|
It's a fake advertisement. AFAIK something like this simply does not exist (and i've been around for a while, so if it was something real i would have heared about it by now).
There are ways to broadcast a transaction with a very low chance of ever getting confirmed (for example by paying a fee that's way to low, or having unconfirmed parents with a low fee)... These transactions stay in the mempool of most nodes for about 2 weeks after which they get pruned from most node's mempools, but during this time they remain UNCONFIRMED transactions, and nobody should accept an unconfirmed transaction as a payment confirmation...
Once a transaction is confirmed (and a couple more blocks were added to the chain afterwards), it stays confirmed.
If you only have one confirmation, there's always a very low chance of a chain reorg, but even then, most transactions that are in the stale chain are usually also included in the longest chain aswell... And after a couple of confirmations, the odds are very (very, very, very) low...
TL;DR; => it's a fake ad, probably aimed to scam people that want to scam others using these "flash" transactions?
|
|
|
|
Tor can't completely mitigate all abuse, but it does make it a lot harder for an attacker tough: https://support.torproject.org/abuse/what-about-ddos/I've ran hidden services in the past, it's actually quite easy to setup and maintain... But in the end it's up to Theymos to see if he has the time and resources, since i can only assume that the time investment in setting up a hidden service for bitcointalk is a different magnitude than the time to setup a hidden service for a testnet faucet  |
|
|
|
Just a suggestion: you mention you're learning, why not mine on the testnet instead? The diff is still pretty high for a TEST network, but with an S9 you should be able to mine a couple of blocks once in a while (with allmost 0 block reward nowadays), but atleast you'll be able to see everything in action If the testnet cannot entice you, there are a couple altcoins that are clones from bitcoin and use sha256d as POW algo with a much lower diff than bitcoin's main net... The income will be peanuts aswell tough. https://coinmarketcap.com/view/sha-256/I used to mine peercoin with a usb block eruptor back in the days, when the bitcoin networks diff was waaaay to high to use an usb miner, but on peercoin it was still low enough... Don't know if this is still valid tough! |
|
|
|
|
I hate to say it, but you're not the first one that says they'll get their lawyer involved... I've heard it dozens of times... But freewallet is still going strong and selectively scamming people on a regular basis.
This either tells me they've got a very good lawyer and a TOS that allows them to selectively scam, or people tend not to follow up on their thread of getting their lawyer involved...
This being said: the advice to keep making noise is usually the only advice we can give after the scam has happened... It seem to work from time to time, but most victims lose their funds.
The only thing we, as a community, can do is keep raising awareness about freewallet's tactics.
|
|
|
|
Adding a small fee doesn't make your transaction slow, nor the process... Adding a small fee will give the miners a smaller incentive to add your transaction to the block they're working on... A block can contain up to 1Mb of transaction data (+ a maximum of 3 Mb of witness data). The difficulty gets adjusted every 2016 blocks so that the average time between two blocks is about ~10 minutes (on average). This means that (on average) about 6 Mb of "actual" transaction data can end up in the blockchain per hour. If more than 6 Mb of unconfirmed transactions get broadcasted per hour, the mempool of the nodes get filled with a backlog of unconfirmed transactions. Since miners are businessmen, they try to optimize their financial gains. They do this by prioritizing the transactions with the highest fee per (virtual) byte of transaction data. They do this because a miner can add a coinbase transaction to the block. This coinbase transaction funds an address generated by the mining pool with a value of the current block reward PLUS the sum of the fees of all transactions included in a block. So, if you add insufficient fees, you give no incentive to miners to prioritize your transaction and the odds are it remains in the mempool of the nodes for a longer period of time. By default, nodes prune old unconfirmed transactions from their mempool after 2 weeks (if my memory serves me right) However, there are tricks to increase the incentive for pool operators to prioritize your transactions... If you loop back to my previous post in this very thread: - if you wait it out, you do not increase the incentive of the pool operators. Usually, your transaction will only be mined if the backlog of unconfirmed transactions is gone. If this takes more than 2 weeks, odds are most nodes will prune your tx from their mempool
- if you wait but keep rebroadcasting, it's the same situation as the one above (just waiting it out), but you periodically remind the nodes of your unconfirmed tx, pushing your tx back in their mempools once it gets pruned
- if you bump the fee, you replace your transaction with one with a higher fee, so the amount of sats per (virtual) byte of transaction data is higher, giving the pool operators a higher incentive to add your tx to the block they're trying to solve
