I'm hoping to have all of my labels and holograms all done lasered signed etc by end of next week. Probably shipped by the following monday. Sorry for the delay. In Hawaii time moves slower. J/k it's been a busy summer.  |
|
|
|
 this is waht happenz if you dont have a decent wallet ups! IMPORTANT ANNOUNCEMENT FOR ALL SERVICE PROVIDERS: I basically hacked cryptonic.net today as I was able to get their wallet seed and transfer out 2380 XMR. I will of course return the funds to the owner, the only reason I transferred them out is to safe keep them from other potential attackers. This is something that has been worrying me for a while, but it was only today after receiving a PM from a guy asking for help that I decided to go through the effort. I scanned the monero network, a total of 318 IP's on port 18082. I found 2 matches, and only 1 that I was able to attack. But there could be more vulnerable services out there running on different ports. When you're running the wallet in rpc mode (you can do that by binding the port) for example like this: ./simplewallet --wallet-file mywallet.dat --password demo123 --rpc-bind-port 18082 Your wallet will be able to respond to RPC calls. What is very important to know is that the RPC calls are NOT password protected. The password I specified in my example (demo123) only protects the wallet. Once the wallet is running as rpc server it will accept incoming calls. Therefore your port 18082 MUST BE CLOSED (or whatever port you use to run the wallet server). This way you can only access the RPC from localhost. The RPC has calls like "query_key" where you can retrive view_key or the mnemonic seed. That's what I used, but I could also have used commands like "transfer" to take the funds. This does not affect normal wallets, only if you run it in server mode like I explained above. As of right now I'd advise people to wait with purchases on cryptonic until the owner has responded and secured his wallet. It doesn't appear to be any major issue at the moment as I only found this 1 wallet vulnerable, but again I don't know how many are running servers on different ports and I think it's best this info is out in the open so admins can secure their wallets correctly. It's very simple, just make sure that the port you bind your wallet to is closed. I don't view that as being negative for simplewallet. It's just like any other software: if you don't know how to use it, it can put you at risk. It's the fault of the user, not of the software. I'll admit I was also running simplewallet incorrectly until now, but that was due to my ignorance. I wouldn't view Apache (or NGINX or Lighttpd) as indecent if I didn't do my part to secure it properly. It's like if I leave a vault full of cash wide open at night for anyone to come and steal....is it the fault of the vault manufacturer who designed the vault? I don't think so. |
|
|
|
...
Thank you for this.
Although I don't personally run a monero in server mode it is good to see we have good intentioned whitehat hackers Security Professionals around.
Good work!!
FTFY.  BTW Most Security Pro's wear a grey hat. lol potato potah-toe. Don't both categories have some overlap? |
|
|
|
IMPORTANT ANNOUNCEMENT FOR ALL SERVICE PROVIDERS: I basically hacked cryptonic.net today as I was able to get their wallet seed and transfer out 2380 XMR. I will of course return the funds to the owner, the only reason I transferred them out is to safe keep them from other potential attackers. This is something that has been worrying me for a while, but it was only today after receiving a PM from a guy asking for help that I decided to go through the effort. I scanned the monero network, a total of 318 IP's on port 18082. I found 2 matches, and only 1 that I was able to attack. But there could be more vulnerable services out there running on different ports. When you're running the wallet in rpc mode (you can do that by binding the port) for example like this: ./simplewallet --wallet-file mywallet.dat --password demo123 --rpc-bind-port 18082 Your wallet will be able to respond to RPC calls. What is very important to know is that the RPC calls are NOT password protected. The password I specified in my example (demo123) only protects the wallet. Once the wallet is running as rpc server it will accept incoming calls. Therefore your port 18082 MUST BE CLOSED (or whatever port you use to run the wallet server). This way you can only access the RPC from localhost. The RPC has calls like "query_key" where you can retrive view_key or the mnemonic seed. That's what I used, but I could also have used commands like "transfer" to take the funds. This does not affect normal wallets, only if you run it in server mode like I explained above. As of right now I'd advise people to wait with purchases on cryptonic until the owner has responded and secured his wallet. It doesn't appear to be any major issue at the moment as I only found this 1 wallet vulnerable, but again I don't know how many are running servers on different ports and I think it's best this info is out in the open so admins can secure their wallets correctly. It's very simple, just make sure that the port you bind your wallet to is closed. Thank you for this. Although I don't personally run a monero in server mode it is good to see we have good intentioned whitehat hackers around. Good work!! |
|
|
|
GUI priced-in already?
