Bitcoin Forum
May 06, 2024, 03:57:57 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Other / Off-topic / HELP REQUEST: Anyone willing to stress test ExamSoft's program security? on: April 04, 2018, 01:58:34 PM
Hey everyone,

In case you don't know what ExamSoft is, it is a company that provides 'high stakes' test-taking software. It is heavily used in the administration of the bar exam for lawyers and for final exams for law students. Their current version of the software is a new version called "Examplify". Examplify was used in the February 2018 bar exam and required a series of "URGENT" updates about a week before the exam; during the exam, the software became extremely buggy. The software is essentially repurposed ransomware. When the program is installed and running, it acts like a virus. The company and my law school simply tell us to trust them that it is okay. Furthermore, ExamSoft's terms and conditions state that they will comply with law enforcement orders, etc. after stating that they do not retain personal information.

After doing some digging, I was able to uncover a tiny bit about how the software works (this is an email from their customer support to my law school):

"Examplify is a computer-based testing application with the main benefit being a secure, offline testing capability. The ability to provide a secure, "locked down" testing environment is a priority for our clients, and one of ExamSoft's main selling points. Due to this need, the Examplify software does edit registry entries on the user's device when running in "secure" mode. These registry entries are added to put the computer in a secure mode where only the Examplify application can run. This limits the user's access to all other areas of their device, including their background image, file libraries, or any other applications on the computer. Students are warned at the start of an exam before entering this mode. As part of Examplify's processes, the application cleans up registry entries created at the end of usage returning the device to its initial state and ensuring there is no permanent changes to the registry. In addition to the changes to the registry, Examplifydisables certain services on the device to limit internet access and interference with the security of the exam. We also save content to specific Examplify folders on the device. During the exam, Examplify logs the applications that are open when going into Secure mode. We also log computer details, including OS specifications. Outside of these changes and the saving of our own data and logs (including the information just mentioned), we do not actively copy or store any other information from the device, including personal files, drivers, or other user data."

Request: I am hoping someone with technical digital security know-how is willing to stress test the Examplify software for me and look for anything weird. I'm not asking for you to hack their system, just to download the file from their website (if you need credentials to download, message me and I can send some over) and look under the hood to see if someone pissed in the engine. People in law do not think about this and I do not trust the word of a bunch of lawyer wanna-be's that my personal info is safe. I also do not have the technical know-how to accomplish this on my own.

To explain why I am wary, ExamSoft has had a LOT of problems over the past couple years; a brief list of issues is compiled below:

1. Examsoft messed up my computer: https://www.reddit.com/r/LawSchool/comments/4hs94w/examsoft_messed_up_my_computer/

2. Exam Soft malfunction during first and last 1L finals: http://www.top-law-schools.com/forums/viewtopic.php?f=3&t=200514

3. Bar Exam Software Debacle Causes Testing Delays Across The Country (Feb 2018 bar exam debacle WITH EXAMPLIFY): https://abovethelaw.com/2018/03/bar-exam-software-debacle-causes-testing-delays-across-the-country/ ("On the first day of the exam, test-takers were faced with widespread outages of ExamSoft’s Examplify software, which caused exam delays in several jurisdictions. Thousands of bar candidates were wide-eyed with worry when they tried to begin their essays and their exam applications didn’t work — at all. This mess all started with a series of “URGENT” updates to ExamSoft that were made less than a week before the exam was slated to begin...").

4. The Biggest Bar Exam Disaster Ever? ExamSoft Makes Everyone’s Life Hard: https://abovethelaw.com/2014/07/bar-exam-disaster-examsoft-makes-everyones-life-hard/ (covering ExamSoft's massive error in the 2014 bar exam testing period). See also https://theconcourse.deadspin.com/bar-exam-tech-disaster-inspires-lawsuit-threats-operat-1613129108

5. TobyInHR, Exam day horror stories, Reddit (posted 3 months ago): https://www.reddit.com/r/LawSchool/comments/7lb1q8/exam_day_horror_stories/ ("2 out of my three Examplify exams crashed on me last week. The only one that didn't was a Scantron multiple choice test (needed to use Examplify to track our time, since it was self-scheduled). The two exams that crashed also refused to upload after the exam. I just kept getting an error about how my computer was not connected to the internet, which was objectively false. Fairly simple solution: Examplify saves your stuff locally throughout the exam, every 60 seconds. The Examplify folder contains a (I would assume encrypted) copy of your exam, so if it fails to upload, you just have to send Examsoft a .zip file of your Examplify folder, and they can manually upload it.

