It's easy to defeat bruteforce. Instead of using the password for account, use the password as an input for PBKDF2 with number of iterations inversely related to password's length. The relation: one second for safe passwords, longer for unsafe, let's say it's 15 second for something like "apple". This makes bruteforcing much harder even for short passwords. It's possible to add a second simple field, even an user's real name, and use it as a salt. The combination would make bruteforcing almost impossible. For compatibility with other accounts, it's enough to add a checkbox 'use older password system'. I can implement this in JS. Jitted JS in new browsers is fast enough. I asked Jean-Luc if he would include this if I did (no point writing only for myself - I have a secure password) but he wasn't interested. https://forums.nxtcrypto.org/viewtopic.php?f=17&t=557Forgive me for not being all that technically brilliant. My understanding of what this idea translates to is a timeout in between each password log-in attempt, with the timeout period increasing for simpler passwords. Have I got the idea? It seems like a good idea to me, maybe just set a default time between log-in attempts of 10-30 seconds. That will at least slow directed BF attacks down considerably. However, there is nothing to stop the attacker attacking multiple accounts simultaneously, switching between targets as it gets locked out. Someone, whose name I shall not mention, did float the idea of creating a hashcat(?)-based tool to carry out an automated bruteforce attack on the entire NXT blockchain, ie all accounts. Maybe this has been implemented.......we need to keep a very good watch out for hacking reports, and take them seriously. |
|
|
|
This post seems to have fallen off FCs self-modded thread for some strange reason. I'll put it here, see if it sticks: A reply of yours, quoted below, was deleted by the starter of a self-moderated topic. There are no rules of self-moderation, so this deletion cannot be appealed. Do not continue posting in this topic if the topic-starter has requested that you leave. You can create a new topic if you are unsatisfied with this one. If the topic-starter is scamming, post about it in Scam Accusations. FC: busy little thread u got here.
And u seem to be wearing your sane person hat today.
U can actually sound credible when u try hard enough, so don't let any nasty NXT trolls annoy you.
A couple of points:
Still not interested. Sorry....
Your solracx/Carlos alter ego apparently owns 50% of all ZenithCoin.
Given your love of a fair and equitable distribution, this must cause u sleepless nights,
So, when can we expect the great Xenith Coin giveaway thread ?
I'll take 100,000 off your hands if u like, just to help u sleep with a clear conscience.
Any one else want some?
Can u provide more details of your dev team ?
Since u admitted that FC and solracx are in fact the same person, this has reduced the visible dev team to one.
I'm concerned that u may end up with too much work to do on your own, what with the dev work and the marketing and the fundraising and the coffee making and the NameCoin project and the ZenithCoin and the iXcoin........u need to pace yourself, mate.
Get some help in.
How is Lucky88888 doing ?
If u remember, from around 3 days ago, he was an investor in nex, who claims to have lost 9995 NXT while using your original nex client release.
Have u got in touch with him to offer help/compensation ?
I could do it for u if u like, reduce that workload a bit.
Wishing u all the best with this incredibly interesting and very original project.
And as usual, a little FC quote: |
|
|
|
Utopian: I know this might be is a little very cheeky, but I've been very busy "helping" FrictionlessCoin with nex.  So I haven't had enough time to show my support for NEM up 'til now. And I'm amazingly poor, so could u sneak my " interested" into the first 10 pages somewhere? All the best, bro, onwards and upwards. Hey man, could you promote NEM somewhere ? No need to send in fee because I actually want promotion more  I can promise u some forum warrior time at the moment, maybe more promo/practical help in the near future. Not gonna make u promises I can't deliver on, I'm spread very thin right now, and NXT is my main crypto priority. Oh, and "helping" FC, of course. Has he showed his face round here yet ? Hi it is very easy. Just find an article, site somewhere and put a comment in with the link to this page (explain in the first page). It is to reserve your place. I don't really care for FC since we are doing different things and have different attitudes. I've been thinking about my request while I was offline, and I think that u should tell me to get lost and buy in like every one else at this stage of NEMs flotation. I don't want to open u up to being accused of playing favourites, for whatever reason. Fair and equal distribution, my own fault that I didn't get in early. I'll study the thread a bit more (just skimmed it so far) and get back 2 u. DID U not read the OP? Read is a big word ...I skimmed it quickly in tl:dr mode while on phone to a potential client, realised I was almost late for picking u kids, threw up my request to utopianfuture, then ran out the door, thinking: No Envy Movement, that rules. Then I thought a bit deeper about how my request was actually out of order, by asking UF I'd put him in the position where he (and NEM) could be accused of giving me preferential treatment. So, long story short, threw 40 NXT in NEMs direction like everyone else. And I still haven't read the thread properly.... |
|
|
|
All,
Schoul'd Optical attend in Miami?
fund can come from unclaimed coins?
thoughts now please, I see already two people that agree he should go... others?
