Latest posts of: ABCbits

Quote from: NotATether on July 09, 2022, 04:43:43 PM

Quote from: NeuroticFish on July 07, 2022, 06:29:53 AM

I'm talking about Easy2Boot (E2B). This is a software that can turn easily an USB stick into a bootable "swiss knife".

Interesting. Till now I have always used Rufus to create bootable USBs, but it only works on Windows and there is no Linux version (there is a severe issue when running with WINE where the USBs cannot be detected and thus makes the tool useless).

And UNetBootin sometimes fails to make a USB that can actually boot an iso.

It's not surprising since their FAQ mention Rufus rely on Windows API[1] which might not exist when you use WINE.

Quote from: NeuroticFish on July 10, 2022, 08:01:30 AM

Yes, this has ended my frustrations with Rufus, Unetbootin, Etcher or Universal USB installer. Depending on what I wanted to write, I had to use different tool, and even the recommended tool had plenty of times it didn't work as expected.

At least for Etcher, it might be because it require the ISO file already configured to be bootable[2]. I only use Etcher when official guide for certain OS said so.

[1] https://github.com/pbatard/rufus/wiki/FAQ#do-you-plan-to-port-rufus-to-linuxmac-ossome-other-os
[2] https://www.balena.io/etcher/

Quote from: retroverseworld on July 09, 2022, 10:16:44 AM

I found my lost seed and recovered my electrum wallet; only to find that wallet had been emptied. 10.78134 BTC gone, now 0.

What exactly do you mean by "now 0"? Does electrum show transaction where 10.78134BTC is stolen/moved away? Does electrum show empty wallet? If it shows empty wallet, it's possible you entered wrong seed.

Quote from: retroverseworld on July 09, 2022, 10:16:44 AM

How did someone successfully hack my account.

FYI, Bitcoin protocol and Electrum doesn't have "account" system. There's no authority which can reverse the transaction or have log who accessed your wallet.

Quote from: Charles-Tim on July 09, 2022, 10:37:51 AM

A lost wallet? How did you know that you successfully brute force the seed phrase? Likely the seed phrase may not be correct.

What makes you think OP brute force his seed phrase? All he said is "I found my lost seed and ...".

Few thought and question,
1. I see few API has wallet_password parameter and i couldn't find anything about HTTPS/secure connection. Is it right to assume developer must setup HTTPS by themselves (e.g. by using reverse proxy)?
2. Does the software open/load all wallets all the time?
3. Mentioning exact/tested version of Python library used would be great. Who knows if the library suddenly change their API.

Quote from: leea-1334 on July 07, 2022, 12:01:33 PM

It feels weird to me that they are exploring about customers and looking at demand,,, when a company these days wants to go into mining, there are no customers right? There are just investors.

Who do you mean by customer? Would you classify owner of warehouse (which used to host ASIC, GPU, etc.) as customer or investor?

Quote from: Fivestar4everMVP on July 07, 2022, 12:21:52 PM

Even though very few of the cloud mining platforms were legitimate, majority of them were scam and i believe this is one of the reasons why no body talks about cloud mining anymore.

And the legitimate one usually not very profitable or has some expensive fee (e.g. withdraw fee).

Quote from: Amph on July 07, 2022, 10:06:33 AM

how to remove the msg "skipping -wallet path that does not exist"? i created and removed the folder of the new wallet, i want to remove this message at the strat of bitcoin core

How do you run Bitcoin Core? If you use shortcut, command or script which include -wallet=<path> as Bitcoin Core parameter, you can just remove it.

Code:

$ ./bitcoin-qt
$ ./bitcoin-qt -wallet=/home/user/wallet.dat
Warning: Skipping -wallet path that doesn't exist. Failed to load database path '/home/user/wallet.dat'. Path does not exist.

Quote from: THLO on July 07, 2022, 09:35:35 AM

I wonder if this can be determined or at least estimated somehow.