Any comments or thoughts are appreciated.
2  Other / Beginners & Help / ICOs vs. Airdrops on: February 24, 2018, 10:50:13 PM
ICOs vs. Airdrops

You've been researching cryptocurrencies for a bit now and you think you might be ready to diversify into less established coins, but you're wondering how to choose which coin to pick. Keep reading to learn about the various frameworks that currently exist for the distribution of new coins.

ICOs

Odds are, you've run across a plethora of open "ICOs" ("initial coin offerings"). As an "ICO" sounds similar to an "IPO" ("initial public offering" for the sale of securities of publicly traded companies), you might be inclined to trust the legitimacy of such an offering, but pitfalls are rampant and the unwary might lose their shirt by investing too much in the wrong ICO. That said, ICOs can also be a great investment opportunity. In order to invest in an ICO, you'll need to send some sort of coin (one of the ICO's accepted trading pairs) to a specified wallet address.

ICOs are extremely speculative and should be approached with extreme caution and care. Always read the associated "white paper." You are also heavily encouraged to browse forums like Reddit and Bitcointalk to see if other #cryptoheads can assist you in your analysis. Exploring forums also gives you the opportunity to gauge the strength of the coin's community, which is important if you expect the coin to ever become widely-adopted.

Usually, to participate in an ICO, you'll need to send the coins from the address you intend to use to receive the tokens you are entitled to in exchange for your contribution of ETH/BTC/LTC, etc. The author once made the mistake of sending ETH from a Coinbase account to an ICO address (spoiler: it doesn't work and, to my knowledge, there's no way to reverse the transaction). You'll usually want to use an ERC-20 compatible token wallet (we recommend MyEtherWallet or MetaMask online wallets; make sure you read their instructions and backup your wallet and private key(s) appropriately). Note that an ERC-20 wallet will only work for tokens on the ETHEREUM network. If the coin runs on a different script, ERC-20 tokens will be useless and you will lose your money. ALWAYS READ THE ICO INSTRUCTIONS CAREFULLY!!!!!!!!!

If you want to invest in ICOs but don't know where to find them, check out ICO Alert for an up-to-date calendar of most/all ICO offerings (both ongoing and upcoming).

Often, ICOs offer presale bonuses (I've seen anywhere from 10% bonus to 70% bonus). Keep in mind that, while bonuses do sound nice, they can sometimes harm the cryptocurrency's ability to grow because the early buyers who got the bonus are have incentive to sell the currency at a profit the second it goes live on exchanges, which can sometimes cause the price of a token to swan dive.

Traditional Model of Distribution

You might think an ICO is the only way new cryptocurrency coins are distributed, however, this is not true. In fact, some of the most well-known coins today never had an ICO. Some examples of coins that did not utilize an ICO include: Bitcoin, Ethereum, Litecoin, and Monero. These coins chose instead to rely on stable community growth, miners, and a confluence of other factors to make their coin marketable. While a non-ICO method of coin distribution has worked for the cryptos listed above, there are plenty of coins that have attempted something similar but which have failed miserably and now represent "dead" coins.

Airdrops

In a variation of the traditional distribution model expounded above, it is also possible for a coin to be distributed via airdrop. Airdrops are a really cool way of distributing coins.

Essentially (the following explanation can vary substantially and is only meant to help you conceptualize how an airdrop works), airdrops reward early adopters and have the potential to be extremely anonymous. The specific procedural details of participating in any given airdrop will vary substantially between cryptocurrencies, but you can generally find the rules on the crypto's website. For an example of Airdrop rules, check out the DeepOnion Airdrop Rules (last accessed Jan. 24, 2018; unsure if link will stay live after airdrop period ends in about 11 weeks).

Usually, the first-step in participating in an airdrop (aside from possible registration requirements) is to get some coins. If the coins have been premined, you will probably be able to get the coins on an exchange or through the coin's website. In order to get coins, you'll need a wallet address for the coins to be sent too. Usually, for new coins, you'll want to use the coin's specified QT (desktop) wallet as it will be difficult to find any third-party support for a brand new coin (third-party support comes as the project matures).

Once you have a wallet address and the coin-creators know where to send future airdrops, you simply need to maintain eligibility for the airdrops to benefit. Usually, the amount you receive from an airdrop will be in proportion to the amount of coins you are currently holding in your QT/desktop wallet (especially if the coins use a PoS system instead of or in addition to a PoW system of verifying transactions). For example, DeepOnion benefits early supporters by providing an added distribution to people with 10,000 tokens or more in their wallet (as a way to secure the system).