- if you double spend the unspent output used as an input for the stuck transaction, you kind of try to achieve the same thing as bumping the fee, but in a much more artisinal way with waaaaaaay less chance of succes
- if you do a cpfp, you basically use one of the outputs of the stuck transaction as input for a new transaction. The miner can only add the fees of the new transaction to the coinbase reward if they also add the stuck transaction to their block. The trick is to make the CPFP transaction with such a high fee (per virtual byte of transaction data) that the pool operator has a high incentive to add both in order to be able to claim the fees of the second (cpfp) tx
- if you pay a mining pool to add your transaction, you directly give money to the pool operator to counter balance the low fee... This is a non-technical sollution, but it does work (eventough, as noted before, it can be pretty pricey)
One thing to remember: those are all odds and averages... It IS possible to get into a block with a tx with a 10 sat/vbyte fee whilst there are 15 sat/vbyte fee tx's still in the mempool. It IS possible your 100 sat/vbyte tx doesn't get added to a block eventough most other tx's in the mempool have a 15 sat/vbyte fee... This being said: the selection of the tx's from the mempool is allmost always an automatic process, and usually you can predict pretty well which tx's from the mempool will be added to the next block. --snip-- there's no other reason why a transaction gets unconfirmed for several hours.
Eventough insufficient fees is allmost allways the culprit, it does happen that a transaction has unconfirmed parents, or is dropped from the mempool of most nodes (usually because it has been broadcasted to long ago). There might even be other reasons, but i can't think of any except those two right now. |
|
|
|
|
I remember people talking about using gambling platforms instead of mixers for many, many years... The fact does remain that a gambling platform is not built to mix (or launder) money. They do keep extensive logs (part of their business actually depends on those logs so they can catch fraudsters), sometimes they even require KYC... If you're going to launder criminal funds using casino's, you're just going to get caught sooner or later (and since we're talking about criminal funds, i kinda hope the launderers get caught)
Personally, i don't see anything wrong if you just want to hide your money to protect yourself from a $5 crowbar attack or beggars... You can use about any service that allows you to deposit and withdraw funds... An exchange, a casino, a custodial wallet,... I don't know if the wager requirements of casinos are actually there to stop money laundering, and i wonder if their main goal is to make sure their business stays afloat. Only by requiring your balance to be wagered, they stop people from not gambling... The fact they're discouraging money launderers is just a happy coincidence. Personally, if i'd just want to hide my funds from criminals and beggars, i'd rather use a big exchange for this purpose: the risk is much lower than using a gambling website.
Full disclosure: i'm not a "real" gambler. I did visit gambling sites in the past a couple of times, but i'm far from an experienced gambler, and i haven't logged on to any of my accounts for years... Maybe my image of the gambling industry is wrong...
|
|
|
|
if you underpayed the fees (which is the case in most stuck transaction cases), there are several things you can do... They depend on how you initially created the transaction, the receiving wallet,, your technical knowledge and the urgency... - wait it out... if it's a transaction between your own wallets, it'll either get included in a block sooner or later, or most network nodes will prune it after a couple of weeks and you can re-use the unspent outputs
- wait it out, but keep broadcasting the transaction so the network nodes won't prune it (usefull if you're paying somebody else that trusts you completely... like a family member or a close friend... It'll probably be slower than the first option, but the receiver won't see a "dissapearing" unconfirmed transaction)
- bump the fee (this only works if your transaction is opt-in rbf). I don't know blockchain's wallet... haven't used them in many, many years... But if they create opt-in rbf transactions, i suppose they'll have some kind of menu to bump the fee (but other users have already pointed out that they believe blockchain does not create opt-in rbf transactions)
- you can try to double spend the unspent output but use a bigger fee this time... The problem is that most (if not all) nodes will reject your transaction... This is more or less the "bump the fee" equivalent of a non-opt-in-rbf transaction, with waaaaaaay less chance of succes and it requires waaaaaaay more technical knowledge.
- you can do a CPFP IF you either received change from this transaction or if you're also the receiver. Some wallets (like electrum) even have a nifty wizard to help you with this process... I don't know if blockchain or trust wallet have such a feature tough (can you import your trust wallet into electrum? That would probably help you a little bit?)
