Bitcoin Forum
May 02, 2024, 03:07:36 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 [83] 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 ... 382 »
1641  Bitcoin / Hardware wallets / The Collectibles Issue on: January 15, 2023, 03:22:41 PM
I don't know how many here pay attention to the collectibles area but there was an issue this week where one of the makers had kept a bunch of private keys and decided to take everyone's money:

https://bitcointalk.org/index.php?topic=5434506.0
https://bitcointalk.org/index.php?topic=5434598.0
https://bitcointalk.org/index.php?topic=5434597.0

I started a rant about funded things and someone else started a bit calmer topic about how to have people continue to keep making funded collectables while being more secure then just having 1 person make a private key:

https://bitcointalk.org/index.php?topic=5434653.0
https://bitcointalk.org/index.php?topic=5434754.0

Since a lot of the people who post here in the HW board tend to be more about security and tech then the collectable area was wondering if anyone else had any ideas on how to make it work better / more securely. Any useful input would be appreciated.

Side note, if anyone wants to donate there is a small auction being setup by one of the old school coin makers to help out people who lost BTC:
https://bitcointalk.org/index.php?topic=5434623.0


-Dave
1642  Economy / Collectibles / Re: [IDEA] Removing trust from physical coin makers re: Priv Key generation on: January 15, 2023, 03:02:19 PM
@smoothie, I recall you reaching out to me with this concept in 2014… yea it started getting a little too complex for me as my work has enough complexities as is... especially at that time. And working solo is always nice b/c you can go at your own pace.

@DaveF, I started exploring the idea of integrating Opendimes into my bars when they came out. The question that prevented me from going this direction is: How can you guarantee that the Opendime will be good in 100+ years? Or even 10 years.

I also considered a sculptural work that had let’s say ten Opendimes inside, where each would hold something like 0.1 BTC - to mitigate the risk a little.

And lately I've been looking into these Satschips as they’re much smaller, but still the same issue with a potential hardware failure.

In my minds eye I'm currently working on a concept that will be a DIY style piece but unique to what's currently on the market.

And perhaps as I transition to these DIY versions, it might make the previous versions that can hold bitcoin and be sold on the secondary market more valuable.

So yea, It's likely that the Kialara Builders will be the last pieces I created that will come loaded with public/private keys. I will confirm this soon. I do hope the issue of trust can somehow be solved... it's something I am thinking about all the time.

With the same comment from my other post, I'm being a bit of an ass here not to be combative but to to make a point. Krogoth and mopar and probably a few others use a better grade of 'indestructible' paper for their keys. It should last 100 years. How do we know that some other people did not use the cheapest paper they could find and when you peel it in 2098 it's going to be so brittle and disintegrate into dust.

I don't know the raw cost of the satschips but you could in theory sole the issue like you said by using a few of them each holding a fraction of the funds. The other option, and I don't know if it's viable would be to have several of them setup as an x of y multisig. If they are low enough cost in bulk could you do a 2 of 5 and not really worry about it.


for bip38 and with having 2 entities involved with applying first the PK and then the pw - you would probably need two people somewhat close so as to not be paying a fortune to ship coins back and forth and without risk to losing them in the process.

there is the split key method https://en.bitcoin.it/wiki/Split-key_vanity_address

I apologize but someone here was working on it and at this time and moment, I cannot recall who it was.

another option is always offer DIY


I think you are talking about WhyFly: https://bitcointalk.org/index.php?topic=5397602

-Dave

1643  Other / Meta / Re: Bounty spammer meets AI Chat generator. Can they be banned on the spot? on: January 15, 2023, 05:04:33 AM
My guess: he's trying to earn that one Merit needed for a Jr. Member signature for bounty spam.
Wasn't aware that there are bounty campaigns in the altcoin section have such low requirements.

Perhaps we are looking at it the wrong way. Ban the campaign managers and the projects that hire them if they use people who are using spam bots and give everyone in the campaign a warning that they were working with spammers. After a certain number of warnings you would get a ban. Would that be too harsh?

Seriously, I use the altcoin section for a few things and would not be put at all if it went away, so it might be a harsh point of view, but to me it looks like most of the bounty campaigns are a lot crappier then they used to be.

-Dave
1644  Economy / Collectibles / Re: [IDEA] Removing trust from physical coin makers re: Priv Key generation on: January 15, 2023, 01:13:12 AM
I posted in the thread that I started about the possibility of eliminating the human element.
digicoinuser uses opendimes: https://bitcointalk.org/index.php?topic=5354556.0

I know there was some resistance to it but I would like to keep exploring that idea.
If we take ourselves as flawed humans out of the entire loop would that be better?

