Bitcoin Forum
June 16, 2024, 09:13:49 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Pools / Re: Slush Pool (api.bitcoin.cz) hacked again? on: July 18, 2011, 09:40:42 AM
Hmm, I'm not like that, you see

- My MtGox password is and was completely different from the one on bitcoin.cz
- Both passwords are 250+ chars long and are chosen by a password management program I'm not going to specify.

Not only that, but suppose someone was able to log in, there is no way they can change the wallet address without me noticing it via my e-mail address.
(trying to change the e-mail address would also be noticable, and the e-mail address hasn't changed)

- My e-mail address has also a 250+ char password which is different from all the others.
- My PC's aren't compromized (that I know of, there's always that creepy feeling I get sometimes and then I do another audit Smiley), and I'm a very very paranoid IT guy. All logins on any level contain strong passwords.


2  Bitcoin / Pools / Slush Pool (api.bitcoin.cz) hacked again? on: July 18, 2011, 09:24:13 AM
Hi, on 2011-07-15 21:33:14 my wallet address was changed to ------------------------------------------ and my limit went from 1 to 0.1 and "Notify on payout" wasn't checked any more.
I did not receive a change wallet notification via e-mail which it normally should do if you want to change your wallet address, so I'm assuming this is an internal change (DB value change).
I'm not comfortable with this at all. Are there any other victims? Please speak your mind, I would like to know if I am alone here or not.

The next logical question is, what would be the best alternative for api.bitcoin.cz?
I know there are a LOT of choices and that's the problem... Any founded suggestions would always be welcome Cheesy
Until 2011-07-15 21:33:14 I was pretty happy about the service, they could handle DDoS'es pretty well, almost no connection problems during all my months of mining...

3  Other / Beginners & Help / Re: MtGox Trader Desktop Application on: July 14, 2011, 11:28:13 AM
Looks interesting - I'm guessing this will be a closed source release though?

As stated in my first post it will be open source (github) so anyone can review the code and contribute, but also to ensure the code is clean of any mallware.
We're talking about a financial program, so security is key, and you would want to trust the program that handles financial transactions on your Mt. Gox account!

tl;dr
Open source all the way!
4  Other / Beginners & Help / Re: MtGox Trader Desktop Application on: July 14, 2011, 09:21:48 AM
Thanks BitcoinPorn! I have contacted him. Let's see how we can get along.
Meanwhile I'm taking my first steps in a crossplatform version of this application... Fingers crossed Smiley
5  Other / Beginners & Help / Re: MtGox Trader Desktop Application on: July 12, 2011, 10:06:40 PM
I did a quick lookup, not enough to be sure, but... Appcelerator Titanium desktop looks very promising to me. I'm mostly a web developper so that environment fits me well. Qt however looks more robust, but I think I could get the job done quite fast in Titanium Desktop. As for now I'll leave the mobile platforms alone.

Unless there's a good reason not to try TD I'll look into that tomorrow, hardly can't wait!

Thanks for your advice ellipsis!
6  Other / Beginners & Help / Re: MtGox Trader Desktop Application on: July 12, 2011, 09:36:04 PM
A single app would be great

I'll look into it how to make it multiplatform.

@ellipsis

Could you explain a bit more in detail? I would really like to port it with the least effort.

I also did some cocoa programming recently for iPhone and iPad so it could work, given that I have enough time Smiley
Also there are multiplatform frameworks available that target android and iOS. But i'll stick to the desktop version for now and make it platform independent... Challenging, but fun Smiley

Meanwhile, the app has a better scaling and overview of the orders on the left and the buy/sell buttons on the right.

7  Other / Beginners & Help / Re: bitcoin symbol adjustment proposal on: July 12, 2011, 09:24:55 PM
I'm still ok with the Thai Baht symbol. It's not like the dollar sign is uniquely used. (Canadian, Australian, Brazilian Real, ...) but those currencies have a historical tie, unlike bitcoin and Baht.