- you can pay a TRUSTWORTHY BIG bitcoin mining pool to include your transaction in their next block... I know and trust viabtc... But i'm not affiliated with them! If you payed > 10 sat/vbyte you can even use their free tx accelerator (but, if you payed more than 10 sat/vbyte, i guess your tx wouldn't be stuck for 20 hours) => https://www.viabtc.com/tools/txaccelerator
|
|
|
|
Hi guys,
A friend of mine just popped into my house yesterday and gave me a piece of paper with a privkey of BTC wallet. The thing is that it is old-washed paper and I can read only the first 9 symbols of this string. Is it possible to retrieve his Bitcoin with only that fraction of a private key (the balance is 1.09BTC)? How long would it take to brute force the rest of the private key?
In which format is said private key? https://en.bitcoin.it/wiki/Private_keyBut, truth be told, unless it's in mini private key format, your odds are allmost 0 when you can only read 9 characters... (and even if it's in mini private key format, it'll probably take more time and effort than it's worth... I didn't do the math, but my gut tells me that even in this case, it's allmost impossible) |
|
|
|
|
I don't know if you're for real... But if you are: you just posted a big advertisement for scammers...
Personally, i'd disregard all mails arriving at that address from now on cause everybody looking for an easy victim will be mailing you.
|
|
|
|
Wow! Thank you so much, I wasn't aware of them. They focus on AML and are a company :-), whereas in our thesis we focused on Scam (what the EPC calls APP fraud). So, you would also prefer a login with email?? Where I acquire personal data, whereas with Google I wouldn't? Ok we will work on that. An example like that can work? ( https://i.postimg.cc/JnPG0P34/Schermata-2023-06-21-alle-12-45-35.png)  An example like that does work to get some initial feedback My first thought when seeing that score would by: why? What's the rationale behind the number? Was it linked to a scam somewhere, did it get some negative reviews,... ? |
|
|
|
|
I get the fact that you want to limit the amount of querys on your system to avoid having to buy/lease more performant (and more expensive) hardware. This being said, using google's SSO isn't a foolproof way to avoid people signing up with multiple accounts either... It's just an extra hoop multiaccounters have to jump trough. And like i said: using google's SSO will deprive you from several beta testers... I'm not completely against google's SSO, but i avoid it whenever i can (and i only use it for services that i trust and offer little or no other way of creating accounts).
AFAIK, there is no foolproof way to avoid multi accounters... People can create a dozen of google accounts (or buy them in bulk), or they can use throwaway emails, they can use vpn's or proxy's... Or tor... They can change their browser's fingerprint, they can (potentially) bypass (some) captcha vendors...
Personally, i'd probably allow people to sign up using their email and require a captcha completeion, then block >10 lookups per day based on ip address... It's not a perfect system, people can still get around it, but there are sufficient hoops so most of them won't be able to manage more than a handfull of alt accounts on your service.
If you really want to crack down on multi accounts, it'll require grunt work... Maybe work with invites and communicate with your members trough your platform... But it'll require significant effort from your side.
|
|
|
|
|
There doesn't seem to be a way to create an account without linking it to my google account (which i usually don't do, especially for new projects)?
|
|
|
|
There are innumerable ways to retrieve information about Bitcoin blocks, including previous block hash. If you're not running your own full node software, you can utilize some external blockchain explorer API to fulfill your needs. Of course, you may also need some additional software to massage the data you get from APIs because not all of them have advanced filtering to extract only the required data. For example, here is a simple script in Python for extracting block hash from specific block height:
thanks for the answer. my question is, the nonce in header is the start nonce for mining I assume, right? where can I find exact nonce used to solve the target requirement for that block? also when miner increment nonce, it should be placed in header and header hash recalculatet, right? no, that should be the actual nonce... If you would re-create the header using this info and do a sha256d hash of said header, the outcome should be under the current target... Starting nonces are not included into the block header when it gets broadcasted. |
|
|
|
Bitcoin mining consist of finding a nonce to add to previous block header and after 2x sha256 resulting in number lower than target.
Now my questis, where can I find previous mined block headers and solution nonce? Something that I check validity by myself.