There would probably be a bunch of things to be worked out, but it should probably be considered.
Along with the possibility of some kind of standard. Not sure what what it would be / how it would look.

=Dave
1645  Bitcoin / Mining / Re: Core Scientific Mining Company is headed for bankruptcy on: January 14, 2023, 08:11:45 PM
$500 for an M30S ... pretty cheap.

Yes they are NiB but aren't they close to a 2 1/2 to 3 year old unit at this point.
Makes you wonder if they are going to keep them or sell them.

Back of the napkin math makes it about 1 year to RoI @$500 each with some decent power prices not accounting for other expenses so not the worst. Unless my math is wrong. But probably no warranty and last gen tech makes me wonder what the plan is for these units.
And lets face it, if any are DOA at this point MicroBT is probably going tell them too bad so sad.

-Dave
1646  Economy / Collectibles / Re: [RANT] Can we stop with the coins / wallets / collectables with private keys on: January 14, 2023, 03:15:56 PM
This fact is something I have been struggling with since the revelation. We all trusted Yogg, he was on the forum for a long time.

The reality is keygen collectibles have this issue. We've explored a plethora of options, even working on offering DIY since the FTX scam.

Alternatively... You could create keys, encrypt them via BIP38 and send them to the maker. However... this wouldn't work with distributors, and is not viable unless the prices are similar to custom commissioned pieces.

Ballet has found an excellent compromise, but that takes serious investment to pull off (to build the app).

------------

I am going to continue to be a bit of a hardass / devils advocate in this thread. But since I obviously came up a bit harsher then I wanted to towards Mopar earlier let me start again with I am not insulting or attacking anyone or any product in this entire thread. [ Except yogg, fuck him ]. I really want to come up with a better way that everyone can come close to agreeing on. I know we will never all agree 100%. But, in the process I will probably point out flaws that exist that some people may not want to think about.

With the BIP38 option you mentioned it would work for your coins that you are going to keep. But you could never sell them since at that point you are just moving the trust to someone else.

What I am thinking about now is combining the 1splitkey that whyfly setup https://bitcointalk.org/index.php?topic=5397602 and something else.
This way you could in theory generate something that can be put under a hologram, and have something else that without the piece under the hologram is worthless.
What you would also have to create is a way to verify without revealing things that should not be seen. Trying to think of (or over think) of a way of doing that.

Ballet has the right idea BUT and this is a big BUT, their app is closed source: https://walletscrutiny.com/android/com.balletcrypto/
Make it open source and it would be better, sill not perfect but better.

And full disclosure I have a few ballet products in my collection and have used a few others.

-Dave
1647  Economy / Collectibles / Re: [RANT] Can we stop with the coins / wallets / collectables with private keys on: January 14, 2023, 01:38:08 PM
no need to be a smart ass - they didnt look like me - it was me - I had a partner and yes he was responsible for making keys for his customers - he made some for me, however he did not use the system we set up, he went with an online key generator. he is no longer my partner.

It was not an "app" it was a website - one he had been told not to use.

He never made keys for anyone on here other than me.

for every project I have done or key I have done for here on the forums, I made the keys - no one has access to them.

these two situations are not the same.

also has nothing to do with using a hardware wallet - many of which have been proven to be just as faulty.

so what pitfall are you saying to eliminate? me? fine. I will not be part of this. Doesn't bother me but I wont have someone accusing me of a being a risk because I wont use a HW wallet - like you are.


All I was trying to point out, after spending hours going through a bunch of cold keys, that we should come up with a better way then having to trust people.
Did not mean to come off as an attack on you, just that though no fault of yours bad things could have happened.

That is the point. There are people out there now refunding from what appears to be out of their own pocket.

In a few months what do you think most people will remember? The theft or that smoothie setup an auction to help the people that lost funds, or that people are donating to it, or that people are going out of pocket to help those that lost funds. Sadly, I think it's just going to be people talking about the theft.


I think it's best to understand that we are many here and surely 99% or more of us are trusted & honest people....

As I keep saying it's not about trust. I have trusted Mopar and will continue to trust him, I have trusted smoothie and krogoth and minerjones and a ton of other people and will continue to trust them. I have funded pieces from a lot of people. I know and have known and understand the risks.

BUT and this is just me. I really think we as a collective group keep giving ourselves a bad image.