Pin
Yes, sir! Completely ignore the next bit: +1
Late as usual, but yeah, on that plane with optical (and maybe hot g/f as well).
Good to have some guaranteed support for him if he's up on a podium representing NXT for us all.
I feel it's in a good cause, so use the unclaimed NXT. They can do NXT some good right now. |
|
|
|
|
40 NXT on its way 2 u....
Account:1580825311588963305
Tx ID: 370873255699580153
|
|
|
|
|
Pity all of this happened on a public forum with daily/weekly/monthly backups (and possibly comprehensive change logs) available.
If the FCs try pulling legal action (though I've got no idea for what. Forum, mate, get the concept ?)
the only evidence that the FCs will have to present will also have every single word he/she/they/it have ever posted.
I don't think the court will be all that impressed by a complete and total record of every single thing the FCs have ever said and done here..
Come to think of it, i'd almost pay good money to have this thread (and a couple of others) read out in an open courtroom.
Much LOL, some poetry......
Give it up, FCs, u must know u can't win on this point.
Unless the FCs are also a lawyer and some judges on their infrequent days off.
@Damelon: I can't decide between Hugh Grant or Danny Trejo to portray me.....maybe Andy Serkis for the various FCs.
|
|
|
|
What you call manipulation is called 'marketing' in other circles.
And "lying" in some other circles.
CodeAudit corp is currently private... but listing on CryptoStocks may be an option.
Why CodeAudit, why not FrictionLessCrypto or something less audity....?
Italics r mine.... |
|
|
|
I'm in for 10k nxt
Really ? or are u just trolling the poor old FCs ? If not troll, may I recommend reading thread before investing. |
|
|
|
Until this moment i had no idea i was talking to a real live corporation
I did not say you were committing fraud, in fact i was making sure you didnt commit fraud
I am one of the early nex supporters. Are you going to sue one of your initial supporters for trying to help?
When you said manipulating people was not a crime, i just got so concerned for you
That is exactly what all the guys who end up being convicted of fraud usually say
Carlos, i know you are not that kind of guy. You just are doing this for a piblic service. But what is the profit angle? Maybe codeaudit is a nonprofit company? Then all this makes sense
James
So it is clear, CodeAudit is a for-profit corporation incorporated in the state of Delaware. FrictionlessCoin will be the brand for products that will create all kinds of crypto-currency software for sale. One of these products may be a Nxt clone that we may offer for sale to the public. Carlos Perez is a shareholder in CodeAudit Corp. "FrictionlessCoin" in this forum relates to the actions of the corporation. "solracx" in this forum relates to the actions of the person. So it is even clearer to you, ZenithCoin is owned and by Carlos Perez. FrictionlessCoin created ZenithCoin. FrictionlessCoin also is the lead developer for iXcoin and makes its software contributions for free for iXcoin. FrictionlessCoin has other projects in the pipeline regarding crypto-currencies. In short, if FrictionlessCoin decides that selling a Nxt clone has financial potential, then it is clearly within the laws of the United States of America and the State of Delaware to provide such software. ROFLMAO.....that has got to be the sneakiest about-turn the FCs have ever tried to pull off. I cant express how much LOL i'm doing right now. I've watched FrictionlessCoin and solracx have an honest to god conversation with each other on this forum, and now it turns out that Carlos The Human was actually talking to Carlos The Corporation. One man, 2 hats. Much confusion. So many suck poppets. |
|
|
|
Utopian: I know this might be is a little very cheeky, but I've been very busy "helping" FrictionlessCoin with nex. So I haven't had enough time to show my support for NEM up 'til now. And I'm amazingly poor, so could u sneak my " interested" into the first 10 pages somewhere? All the best, bro, onwards and upwards. Hey man, could you promote NEM somewhere ? No need to send in fee because I actually want promotion more I can promise u some forum warrior time at the moment, maybe more promo/practical help in the near future. Not gonna make u promises I can't deliver on, I'm spread very thin right now, and NXT is my main crypto priority. Oh, and "helping" FC, of course. Has he showed his face round here yet ? Hi it is very easy. Just find an article, site somewhere and put a comment in with the link to this page (explain in the first page). It is to reserve your place. I don't really care for FC since we are doing different things and have different attitudes. I've been thinking about my request while I was offline, and I think that u should tell me to get lost and buy in like every one else at this stage of NEMs flotation. I don't want to open u up to being accused of playing favourites, for whatever reason. Fair and equal distribution, my own fault that I didn't get in early. I'll study the thread a bit more (just skimmed it so far) and get back 2 u. |
