Bitcoin Forum
May 14, 2024, 12:13:52 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1] 2 3 »
1  Other / Beginners & Help / Re: StrongCoin key leak. on: April 03, 2013, 10:35:59 AM
Over the easter weekend due to a bug in the strongcoin interface hackers were able to access all encrypted private keys held on the Strongcoin server. This means for people who had weak passwords on their keys or people who had a lot of information in their clue field the BTC may have already been stolen.

This is a thread to answer questions on the StrongCoin key and clue field leak.

1) what was the bug? what do you mean by "interface"?
2) what are you doing to prevent such bugs from occurring again?
3) do you know of anyone's coins being stolen?
2  Economy / Service Discussion / Re: Figuring out how much was invested with pirateat40 on: August 29, 2012, 10:31:48 AM
So I don't have a bone in BTCST or any of the bets around it, but I have a bit of time and a little bit of a mathematics background (undergrad degree in math), and am really curious to figure out exactly how many BTC were invested with pirateat40... has anyone linked (or could anyone share) the transactions of their investments with him?

I heard the claim that he's the owner of the largest bitcoin account account [1]. Does anyone know of evidence to support it?

1. https://blockchain.info/address/1DkyBEKt5S2GDtv7aQw6rQepAvnsRyHoYM

He said on IRC that he doesn't have the coins.

https://bitcointalk.org/index.php?topic=101339.msg1135573#msg1135573
"If I had all the coins just sitting around I would've has this wrapped up a long time ago."

Forgive me if I'm a bit skeptical of his words. He might not have *all* of the coins or maybe they aren't "just sitting around", but he might have a lot of them.
3  Economy / Service Discussion / Re: Figuring out how much was invested with pirateat40 on: August 29, 2012, 10:27:14 AM
nanotube has this information as part of the Vandroiy bet, I believe.

Could you link or quote what you're referring to, please? I'm still catching up on a lot of this stuff...

https://bitcointalk.org/index.php?topic=91661.msg1013607#msg1013607


Thanks, that's fascinating! And very eloquent, for someone who at other times seems to struggle with his grammar.

The section titled "Change in BTCST ToS" is somewhat curious... is a copy of the ToS publicly available?

Also, has this bet concluded?
4  Economy / Service Discussion / Re: Figuring out how much was invested with pirateat40 on: August 29, 2012, 09:52:57 AM
nanotube has this information as part of the Vandroiy bet, I believe.

Could you link or quote what you're referring to, please? I'm still catching up on a lot of this stuff...
5  Economy / Service Discussion / Figuring out how much was invested with pirateat40 on: August 29, 2012, 03:43:17 AM
So I don't have a bone in BTCST or any of the bets around it, but I have a bit of time and a little bit of a mathematics background (undergrad degree in math), and am really curious to figure out exactly how many BTC were invested with pirateat40... has anyone linked (or could anyone share) the transactions of their investments with him?

I heard the claim that he's the owner of the largest bitcoin account account [1]. Does anyone know of evidence to support it?

1. https://blockchain.info/address/1DkyBEKt5S2GDtv7aQw6rQepAvnsRyHoYM
6  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: August 25, 2012, 06:52:50 PM
Sent!

Got it, thanks again!
7  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: August 25, 2012, 05:57:43 PM
Hey, I'd like to send you a little (0.512 BTC, the most I can afford) donation for your chrome extension. Even though I'm not using it other than for testing, I think you made a great job there?

Where do you want the donation sent? Smiley


Sweet, thanks!

Feel free to send it to 1D2qX2bu7uxKbCbTBvGRrx5ctfwrXYFdDM
8  Economy / Service Discussion / Re: Hey Pirate, it's Monday....WHERE ARE MY BITCOINS ? on: August 22, 2012, 12:44:35 PM
His OTC ratings might be a good place to figure out how "real" he is, also... would any of the people who claimed to trade with him over PayPal be willing to reveal the email he used? Are they real people, or part of the ruse?

That's a good call.
But, "Trendon Shavers" seems a likely figure to be pirate, and the photos we have of him (via facebook) match the one from vegas.

Could very well be fake but usually when I come up with a fake ID I don't give it a criminal record for check fraud.

Ah, OK, I actually hadn't gotten a chance to read up on the threads behind that name. Now that I have (and did a bit more Googling), everything does seem to add up. I almost feel bad for him - I hope this is a temporary delay and doesn't end up in court.

