|
641
|
Bitcoin / Development & Technical Discussion / Re: USB port blocker
|
on: September 21, 2023, 01:17:50 PM
|
|
Waste of money.
1) For a desktop PC all you have to do is pop the top and add in a USB card.
2) They are still plastic, with time and effort you can pull one out.
3) For the determined person it's get laptop, take off cover, un-solder the port (only 4 wires on USB 2) and solder in a new one. But at that point you might as well just pull the drive out
Most if not all PCs can disable the USB ports in BIOS and you can also set a BIOS password so that cannot be changed without the password.
-Dave
|
|
|
|
|
642
|
Bitcoin / Development & Technical Discussion / Re: [INFO - DISCUSSION] Wormhole attack in Lightning Network
|
on: September 21, 2023, 11:42:13 AM
|
But, you have to always be in the position to rob the person in the middle. You need a lot of well connected nodes to do this and they have to be the cheapest way of routing. So you are charging low fees and locking up a lot of BTC in the hopes that people route enough money though you for this to work, and the fact that you don't get caught and booted off the network.
-Dave
How would you go about booting a LN router from the whole network? AFAIK, there isn't a banlist like Bitcoin Core has, or even if there is, it is non-trivial to detect that this kind of activity is happening. For now there is not, but if this does become an issue I'm sure it will be added. Lets face it, many things were added to the BTC protocol over the years because something happened. Or something happening became a larger possibility. But for the moment, if it does happen to someone you can bet after a lot of head scratching and posts on the discussion boards the next time that node did something like that or another node did the same thing a ban list is going to get to the top of the to do list. Exactly and this is why it will never be a real threat because instead of the third guy whom you want to cheat, you can BE! that guy and take all the fees perfectly normal yourself! Trying to make the route longer but at the same time cheaper will act like the barrier, it's a no go!
I'm curious if such an attack which results in collecting a few milisatoshi now and then will ever make up for all the funding you have to set up in order to deploy your malicious network!
Considering that you'd have to repeat this attack millions of times before you can ever recoup the cost of hosting the servers monthly, I'm inclined to think its not practical. For any of us here it's not viable, for a government or any organization with a bunch of hardware and a few programmers on staff it's not that difficult to do. BUT, it's still not going to generate a profit, just destabilize the LN. -Dave |
|
|
|
|
643
|
Bitcoin / Bitcoin Discussion / Re: Repayment Deadline Increased for the MT Gox Exchange’s Creditors
|
on: September 21, 2023, 11:33:04 AM
|
Also from that article linked: Additionally, Kobayashi explained that, for rehabilitation creditors who have provided the necessary information, repayments will be made in sequence as early as the end of this year. From what I see the 2024 date is the END of the repayments, not the start. I can see them wanting to do it slowly and in batches to make sure it goes well as opposed to shoving it all out the door as fast as possible and dealing with all the issues at once. There are merits to doing it both ways. -Dave |
|
|
|
|
646
|
Bitcoin / Development & Technical Discussion / Re: Vanity Address Generator in Java
|
on: September 20, 2023, 07:16:34 PM
|
tl;dc (to lazy didn't check) How is the performance? I see that 3. Suggest benchmarking tools. but did you do any performance tests? I'm guessing that since it's Java not great but verification is good. And I actually do not have anything with Java installed at the moment so unless it's decent not even going to try. But, good concept. -Dave |
|
|
|
|
647
|
Bitcoin / Development & Technical Discussion / Re: [INFO - DISCUSSION] Wormhole attack in Lightning Network
|
on: September 20, 2023, 07:09:07 PM
|
You need a lot of well connected nodes to do this and they have to be the cheapest way of routing. So you are charging low fees and locking up a lot of BTC in the hopes that people route enough money though you for this to work, and the fact that you don't get caught and booted off the network.
Exactly and this is why it will never be a real threat because instead of the third guy whom you want to cheat, you can BE! that guy and take all the fees perfectly normal yourself! Trying to make the route longer but at the same time cheaper will act like the barrier, it's a no go! I'm curious if such an attack which results in collecting a few milisatoshi now and then will ever make up for all the funding you have to set up in order to deploy your malicious network! Now if D would be able to do that without B, that would change things but since it can't, I think right now it's as dangerous as Foundry colluding with some guy in Nantucket to reverse his coffee purchases. Unless they guy in Nantucket owns part of Foundry. I know I have used it as an example before but I have to come back to the TV series Breaking In [ https://www.imdb.com/title/tt1630574/?ref_=fn_al_tt_3 ] They had to steal a exotic car to test the dealers security and came up with a mission impossible type plan, with hacking key cards, defeating the alarm system, etc.... Wound up stealing the wrong car from the wrong car dealer [it's not great TV] but came back to the right car dealer and while standing in front of it, trying to figure out how to get the right car one of them turns to the other and says 'they really should have a gate here' picks up a rock and smashes the large window to get in and get the car. Wormhole attacks ARE viable, but by the time you do your mission impossible plan someone came in and put up a $5 phony website selling something and got way more BTC then you can doing this attack. Not saying that they should not be working on ways to mitigate it, just that it's not that big a deal. -Dave |
|
|
|
|
648
|
Economy / Exchanges / Re: Coinex hacked, ~$70M stolen
|
on: September 20, 2023, 01:49:54 PM
|
|
Poking around a bit and talking out my A$$ but I don't think the wallets were actually compromised but the back end that talked to the wallets. More like the withdrawal server was compromised. There were other tokens and things associated with a few of those addresses that were not moved until coinex moved them hours later.