I doubt it. Bitcoin node have very few behavior which could be fingerprinted. For example, pruned node on Bitcoin Core only serve latest 288 blocks to prevent fingerprint even if they store far more block.

Quote from: THLO on July 07, 2022, 09:35:35 AM

If there is no good way to accurately answer this question, what do people in the forum think?

I can't even make a guess when it's also possible to use both IPv4/IPv6 and Tor.

Quote from: NeuroticFish on July 07, 2022, 10:15:24 AM

That is if the miners don't start refusing the block rewards (some block rewards were lost like that in the past).

Rather than refuse, what actually happened they use bugged software which doesn't claim block reward, tx fee or both.

Looks like @newalias is online today, so i expect he'll respond to this thread soon either because he check Meta board or found out he has 2 new feedback and check reference link.

Quote from: nullius on July 07, 2022, 08:48:42 AM

Duh. Why does theymos even allow this?

It's part of SFM 1.x feature[1], so IMO it's either theymos don't bother remove it or it can't be removed without lots of work.

[1] https://wiki.simplemachines.org/smf/Logging_In

Answer to question 9 and 21 clearly show Wasabi 2 isn't ready for release.

Quote

--snip--

Users are able to choose which coordinator they want to communicate with but unfortunately there are not many options, as running one has its risks and not many people are willing to do it.

Most users aren't even aware they can choose different coordinator, unless they're advance user who open Wasabi wallet configuration file.

Quote

Answer: Chainalysis! = chain analysis. Let’s say we have 200 inputs wanting to register for a coinjoin. We take those and 200 other random bech32 UTXO’s that we send to their API. We get back a response where they let us know if any of these UTXOs match any of the categories and criterias zkSNACKs has set. Those addresses that we accept will proceed to the input registration, those that are blacklisted will get a notification that this UTXO is blacklisted. As a reminder, Wasabi coinjoin is built in a way that the user never loses control of their coins. The coordinator is never custodying users’ money, therefore it can not seize them etc. The querying process doesn’t affect users' privacy.

1. Adding 200 other random Bech32 UTXO is pointless when they can just see Wasabi CoinJoin transaction on blockchain later.
2. If certain UTXO doesn't meet zkSNACKs criteria, that means owner of the API know owner of that UTXO attempt to use CoinJoin at specific date/time.
3. We need to trust about how the blacklist works.

Quote from: Bitcoin_Arena on July 02, 2022, 11:50:44 PM

Quote from: fillippone on June 30, 2022, 07:50:20 PM

Just in case you forgot how evil this institution is:

Coinbase Is Reportedly Selling Geolocation Data to ICE

The Irony

It's worse when you see their second statement. I'm not sure whether they imply that geolocation (and other personal data) is treated as public data or not part of "Coinbase user data".

Source: https://twitter.com/coinbase/status/1542605323382337537

Quote from: o_e_l_e_o on July 03, 2022, 08:36:13 AM

Amazing that people still buy this nonsense and trust Coinbase with a single satoshi.

It's more likely many of Coinbase customer never research about service they use rather than blindly trust Coinbase.

Quote from: Husna QA on July 05, 2022, 10:21:14 AM

Quote from: Yabes on July 05, 2022, 01:39:37 AM

Pengen tanya, maksud dari minimal punya 0.1BTC apakah ini berlaku untuk eksekusi mixer saja?

Dari yang saya pahami pada link berikut: https://docs.wasabiwallet.io/FAQ/FAQ-UseWasabi.html#what-are-the-equal-denominations-created-in-one-mixing-round, diperlukan minimal 0.1 BTC jika ingin berpartisipasi menggunakan CoinJoin, jadi jika memang tidak menggunakan CoinJoin maka tidak mesti ada sejumlah minimal BTC tersebut.

Catatan: karena memang secara defaultnya CoinJoin ini aktif, jadi mesti dinonaktifkan (di settingan wallet wasabi) jika memang tidak ingin menggunakan fitur tersebut (lihat postingan agan Chikito sebelumnya di atas).