There is also the possibility that whoever's behind pirateat40 is impersonating Trendon, but that does seem somewhat unlikely.
9  Economy / Service Discussion / Re: Hey Pirate, it's Monday....WHERE ARE MY BITCOINS ? on: August 22, 2012, 08:47:30 AM
how deep does the rabbit hole go?

I would bet OBAMA planned this somehow!
He'd blame it on Bush anyways...

-- Smoov


That's stupid. It's a multi-million dollar ponzi scheme, not a middle eastern revolution Smiley
10  Economy / Service Discussion / Re: Hey Pirate, it's Monday....WHERE ARE MY BITCOINS ? on: August 22, 2012, 07:37:37 AM
Pirate may choose to pay him at the very last minute, while everyone else may be paid out tomorrow.

I find my self wondering more an more whether bitlane and pirateat40 are sock puppets of the same guy.  First bitlane for no real good reason causes a supposed run on pirate's operation forcing him to shut it down.  Next he provides a convenient excuse for pirate to make himself scares due to what appear to be fairly blatant threats.  These two things are actually pretty useful at the end of a Ponzi.  Just say'in.

I found myself wondering the exact same thing as I was reading the original post. To put it bluntly, bitlane is acting way too dumb for someone who supposedly has $25k to throw around on adventures like this. If I were pulling off a scam of this proportion (I heard pirate had 500k BTC?), I'd definitely have quite a few sock puppets set up to cause as much doubt/confusion, false hope, and general trolling as possible starting right about now. The scammer would definitely want to be in control of the dialogue.

Also, if it's a ~$5 million scam, I imagine he's preparing for more than a few private investigators (and perhaps even law enforcement) to start looking for him, so I imagine he's put quite a bit of effort into making sure he's as anonymous as possible, setting up false trails, etc.

gpumax.com, which is linked from his profile, is registered to:

Don Shrents
5100 Eldorado Pkwy
Mckinney, Texas 75070

Which seems to be a fake name at a strip mall (http://goo.gl/maps/i3iPA). Why would someone register a domain under a fake name instead of just anonymizing it like most people do? Maybe he wanted to save a few $, or maybe he wanted to remain anonymous in case of a legal inquiry with the registrar.

Several of his investors claim to know his "his name, birthdate, current city, and a previous city he lived in", saying it's "publicly available to anyone who cares enough to thoroughly research it" (https://bitcointalk.org/index.php?topic=50822.400). I'm no PI, but I found nothing of the sort, and I imagine I'm not the only one who was curious. If this is a scam, I'd hypothesize they are puppets, as well.

His OTC ratings might be a good place to figure out how "real" he is, also... would any of the people who claimed to trade with him over PayPal be willing to reveal the email he used? Are they real people, or part of the ruse?

I definitely don't have the time/skills to dive deeply into this, but it does make me wish I'd decided to be an investigative reporter Smiley
11  Bitcoin / Project Development / A proposal: Bitcoin address directory on: July 21, 2012, 08:31:21 PM
Say you want to send bitcoins to someone on a forum like reddit, Hacker News, Facebook, or by e-mail, and they don't have a bitcoin address. I propose a public service which will accept bitcoins on behalf of someone, reaches out to verify their ownership of the recipient account, and allows them to clam the bitcoins and set up an address to forward their bitcoins to in the future.

Would this be useful? What are the downsides?
12  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 16, 2012, 08:43:52 PM
But... I did just run into another thing Smiley

Suddenly, the seed stretching when creating a new wallet doesn't start at all.
Progress bar stays on 0 and nothing happens. Not sure if this is something
with my browser data or something, I couldn't further investigate yet.

Ah, that was because I got a little too eager deleting code from lib/bitcoinjs. Should be fixed with 0.1.6. I'll go through it (and other parts) more carefully to cut down the size of the package.
13  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 16, 2012, 08:25:03 PM
Oops, didn't realize I needed to hit "Publish changes" in the developer dashboard for it to go live. Should be upgrading to 0.1.5 now, where it's fixed.
14  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 16, 2012, 07:25:31 PM
Also, unless I'm missing something, I guess you can make your package almost 50% smaller
by removing the 'node_modules' folder from bitcoinjs. At first sight, your code doesn't appear
to depend on it.

The jake script which builds lib/bitcoinjs/build/bitcoinjs-min.js depends on it, although the extension doesn't use anything it lib/bitcoinjs except that file. I'll remove it when I make the package, but I'll keep it in github, since I want people to be able to see the code they're running.