Could be I'm missing something obvious, but if they had access to the wallet server(s) and the private keys everything in those addresses would be gone. IMO.
So their 'preliminarily determined that the cause of the incident was the leakage of the hot wallet private key' is either wrong OR the people who took the money were incompetent OR as I said, I am missing something.
-Dave
|
|
|
|
|
651
|
Economy / Collectibles / Re: Titan Mint Coins- Serious Issue- Titan Mint Bitcoin Coins ***NEW UPDATES***
|
on: September 18, 2023, 04:12:48 PM
|
Thanks to a renowned forum member, I've re-learnt how to paste pic on the forum.
The official website of www.titanbtc.com has become a student loan site. What the fuck!  Someone reported this happening some time ago. I want to say a few weeks backs. I wonder what this means exactly, or why he would have either let the web address lapse, or if it was sold? I’ve heard that there was a third webinar recently. Did anyone attend or able to provide some knowledge on it? Would be much appreciated. Looks like he is leasing / renting it out. Domain Name: TITANBTC.COM
Registry Domain ID: 9004240
Registrar WHOIS Server: whois.hostmonster.com
Registrar URL: http://www.hostmonster.com/
Updated Date: 2023-05-15T15:18:11Z
Creation Date: 2013-04-05T05:44:17Z
Registrar Registration Expiration Date: 2025-04-05T05:44:17Z
Registrar: FastDomain Inc.
Registrar IANA ID: 1154
Registrar Abuse Contact Email: tos@fastdomain.com
Registrar Abuse Contact Phone: 888-210-3278
Reseller: HostMonster.Com
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: TITAN MINT INC. TITAN MINT INC.
Registrant Organization: TITAN MINT INC.
Registrant Street: 9251 GORDON AVE.
Registrant City: LA HABRA
Registrant State/Province: CALIFORNIA
Registrant Postal Code: 90631
Registrant Country: US
Registrant Phone: +1.8006535071
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: TIM@TITANBTC.COM
Registry Admin ID:
Admin Name: TITAN MINT INC. TITAN MINT INC.
Admin Organization: TITAN MINT INC.
Admin Street: 9251 GORDON AVE.
Admin City: LA HABRA
Admin State/Province: CALIFORNIA
Admin Postal Code: 90631
Admin Country: US
Admin Phone: +1.8006535071
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: TIM@TITANBTC.COM
Registry Tech ID:
Tech Name: HOSTMONSTER INC
Tech Organization: HOSTMONSTER.COM
Tech Street: 5335 GATE PKWY.
Tech City: JACKSONVILLE
Tech State/Province: FLORIDA
Tech Postal Code: 32256
Tech Country: US
Tech Phone: +1.8014948462
Tech Phone Ext:
Tech Fax: +1.8017651992
Tech Fax Ext:
Tech Email: SUPPORT-DOMAIN@HOSTMONSTER.COM
Name Server: DANA.NS.CLOUDFLARE.COM
Name Server: IVAN.NS.CLOUDFLARE.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2023-05-15T15:18:11Z <<<
For more information on Whois status codes, please visit https://icann.org/epp
The data in the HostMonster.Com WHOIS database is provided
to you by HostMonster.Com for information purposes only,
that is, to assist you in obtaining information about or related to
a domain name registration record. HostMonster.Com makes
this information available "as is," and does not guarantee its
accuracy. By submitting a WHOIS query, you agree that you will use
this data only for lawful purposes and that, under no circumstances
will you use this data to: (1) allow, enable, or otherwise support
the transmission of mass unsolicited, commercial advertising or
solicitations via direct mail, electronic mail, or by telephone; or
(2) enable high volume, automated, electronic processes that apply
to HostMonster.Com (or its systems). The compilation,
repackaging, dissemination or other use of this data is expressly
prohibited without the prior written consent of
HostMonster.Com. HostMonster.Com reserves the
right to modify these terms at any time. By submitting this query,
you agree to abide by these terms.
UNLIMITED storage, bandwidth and domains on one account. Also receive a *FREE* domain for one year when you host with http://www.hostmonster.com/
**complete**
If it was sold it would be showing different owners or private registration. If he can make money doing it and use it to pay people back it's not a horrible idea. Usually the amount you can make doing it is fairly small, but you never know. -Dave |
|
|
|
|
652
|
Bitcoin / Development & Technical Discussion / Re: Mempool block 807829 took only 1sat/vbyte
|
on: September 17, 2023, 03:32:04 PM
|
The funny thing is that maybe Coinex is scrapping for all the dust they can find now, without ViaBTC those consolidations might be something they really can't afford after that hack. Or maybe it's ViaBTc sending everything they can find to cover the balance sheet!
