|
I'm currently in the planning stage of a similar project. So I totally agree with the sentiment, don't use VPS, or let anyone else have control over your hardware or site it will be a weakness that will be abused eventually. So even renting a dedicated server or two, won't do. Buying them will.
I'm planning to purchase 3-5 dedicated servers for this project; my network and security partner, is currently advising me the best configuration. If your not planning a similar level of investment for a project that is for an exchange you are underestimating the security and load issues you will be running into. Many have done so in the past and you already pointed out what happened to them.
Buying servers is not an expensive thing, when you consider the scale of running an exchange and how much currency you are handling.
If you need advice on what servers to buy, parts, software, general configuration etc, let me know and I can point you in the right direction (PM is probably best).
|
|
|
|
Definitely is good plan forward, if enough people use scripts such as yours it, it would reduce the over all number of compromised networks in the long run, which these DDOS attackers make use of. Not necessarily a cure, but certainly make them weak enough to be easier to deal with.
I don't run a pool, but I do run a few servers, so I'll probably rewrite this to make it work along side one of my other scripts which usually just blocks these IP address' in the 1st layer firewall.
Great please post your script here also to share with everyone  I will do, I plan to rewrite one of my pfsense packages. It might take a little while, but I can't rush it, it is a live production server. |
|
|
|
|
Definitely is good plan forward, if enough people use scripts such as yours it, it would reduce the over all number of compromised networks in the long run, which these DDOS attackers make use of. Not necessarily a cure, but certainly make them weak enough to be easier to deal with.
I don't run a pool, but I do run a few servers, so I'll probably rewrite this to make it work along side one of my other scripts which usually just blocks these IP address' in the 1st layer firewall.
|
|
|
|
|
As a BTC seller, I've found it to be good standard service. It is very quick and reliable, no issues there.
It's rare that it's not used.
|
|
|
|
|
With Bitcoin services like Pools and Exchanges, you are probably better of asking yourself, if you should be considering dedicated hardware, instead of which host to use. The security you can provide then, is far higher when you add in a Good datacenter and multiple dedicated servers for specific purposes.
Too many big Bitcoin services have been "compromised" in some shape or form, due to the weakness of a 3rd party providing their hosting was too easy to access sensitive data.
Have you tried operating a private pool directly from home/office, using your own miners and a few select people.
The expenses of getting up to a point where it is profitable size, is why some pools closed this year, the variance of smaller pools can make it difficult.
|
|
|
|
How expensive are the US money service licences anyway, surely Mt.Gox could of afforded them, as one of the largest exchanges out there, right?
Don't quote me, but I'm pretty sure if you operate in the US as a whole, you'd need a MSB license from every single state (unless the particular state doesn't regulate it). The logistical, legal, and straight-up cash requirements are probably upward of $5m and probably in excess of $300k annually after all the lawyer and accountant fees... just to do business in the US. Glad I only wanted to operate in the UK then. That does sound logistically complex and expensive as you said. |
|
|
|
Strange how it's taken this long to discover Mt.Gox wasn't doing things by the books (according to local laws), as I am fully aware they operate out of Japan, However they do apparently have a US company, with connected US accounts.
Which also the US operations were suppose to been taken over by another company by now, which didn't happen, so they in trouble with that as well.
Their stack of cards seems to be falling apart. Ouch.
There has been a decent number of other exchanges doing the same things shutting every year, obviously not lasting very long, yet they only looked at one of the biggest out there now? Talk about odd. How expensive are the US money service licences anyway, surely Mt.Gox could of afforded them, as one of the largest exchanges out there, right?
It isn't about "affording" anything. Its about the regulations that are imposed and the requirements one must meet to get a license which essentially prevent many businesses from operating. I've studied what is needed in the UK and apparently we are well known for being strict in this area. However since I have no intentions of operating in the USA, I don't know it's requirements or costs. Mt.Gox when I used it (last year) was annoying with all the verification of your details, so it easily did all of what was necessary for the requirements. So does it really all come down to the fact it wasn't declaring that account was being used to move money around? |
|
|
|
|
Strange how it's taken this long to discover Mt.Gox wasn't doing things by the books (according to local laws), as I am fully aware they operate out of Japan, However they do apparently have a US company, with connected US accounts.
Which also the US operations were suppose to been taken over by another company by now, which didn't happen, so they in trouble with that as well.
Their stack of cards seems to be falling apart. Ouch.
There has been a decent number of other exchanges doing the same things shutting every year, obviously not lasting very long, yet they only looked at one of the biggest out there now? Talk about odd. How expensive are the US money service licences anyway, surely Mt.Gox could of afforded them, as one of the largest exchanges out there, right?
|
|
|
|
|
I read up on one Datacenter recently which had a different approach to fire suppression. They have their entire floor(s) operating with a lower O2 levels (oxygen %), which by dropping by half (I think) makes it nearly impossible for a fire to even start. So they don't need to risk damaging the servers using something to put it out. It's technically still breathable, though I suppose it wouldn't be comfortable for long periods of time.
Obviously I'd imagine that be difficult to do on a small scale, but figured I'd throw the idea out there.
|
|
|
|
|
... and this is why I moved to only do local bank transfers (totally free here).
