to check your balance.
- Enabling two factor authentication protects from keyloggers on your own PC (and/or use the onscreen virtual keyboard to type in your second password).
- I receive SMS alerts on SSH login or when the tomcat context reloads (which is needed to alter any js).

833  Bitcoin / Development & Technical Discussion / Re: How serious is this? on: March 02, 2012, 02:34:14 PM
There was a problem with mysqld crashing when I reimported the blockchain last week. In my attempt to debug it I ran a query which shouldn't have been run which messed up some inputs. Rather than start again I decided to leave it and instead write a blockchain verifying program to check and repair the consistency of all inputs and outputs.

However there was all a problem with the verifying program as it would only commit changes for the first error it found. Me being lazy i was only checking the first error, looking up the tx and then assuming the rest would be repaired also. This issue has been fixed now and the verifying program should have repaired everything properly.

TL:DR

Should be fine now.
834  Bitcoin / Bitcoin Discussion / Re: Bitcoinica lost 43,554 BTC from Linode compromise, suspicious TXIDs publicized on: March 02, 2012, 10:48:15 AM
Sorry to hear about this zhoutong,

This will be a test of whether bitcoin is truly anonymous and un-blockable. Will the hacker be able to successfully launder and exchange this volume of stolen coins? I don't know if it is better if they are successful or not.
835  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: February 29, 2012, 03:30:28 PM
It still keeps saying that the transaction was submitted, but nothing happens and nothing shows up in my transactions.

Ok sure I have found the issue now. I checked the relay logs and it looks like the transaction is trying to spend a coinbase output from a P2Pool block which was orphaned. This a rare occurrence, but was bound to happen sooner or later.

1) All orphaned blocks will now be properly marked e.g. 167283 (Available in json output as well)

2) All transactions which are not confirmed in the main chain will now be marked e.g. bc636ffa6089797c0acf4f8f864285c200790b496dc3551a6b8d9d5bbaa1b2bb

3) If two competing blocks are found at the same height all transactions in both blocks will be marked as unconfirmed until the split is resolved.

Now stop finding bugs, I've got other stuff to work on  Wink

Chris Moore kindly made a python script to decrypt My Wallet backups offline. I'm positing it here to archive:

Code:
#!/usr/bin/python

import base64, hashlib, hmac, json, sys
from Crypto.Cipher import AES

def prompt(p):
    sys.stdout.write(p + ": ")
    return sys.stdin.readline()[:-1]

def decrypt(encrypted, password):
    encrypted = base64.b64decode(encrypted)
    iv = encrypted[:16]
    encrypted = encrypted[16:]
    length = len(encrypted)
    encrypted += ' ' * (15 - (length-1)%16)
    hash = (hmac.new(password, iv + "\x00\x00\x00\x01", hashlib.sha1).digest() +
            hmac.new(password, iv + "\x00\x00\x00\x02", hashlib.sha1).digest())[:32]
    clear = AES.new(hash, AES.MODE_OFB, iv).decrypt(encrypted)[:length]
    return clear

clear = decrypt(prompt("encrypted wallet"), prompt("password"))
obj = json.loads(clear)

if (obj.has_key('double_encryption')):
    print("wallet uses double encryption")
    password = obj['sharedKey'].encode('ascii') + prompt("2nd password")
    for key in obj['keys']:
        key['priv'] = decrypt(key['priv'], password)
print(json.dumps(obj, indent=4, sort_keys = True))
836  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: February 28, 2012, 11:08:44 PM
Nope, still not working.

Ok this time I'm sure I've got it. If you could try again that would be cracking.
837  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: February 28, 2012, 10:03:42 AM
I'm using Chrome, but I tried it in Firefox with the same result. It has about 70 inputs and 2 outputs. No errors that I can see.

I think I know what i might be. The max http packet size was set to 8KB, so any transactions larger than that would probably fail.

I've increased it to 16KB now, if you are able to try again that would be great.
838  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: February 28, 2012, 09:08:56 AM
I've been having problems sending coins out of my wallet. It says the transaction is submitted, but several hours later, it's not showing up in my transaction list. Yesterday I was having a similar problem, but it said that I didn't have the correct fees even though I included the miner fee.

Is it in the transaction list then disappearing after a few hours? If so then It is likely to due to incorrect miners fees, try including a 0.005 BTC fee.

If it is never showing in the transaction list at all: What browser are you using? How many inputs and outputs does the transaction have? Are there any errors in the javascript error console?
839  Bitcoin / Bitcoin Discussion / Re: Blockchain.info is no longer the best Bitcoin client. on: February 27, 2012, 12:22:58 PM
Do you want the certificate back?  Tongue
840  Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics on: February 26, 2012, 11:29:46 AM
It's like a never ending hamster wheel that keeps getting steeper somehow, then you trip and start spinning around the wheel with your face plastered to the metal bars wondering how the hell you got in this mess in the first place.

Nice metaphor Smiley

---

Site fully back online now. It's a shame some data was lost on orphaned blocks and ip addresses, but I don't really have the will to try and recover it at the moment.

As I said before all fees are now removed from My Wallet. ALWAYS keep a backup of your keys then it is not a single point of failure if the Site goes offline.

Thank you to coretechs for donating.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 [42] 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!