Could also just be cleanup after the hack. Look we have coins in 1000s and 1000s and 1000s of addresses. Lets put them all into cold storage instead of having to move them all over the place for when people withdraw. We have seen other exchanges do it. It's just amazing that so many exchnages let it get this bad. -Dave |
|
|
|
|
653
|
Bitcoin / Development & Technical Discussion / Re: lightning network raspberry PI newbie
|
on: September 17, 2023, 02:01:18 PM
|
|
1) It has to be a RPi4 and a 1TB drive
2) Not a lot, depends on how much BTC you lock up to open channels to how many other nodes. For the most part you are going to spend more in TX fees opening, closing, tweaking channels then you will earn in fees.
3) look for one of the node in a box setups be it raspiblitz, mynode, umbrel, you can do it all yourself but you have to know what you are doing.
4) Remember you have to be on 24/7 and have good backups.
-Dave
|
|
|
|
|
654
|
Bitcoin / Development & Technical Discussion / Re: [INFO - DISCUSSION] Wormhole attack in Lightning Network
|
on: September 17, 2023, 12:15:04 PM
|
|
But, you have to always be in the position to rob the person in the middle. You need a lot of well connected nodes to do this and they have to be the cheapest way of routing. So you are charging low fees and locking up a lot of BTC in the hopes that people route enough money though you for this to work, and the fact that you don't get caught and booted off the network.
-Dave
|
|
|
|
|
655
|
Economy / Reputation / Re: JollyGood is trusted by - and question.
|
on: September 16, 2023, 06:51:36 PM
|
|
Starting with the I really don't have time to deal with this crap....
I went through just about ALL of the feedback he left, looked at who and why and what all of it, took forever. But, since there is so much controversy and I did open my mouth I figured it's better to look and be sure.
In *my* opinion, 90% of what he left was legit.
DID it need to be left? That is also an important question. Some yes and some no. In my opinion.
Now, for that last 10% I would say it's about 50-50 of wrong (once again IMO) and did not need to be left (yet again IMO)
I have made many posts about the failing of the trust / feedback here so not going to dive into that since there seems to be zero chance of it being changed into something useful.
For now I took him out of my trust list, but will probably not matter since at this point with everything else that is going on I think that it's going to get worse with people grouping into their 'gangs' to protect people they like.
If I get tagged down to -30 in trust and booted out of the sig campaign I am in it will not matter. I would still be here posting. If everyone adds trust and I make it to +100 I will still be here posting.
Now I'm going outside to enjoy the weather and not post....
-Dave
|
|
|
|
|
656
|
Bitcoin / Development & Technical Discussion / Re: Mempool block 807829 took only 1sat/vbyte
|
on: September 16, 2023, 06:26:27 PM
|
If it was CoinEx the question is why would they pay a fee at all? As pointed out they are very tightly integrated with VIABTC. CoinEx would just have to create a 0 fee TX and send them the hash and have VIA mine it. Would in theory never even have to be broadcast and put in the mempool.
Probably does not really matter in the end.
-Dave
they may want it to be broadcast and put in the mempool so that chinese government can easily see it. Low cost and nice paper trail would be attractive if they need to account to chinese government. I am assuming viabtc has to deal with government of china 🇨🇳 not sure about coinex. under 20 bucks clear paper trail. I wonder if they do 10 or 15 of these a month. Small cost to keep a government accepted set of records. Mempool really does not matter, it's what is in the mined block. That is the permanent record of what happened. There are 1000s of TX in the mempool at the moment that will never be mined. So either CoinEX creates a TX and passes the TXID to VIA to be mined. Or they create a TX and pass the raw info to VIA to be mined. Either way there is an email / Telegram conversation / WhatsApp / whatever between them. -Dave |
|
|
|
|
658
|
Bitcoin / Development & Technical Discussion / Re: Mempool block 807829 took only 1sat/vbyte
|
on: September 16, 2023, 02:33:52 PM
|
|
If it was CoinEx the question is why would they pay a fee at all? As pointed out they are very tightly integrated with VIABTC. CoinEx would just have to create a 0 fee TX and send them the hash and have VIA mine it. Would in theory never even have to be broadcast and put in the mempool.
Probably does not really matter in the end.
-Dave
|
|
|
|
|
660
|
Economy / Exchanges / Re: [ Fraud ] Coinbase
|
on: September 12, 2023, 02:01:22 PM
|
Maybe they updated their terms in recent times which allows them to hold the user's funds forever.
Not anywhere in the US ToS that I can find. Obviously, they are going to have different ToS for different countries / jurisdictions. They also will confiscate and turn over funds based on government requests, but any financial institution that holds money will do that. -Dave |
|
|
|
|
Show Posts