My server is gone, so i'm no longer running bitcoin core, but isn't there a "getblockheader" parameter in bitcoin-cli? EDIT: i'm currently using getblock.io (which is free for personal use)... I tested the getblockheader parameter, and it seems to work: curl --location 'https://btc.getblock.io/mainnet/' \
--header 'x-api-key: my_api_key' \
--header 'Content-Type: application/json' \
--data ' {
"jsonrpc": "2.0",
"method": "getblockheader",
"params": [
"00000000000000000003db936a59e25354d7c9ad0b1922ae9430cf2643d0966f",
true
],
"id": "getblock.io"
}'
In reality, you'll have to combine this with the "getbestblockhash" parameter in order to get the hash of the block @ the tip of the chain... When you have this hash, plug it into the bitcoin-cli getblockheader command to get things like the merkleroot, time, nonce, bits,... If you're not running a reference implementation of the node software (bitcoin core), and you don't want to use getblock.io, there's always https://www.chainquery.com/bitcoin-cli/ aswell (which works without signing up, but you cannot automate using chainquery) |
|
|
|
Just to append to the answer already given: it's so easy anybody can do it... Here's an online site that lets you generate burn addresses: http://gobittest.appspot.com/ProofOfBurnJust be carefull, it's a BURN address... if you fund this address, those unspent outputs are burnt... You cannot rescue or retrieve them in any way. |
|
|
|
Try emailing their support, that's usually where you'd get a quick reply (I emailed them yesterday and they replied quickly).
As soon as I wrote here, the transaction was confirmed immediately.   Same here... Took a while longer than expected, but the tx has arrived |
|
|
|
|
I was trying whirlwind.money out with a very small sum ~0.005. I just tested a 0.0025 withdrawal, but haven't received anything...
I'll give it some more time, but for now, i'm with Ratimov... didn't receive my withdrawal
|
|
|
|
As if im the only one that was doing it in this forum. Have you already purge all of them? I think no. At least i was honest about having another account and willing to fix it.
Did you actually read what i wrote? Here's a quote from my post: --snip--
I know it looks like people don't make a big deal out of ban evasion most of the time... I don't really mind... But to my understanding (after being here close to a decade) those are the "official" unofficial rules.
--snip--
I don't care what you do, i'm not the one banning people or tracking offenders down... It just that after reading your posts, i was under the impression you thought that because the account wasn't originally created by you, you weren't evading a ban (which you are). I see people breaking the law on a daily basis (usually traffic laws). It's not because everybody is doing it that it's ok to break the law yourself... Neither am i going to stop other people from breaking laws since i'm not law enforcement. But if they would come to the forum and said: " i was riding 90 km/h on a road where the speed limit was 70 km/h, but it wasn't my car and everybody else was doing it, so that's ok. I should have never gotten a speeding ticket": i would never ever agree with you... Maybe the law is stupid and 90 km/h is perfectly fine at a certain spot: it doesn't matter, you still broke the (traffic) law. If you wanted to ride 90 km/h you should have petitioned the local governement to change the speed limit before going 90 km/h. |
|
|
|
|
Just to chime in on (my understanding of) ban evasion:
If you get banned, it's you (as a person) that gets banned, not (only) your account.
So, it doesn't matter if your account is a hand-me-down of your uncle, or if you found the credentials on a piece of paper laying on the street somewhere. If an account under your control gets banned, you (as a person) are no longer allowed to post using any other accounts for the duration of the ban. The only exception is making a new account (or using an existing account) to create a ban appeal in the meta section for discussing your ban. Everything else is considered ban evasion (which is a bannable offence).
It doesn't really matter why you got banned in the first place... If you don't agree with your ban, the correct order of doing things is: using a new or existing account to create one topic in meta to appeal your ban and ONLY post in this topic whilst your ban is still active. If your ban gets reversed (and only if) you can start posting again outside meta. I got banned once for participating in a raffle in the wrong subforum, and that's exactly what i did: i stopped posting and asked for lenience from the admin since it was my first offence after years of being a member... My sentence got reduced, and i only started posting once my bantime was over.
I know it looks like people don't make a big deal out of ban evasion most of the time... I don't really mind... But to my understanding (after being here close to a decade) those are the "official" unofficial rules.
|
|
|
|
|
Show Posts