I've released a fix to the Options page, so that should be all better now.
15  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 15, 2012, 08:14:21 PM
Thanks for the explanation. I agree the one-time seed stretching delay is reasonable (about 45 seconds on this old laptop).

45 seconds! It's only once, but still, that's stretching it... I'll look into speeding up the SHA256 implementation I'm using, but can't promise anything.

The screenshot helped a ton, thanks! It's the window width: Twitter bootstrap (the UI library I'm using) tries to render a different layout below width 980px that I didn't test, and it breaks everything!

Thanks again for all of the feedback!
16  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 15, 2012, 09:59:16 AM
Real nice!!
I like the streamlined foolproof GUI.
Great initial version.
 
2 things I've noticed:

- Options page is blank for me, not sure why... (I only see the "Options" heading and that's it)

- Initial seed stretching is much slower than in Python... I was hoping that Chrome's awesome JS engine would be faster at this, but well.  Or perhaps you're generating more than 5 addresses?

Thanks!

I'm saw the Options page show up blank once as well when testing on my older laptop (with SC2 running in the background for slowness). Not sure what's causing it, but I'll refactor the JS on the Options page to fix it ASAP.

The initial stretching doesn't include generation of the addresses (which is relatively quick). It's applying SHA256 to the seed 100k times to get the master private key (which is used to generate the private keys of addresses). I think this is slower because Python uses SHA256 implemented in a C library, whereas the extension uses a JS implementation. I don't think there's anything I can do to speed it up, since I want to be compatible with the Electrum client, so I tried to make the UI as clear as possible. Since this only needs to be done once when a wallet is set up, I think I'm satisfied with the current implementation.
17  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 15, 2012, 05:40:17 AM
Thanks!

- I like the naming of receive keys. (Wish I could figure out how to retrieve a receive key by name at a later time.)
 - Was not clear if I had to save the initial randomness to restore a wallet or if it can be regenerated from the password.
 - Not clear what server it is using to handle the blockchain.
 - Send is taking a while - I think because I'm playing with tiny amounts of coin. Wish I could add a miner fee to speed things up.

If you right-click on the extension icon and click "Options", it should open up a tab that addresses these. Perhaps I should also add a way of opening the Options page from the popup?

- Was not clear if I had to save the initial randomness to restore a wallet or if it can be regenerated from the password.

The initial randomness (the seed) is crypto-random, and optionally encrypted with AES using a passphrase, so yes, you need both the characters you see and the password (you can see them again in the Seed tab of the Options page).
18  Bitcoin / Wallet software / Re: [BOUNTY] Electrum Firefox Extension on: July 14, 2012, 11:49:09 PM
Hi all,

I've published an initial release of a Chrome Extension to manage a bitcoin wallet in most ways similar to the Electrum client. So far I've been the only one testing it, so I'd appreciate some initial feedback. The extension is available here:

https://chrome.google.com/webstore/detail/hfdeddmpdncodjalbadbanlcombfeoll/

The code is on github here: https://github.com/andreyf/electrum-wallet-chrome-extension. I haven't decided on a license, but it'll probably be GPLv3.

I would appreciate any criticism/feedback you might have. Feel free to reply here or e-mail me at anfedorov@gmail.com.

Cheers,
Andrey
19  Bitcoin / Electrum / Re: Electrum server discussion thread on: June 24, 2012, 04:15:44 AM

I realize it's a bit of a hack, but do you see any practical drawbacks or issues in using tx_id fields for sorting transactions when their timestamp fields are equal? That seems to work well in addressing my UX concerns.

tx_id is not part of the protocol and should not be sent at all by the server.
it is a field that is only returned by abe-based servers, not servers using libbitcoin

D'oh! Story of my life.

It would really help if it were possible to recover those protocol docs (the link you posted on another thread is still down). What is libbitcoin? It seems like it might help to document the different kinds of servers, as well...
20  Bitcoin / Electrum / Re: Electrum server discussion thread on: June 23, 2012, 12:28:03 PM

...

What you are proposing is that Electrum servers store information that is not in the bitcoin blockchain.
There are more obvious uses to it than just sorting transactions. For example servers could store transaction labels.

This is beyond scope, at least for now.
It would involve an extra layer and infrastructure, and it would be a bad idea to mix such requests with the stratum commands.

That makes sense. Thanks for the thorough explanations.

I realize it's a bit of a hack, but do you see any practical drawbacks or issues in using tx_id fields for sorting transactions when their timestamp fields are equal? That seems to work well in addressing my UX concerns.
Pages: [1] 2 3 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!