Bitcoin Forum
March 29, 2017, 07:29:57 PM *
News: Latest stable version of Bitcoin Core: 0.14.0  [Torrent]. (New!)
 
  Home Help Search Donate Login Register  
  Show Posts
Pages: [1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 »
1  Economy / Scam Accusations / Re: My bitcoin address is used by someone else on: August 12, 2016, 12:58:23 PM
since 2 days i am experiencing a hell lot of dust in my BTC address , i thought it is better to watch it and when any big BTC amount will come then i will move it , but today just some hours before i saw someone sweeped the coin to some wallet.
can anyone let me know how is this all stuff happening?

reference thread: https://bitcointalk.org/index.php?topic=1580363.msg15867453#msg15867453

Either coinb.in has a bug/problem and generated the same private key twice, you were the victim of an attack during the creating of the private key (maybe a phising website or something), or your pc is compromised (those seem to be the most likely scenarios).

Hi,

Coinb.in developer here.

I think its fairly unlikely coinb.in was compromised and also unlikely that it generated the same private keys twice. I think its most likely you have been compromised. Let me explain why.

Firstly, I have various honey traps setup on the server, one is as big as 20 BTC. If coinb.in had become compromised, I'm very confident I'd have lost those coins and we'd be hearing about it from multiple users (as there are quite a lot) and not just yourself.

Secondly, I'm not convinced that coinb.in key generation code is a problem. I have over 100 BTC generated in addresses from coinb.in. It is unlikely to generate the same keys twice, heres the code:

Code:
/* generate a new random private key */
coinjs.newPrivkey = function(){
var x = window.location;
x += (window.screen.height * window.screen.width * window.screen.colorDepth);
x += coinjs.random(64);
x += (window.screen.availHeight * window.screen.availWidth * window.screen.pixelDepth);
x += navigator.language;
x += window.history.length;
x += coinjs.random(64);
x += navigator.userAgent;
x += 'coinb.in';
x += (Crypto.util.randomBytes(64)).join("");
x += x.length;
var dateObj = new Date();
x += dateObj.getTimezoneOffset();
x += coinjs.random(64);
x += (document.getElementById("entropybucket")) ? document.getElementById("entropybucket").innerHTML : '';
x += x+''+x;
var r = x;
for(i=0;i<(x).length/25;i++){
r = Crypto.SHA256(r.concat(x));
}
var checkrBigInt = new BigInteger(r);
var orderBigInt = new BigInteger("fffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141");
while (checkrBigInt.compareTo(orderBigInt) >= 0 || checkrBigInt.equals(BigInteger.ZERO) || checkrBigInt.equals(BigInteger.ONE)) {
r = Crypto.SHA256(r.concat(x));
checkrBigInt = new BigInteger(r);
}
return r;
}

        /* generate random string */
coinjs.random = function(length) {
var r = "";
var l = length || 25;
var chars = "!$%^&*()_+{}:@~?><|\./;'#][=-abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890";
for(x=0;x<l;x++) {
r += chars.charAt(Math.floor(Math.random() * 62));
}
return r;
}

As you can see, there are lot of random values used to help with key generation before it is hashed a random number of times. Some values will be more unique than others, but as you can see we are using everything from the screen size, language, date+time, static stings, random data and your mouse positions to generate enough entropy to make a key pair. I've also had this code reviewed by a lot of people.

If anyone has any questions, please feel free to get in touch.
2  Economy / Games and rounds / Re: 1000 BTC GIVEAWAY! From your friend rekcahxfb on: August 03, 2016, 06:43:36 PM
1CWHWkTWaq1K5hevimJia3cyinQsrgXUvg
3  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: May 21, 2016, 08:43:40 PM
Replace by fee (RBF) has been added to coinb.in you can find it under the advanced tab, on the new transaction page.

Enjoy people!
4  Economy / Web Wallets / Re: Coinb.in balance GONE? Hacked? Someone help please!!! on: March 29, 2016, 07:36:23 AM
Hey,

I run coinb.in, I wrote the majority of the code, it's open source, free to use, edit, download from github, run offline and use locally.

Whats importent to remember with coinb.in is that, the server does not hold your keys EVER, they are generated in your browser. I can confirm the coinb.in server is secure, and no unauthorized access has been made to it, and no modifications have been made to the site, it has not been hacked.

Unfortunately though, it seems that your coins have been moved from your address to another address (stolen?) Which means it's likely it's an issue your end with spyware/maleware, as I would have received 1000s of complaints from my user base if it was an issue with coinb.in

I'm sorry for your loss, I hope you figure out what happened and can report back.

All the best.

5  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: March 13, 2016, 05:39:52 PM
OutCast3k,

A PM has been sent over to you! Smiley

Please, reply me ASAP!  Thanks!

Replied! Its probably easier and faster for me to deal with your request via email, but I'm happy to help Smiley
6  Bitcoin / Alternative clients / Re: How to get my bitcoins from my old wallet? on: March 07, 2016, 06:47:05 PM
There is no inputs. Therefore nothing is being "spent".

Are you able to extract your private keys?
7  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: March 05, 2016, 07:18:49 PM
Can you give us a little info about how many users are using it now approximatelly?

I purposely don't log users accounts or traffic. What data are you after?
8  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: March 05, 2016, 07:17:21 PM
Apparently you STILL haven't fixed the "all my fucking bitcoins lost as the transaction fee" issue with your create transaction page Undecided

I'm an advance user, but I'd never trust a service that doesn't use sane defaults.

Shame, because it's rather good otherwise.

Would be nice if you could explain what you mean a bit better. Im lost. Currently, if the user creates a transaction with a fee above 0.01 btc, they will receive a warning letting them know their fee is rather high.

