 Show Posts
|
|
Pages: [1]
|
|
17094328850816579008 has 100nxt ends on 1.
9419809254501029371 has 100nxt ends on 2.
17377278473045672939 has 100nxt ends on 3.
4963410668293167247 has 100nxt ends on 4.
2289697742292350176 has 100nxt ends on 5.
These are accounts I had access to.
The only reason I can remember these accounts was because the pass made sense.
Other passes were deleted when I deleted the vps.
I assume these were used to host public nodes.
I advise the owner to change these addresses to something more safe.
If I would steal 92nxt why wouldn't I steal 500?
I hope someone can verify that these are his addresses.
|
|
|
|
So you admit to stealing account information, but not taking the funds. You admit to creating a hacked client, and poisoning a link from a developer. But coincidentally also say your VPS account was hacked into and someone else used your account to actually do the stealing? So they had about an hour to figure out you poisoned a link, hack your VPS, and replace your hacked client with their hacked client? Just admit it, you stole the NXT, return it before you dig yourself in deeper. I have in my history the time and path to your VPS server, which "hour" did you have your hacked client on your VPS?
I do not claim I got hacked. The only thing I know is that digitalocean asked me if I knew about this because there are different ip logins on my digitalocean account. |
|
|
|
|
I realize my story sounds rediculous but it is what it is.
After the dropbox shutdown and the ddos issues a lot of mirrors were created on different sites I am trying to find out if any of these links still exist and if they could have also been infected.
That moment of chaos would have been a perfect time to circulate a client without people noticing it.
|
|
|
|
|
I have just read the last 50 pages of this topic and wow this is crazy.
First of all yes the client was posted by me and I added some code that would send the secrets to my server.
A week ago there were all the ddos issues and billions created which led to a lot of client updates.
During these updates I noticed a lot of those clients had different hashes which made me wondering how easy it would be to modify the client and get it circulated.
So that is what I did. I quoted the official post made by jean-luc on 31/12 and changed the url. Setting this all up took less then an hour.
The server was only online for about an hour and I decided to shut it down after I had gotten access to about 10 accounts.
Now here is what is odd. Yes I got access to some accounts but not those people here who are claiming they got hacked.
The accounts that I got access to never had more then 1000 nxt in them and I never had the intention of taking it.
To the people who got hacked before 0.4.8 I can say that it was definetly not me who could have stolen your coins.
Normally at this point I was going to post details about how easy it is to steal nxt and how people have to be aware about where they download their client instead if only focussing only on their pass strength.
That point has been made very clear now in an unfortunate way.
To be honest if I had found an account containing a 50 million next I would have probably taken it and diseappeared but that was not the case. I am human after all.
I know there are other modified clients around whether they use the same type of attack I don't know.
Digitalocean has also contacted me that people here have sent complaints and that different IP's have logged in on my account.
Whether someone else had access to my vps, people downloaded a different infected client or someone is playing it smart letting me take the blame I do not know.
People are angry and ofcourse I can understand that but the only thing I can do is tell my story and hope a correct explanation for these thefts will appear.
|
|
|
|
Quick question on the theft issue:
If someone is just running a brute force attack on the whole NXT network attempting to hit the jackpot, wont this activity be very visible in the blockchain?
Way I see it, every password generated by the brute force attack will create an account.
Can anyone (with more skillz than me) have a look at the account creation (possibly vs IP address) stats and see if something wierd is showing up?
The account will not show up in the blockchain before a transaction is made. |
|
|
|
|
Both bitcoin and nxt generate your address from a 256bit key.
The only problem is that bitcoin generates your private key while nxt uses sha256(pass) to get your private key.
