Bitcoin Forum
May 24, 2024, 03:36:40 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 [47] 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 ... 385 »
921  Other / Archival / - on: July 28, 2023, 01:22:15 PM
-
922  Bitcoin / Bitcoin Technical Support / Re: Mass hack -- over 1000 bitcoin addresses have been affected on: July 28, 2023, 11:26:06 AM
1) Where are you hosting this locally or someplace else: https://www.bleepingcomputer.com/news/security/critical-ami-megarac-bugs-can-let-hackers-brick-vulnerable-servers/

2) If you are not hosting is on your own hardware keep in mind Meltdown and Spectre are still a thing https://meltdownattack.com/ if your provider did not apply patches which many have not even now 5 1/2 years later

3) Ubuntu 16.04 has been out of support for a while now and had known vulnerabilities

4) Since Ubuntu 16.04 is out of support there are probably other things on it that have not been updated:
https://thehackernews.com/2023/07/new-openssh-vulnerability-exposes-linux.html

5) The PC you connect FROM could have some compromise on it.

6) There is no such thing as a secure location if I know you are there and have the time to plan. MITM attacks and such are a real thing and can be targeted.

-Dave

923  Bitcoin / Bitcoin Technical Support / Re: Found My Key, Uncompressed on: July 28, 2023, 11:12:40 AM
Second problem: the buyer won't understand how to use this private key, and thus can't easily verify it belongs to that address. Considering OP's history on this forum, I don't think he created this on his own. Which means that whoever created it spread it already. This address is mentioned on Reddit in a 2 years old post, but it doesn't add anything. I'm curious what's the story behind this.

Either a massive screwup / typo when doing something OR exactly what I said, invest BTC0.5 to get BTC2.0 as you sell it for BTC0.01 to 200 people.
I'll keep saying it, never underestimate greed and stupidity.

How many obvious scams do we see here day in and day out.
Add to that telegram and what's app and everything else I can easily see getting a couple of hundred people to pay.

-Dave



Guess whoever it is sold it again to someone else.
Greed will always be able to manipulate others who think they know better and can get around programming that is designed not to allow things to be gotten around.

I'm guessing wit this it's a bit of several things actually FOMO / lack of understanding / thinking they are smarter then everyone else (ego) / greed.

Going to keep happening. Just saw it on a car board where someone was 'selling' a warehouse of old parts. Yes it was a warehouse of old (early 1980s) car parts.
Everyone of them a cheap cheap cheap knockoff. But since they did not know and just googled the part numbers....

-Dave
924  Bitcoin / Bitcoin Technical Support / Re: Block 14 to Block 15 - 24 hour dark zone? on: July 27, 2023, 03:15:30 PM
Yes, he was probably doing a lot of testing / debugging back then. And it just would have been easier to shutdown, code, compile, start it up again and test.
Makes you wonder how many proto-genesis blocks are out there as he went 'whoops that didn't work' lets try this.
We know what is on the Linux discussion lists and such, but not what he played around with that just never saw the light of day or was even discussed.

-Dave
925  Economy / Service Discussion / Re: Payment processor hacked, more than $23M in crypto stolen on: July 27, 2023, 11:13:19 AM
I'm surprised they keep that much money in hot wallets. In my mind, hot wallets are only meant for amounts you can afford to lose. It makes me wonder how much money they process if they consider this "pocket change".
Why does $23M surprise you? They are a payment processor after all and more importantly, they offer payment solution to casinos (not casino, casinos, ss) that have a lot of gamblers that constantly make deposits and withdrawals.

I was thinking that exact same thing and that even with the new total of $60 million that it's low.
It comes down to cast vs. risk. This time they gambled and lost (casino joke) but if you have to keep moving from hot to cold and then back out again those costs for BTC and ETH will add up. (ignoring the other coins). And if you have enough programming logic in the back end you might even be able to pay out some people straight from other peoples deposits.

Not your keys, not your coins, not just for exchanges anymore. You don't go to a physical casino and leave your money there when you leave the tables. You put it in your pocket and walk away.