One of the neat (likely intended) effects of airdrop-style distributions is the ability to quickly increase the coin's per-coin price. Because airdrops have the potential to increase one's coin holdings exponentially during the duration of the airdrop period, people tend to hold the majority of their coins so that they can acquire even more in the next week's airdrop. This "hodling" incentive is good for helping the coin stabilize so that new investors aren't scared off by unacceptable levels of price volatility.

As with anything in the crypto space, be wary before investing. That said, DeepOnion was my first airdrop style coin and I've been thoroughly impressed with how the system has worked.

So Which Distribution Model Is Best?

While past-performance is NOT an indicator of how the future will shake out, I personally prefer the traditional model of distribution and the airdrop model of distribution over the ICO model. However, the ICO model does provide an extremely interesting model for future crowdfunding endeavors and does allow for the average consumer to have access to investment opportunities that have traditionally been limited to venture capitalists and accredited angel investors.
3  Alternate cryptocurrencies / Altcoin Discussion / BAM Coin on: February 21, 2018, 03:32:52 PM
Have you guys heard of this? It aims to decentralize onomatopoeias by aggregating different words that sound like their meaning and distributing them via 'rick-roll' style digital packets neatly inserted into other altcoins. Its an ERC-20 token and so it's automatically compatible with all other ERC-20 tokens, meaning one can simply upload their onomatopoeia to any ERC-20 token and annoy the users before they're able to spend their coin! I hear they're working on atomic swaps too so that we can use this wonderful technology with other blockchains!

No white paper yet, but I think the idea really speaks for itself. Gonna go to mars baby!
4  Alternate cryptocurrencies / Mining (Altcoins) / Looking to Buy Zcash GPU Mining Rig on: January 25, 2018, 02:38:31 AM
Zcash. I want in.

Anything 8+ GPU rigs for sale? What you guys got? Also happy for any links to reputable mining rig distributors you've used and had success with in the past.

Not averse to payment by crypto but due diligence required for crypto payments. Please don't try to rob me  Wink Cheesy Grin

Also, if any Zcash miners want to share their experience, I'm always happy to learn something!

Happy mining!
5  Alternate cryptocurrencies / Altcoin Discussion / Blockchain Stocks?! on: January 09, 2018, 03:45:49 AM
Anyone able to provide info about some publicly traded companies who are on the cutting edge of blockchain development? If I want to make a derivative investment in blockchain by investing in the people who are providing a large portion of the principal services utilized in creating or maintaining altcoins, what companies should I look at? I'm open to all markets as long as the stock is publicly traded.

Looking forward to some responses!
6  Alternate cryptocurrencies / Altcoin Discussion / Lamden (Tau) on: January 08, 2018, 09:18:46 PM
What do people think about this? ICO just finished and its listed on IDEX. https://lamden.io/

Whitepaper: https://github.com/Lamden/whitepaper/blob/master/main.pdf

The atomic swap thing seems super cool and the transaction speed looks really impressive. Anyone else interested in this project? People skeptical? I'd love to hear anything ya got
7  Alternate cryptocurrencies / Mining (Altcoins) / x13 DeepOnion mining on: December 27, 2017, 02:32:13 AM
Just picked up my first ASIC miner. Got a Baikal cube miner (150 mh/s 40w) and I'm all excited. Need to grab a PSU still, but does anyone who mines DeepOnions have any advice or warnings for me? Anything you wish you knew before you got started?
8  Bitcoin / Mining speculation / Structuring a mining business on: December 20, 2017, 05:16:27 PM
Within the United States, what is the best form (or chain) of limited liability entity to use for setting up a small scale mining business?

I'm leaning towards an LLC (to be taxed as a partnership), but with the new corporate tax rate of 21%, maybe it makes more sense to actually pay double tax on coins mined at the time of mining and then again when dividended out?

If you're familiar with business formation but need an update on tax treatment, check out https://bitcointalk.org/index.php?topic=2312999.0

If I was any good with numbers I'd try and figure this out myself, but I'm hoping we got some experts here!
9  Other / Meta / Signature line question on: December 19, 2017, 09:47:26 PM
Hey everyone,

I'm trying to figure out how to set up my signature (I need to for purposes of Airdrops for Deeponion) but it says I'm limited to 50 characters, but my deeponion reference signature is longer than that and I cannot shorten it. Can someone help me figure this out please?

I've copied and pasted the signature here, but I can't get it to work automatically without inputting it

Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!