I think a lot of people would feel safer letting nxt itself generate the private keys.
|
|
|
|
NRS 0.4.8 is ready and can be downloaded from:http://info.nxtcrypto.org/nxt-client-0.4.8.zipsha256: ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2 From now on I will also be posting the latest version number and sha256 as the value of NRSversion alias on the blockchain: https://localhost:7875/nxt?requestType=getAliasURI&alias=nrsversionChange log: - Added Transparent Forging, will be turned on at block 32000. - Memory leak fixed. - Send money from the browser now also asks for the secret phrase. There is only one new parameter in the web.xml, myPlatform. It is used to announce your platform - PC, Mac, Raspberry, NeXTstation, VAX, zombie... The zip file does not contain blocks.nxt and transactions.nxt. Make sure you preserve your own *.nxt files before upgrading! Cheers I guess it's just easier. Mine updated fast once I inserted peers. |
|
|
|
NRS 0.4.8 is ready and can be downloaded from:http://info.nxtcrypto.org/nxt-client-0.4.8.zipsha256: ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2 From now on I will also be posting the latest version number and sha256 as the value of NRSversion alias on the blockchain: https://localhost:7875/nxt?requestType=getAliasURI&alias=nrsversionChange log: - Added Transparent Forging, will be turned on at block 32000. - Memory leak fixed. - Send money from the browser now also asks for the secret phrase. There is only one new parameter in the web.xml, myPlatform. It is used to announce your platform - PC, Mac, Raspberry, NeXTstation, VAX, zombie... The zip file does not contain blocks.nxt and transactions.nxt. Make sure you preserve your own *.nxt files before upgrading! Anyone got a list of peers for this? |
|
|
|
im trying to automate health checking of my VPSs using API requests from wget or lynx, but whenever I try to use options for wget/lynx to dump webpage to stdout, it fails if give it the API request, just usiing http://localhost:7874 works though. [root@vps08 ~]# lynx -dump http://localhost:7874/nxt?&requestType=getState [1] 2898 [root@vps08 ~]# {"errorCode":1,"errorDescription":"Incorrect request"} Any tips? remove the & |
|
|
|
For those of you that are interested in the exciting RaspPi story: I've opened my RPi NXT server to the net. Access it by: https://raspnxt.hopto.org:7875Just in case you wonder how NRS performs on an RPi. Feel free to try out testing or even "serious" addresses, as both IP and RPi are completely under my control. That is, only if you trust my network, of course.  Seems to work, syncs blocks, doesn't show active peers, how long does it work without having to restart it? Anyway, I guess 0.4.8 is supposed to fix memory leaks, so it should get more stable very soon now. Any idea when 0.4.8 gets released? |
|
|
|
|
that could be a good idea to prevent people losing nxt.
like the sender can put in a timelimit for the buyer to accept and if he doens't the transaction is not executed.
|
|
|
|
|
Wow I can't believe my 50k nxt is already worth this much.
This is insane.
Is anyone actually able to login on dgex?
|
|
|
|
|
Looking to sell +-250000 NXT for 2 BTC.
Please pm me when intrested.
|
|
|
|
|
29 block and it still says globe is downloading blocks
|
|
|
|
The plural of die is dice. Dices is not a word.
Honestly I don't know. Some dictionaries say dice and dices are the same. |
|
|
|
|
haha i just noticed it :p
That is pretty gamebreaking thanks for finding that.
EDIT: updated the validations
|
|
|
|
how do i do to get an testnet adress ?
You have to run your bitcoin client with the option -testnet or you can send from one of the faucets directly to your deposit address. |
|
|
|
https://EpicDices.com is a new bitcoin game trying to bring some more variation to the market. Our game is based on Chuck-A-Luck which is a simple version of Sic Bo but with only a 1% edge.  How does the game work?The game is played with 3 dices. Players get to choose the value which they think will appear when the 3 dices are rolled. When a player chosen value appears once, they will get their bet * 2. When a player chosen value appears twice, they will get their bet * 3. When a player chosen value appears thrice, they will get their bet * 17. Players are able to select multiple values. TestphaseThe website is currently running on the bitcoin testnet. This test can stop at any giving moment. You can get some coins to test out the website here: http://tpfaucet.appspot.com/http://testnet.mojocoin.com/PLEASE SEND THE TESTNET COINS BACK TO THE ADDRESSES AFTER TESTING. TESTNET COINS HAVE NO VALUE. Test it out now at https://EpicDices.comHave fun trying to crash the website  .
|
|
|
|
|
minimum payout of 0.1 bitcoin is like more then 100$.
making 100$ on a clicking site takes a lot of time and referring.
I find it strange that they have adds on their 2 day old website thats referring to themselve.
|
|
|
|
|