9  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: January 26, 2016, 09:41:09 AM
Added a new YouTube video tutorial, explaing how to use the blockchain and coinb.in to notorize a document to the original post.

https://youtube.com/watch?v=qn13TIhoYUY

Thanks Alex!
10  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: January 06, 2016, 10:32:33 PM
Note: If you offer a (reputable) mediation/arbitration/escrow service, you can make a pull request on github to have your pubkey added to the list of mediators.

Can I make a request to be added from here? 2-of-3 multi-sig would potentially remove most of my involvement from honest parties.

sure
11  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: January 06, 2016, 10:27:20 PM
Updated the original post.

If anyone wants to write some tutorials, or make some videos I'll happily add them.
12  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: December 30, 2015, 02:15:23 AM
Coinb.in now supports OP_HODL

https://coinb.in/#newTimeLocked

Enjoy everyone!!!
13  Bitcoin / Bitcoin Discussion / Re: Need help releaseing funds from time locked address on: December 30, 2015, 12:10:38 AM
I'm trying out OP_CHECKLOCKTIMEVERIFY by using coinb.in.

Screenshots can be seen at: http://imgur.com/a/L81o7

"Non-final" errors in this situation, is likely because you are trying to spend the funds before the time you've set OR because you are trying to spend an output that hasn't yet confirmed.

Try again, but build a new transaction from scratch (submitting the exact same transaction to coinb.in will likely not work and produce the same error)

Let us know how you get on.
14  Economy / Service Announcements / Re: CoinJar - Australia's first VC-backed Bitcoin startup on: November 09, 2015, 03:22:59 PM
Why is there not a huge warning in bright red flashing colours on this thread and coinjars website making everyone aware of Zhou Tong's background and history which meant many users lost their bitcoin in what looks like a huge scam??

https://www.reddit.com/r/Bitcoin/comments/2xfag9/psa_zhou_tong_created_coinjar_the_service_behind/

https://bitcointalk.org/index.php?topic=95795.0

https://www.youtube.com/watch?v=AypRF9q0llU
15  Economy / Web Wallets / Re: How reliable is Coinb.in ? on: October 30, 2015, 08:40:15 PM
better use a reputable member from this forum for escrow

I developed coinb.in, check out all the successful group buys I have run on this forum and see my trust rating.

Reputable enough?

Thanks.
The problem is that your service is designed so that you do not even know the terms of the trade until a dispute arises. This will result in possibly two different sets of terms being presented to you and you having no way to know which terms were actually agreed to, making it nearly impossible to mediate any dispute.

I understand the point you have raised and will have a solution in place for this particular issue shortly, although so far users have generally contacted me before hand if they've had a concern.
16  Economy / Web Wallets / Re: How reliable is Coinb.in ? on: October 30, 2015, 02:23:16 PM
better use a reputable member from this forum for escrow

I developed coinb.in, check out all the successful group buys I have run on this forum and see my trust rating.

Reputable enough?

Thanks.
17  Economy / Web Wallets / Re: How reliable is Coinb.in ? on: October 29, 2015, 03:02:44 PM
I have not used them or heard of them. I honestly would not trust it enough to put any money into it.

Did you read the thread I linked to, in the post above yours before posting? (https://bitcointalk.org/index.php?topic=390046) Coinb.in is probably older than most wallets around here, it's never been "hacked", and can even be downloaded and run offline locally. It was possibly the first wallet to offer a true browser based multisig solution that is compatible with other clients and services.
18  Economy / Web Wallets / Re: How reliable is Coinb.in ? on: October 29, 2015, 01:40:08 PM
For those that haven't heard of us, we have a thread here; https://bitcointalk.org/index.php?topic=390046

I developed the service (see my feedback and trust rating if you want a bit of reassurance). The site is open source, free to use, edit, redistribute and host yourself.

Any questions, drop me a message directly or on the thread.

Good luck Smiley
19  Economy / Service Discussion / Re: Bitcointalk Escrows [Updated Daily] Trade Safely! on: October 25, 2015, 11:33:24 AM
Coinb.in (https://coinb.in/#newMultiSig) offers a multisig mediation/escrow service for 1% which is basically run by myself (You can see my feedback and trust rating is very positive) It would be cool to get coinb.in added to your list.

Code:
[table][tr]
[td][url=https://coinb.in/#newMultiSig]Coinb.in (OutCast3k)[/url][/td]
[td]1%[/td]
[td]Bitcoin & Alts[/td]
[td]None - Bitcoin Signature[/td]
[td][url=https://bitcointalk.org/index.php?topic=390046][ANN][/url][/td]
[/tr][/table]


Thanks

20  Bitcoin / Project Development / Re: [coinb.in] Open Source, Multi Signature, HD Wallet and more! on: September 16, 2015, 10:40:19 AM
A few small changes in the recent update, but they might be worth mentioning.

  • There is now a Mediation/Arbitration Service listed on coinb.in's multisig page. This feature allows users to create multi signature 2-of-3 addresses with our public key and we will help resolve any disputes should they arrive. There is a fixed 1% fee.

    Note: If you offer a (reputable) mediation/arbitration/escrow service, you can make a pull request on github to have your pubkey added to the list of mediators.

  • A warning message will be displayed if the fee on the new transaction page is greater than 0.01 BTC.
  • Fixed a bug with the retrieval of unspent outputs for litecoin.
  • Some extra validation on the new transaction page to indicate which field is likely invalid.
  • Linked to the #settings page (https://coinb.in/#settings) from the broadcast page to make changing the network easier.

Might have been something I've missed, but I think that's it.

Enjoy everyone, more to come soon!
Pages: [1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 »
Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!