Menurut FAQ[1] pada website utama Wasabi, docs.wasabiwallet.io adalah link dokumentasi versi 1. Sedangkan dokumentasi untuk versi 2 masih dibuat pada repository GitHub mereka[2]. Untuk Wasabi versi 2, hampir tidak ada minimal Bitcoin untuk melakukan CoinJoin[3].

[1] https://wasabiwallet.io/faq.html
[2] https://github.com/zkSNACKs/WasabiDoc/tree/docs-2.0
[3] https://github.com/zkSNACKs/WalletWasabi/discussions/6450#discussioncomment-1450842

Quote from: Discounted on July 05, 2022, 02:58:57 AM

I was thinking the private keys could be encoded in an encoding language to make them slightly extra secure incase any thief has no idea what he's doing.

I think what actually you're looking for is Obfuscation[1]. But generally it's not recommended due to risk of forget or unable to extract the data.

Quote from: pooya87 on July 05, 2022, 03:11:43 AM

Quote

I would love to just be able to store my holy wallet.dat file away for many years and be able to re-gain access to my wallet using this file, primarily through other wallets too if Bitcoin Core wallet seizes to exist by then.

That should never happen considering that bitcoin core is the reference implementation of Bitcoin. But it is open source and many people are using it, so it would be trivial to write a simple script that decrypts and extracts the keys inside the wallet file to be used elsewhere.

Additionally you could also,
1. Backup Bitcoin Core.
2. Rely on public archive such as https://archive.org/details/software.
2. Ask someone else who have such file, since many enthusiast run Bitcoin Core.

Quote from: LoyceV on July 04, 2022, 10:34:55 AM

Quote from: ETFbitcoin on July 04, 2022, 10:17:25 AM

I also noticed they just added ToS where they can take 10% for "high risk fund" which didn't exist few days ago (unfortunately i didn't archive it).

I noticed that 10% BS a few days ago already. I'm not sure if they quickly added it.
They're basically saying they can selectively scam 10% of any deposit.

That' weird, i remember it doesn't exist few days ago (should be July 1st). But it's definitely not exist a year ago according to the archive, https://web.archive.org/web/20210613120712/https://openchange.cash/t%D0%B5rms_of_service/

Quote from: LoyceV on July 04, 2022, 10:34:55 AM

@Best_Change are you delisting them now?

I also wonder why old message disappear on https://www.bestchange.com/openchange-exchanger.html gone.

Quote from: mk4 on July 02, 2022, 04:14:38 PM

I assume this was only possible (the digging of the gesture keys) because of the Galaxy S3 being old and outdated security-wise, right? It's a 10 year old phone model. I assume modern smartphones are going to be a lot harder to break into.

You're correct, today Android[1] and iOS[2] use encryption by default. With this method, he also need to figure how to decrypt the file or disk (depending on encryption method).

[1] https://source.android.com/security/encryption/
[2] https://support.apple.com/guide/security/encryption-and-data-protection-overview-sece3bee0835/web

Quote from: marksanchez5544 on July 02, 2022, 08:58:33 PM

Lol.
Ok so started to build the app. First got 12 million computations per day as a test, this generates the private key, and public key etc. I now compare that to a database of 60000 known public keys and balances.

Day 3, improved the code somewhat. Now the same app is running at 500 million computations per 24 hrs, comparing the generated output against a dBASE of 60000 known balances addresses

So my computations are now 500 million * 60000 per 24hrs. The numbers is to big to calculate.
This is running on a Windows 7 pc icore 5.

Let's see what it comes up with in a day, a week, a year.

I know the numbers are huge.

FYI, you're not the first people trying to generate all private keys. Have you checked LBC? According to them, their pool performance currently is 107.85 million keys/second[2]. Some people don't like LBC though since it use closed source software and there's speculation they targeting specific address.

Quote from: PowerGlove on July 03, 2022, 02:47:38 AM

--snip--

I would double-check your numbers though, they seem a little high for a core i5...