2016 COINOGRAPHIC
2017 ALITIN
2017 MICROSOUL
2018 cryptopaperwallets.com
2019 HyperionGold
2020 Sol Noctis
20xx Titan Mint
2022 Cold Key

All I am trying to put out there is that there HAS to be better way then just trusting people. It's kind of like open source code and many other projects. TRUST but verify.
As of now we really don't have a way of verifying. I pointed out a way that I thought might be better, there are probably a dozen other ways of doing it that I can't think of but others can.

A 1oz piece of gold is a 1oz piece of gold and I can drop it on top a tester that can tell me it's contents and if it's real gold. Yes it's a few hundred dollars for the unit but if I am buying and selling a bunch of silver / gold / platinum it's worth it. Once those devices became available at those prices the fraud in those circles dropped like a rock.

As of now we can't do that here.

Side note, I will continue to buy these pieces. But, I stopped *selling* them for the most part. I might put up one now and then that have more collectable value but after I sold someone a Sol Noctis and Titan that were swept / could not be redeemed I stopped doing other ones. I reached into my own wallet and paid them because they didn't know the risks and I did not communicate to them the risks that I knew. If I loose it's on me, I don't want to be responsible for others loosing.

-Dave

Edit: Yes I lost funds on the cold keys. No, I don't want to discuss it, it's over and done I lost and am moving on. It hurts but so be it.
1648  Economy / Collectibles / Re: [RANT] Can we stop with the coins / wallets / collectables with private keys on: January 14, 2023, 04:38:36 AM
another simply solution - as a creator, dont fucking save keys - ever.

I doubt this will eliminate private keys on collectibles - that is part of the allure to the collectibles - but maybe always at least offer it as a DIY.

The ones that get me are the "funded" and "buyer funded" - in where the buyer directly funds the item in both cases yet only one is called "buyer funded"

I do make keys - and a lot of them for people here and elsewhere - but I always try to teach them or at least tell them they should make their own.

There are steps and processes to insure that as a creator you never expose keys to theft or use. Never save them, never leave them laying around, never keep them...

I think there will just always need to be a DIY option.

that said, I do like the opendime use except my fear with those is they get broke or fried - then you're fucked.

Didn't someone who looks a lot like you have a partner do something really stupid with an address generator app?
I'm just saying eliminating one potential pitfall would not be bad.

And, as I started with, it's not an attack on you or any other coin maker.

It's just when you have a thread like the list of scam / breached coin makers that goes on for pages https://bitcointalk.org/index.php?topic=3315347.0 we really should come up with a better method.

-Dave
1649  Bitcoin / Development & Technical Discussion / Re: Core wallet on pruned node on: January 14, 2023, 04:07:39 AM
So long as the address(es) you are sending from has been in the wallet the entire time you should be fine.
It should keep all the UTXO information it needs for addresses it has.
There are some ways to make it not work, but by default it should.

By default importing addresses into pruned wallets should not work along with a few other things. But, you can with enough time and effort make make it do some things it should not. If you just prune it all should be good. If you TRY to make it do things it does not want to do then.....

Just putting it out there since people have managed to do it and then come here or reddit or other places for help after they jumped though a lot of hoops to make it not work.

-Dave
1650  Economy / Collectibles / Re: ⏩⏩[AUCTION LIST] ColdKey charity auction for victims of the apparent theft⏪⏪ on: January 14, 2023, 03:47:33 AM

Yes I know it's 2 of 3 multisig, can you also please agree to use hardware wallets. You have all been trusted with a lot more funds then this will probably get to, but it's more the point now just to show that extra caution is good, you can never be too paranoid, whatever. This on top of the lukejr hack just gives BTC and this forum a bad look at the moment.

-Dave

I never use hardware wallets - would not even know how to start with using one.

I have quite a few of em in my collection though Smiley

I use core - does that count? This is to show that one person cannot up and run with the funds - provide a bit more peace of mind. There is not enough money in existence to make me take it. My face is known, my name is known, my address is known and quite frankly I am simply not built that way.

Don't want to take this too far OT, but it's not about trusting you. It's about avoiding vulnerabilities. We are all human, we all can get tired, make mistakes, or just not pay attention and screw up. https://bitcointalk.org/index.php?topic=5432665.0;all Putting aside all the conspiracy theories luke who has been a BTC developer for years who knew better still managed to mess up and loose a fortune.

That is the point of HW wallets. AND, this is just my view, if you use them and talk about them other people might use them and then some people who DID make a mistake / did something stupid will not loose their BTC since even though someone got access to their BTC wallet they could not do anything with it without the hardware wallet to sign the transaction.