-Dave
926  Bitcoin / Wallet software / Re: deprecated wallet: mSIGNA - how to access private keys? - TINY BTC BOUNTY! on: July 26, 2023, 09:46:57 PM
If NotATethers node does not work out and you can wait till late next week I can have a disposable machine setup for you with a full node that is synced on it. Linux / Windows just let me know.

You can then install what you need, do what you need to do and I'll wipe it.

Should not matter really since there should be no funds left. I'm just so busy at the moment getting a machine up and a 1tb drive installed and core synced is going to take me a little while to get it done. Or, I can just spin up a node with storage and let you do the rest.

-Dave
927  Economy / Economics / Re: Federal Reserve launches FedNow instant payment service on: July 24, 2023, 10:49:28 AM
It looks to also be a big FU from the government to shitty banks. All banks suck, some are worse then others. And other merchants play games.
Send a payment from your checking account to pay a bill. You sent it at 3PM, the cutoff for being late was 6PM. Your bank says they sent it at 3PM the other people say they got it the next day, so here is your late fee. And then you either waste time and money trying to get it taken care of or just pay the late fee.

Here, the US government says you got it at 3:01 PM, go ahead and call them a liar and charge a late fee, see how that works for you.

-Dave
928  Economy / Lending / Re: Lending Board Rules of Engagement - Attention Newbies on: July 23, 2023, 10:47:57 AM
Borrowers also keep in mind in addition to the You are not entitled to a loan statement the fact that at least a few people here, myself included, when we do loan look at what you post about. It comes down to personality. If I see you frequently post things that i disagree with be them in crypto world / political world / tech world and so on. I will probably not loan you anything. And I'm am reasonably certain that others do that too. It's just the way human brains are wired.

Also for borrowers, there are certain forms of collateral that some people will take, BUT there can be more hassles involved. Most people will not take domains as collateral st least here. From the people that do some registrars will not let you transfer more then once every 60 to 90 days. So even if you pay back on time or early you still may have to wait.

Lenders, always keep fees in the back of your mind. It's great that you were willing to accept Dave's Left Testicle token as collateral. It's trading a $1 and you took 500 of them for a $400 loan so you have a nice 25% buffer. And you did a loan at 25% so you are getting a nice $100 payout in 30 days when you get paid back. But we have another gas fee run up on eth or some new token is issued on the BTC network and fees skyrocket again. Tough. You get paid back, you have to send back the collateral. Does not matter if it's now going to cost you $60 of that $100 profit.

I'm sure that there is more that escapes me at the moment.

@DireWolfM14 thanks for making this really needed post.

-Dave
929  Economy / Reputation / Re: deadsea33 questionable merit history on: July 22, 2023, 12:06:38 PM
I think you have said something is a fact. $500 a month is more than the national average in many countries therefore it is driving force for account farming. I have no doubt the puppeteer controlling the deadsea33 account has several accounts. I cannot be confident enough to say how many but it has to be more than the ones connected to his merit abuse thread.

Slightly OT but that really is the rub isn't it.
If I made my full post quota here every week (I don't) the amount of extra money is nice. But it's not going to make a difference in my life. Don't get me wrong $7500 a year is a nice income to post where I was posting for free anyway.

But, for people in other places it is life altering money. So they get greedy and want more.

Think about it, if you can make more then the national average where you live posting here then farm a few more accounts and make even more.
And then you try to make even more money and.....

Unless they ban sig campaigns all that can be done is fight against it as best we can.

-Dave

930  Bitcoin / Development & Technical Discussion / Re: Possible hardware backdoors on: July 22, 2023, 11:07:15 AM
Oops: https://www.bleepingcomputer.com/news/security/critical-ami-megarac-bugs-can-let-hackers-brick-vulnerable-servers/
Quote
Furthermore, the two MegaRAC BMC firmware vulnerabilities disclosed today can be chained with the ones mentioned above.

Specifically, CVE-2022-40258, which involves weak password hashes for Redfish & API, could help attackers crack the administrator passwords for the admin accounts on the BMC chip, making the attack even more straightforward.