|
|
|
Utopian: I know this might be is a little very cheeky, but I've been very busy "helping" FrictionlessCoin with nex. So I haven't had enough time to show my support for NEM up 'til now. And I'm amazingly poor, so could u sneak my " interested" into the first 10 pages somewhere? All the best, bro, onwards and upwards. Hey man, could you promote NEM somewhere ? No need to send in fee because I actually want promotion more I can promise u some forum warrior time at the moment, maybe more promo/practical help in the near future. Not gonna make u promises I can't deliver on, I'm spread very thin right now, and NXT is my main crypto priority. Oh, and "helping" FC, of course. Has he showed his face round here yet ? |
|
|
|
Okay, VIX then.
Is VIX not trademarked ticker symbol?... I wouldn't risk it - coins are too close to finance. After some thinking I would pass on NIX though, you could use it until further notice I disagree. NIX = New iXcoin = premined coin. VIX is not very good but still better. Okay, see your point. Hmm, what about GIX then? DIX ? PRIX ? |
|
|
|
I made popcorn prior to reading this thread.
It's almost a prime time entertainment.
Yeah, i've had some serious laughs round here......FC/carlos/solracx should get his own reality show. |
|
|
|
Okay, VIX then.
Is VIX not trademarked ticker symbol?... I wouldn't risk it - coins are too close to finance. After some thinking I would pass on NIX though, you could use it until further notice Keep it as NIX, mate, VIX is a cough medicine. NIX is much better. |
|
|
|
Utopian: I know this might be is a little very cheeky, but I've been very busy "helping" FrictionlessCoin with nex. So I haven't had enough time to show my support for NEM up 'til now. And I'm amazingly poor, so could u sneak my " interested" into the first 10 pages somewhere? All the best, bro, onwards and upwards. |
|
|
|
Furthermore, FrictionlessCoin is the voice of the corporate entity which is not necessarily the voice of solracx.
Could you clarify this? It sounds like you are saying that frictionlesscoin is actually not a real person, but a voice of a corporation that is owned or controlled by carlos Yes, from the legal perspective, two different legal entities. So if Carlos is writing for FrictionlessCoin, then it is from the perspective of FrictionlessCoin. Let me see if my poor trollish brain can understand this: You (FC/solracx/etc) are admitting that u are in fact only one person, but that u do have 2 different perspectives. So its like if u put the red hat on, you are FrictionlessCoin, and if u put the blue hat on u become solracx.Like Bruce Wayne and Batman.......makes perfect sense now. So why have u been consistently lying about the FC/solracx connection ? (I expect the answer to be: "who, me ? Oh, noes, i wasn't lying" while u frantically edit previous posts) |
|
|
|
|
Heres a poem for ya, FC;
A baboon has a purple ass
You are a star
Will we see u in court?
Do u get it?
|
|
|
|
Then explain why you have so much faith in Level Coin and his alleged IPO scam ?
I liked the Level coin idea. So I stole it. No harm in that. Is it a scam? I have no idea. Fixed it for ya... |
|
|
|
I do not like this Nexus Spam
I do not like his NEX scam.
I do not like these dirty crooks
or how they lie and cook the books.
I do not like when Alt. coin steals.
I do not like their secret deals.
I do not like this speaker Man.
I do not like this change of plan
I do not like this spending spree.
I'm smart, I know that nothing's free.
I do not like their smug replies
when I complain about their lies.
I do not like this kind of Joke.
I do not like it. Nope, nope, nope!
My Investment 0 nadda nothin'
+ lots |
|
|
|
This is the FAIR distribution that the Nxt folks are so proud of:  This is a graph of the original NXT distribution. 73 accounts. Here are the numbers: ...snip.... Zenith Coin *cough* |
|
|
|
|
Show Posts
