No argument from me.  The concern you and ranochigo bring up is quite valid.  My only fear that some people will forgo the validation all together if they keep having issues getting the PGP signature to validate.  There are no instructions on Electrum's website notifying people that .asc files' names need to be changed to match the binary file name, and most people probably won't take the time to research why they're having trouble.  I would venture to guess that most people who are using the GUI PGP apps like Kleopatra are not as familiar with PGP as many of us here.

Apparently I need to re-write my guide on validation to mention that the signature file names need to be changed to match the binary file's name.

Colires gave a perfectly good reason for not posting his "evidence" in public.  If this is an alt of OldSamurai\Rambotnic, then it's within the communities best interest to keep colires' methods of detection private.  If you're concerned about false positives, ask colires to share his findings with you privately and then you can make a decision with a little more insight.

BTW, Hilariousetc said something very similar about his suspicions connecting two unrelated accounts.  I don't recall you telling him to post his methods in public or STFU. 

Windows has a built-in certificate utility that can be used to calculate SHA512 sums.  Here's an example of how to use it to find the checksum of the hashfile.  You can use the same tool to calculate SHA256 and MD5 sums also.  Just change the sha512 at the end of the command to sha256 or md5 to obtain those sums.

Well, this forum has 99 problems but helping newbies figure out issues with Bitcoin transactions isn't one of them. 

I agree with nc50lc's prognosis.  My suspicion is you created a transaction, but didn't broadcast it.  The transaction was logged by your wallet, but didn't communicate the transaction with the blockchain.  That's why your backup wallet had no record of the transaction, it was only stored locally in the main wallet.  As soon as one wallet broadcasts the transaction all your other copies of that wallet will be updated the next time you synchronize them with the blockchain.

I'm glad to hear your issue was resolved, and I'm glad you find this forum helpful.

This actually makes a good argument for the method used by the Bitcoin Core development group.  The Bitcoin dev team uses PGP to sign a text file full of the SHA256 hashes for the various binary releases.  One needs to verify the PGP signed text file, then confirm the SHA256 hash of the desired file matches the binary.  It does add a verification step, but at least we wouldn't need to change any file names if we use one of the GUI PGP apps.

As I posted above, their are ways to verify the signatures without changing the names of the files, but I understand that might be intimidating for folks who aren't comfortable with the command line interface.

I've stopped using Kleopatra.  It's kind of buggy and quite limited given all the control one has using the CLI.  It's definitely a good tool for beginners, maybe some day they'll include a dialogue box that allows you to chose the signature file and the binary separately.

These days I've just been using Windows Terminal or PowerShell and using the command line.  There's no issue with files of different names; I can open a notepad window and copy/past the commands to check all the dev's signatures.  Here's an example I posted a couple of months ago:

According to your original post above, you'll need first need to download and import ThomasV's pgp key.  The links posted above will get you the key, save it someplace easily accessible, and name it ThomasV.asc

To import it use --import /path/to/file/ThomasV.asc.  Once it's imported you can sign it using --sign 6694D8DE7BE8EE5631BED9502BD5824B7F9470E6.  Editing the key the way o_e_l_e_o suggested is a more powerful way to do it, and gives you options for trust level.  Using the --sign command automatically sets the trust level to 4 (fully trusted.)

Congrats on your new ink.  Can't say I'm a fan of tattoos in general, and I've gotten to a ripe age without any so far.  I won't say "never" but that's the direction things are going.  With my luck I'd get some beautiful hula dancer tattoo   That takes some courage to get a meme tattoo, and the art is pretty darn good.


Even a henna tattoo is a little to "permanent" for me.

You guys can still draft Taysom Hill. 

I have nothing against a welcome message, nor a guest landing page.  As I've said before; I think it's a good idea.  I don't expect it to solve the scammer problem on this forum (I don't believe you do either,) but sure, it could prevent a few scams here and there, and it couldn't hurt either way.

And no, it would have no affect on my liberty.  I only brought that up because I've gotten the impression that you would be supportive of more extreme measures to prevent scams.  Perhaps I misinterpreted something you wrote in the past to get that impression.


I don't claim to be Joe Sixpack as I tend to believe I'm more skeptical than most (raising three daughters will do that to a man.)  I've been using and visiting forums for a long time, many that focus on subjects in which I'm well versed and experienced, such as BMW motorcycles, Ford trucks, and American rifles.  I've seen so many posts by users who claim to be experts only to find them spreading the most preposterous bullshit as if it's fact.  I don't pay attention to site specific reputation or reviews.  I assume everyone is full of shit until proven otherwise.