Although not 100% related to this, since I do not think most of us are running enterprise servers for ourselves. But, there are some higher end workstations that have the vulnerabilities. However, if you have the hadware management port on your home machine exposed to the internet, you already have other issues....

But still, makes you wonder how many hacks have happened to other places because they had servers like this with the out of band access not secured properly and people got in.

But, in reference to the OP this is not really a back door, just a front door with a really crappy lock on it.

-Dave
931  Bitcoin / Bitcoin Technical Support / Re: Is there any website for Message signin and verifying? on: July 22, 2023, 10:59:02 AM
Not securely.
There is code out there that allows you to do it. IF you can run it on a server that you control and can set it that only you have access to it then yes.
Beyond that no.

There are some phone wallets that allow you to import a private key so you could do that.

BUT ONCE YOU HAVE THE PRIVATE KEY ANYPLACE OTHER THEN A HARDWARE WALLET / AIR GAP PC IT'S NOT SECURE ANYMORE AND ANY FUNDS IN THAT ADDRESS ARE AT RISK.

-Dave
932  Bitcoin / Wallet software / Re: A Non-Custodial wallet, Atomic Wallet, being compromised on: July 22, 2023, 10:49:21 AM
Just did a quick look around, has there been ANY update anywhere on this?
None that i have heard or seen of, i think the bigger issue here is that Atomic Wallet doesn't know what caused the mass attack of their customers, so i don't think we are looking forward to any update. It is closed source, they don't know what caused the hack, then it can happen again!
Just seems odd that all of a sudden, no more discussion. Although, the other side of it is how much more then 'they suck, don't use them' can be said.
They are closed source, so they were not really "safe" even before the hack, and no matter how many times we can say 'don't use them', so many people are still using Atomic Wallet. If after all the recent events regarding the collapse of centralized exchanges and earning platforms, people still use them to store their funds and to earn APY, surely people are still going to use Atomic Wallet to hold their funds after this hack.
that

We don't know that THEY don't know what happened. All we know is that WE don't know since they have not told us.

But the lack up updates, even to the extent of not posting a 'we don't know what went wrong still looking' is just a total lack of customer service / caring.

Their reputation is so shot at this point it probably does not matter for people here who pay attention, but since they are still out there someone else is still going to loose their funds Sad

-Dave
933  Bitcoin / Bitcoin Technical Support / Re: Fake Transaction Input on: July 22, 2023, 10:44:01 AM
As Pmalek said sophisticated / competent place is not going to allow for withdraw till it clears. Even more so if you have RBF enabled.
This would only be useful for a P2P scam or some service that has really lax rules.

Would be funny if the OP tried to scam someone who did know what they were doing, but still lost the BTC.
i.e. send the funds to a casino, loose, and then have the casino do a CPFP and still get thier BTC

-Dave
934  Bitcoin / Wallet software / Re: A Non-Custodial wallet, Atomic Wallet, being compromised on: July 21, 2023, 10:49:40 AM
Just did a quick look around, has there been ANY update anywhere on this?

At this point they are not ever going to be considered secure again, but they seem to have just stopped mentioning it and as far as I can tell so have a lot of the online places that I read.

Just seems odd that all of a sudden, no more discussion. Although, the other side of it is how much more then 'they suck, don't use them' can be said.

-Dave
935  Bitcoin / Mining speculation / Re: ASIC Miner's Efficiency , Where Does it Stop? on: July 21, 2023, 10:34:47 AM
For mining more chips and under clock will rule.

I have to go see if I can find the lecture, but it was from some IBM engineer a couple of years ago, and although not about mining he made a really good point that there ARE many more efficient ways of doing some things with processor and other designs for them BUT the problem is you have to sell them.

It's easier and cheaper to put a bunch of lower power need and lower speed chips from the last generation that you made with the newer generation processes on a board to get the same speed as a newer and faster current generation chip.