-Dave
1651  Economy / Collectibles / [RANT] Can we stop with the coins / wallets / collectables with private keys on: January 14, 2023, 03:32:49 AM
...If you can't see the full address and the private key so you can verify that the private key is actually, for that address, while making sure nobody else has seen / still has the private key then you no longer have BTC.

You have a lottery ticket that may or may not have BTC in it when you finally scratch it off.

Look a handy thread that not enough people read: https://bitcointalk.org/index.php?topic=3315347.0

-Dave

Been saying this on and off for years. And with apologies to the coin / collectable makers that have not fucked everyone it's still a bad situation.

The coldkey was the last straw so to speak.

There are now enough electronic ways of generating private keys through provable secure hardware.

Get a bunch of opendimes https://opendime.com/ or satscard https://satscard.com/faq or one of the other similar devices out there and have them generate the address. Ship them with your custom coin. Make f--king sure people know that there is no private address on the coin.

You can laser laser etch, engrave it, make it pretty, or if you want use a sharpie to write the address on it, who cares. The ONLY way to get to the private key at that point is by using a device that WILL TELL YOU IF THE PRIVATE KEY IS OUT THERE.

It's even better since you can now DISPLAY the coin without fear of loosing the BTC on it. Because you can keep the device with the private key on it elsewhere. Someone steals the coin, it sucks but you still have your BTC.

And lets not forget, even if the maker is trustworthy security holograms can suck too: https://bitcointalk.org/index.php?topic=5401502

End of rant.

-Dave
1652  Economy / Collectibles / Re: ⏩⏩[AUCTION LIST] ColdKey charity auction for victims of the apparent theft⏪⏪ on: January 14, 2023, 03:15:00 AM
I'll put this into the auction, 2017 South African Krugerrand 1 Troy Oz .999 Silver:

https://www.apmex.com/product/105155/2017-south-africa-1-oz-silver-krugerrand-premium-bu






I offer to volunteer but would also suggest minerjones

If it needs to be it could be done as a multisig wallet with 3 key holders requiring that at least 2 agree to send the funds - this way no 1 person can walk away with it

Okay the 3 key holders sounds better.

Can you organize this?

Yes - will get with MJ tomorrow to confirm and we will provide an address at that time

Yes I know it's 2 of 3 multisig, can you also please agree to use hardware wallets. You have all been trusted with a lot more funds then this will probably get to, but it's more the point now just to show that extra caution is good, you can never be too paranoid, whatever. This on top of the lukejr hack just gives BTC and this forum a bad look at the moment.

-Dave
1653  Other / Archival / Re: SONDORS Metacycle - $5,000 (now $6.5K) Electric Motorcycle on: January 13, 2023, 05:49:57 PM
I finally got the Metacycle registered. Still waiting on my insurance company to send me a policy… I will say the experience of trying to register this thing is enough to make anyone a Libertarian. They had me jump through so many hoops and bring my motorcycle in because they “never saw an electric motorcycle before.” After 4 trips to the MVD and eventually just paying a third party service over $400, I got it registered. A horrible experience, but at least it is behind me now and I can legally enjoy this beast (once my insurance company figures out what to do).

Wow that's nuts. It's relatively simple here in NY. Take the MSO / the MV-50 form (don't remember the form number for people out of state but it's the same thing) to the DMV along with an insurance card and a check.

Give them the MSO, the insurance card the filled out MV-50 fill out the check for the sales tax and plate fee and leave with a license plate and a temp inspection sticker. You then have 14 (21?) days to get to a shop that does motorcycle inspections.

You can also do it all online now. Just have to wait for them to mail you the plate. But since I have the patience of a sugared up 6 year old going to the DMV is a better option. I may have done this a few times......

Back to the more important issue still riding every morning? Youtube video review?
Real range test? I have seen numbers all over the map from people. Wonder if it's them or the bike or a combo.

-Dave
1654  Other / Meta / Re: Bounty spammer meets AI Chat generator. Can they be banned on the spot? on: January 13, 2023, 05:37:26 PM
So...
NotATether, ETFbitcoin, o_e_l_e_o, LoyceV are all against my concept of a captcha.

Let's compromise and do it my way :-)

Seriously, it would be a patch at best to slow it down but other then reporting we have no other option.

IMO it's just a really difficult balance, you want a free and open forum. But you want to control the spammers as much as possible.

Or do you go the other way but no more temp bans for things like that. Using a word spinner you get the boot and that's it. Too harsh? Not sure.