Also an existing Unicode char would be easier. Just my 0.5 BTC.

Imo bitcoin is about freedom and no restrictions, no need to force those rules on it. Let it grow and eventually one symbol will stand out and live on.

Meanwhile enjoy the creative results that flow out of this initiative.

Not my best English, but iPad and autocorrect... Sheesh!
8  Other / Beginners & Help / Re: MtGox Trader Desktop Application on: July 12, 2011, 01:28:53 PM
I really like the idea but looks like M$ Windows only app.  Cry


Yeah, I realize that, but that's the stuff I know, I'm sorry.

If I had more time I would have figured it out as a Java app and if I had even more time I would have made it into an iPad app.

Imagine this on an iPad or any tablet device. "Mt. Gox Trader Tablet Edition - Trade any time, any place"... If only I had the time...



9  Other / Beginners & Help / Re: Introduce yourself :) on: July 12, 2011, 12:54:24 PM
You are considered "established" if you have spent 4 hours online and have made 5 posts. (http://forum.bitcoin.org/index.php?topic=15958.0)
10  Other / Beginners & Help / MtGox Trader Desktop Application on: July 12, 2011, 12:50:38 PM
Hi, I'm still bright and shiny new here, but in the meantime I have made this program.

Before you read on, let me tell you that this is work in progress, and no it's not available yet, but I want to see if there's enough demand for such an application.
If there is enough demand I will put the source code (no binaries or dll's) on github so it can be peer reviewed. Which is a must for any bitcoin related application, since any of them can be a wallet stealer or any other kind of malware.

Features:
- instant wallet and ticker view
- sell and buy (and cancel) orders with one simple click (using buy/sell and high & low values as predefined prices and a predefined amount)
- simple stock chart.
- event log

Features it lacks:
Hmm where to start...
- buy at a custom price and amount
- store the past ticker values and/or get them from the API (in progress)
- higher usability
- insert yours Cheesy

Some screenshots!

Splash screen Cheesy:

Overview tab:

Chart tab:

Log tab:

Maximized example of chart tab:


Here is the code (with exception of the form code)  I created as proof that it's not just a photoshop or a fancy winforms drawing: http://pastebin.com/u/deebug

If you feel I'm on the right track and you wish to encourage development, you are welcome to donate at 19W2XQWkDME6YVkovnAeuxEz3ozFBnfift
(Since it's keeping me away from my "real" work, it would be a good motivator to continue)


Some more thoughts about this application:

*** Security
Since we are talking about a financial program, the security should be a number one priority within the program.
That worries me the most. I already did an attempt to increase security, here are some thoughts:

# password storage
As for now the application stores the password using a salt string that uses
- A key that is stored in code (which changes at every build, which can be found quite easily, unfortunately)
- Windows Login credential UID (which can be found if your account is compromised)
- CPU ID (which can be identical or easy to figure out)
- Mainboard ID (in some cases is empty and/or easy to figure out)

In all, the safest way of storing a password is not storing it at all. Smiley

# password control
The password input field is a custom control that obfuscates the keypress event immediately, it does this by:
- sending a fake character to the password control (you have visual feedback, but no real value behind the control, so no point trying to use a password control revealer)
- Every char is added to a SecureString and when you press "Save" it is instantly written as a decrypted string into the user application settings (using the salt value described above).
- After the char is added we destroy the all the used variables and force a garbage collection.

#sending out API requests
The password needs to be converted to an "unsecure" string value for a very short time to add it to the POST data.
After the request is made the password is destroyed by cleaning up the used variables and forcing a garbage collection.
All requests are send over HTTPS (SSL) but I still need some more info about how to check the validity of the SSL certificate!

*** Random notes

#VB.NET
Oh yes, it's written in VB.NET using Microsoft .NET 4.0 which means a lot of overhead, no or very difficult porting to mac and *nix and a potential for bad code. But this is the language I know the best so I'll stick to this.
In the process of choosing a cross platform IDE. Cheesy

#maturity
It's far from ready mind you, it's at most a working concept.