Banks are a pain for these fees and it really eats into your profits.
|
|
|
|
|
If people want easy, just use localbitcoins. Now that is easy to buy/sell.
Hell of a lot faster and tiny fees and little to no mark up.
|
|
|
|
|
If it involves paypal/ebay it is inherently unsafe, due to the above mentioned reasons.
There really is nothing you can put in place that makes is safe.
Using a well known Bitcoin exchanges (in you country) or private sales with known trusted users is really the only way to go.
I known you tried with this guide, but it's still a place where so many get scammed, it is best to just avoid using it entirely.
|
|
|
|
|
Any recommended banks in the UK, or just the odd one to avoid?
|
|
|
|
|
0, None. No.
Just don't do it.
I really dislike hearing all the people asking about, people telling them not to do it, then complain they got got involved in a scam and got burnt.
|
|
|
|
Depends where you live. My usual supplier of all my geeky toys (computer hardware) is based in Europe and at least the link I'm providing you is the uk site. http://www.lambda-tek.com/componentshop/index.pl?region=GB&prodID=B1601705This is certainly one of the largest SSD in the consumer market, but I wouldn't trust it anything important with wear levels like it has without lots of over provisioning. My preference this year has been the Intel S3700 - Yes enterprise grade, but very well priced for what it is. Apparently also covering: France Deutschland Italia Espaņa If you are based else where, Afraid I'll be of no more help than a quick google search. USA Quick google search: http://www.nextwarehouse.com/item/?1406498_g10e |
|
|
|
Depends where you live. My usual supplier of all my geeky toys (computer hardware) is based in Europe and at least the link I'm providing you is the uk site. http://www.lambda-tek.com/componentshop/index.pl?region=GB&prodID=B1601705This is certainly one of the largest SSD in the consumer market, but I wouldn't trust it anything important with wear levels like it has without lots of over provisioning. My preference this year has been the Intel S3700 - Yes enterprise grade, but very well priced for what it is. Apparently also covering: France Deutschland Italia Espaņa If you are based else where, Afraid I'll be of no more help than a quick google search. |
|
|
|
|
Considering the sort of contract they had in place, repeated breaches tends to lead to lawsuits.
It is sad, but yes it had to be done if everything is factually true with what has been said on the matter so far.
|
|
|
|
Many of the people you mention, have technically brilliant skills in their fields, Hardware & software engineers of some description or another.
But that field was not necessarily include customer support / service skills. Even if some were thrust into that position.
They are the brains behind various operations / projects, those people in other bigger business' would not be public facing.
In the Bitcoin community it is more common place for projects regardless of size or complexity to be run by 1 or even a small handful of people.
So the option of hiding behind a layer of CS people is not an option for them.
Some have become bitter from years of abuse from too much direct informal contact with customers with unreasonable requests, blaming them directly for things etc, regardless if it was their fault or not. I'm not defending them, but usually as a company or project grows, the techs front facing duties are limited and customer support is handed off to someone better suited for the task and they are only consult when needed.
In the above mention names, this has not happened, so they've become like many who get abuse hurled at them too long... the effects are worse in some more than others.
Customer support is not that hard when you actually on sell things that you possess or are capable of delivering. Look at FriedCat's blade auctions. Think he is hassled by "all these unreasonable" customers you speak of? No he is not because he does what he says. People are "unreasonable" because Josh/Avalon/pirate etc. all promise things they cannot do, and then ignore or attach the people that point out the inconvenient truth. Of course customer support is easier when things are going smoothly, it's when things go badly that you see if you really got the skill to handle it or not. Over promising is dangerous (even if it gets sales) and has gotten many in hot water and not everyone is suited to CS. Friedcat is someone who shown to do a good job in this area, but he also appears to have a good team behind him. That balance is needed and apparently not everyone on that list has a good balance of skills in their team. |
|
|
|
|
Many of the people you mention, have technically brilliant skills in their fields, Hardware & software engineers of some description or another.
But that field was not necessarily include customer support / service skills. Even if some were thrust into that position.
They are the brains behind various operations / projects, those people in other bigger business' would not be public facing.
In the Bitcoin community it is more common place for projects regardless of size or complexity to be run by 1 or even a small handful of people.
So the option of hiding behind a layer of CS people is not an option for them.
Some have become bitter from years of abuse from too much direct informal contact with customers with unreasonable requests, blaming them directly for things etc, regardless if it was their fault or not. I'm not defending them, but usually as a company or project grows, the techs front facing duties are limited and customer support is handed off to someone better suited for the task and they are only consult when needed.
In the above mention names, this has not happened, so they've become like many who get abuse hurled at them too long... the effects are worse in some more than others.
|
|
|
|
After I learn c++ what other languages are worth learning and which arnt?
If you want to do something Web based and already got some experience there, PHP is a good direction to go with plenty of help and examples online. It is used in most of my websites and it's a good core skill as a web developer, which you can expand on as you get more experience. Personally if you wanted to do more with C++, maybe my experience could help, I venture into game engine development after I learnt C++ (many game engines are built or based on it). The unreal engine was a good start for me as it is quiet flexible in what you can modify code wise. If you feel brave then you can even build your own. |
|
|
|
|
Show Posts