-Dave
1655  Other / Meta / Re: Looking for forum customer support [moderator/admin] on: January 13, 2023, 01:17:56 PM
2) How much checking is involved? I'm asking because I can see there being the potential for abuse if you want to get someone banned you could point a conversation in PMs a certain way. Would be difficult, but not impossible if the person trying to get someone else banned has a few alts.
I guess logically, a user will be banned if he is the one who goes first with DMs to other members with kind of spam, scam, incentivized contents.

If you want attack someone and use 100 accounts to DM that one, it does not make any sense and the receiver won't be banned. You won't be banned because you're answering others.

Who goes first is most important if the procedure is solid.

I was thinking more along the lines of I send you something, you say 'not interested contact this person' who is an alt of yours.
I send to that alt more or less blind and then you report it. 1st hit / report no big deal, and I never know about it.
Then you wait for the next message from me to one of your alts or even your main account and report that.

It's a lot of work and planning to just screw with someone, but if you don't think people will do it then you have a better opinion of humanity then I do.

There are a couple of other scenarios that could also mess with people. I don't think it's a big deal, since we probably would have heard about it happening to people, but since it's out there it might be worth a discussion.

-Dave
1656  Bitcoin / Hardware wallets / Re: Hardware Wallets that work with Smartphones? on: January 13, 2023, 12:48:00 PM
Couple of standard reminders, not every phone implements USB OTG properly so if you are not using BT / NFC or the camera you may have issues. Minor point but something to think about.

And, make sure you have good backups of you seed. We have been touting for years that phones are not secure and you should not have large amounts of funds on them.
I know people, myself included, that have a vague idea of where the seed phrase for their phone wallet is, but it's no way as secure as their main one 'since it's only a little money'  IF you get more confident in the security of your phone wallet since you are using a HW wallet, don't fall into that trap of adding more funds and not having the recovery handy.....

-Dave
1657  Other / Meta / Re: Looking for forum customer support [moderator/admin] on: January 13, 2023, 11:50:33 AM
If there are 2 reports made, one of an old PM (e.g. a year ago) and another recently (e.g. a day ago), that would count as 2 reports (if the old PM is really old (e.g. 5 years old), it might be counted as a half report or ignored altogether) albeit this may be the aforementioned circumstances that may reduce the ban duration. Some other moderators might only consider this as 1.5 (essentially waiting for another report to come in before a ban is issued). Again, it really depends on the moderator handling the situation. However, at least IMO if there are 2 reports, both of which are of old PMs, with one being reported back then and another one recently, it's probably gonna be counted as a single report.

And yes, once you've been banned, only reports of PMs you've sent after your ban will be counted towards a second (hopefully non-existant) ban.

Probably worthy of another topic but:

1) Is this something mods see automatically or do you have to look for?

2) How much checking is involved? I'm asking because I can see there being the potential for abuse if you want to get someone banned you could point a conversation in PMs a certain way. Would be difficult, but not impossible if the person trying to get someone else banned has a few alts.

-Dave
1658  Economy / Service Announcements / Re: Fryx Finance - An open-source Monero/Bitcoin exchange. on: January 13, 2023, 11:37:57 AM
The OP says 0% fees here you say 0.2%: https://fryx.finance/api is that just for the API?
If it's open source where is the source? No link on the site. Have not had my coffee yet so have not looked deeply for a link.

It looks like it's running in the Google cloud, opinion here and nothing more but I would move it to a more privacy friendly host.
If I am wrong ignore that line.

-Dave
1659  Other / Meta / Re: Bounty spammer meets AI Chat generator. Can they be banned on the spot? on: January 13, 2023, 03:07:59 AM
I wonder how difficult it really would be to add a captcha requirement for every post. I know some boards have them, sometimes even multiple ones. I don't know if it hurts legitimate posting or not, but I don't see as much spam on them vs those that do not. One car board I am on has a quick and simple one like what is 2 + 7 and that is followed by the 'pick the image' one. And there is very little spam. The other is more like here where you can just post and does get a lot more junk posts.

Don't know how much work it would take to put one in.

But, the AI / chat spammers should just get a permanent vacation.

-Dave
1660  Bitcoin / Legal / Re: Influencers, affiliate links and scams on: January 13, 2023, 12:42:26 AM
I look it as the same way that Matthew McConaughey is doing Lincoln commercials, or Samuel L Jackson doing Capital One commercials. They are going to get a lot more attention then if they stuck me on TV and said buy this car / get this credit card / etc.

So they get these famous people to push their services.

Once you become a social media influencer  you have to keep paying the bills somehow, so when someone comes and gives you money to push some crypto project you do that. It's just what it is.

If you make investment decisions based on that you are going to get burned.

-Dave
Pages: « 1 ... 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 [83] 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 ... 382 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!