Or perhaps... we forget about the advanced menu and just make the import private key function available, but the user is prompted with an option of sweeping the funds when they do it. Like when they go to import the key it will show a message like "If someone else had this private key before you, your funds may be stolen. You can eliminate this risk by transferring the funds into your other secure addresses. Would you like to sweep the funds into another account?".

Problem solved. You're welcome.

No I don't think so. This thread had been going 2 or 3 days before anyone cracked it, and that was only after casascius gave enough information to cut the possible solutions in half. Furthermore, the password didn't have any numbers or any other special characters. A random 5 letter password which we know nothing about would take more than a day to crack even with multiple computers.

Eh I don't really care. Having the price fluctuate with the exchange rate helps illustrate how the script works. BTW the exchange rate values are pulled from Mt. Gox using my GoxGrab script (a free script).

Haha, I don't think they'll really care about this script. But what they might care about is the Bitcoin SCI script (which is used by BitShop), since it's free and simply relies on public blockchain.info and/or blockexplorer.com data to confirm transactions. (I no longer maintain the free SCI script and it's probably not safe to use anymore).

Ahhh, the first purchase of BitShop has been made! Thanks to who ever bought it. 

If you need any help with anything please don't hesitate to post your questions here.

I can understand why they forbid it in MMO's. It puts real players at a disadvantage because bots can run all day constantly mining resources and flood the game market. Especially when you're reading or manipulating the client code in some way. At least with color bots you're just reading the image on the screen (like your eyes do) and then mimicking the mouse and keyboard actions (like your hands would do).

It can actually be very powerful and robust. It's a lot harder for them to constantly change the graphics than it is for them to fix holes in the code which allows botters to exploit the game in a more fundamental way. They constantly look for and fix those holes all the time, making those types of bots obsolete very quickly. That is why the Villavu community has lasted so long, and have been botting Runescape for like 5 years or something now. Many other bots have come and gone, but they always remain.

The best and easiest way to build legal game bots is to use a color based script which analyses pixels and mimics real mouse and keyboard actions. It's also the safest way to bot games without being detected (they will typically ban you even though it's supposedly legal). Take a look at SCAR or Simba (both are based on the Pascal Script engine) and browse the Villavu forum to see example scripts (typically for Runescape).

And for those who might be interested, I created my own scripting IDE for creating Mt. Gox trading bots, based on the same Pascal Script engine. Take a look: Deja Vu - Bot Scripting IDE.

I just read this:
There's no way anyone is going to crack this via simple brute force. A dictionary attack is the only plausible option. If the password is a random jumble of lowercase and uppercase characters, I doubt anyone will crack it.

Here are some good 5-letter word lists for those who want to take the dictionary approach.

8938 5-letter words:
http://www.poslarchive.com/math/scrabble/lists/common-5.html

5757 5-letter words:
http://homepage.cs.uiowa.edu/~sriram/21/fall07/words.dat

Well assuming the password is a word in the dictionary, there are something like 10,000 words which are 5 letters long (that's a very rough guess based on the fact most dictionaries have around 200,000 words).

Some brief testing with the address utility software indicates that it takes about 3.5 seconds to decrypt the private key using my Phenom II X4 810 (also a very rough estimate using only the GUI).

Assuming my calculations so far are remotely correct, to test 10,000 pass phrases when each test takes about 3.5 seconds, will take at least 9 hours. Of course the pass should be found before trying all 10,000.

If the password is a 5 letter English word, it would probably be possible to crack the key using a list of the 5,000 most common 5 letter words or even less. However, the words should be tested in all caps also, so we're back to 10,000.

Here are some pics of some of the more important sections of admin area. At some point I will create a live demo which lets anyone log into the admin panel use most of the features.

Admin Home
Transaction Info
Transaction List
Create New Product
Product List
Product Info
Category Menu
Reviews Menu
RSA Key Gen
Page Editing
Product Images

NOTE: most of these images are a bit outdated now.

Useful links:

Common Problems and FAQ
BitShop Change Log

What is BitShop

BitShop is a powerful PHP/MYSQL shop script which allows merchants to easily sell digital items such as software or codes, in return for bitcoin and other cryptocurrencies. BitShop is the #1 shop script for selling digital goods. It also powers the official BitShop website (screenshot above).