I'm not arguing with you about that, I think we're closer aligned on this issues than not.  My argument is that there are plenty of warning signs in existence already to help newbies and guests avoid scams.  There's nothing wrong with adding one more.  Just don't get your hopes up, because odds are it'll be as ineffective as the current "Red Flags."


I can't say for sure, I'm not an alt of theymos (or satoshi for that matter.)  I always figured it had more to do members' privacy than anything else.

Game 1:  32'  0-2 Manchester United
Game 2:  32'  0-1 Chelsea FC

Honestly, it's not that cut and dry.  The internet is full of misinformation, and most of us have learned to be skeptical when researching solutions to our problems.  I don't blindly copy and paste code from stackexchange without researching the commands, nor do I assume that the youtube videos about misfiring Fords are going to address my specific mechanical issues.


I tend to agree with theymos, which is the point I was trying to make to actmyname.  We can't protect everyone, nor can we prevent all scams.  I'm in no way suggesting that we stop trying, but we're going to have to accept some risk.  A quote that's often attributed to Benjamin Franklin goes something like this:  "Those who would give up essential liberty, to purchase a little temporary safety, deserve neither liberty nor safety."

Lol, spoken like a true LFC fan.


Why the dig on Tuchel?  Something I don't know?  He had a great run at PSG, and so far Chelsea looks far better since his arrival.


I agree that calling him a fraud is going a bit too far.  He's done a great job at City, as much as I hate to admit it.  Realistically, I'd love to see Guardiola sidelining Arsenal matches in place of Arteta.

@ChiBitCTy, I hope you're not offended, please don't take it personally.  The decision to keep it a small, casual league was discussed from the onset, and that's what attracted me to it in the first place.


Excellent, that works out great for me.  Gives me just enough time to get home from work, take a fat bong hit, and log on to take my first pick...  At number 8. 

I don't think it's a big deal that they're all in the same Git repository.  The odds of both the Electrum site and the Git repository getting hacked at the same time are extremely remote.  If one or the other gets hacked the binary signatures wouldn't verify. 

I do think it adds security to have a couple of sources from which one could download the keys, just in case one of those sources is hacked.  In the OP I included redundant sources for ThomasV's key.  If you're in the habit of storing other people's public keys yourself, this really only helps when you download someone's key for the first time.  It would allow you to confirm that the multiple sources provide the same key, which helps confirm the key's authenticity.  Once the key has been downloaded and a signature confirmed, you should store the key locally.  Again, this is based on the theory that it's unlikely for multiple sites to get hacked simultaneously.

Maybe big red warning on every trading board post started by a newbie; something simple like "Scammers flourish in a free marketplace, WATCH YOUR ASS!"  That might get the job done, but then again it could get ignored just like all the other giant red warning signs.

At some point one has to accept the risks of living in a free society.  We can police our own in the hope of preventing repeat offenders, and sometime we can't even do that.  The only alternative is regulation and enforcement, and I doubt theymos will ever venture there.  Personally, I would rather accept the risks of a free forum than the alternative. 

I wouldn't call Garoppolo terrible.  He's 22 and 8 as a starter for the Niners, and that includes two losses that he started but didn't finish due to injury.  Average passer rating as a Niner is 95, which isn't great but far from terrible.  He's actually pretty darn accurate passer, even if he doesn't have a big arm.  His main faults are that he's prone to injuries and he's less mobile than Tom Brady.  For a pocket passing type offense he'd be a great addition.


I agree.  Shanahan has never been thrilled with Garoppolo.  Shanahan is one of the most brilliant offensive architects in the league, but Garoppolo limits his creativity.  He's been salivating for someone like Trey Lance who allows him to spin some gimmicky option plays.


It doesn't matter who's playing QB, Aiyuk will get a lot of balls tossed his way.

Nah, his English was shit, google translated shit at that.  He said something once giving me the impression he was from eastern Europe, I figured Romania or Bulgaria.  Elmanchez once claimed to be from Azerbaijan.  I wasn't necessarily saying I believe they could be one person, just reminiscent of one another.   Both seem to possess a calloused soul.


Parasitic is great way of summing it up.  It must be a pretty depressing existence.

None at all.  I just turned mine on for the hell of it:

Just to add to TryNinja's comments, the private keys you receive will have been pre-funded.  You'll get keys that were loaded at some time before your deposit was received by chipmixer.  It's a privacy feature that sets them apart from the competition, in my opinion.