I suspect it mostly has not been priced in yet. Most people don't even know what monero is, let alone know to look for GOOEY. Lots of people have heard of Ethereum but only because of the price and its infamous DAO shit-fest. Monero is still in the accumulation phase. |
|
|
|
The GUI is currently functional for sending and receiving, some stuff like advanced options have to be finished but if you guys want you can already try and compile it from ilya´s github. Do you think it will affect on the price? Demand need to be sourced from somewhere. Some bigger guys need to buy in to collect the loose coins from the weak hands. Yes I do. I think there is a significant non-technical crowd we can cater to. People who have been stuck in less optimal coins such as dash. It will allow all the moon kids to jump on board. Perhaps not the best crowd to have on board you may say, but a small technical crowd like we have in monero just doesn't cut it. We want to grow big, but we are only so many. If we have learned anything from watching shitcoins, it's that there is power in numbers, a swarm of people can spread the word a lot faster and bring the price up a lot higher than a few monero whales can. I hate to be the guy to say this, but the moon kids can actually serve a purpose if we want the attention we deserve. I am tired of monero, the best coin when it comes to anonymity, being consistently ignored by big voices in this space. I think the GUI can change that, as a step towards mass adoption. There's a second reason I think it will affect the price and that's getting monero out of the exchanges. Very many have left their moneroj on the exchange because they're not comfortable with cli. Trust me, it's a lot easier to dump when all you have to do is click sell versus digging the coins out from cold storage. This will result in less selling pressure. That video you linked to shows that AA is either irritated with people pushing monero...or has a conflict of interest. Funny thing is the guy pushes bitcoin all day long......hypocrite much? |
|
|
|
The GUI is currently functional for sending and receiving, some stuff like advanced options have to be finished but if you guys want you can already try and compile it from ilya´s github. img snarp Do you think it will affect on the price? Demand need to be sourced from somewhere. Some bigger guys need to buy in to collect the loose coins from the weak hands. Oh gee I dunno. The GUI has been about the only thing that people THINK is keeping XMR on the ground... and the price of a commodity is based on what people THINK it should be. This group think may be true for most people. But I suspect many are also looking at the prospects for how monero's functionality plays a key role in the whole cryptosphere as time goes on in this nanny-surveillance-state/world we live in. |
|
|
|
The GUI is currently functional for sending and receiving, some stuff like advanced options have to be finished but if you guys want you can already try and compile it from ilya´s github. "the force", "the shwartz", and now "the sarwce code" |
|
|
|
This will be back to 225 in a week.
You got a magik 8 bawl? Price seems sort of stable...like the calm before VOLATILITY. |
|
|
|
|
lots of "congestion" in the price...
look out for a rocket that moves in slow motion.
|
|
|
|
I need $0.01 bitcoins. Got any?  |
|
|
|
orders have been shipped. Spent a few hours at USPS.
Will be PMing people their tracking numbers.
I think I funded my orders, never got a confirm from you so just checking in. Thx If it shipped, then yes that is the confirmation it was funded from my end on checking it. Sorry for not confirming prior. It's been a crazy few days and weeks. My apologies I believe I sent you a tracking number?? |
|
|
|
|
orders have been shipped. Spent a few hours at USPS.
Will be PMing people their tracking numbers.
|
|
|
|
XMR requires new terminology to distinguish the regularly scheduled fork. "Firm fork" seems inevitable.
Sorry a hard fork is a hard fork. Monero is not decentralized. Some marketing buzzwords attempting to hide that fact will backfire eventually. How about you finish the project and stop forking it. Then go create a new project with the new features you want to add. Eventually you need to take off the training wheels, if you want the community to take it seriously as a decentralized protocol that no one can overpower. But any way, Satoshi's design doesn't really remain decentralized anyway, so I guess it is pointless. We just need to admit that none of this stuff is decentralized and we are wasting our time. Why don't you stop posting on this forum and get back to your world-changing-crypto-diety-no-flaws-project? You sure post a lot for someone who has an absolutely ground breaking project/invention that is going to blow the water out of all cryptocoins/projects that exist. If I had such a world changing project I wouldn't be posting until I had the project 100% complete, then gloated (if at all).Your approach seems to be talk a lot and back it up with nothing (so far). Please put up or shut up. Thanks. |
|
|
|
It's coming
EDIT: This topic is my proof. Everyone thinks that it's not possible but why not?
I call it a bubble.
quoted to be revisited to see how wrong you are. |
|
|
|
|
UPDATE: For any one who has ordered physical monero coins from me and has received funding addresses and has funded their coins will have their order shipped out Monday or Tuesday Hawaiian Standard Time of this week. Tracking numbers will be provided. Thank you to all who ordered thus far.
Orders that need to be funded still will be shipped once I am able to generate certificates/check funding for the coins after they are fully funded.
Lastly, if you have not received funding addresses for the coins you ordered, they will be sent to you this week.
|
|
|
|
Excellent light and 10x is minimum when grading coins Natural light vs white light vs tinted light all produce different variations of issues with coins, at least in my own experience. As Miffman eluded to you can see a coin in natural light and it looks good even with a magnifying glass but you change the lighting and the issues become more obvious/apparent. Definitely a good skill to have and be aware of when dealing with gradeable coins. |
|
|
|
|
Walking can work it just takes much more time.
I prefer doing high intensity workouts with very short time periods with no rest.
Instead of doing hours of walking I can get the same results by doing 5-10 minutes non-stop of high intense workout.
|
|
|
|
After finding the defect earlier, I was worried I may have missed some more. Unfortunately, I did.  I will contact the respective buyers/reservers shortly to find some alternative. In the mean time, I have reserved the remaining non-defect coins until all coin defect issues are ironed out. Here is a list of the coins I have found with out noteworthy defects: 32 - scratches and 2 milkspots 53 - small scratch patch 54 - general scratching 61 - scratch and two small tarnish circles 62 - a spot on the raised quarter 75 - big fingerprint 86 - normal and hairline scratch patch Again, I apologize for this. I am trying to avoid any unhappy customers. One of the things I had to employ in my recent run of coins was take a period of time to closely inspect the coins once they arrived. I got a mountable magnifying glass with an adjustable stand and used it with appropriate lighting to see blemishes, scratches, milk spots, missing gold plating. Of course no coin is perfect. But I did find some that needed to be "dealt" with. It's a very tedious task. Very good of you to do this with your batch of coins. |
|
|
|
Sorry but I forgot whether RingCT needs a hard fork.
I believe it does require a HF. Believing is not knowing. Yes and that was the purpose of my statement to make sure to present my view as it could be possibly wrong as I am no expert on monero entirely. I did carefully read the RingCT white paper by Shen and from what I gathered from all the math, it does require a HF....and yes I BELIEVE.  What do you KNOW? |
|
|
|
|
Show Posts