Actually i find it's quite slow. Recovery software such as FinderOuter could achieve 64 thousand address per second on i3[3].

[1] https://lbc.cryptoguru.org/
[2] https://lbc.cryptoguru.org/stats
[3] https://bitcointalk.org/index.php?topic=5214021.msg56043632#msg56043632

Quote from: gagux123 on July 03, 2022, 08:06:15 AM

I have a limited knowledge in this technical area, can you tell me which type of OS is more vulnerable, Android or iOS? (or this variable depends exclusively on the smartphone user?

By default, iOS generally is safer than Android. But there are things to consider such as user behavior, Android/iOS version and built-in application. Each smartphone brand have different built-in application where some of it can't be removed. For example, there was vulnerability found on Samsung built-in application[1].

[1] https://techcrunch.com/2021/06/10/security-flaws-found-in-samsungs-stock-mobile-apps/

Quote from: Fivestar4everMVP on July 01, 2022, 02:28:03 PM

how possible/feasible it is to build/run a centralized exchange with full non-custodial wallet system implemented?

If centralized only means there's a place (usually website which controlled by a group/company) to meet buyer and seller, it's possible. But people usually call it P2P rather than CEX even if both buyer and seller need to use that website. Otherwise, i don't see how it's possible on technical level.

Quote from: ph1980 on July 01, 2022, 02:08:34 PM

Quote from: ETFbitcoin on July 01, 2022, 12:28:57 PM

Just wondering, where did you download pywallet? AFAIK there's no option to install pywallet.

i found it through this old thread, 10 posts down.

https://bitcointalk.org/index.php?topic=2398504.0

I understand what you meant. To be precise, it extract all files and install required software (such as Python). I just tried "PWI_0.0.3.exe" on Windows 10, but i encountered problem and it quit hallway. But i managed to run pywallet on Windows (after i check install script and other user post). Here's what i did,

1. Download and install Python from https://www.python.org/downloads/release/python-2716/. I choose "Windows x86-64 MSI installer". Make sure you enable "Add python.exe" to the path.

2. Download pywallet from https://raw.githubusercontent.com/jackjack-jj/pywallet/b52c955f8c93a75745166ebf281448016e1f22e2/pywallet.py. I right clicked the page and save it at Desktop. On your Desktop, you should see "pywallet.dat" file.
3. Open CMD and run this

Code:

cd Desktop
pip install twisted
python pywallet.py --web --port 8989

4. Open your browser and enter localhost:8989. Afterwards you should see something like this.

P.S. Sorry for rough explanation, i rarely use windows for this kind of stuff. I also never use web version either.

Quote from: dkbit98 on July 01, 2022, 10:35:42 AM

Quote from: DrBeer on July 01, 2022, 10:12:06 AM

But you do not lament - "browsers Google, Firefox, Apple, ... - they are watching me !!!"

Are you drunk, on drugs or what? Roll Eyes

--snip--

FYI, you fall for https://en.wikipedia.org/wiki/Whataboutism.

Quote from: Anonohmon on June 15, 2022, 10:27:18 PM

Just putting this here for anyone who may be looking for or needs this info.

This site has good recommendations for anonymous crypto exchanges and lists which ones allow XMR.

https://kycnot.me/

You're exaggerating, the site list exchange which offer some degree of privacy. Some listed exchange might ask KYC or categorized as custodial.

Quote from: franky1 on June 28, 2022, 09:21:37 PM

Quote from: Anonohmon on June 15, 2022, 10:27:18 PM

The easiest way I found is just buy bitcoin, swap it to xmr then send xmr to another exchange to swap back to btc and just like that, the public KYC/paper trail is broken.

funny part is a few years ago.. some bitcoin thieves done exactly that.. laundered some funds via exchanges that handled XMR. and then put it through other that converted it back... oh.. they got caught a few months ago and arrested and the courts shown how the investigators followed the money even via the XMR exchanges.

It's not surprising if both exchange (to buy and to sell XMR) are centralized. Even worse if they use same IP/browser.