Fast and Simple

The checkout process is designed to be as simple and fast as possible. The buyer will go through an easy checkout process and they will receive the item instantly after the payment is confirmed. Multiple payment gateways, including Coinbase and GoCoin, can be enabled simultaneously.

Flexible and Modular

BitShop is designed with developers in mind. Unlike many other scripts, BitShop is extremely modular and offers developer flexibility. For example new payment gateways can easily be installed as self-contained modules and new themes can also be installed without overwriting other themes.

Dynamic and Responsive

BitShop makes use of the latest in web technology to provide a dynamic and responsive user experience. Built upon Bootstrap 2 and HTML5 Boilerplate, the BitShop script is fast and looks good on any platform. Witness the power of HTML5 and PHP (and a bit of JS and CSS of course).

Bootstrap Template

The default template used by BitShop is built around the Bootstrap 2 framework. If you visit WrapBootstrap or Bootswatch you can get custom made Bootstrap themes. This provides a great way to change the default theme but it's also easy to remove Bootstrap and build a theme from scratch.

Powerful Admin Area

BitShop includes an administration area where it's possible to manage your orders, products, vouchers, accounts, etc. BitShop supports a wide range of different methods for selling digital items such as files, keys, and gift codes. It now also includes basic support for selling physical items.

Regain Independence

The built-in payment gateway is fully customizable and uses multiple public block explorer API's to handle payments. Addresses can be automatically generated on the fly or taken from a custom list. You can also run a bitcoin/altcoin daemon to directly process payments without a 3rd party.

Official Website

Official BitShop Website
Official BitShop Forum

Ok folks I just fixed another critical but rather uncommon bug which some times happened when converting private keys to bitcoin addresses. It was somewhat similar to the last bug, some hex values needed to be padded with '0' if less than 64 characters long. I took me a while to even notice this bug so I hope it hasn't affected anyone. I lost a few BTC because of it. 

But I am now fairly certain the address generation and conversion functionality is totally bug free so that's a plus.

The font used on your website is absolutely horrendous, not to mention way too small to read.

Way to go WordPress. The big players are making their way into the game... had to happen sooner or later, the benefits of bitcoin simply cannot be denied.

I just want to add one other thing for those people who might still be concerned about this software.

Deja Vu doesn't require your Mt. Gox password at all... all it needs is your API key and secret.

Even if there was some sort of logger in the software, I wouldn't be able to access your Mt. Gox account.

I could trade with your bitcoins and possibly sell them to myself at a low price, not sure how hard that would be though.

Of course if you had the withdrawal option enabled I could steal your bitcoins, but I would recommend always having that disabled.

In any case it's easy enough to test the software in a sandbox environment if you're really concerned.

Hahaha. I like that theory. It'd be funny if that's how Bitcoin was inspired.

lol what does that have to do with anything? 

I thought this was a pretty cool little coincidence. I was watching an anime called "Kiddy Grade" and something in episode 10 caught my eye. It appears that this anime first aired on TV some time during 2002, a long time before Bitcoin appeared on the scene.

If you haven't seen this anime, it's kind of similar to Outlaw Star or Cowboy Bebop if you've seen either of them... basically it's set far in the future when intergalactic travel is common, business and trade happens on a galactic scale, so on and so forth.

I can't recall any part of the anime so far which explains how their money system works in this fictional future world, but I would assume they must have some sort of galactic or universal currency to conduct business and trade between planets.

In episode 10 there's a short scene which lasts for a few seconds, where it shows what looks like some sort of credit/debit card. The card its self looks extremely plain, there's only two small characters on the card... one of which looks like a Bitcoin symbol.



I'm seeing "e฿", but obviously a ฿ with two vertical lines, a frontrunner in the selection of Bitcoin symbols (since the ฿ symbol is already used for another currency). If we stretch this theory even further, the "e" may mean electronic, as in electronic Bitcoin card.

lol how did I know he would stumble upon that and get really mad. Rudd-O really took it a few steps too far though... haha.

But in all honestly it seems kind of stupid to have a Wiki page being edited according to the emotional state of some guy.