It at times can even be more energy efficient because even if you DO need more power to drive the older chips you can do some other things that make heat removal [he said never call it cooling since you are not actually cooling the chips just taking the heat away from them] since you have more surface area so those requirements drop and the circuitry to drive them is more spread out. The example he used was put a space heater in a small room and see how fast the temperature rises then do the same thing a room 3 x the size.

The above is all well and good.....

BUT, in the world as he put it, space for servers costs money so businesses want density. Marketing & sales can't sell last generation things even if they are betting since the competition can point to theirs that are newer even if not better. And so on.

Same thing more or less here.

-Dave
936  Bitcoin / Bitcoin Technical Support / Re: Fake Transaction Input on: July 19, 2023, 01:46:01 PM
You can send with a 1 sat / vb fee which will probably never get confirmed at this point.
You can't really, at the moment. Given that the vast majority of nodes run with default settings, anything below around 2.9 sats/vbyte at the moment will simply not be relayed, let alone confirmed. You could of course manually connect to a specific node which has increased its mempool limits, but then your transaction will just sit in the mempool of that one node and not go anywhere, which obviously achieves very little.

There are a fair amount out there that do. I just did a check since I am taking one of my LN nodes offline. I saw the tx in my wallet. I then did a RBF to get it confirmed.
Probably would have dropped / disappeared within minutes.

Either way it's still the same point. Sending with 3 sat / vb will show up and probably never get confirmed.

Or, you could also send with a low fee and then send another TX out from there with a low fee and then RBF the parent TX.

No matter what it's still sketchy for the OP to ask.

-Dave
937  Bitcoin / Bitcoin Technical Support / Re: Fake Transaction Input on: July 19, 2023, 11:21:18 AM
You cannot send with a 0 transaction fee.
You can send with a 1 sat / vb fee which will probably never get confirmed at this point.

<shrug>
You claim to be a trader and ask for money in another post, and then you ask for advice on how to create a fake transaction here.

Yeah that does not look shady at all.

-Dave
938  Bitcoin / Bitcoin Discussion / Re: Vanitygen 1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF is it? on: July 19, 2023, 11:12:46 AM
Followed by does it matter? Vanity or not if it was created by Core or Electrum or whatever wallet they either have the keys or they don't. In the end it's all the same.

For some reason there seems to have been a few more people asking about / discussing vanity addresses over the last couple of weeks.

They are not and never really have been that big a deal. I have used them and still do at certain times but for the most part, they are something that most people don't just because the extra steps involved.

-Dave
939  Economy / Collectibles / [AUCTION] Lot of 3 XMR Monero collectible giftcards 2 x funded 0.25 1 x Unfunded on: July 18, 2023, 02:14:03 PM





STARTING BID: BTC 0.005
MINIMUM BID INCREMENT: 0.00025
End 21 July 2023 11:00 pm UTC / 07:00 pm EST

SNIPE: Any bid made in last 2 minutes will extend the auction 2 minutes beyond the ending time.
If within those 2 extended minutes, a new bid is made, 2 minutes will be added to the auction from the time of that bid.

Free US shipping is included.
If you want it shipped out of the US, you will have to arrange for me to ship it to someone who can reship for you. ( https://bitcointalk.org/index.php?topic=5455887 )

Payment address: bc1qfesm8up3jezmxt2m9untmz34t4w7js7ppehe3w

If you have any questions or concerns ask.

-Dave
940  Bitcoin / Bitcoin Discussion / Re: Vanity Bitcoin Address: Pros, Cons #My_take_on_it on: July 18, 2023, 10:30:38 AM
IMO one of the biggest issue with vanity addresses is that due to human nature they help scammers.

If I was selling a lot of tings here and all my addresses started with 1DaveF or bc1qDaveF that is all a lot of people are going to read.
Possibly the last few characters too, but who knows.

So someone pretending to me is going to have a much easier time if that was all I used. Since all they have to do it genreate an address and let human nature take over and know that people are only going to look at the 1st few characters and go from there.

With the current crop of video cards getting 7 or 8 letters is not that large a task anymore.

-Dave
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 [47] 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 ... 385 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!