#Stock chart
The stock chart is kind of unconventional, in stead of a constant time-line, the stock values are only updated when there is a change in stock value.
It changes whenever ticker values change, but displayed on a proportional autoscaling timeline. Cheesy

#log
The log is mainly used to keep track of events (up/down of certain values) that might be tight to automatic actions in the future (auto trading perhaps?)

#the (slow) MtGox API
All timer events and requests to the (sometimes very slow) Mt Gox API are done in a background worker so the UI is very responsive.

#hello world
This is the first time I (try to) contribute so be gentle... Tongue

11  Other / Beginners & Help / Re: connecting...? on: July 08, 2011, 05:52:52 PM
I had a driver issue with my network interface on a Gigabyte 990F XA-UD7 motherboard. I used the drivers CD to install the driver (Win7 x64) and then Windows Update found a new driver.
The issue was about the same as you describe. I did a driver roll-back and no problems since. Perhaps worth a try?
12  Other / Beginners & Help / Re: Tradehill Desktop Ticker on: July 08, 2011, 12:37:54 PM
Guy with three posts judging person with one post.  I'm in!  Downloading to my mom's computer now, should I have my credit card ready?

Hmm, maybe I wasn't clear enough. His source code = OK, using an external library (dll) for a dead simple JSON parsing = NOT OK.
So my conclusion in clear writing? don't use it

I hope I was clear enough.
13  Other / Beginners & Help / Re: Introduce yourself :) on: July 08, 2011, 12:35:47 PM
Guys, do you think it's okay to use my somewhat-ancient computer to mine for Bitcoins? It's got hardware that was great a few years ago, and an Nvidia graphics card... Might it work?

Not in a long shot. First of, don't use nVidia but ATI(AMD) graphic cards. You will pay more for the electricity (depending where you live, it's almost true for any country) than you will earn bitcoins.
14  Other / Beginners & Help / Re: Tradehill Desktop Ticker on: July 08, 2011, 12:33:37 PM
I did a quick analysis of the source code, it's very very simple code and looks harmless, however Newtonsoft.Json.dll could be rigged. (I don't have time to do a file integrity comparison of this version against the official downloadable version).

Why would anyone use a bloated external library to parse such simple json responses anyhow? A typical VB.NET programmer thing to do Smiley but then again I use VB.NET too.

I started of with something similar for the mtgox api, and I ended up with a semi-automated buyer/seller bot.
15  Other / Beginners & Help / Re: Is Mining REALLY worth it? on: July 08, 2011, 12:25:09 PM
I am able to use some facilities (room, electricity, AC) from the firm where I work (IT), they are aware that I stock some "experiments" but that doesn't bother them a bit.  I consider it as an extra bonus. Other than that, I wouldn't recommend investing in a rig right now. The electricity consumer prices where I live are simply outrageous!
16  Other / Beginners & Help / Re: Introduce yourself :) on: June 25, 2011, 10:33:05 AM
Well then, I'm deebug, err that's about it

I registered because I wanted to reply to the MtGox poll that is currently active. I could vote but I couldn't reply.
It's a bit of a dissapointment because I thought I could contribute to the MtGox post, but I also understand why this restriction is in effect.

Just before the MtGox meltdown I was making a .NET application that would monitor exchange rates with an easy conversion rate between currencies including a detailed calculation of trading costs (depending on what services you used) etc... For a moment I thought I brought MtGox down, but soon I realized that was a silly thought Tongue

I also have a mining rig in construction, waiting for some rare gfx cards, meanwhile pressing all the juice out of my only HD6990 card and at a decent rate.

I guess I'll try to contribute to this forum and see where it goes from there.

So yeah. My introduction *waves*

Oh yeah, I'm not a native English speaker, so... sorry in advance

Edit: Smiley overload. Removed.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!