|
1041
|
Bitcoin / Bitcoin Discussion / Re: Bitcoinica MtGox account compromised
|
on: July 25, 2012, 12:43:26 PM
|
There's no good reason to keep a high % of your BTC in exchanges anyway. I used to have some BTC in exchanges to make payments directly in a convenient manner, but currently I have 0 BTC and 0 FIAT in exchanges. I strongly recommend this approach to everybody, it saved my backside from Bitcoinica's fiasco and from the potential bankruptcy of a certain exchange. It just sucks that the Bitcoin world is so screwed up you basically have to stuff your money in your mattress. This is one of the major obstacles to adoption. I agree with this. Plus Bitcoinica+SR is a one,two punch for any serious detractor (law makers). |
|
|
|
|
1043
|
Economy / Service Announcements / Re: Get PAID to buy bitcoins with cash (USA)
|
on: July 25, 2012, 01:12:09 AM
|
I'm not sure why more people in the US don't use this, it seems like a no-brainer to me!
... Am I missing something here?
There is no Chase within 50 miles of my house. Yep, adding Bank of America might help a lot of people. This. The closest Chase branch to me is 99.95 miles away. Same here. If they added a US Bank I would probably use bit floor exclusively as there is a branch within walking distance. |
|
|
|
|
1044
|
Bitcoin / Bitcoin Discussion / Re: Bitcoinica MtGox account compromised
|
on: July 25, 2012, 01:03:09 AM
|
Until a hacker or LastPass employee changes the codebase and allows a backdoor that grants them access to everyone's unencrypted information as each user logs in.
This would be very hard for this to happen as your password never gets sent to LastPass, all the encryption happens on your computer. I'm not sure I follow this, the master password or at least it's hash must be sent to LP in order to log in. If, when you log into the website using your master password the webpage hashes the password and then sends the password to the server for verification that still leaves the website as an attack vector where the login could be sent plaintext to the attackers website before being hashed and sent normally. Even if it's hashed normally, the attacker could just intercept the hash and then continue to use the same hash when accessing the site. Am I missing something on the way LastPass works? When you use the client I belive it downloads a nonce as part of the authentication rendering a replay attack improbable. LastPass was not the weakness here. The interesting point, which I have not seen anyone point out, would be: Why on earth would anyone in their right mind select a UUID for a master password? There are only two possibilities I can come up with: 1. They all knew it was the Mt.Gox key so they could copy/psate it anytime they needed. 2. They had the 'remember password' option selected in LP. Why anyone that knows *anything* about security would think that either of those options was good is byond me. They would have been worlds better by selecting a known phrase such as "We all live in a yellow submarine" easily remembered and told over the phone, etc. |
|
|
|
|
1045
|
Bitcoin / Bitcoin Discussion / Re: Bitcoinica MtGox account compromised
|
on: July 25, 2012, 12:58:53 AM
|
Of course if the only place your passwords are recorded is on LastPass and LastPass itself suffers a catastrophic failure then things become interesting.
One problem is that it's often ridiculously easy to get new online credentials issued compared to how difficult it is to get new real world ID issued. We need to stop believing that's a good thing.
LastPass offers offline recovery tools you can use in that event, but you still need your password. |
|
|
|
|
1046
|
Bitcoin / Bitcoin Discussion / Re: Bitcoinica MtGox account compromised
|
on: July 24, 2012, 08:21:07 PM
|
Until a hacker or LastPass employee changes the codebase and allows a backdoor that grants them access to everyone's unencrypted information as each user logs in.
This would be very hard for this to happen as your password never gets sent to LastPass, all the encryption happens on your computer. |
|
|
|
|
1047
|
Economy / Trading Discussion / Re: Real Time Charting, Order Book, and Time & Sales
|
on: July 24, 2012, 02:19:48 PM
|
1) It would be nice to be able see if a trade was a buy or a sell. and you could have an option to play sounds according to if it was a buy/sell or if it was an up/down tick.
The problem you are getting into there, from a developer/operator POV, is that it gets really complicated in a hurry with settings to please everyone (buy/sell or up/down are mutually exclusive so you need options for one or the other). 2) Add a fullscreen mode option. I know f11 does the same thing, but in F11 mode you still have the scroll bars on the side and bottom if you're zoomed in.
I would also like this, or more accurately: scaling of the chart to the viewport size. Having this on my 51" TV would be, wait for it: AWESOME! |
|
|
|
|
1049
|
Economy / Trading Discussion / Re: Real Time Charting, Order Book, and Time & Sales
|
on: July 23, 2012, 10:02:18 PM
|
as for the sounds. its best if they are inconsistent so you can hear every time the sound restarts. like if you have 10 trades in 1 second and the sound is 1 second long then you want it to play 10 times in a second and know when its resetting from the beginning.
Technically it should be possible to detect this and even play another sound (high volume trade?). The problem is you would need a trigger, and the first trades before the trigger would still play the other sound. Then some decay period. |
|
|
|
|
1051
|
Economy / Trading Discussion / Re: Real Time Charting, Order Book, and Time & Sales
|
on: July 23, 2012, 09:37:12 PM
|
I'll pay you 10btc
Now that's the way to get a feature request to the front of the queue.  So a total of 5 sound events: up tick, even, down tick (with volume filter), disconnect, reconnect. Clark.... I already have this implemented as a GreaseMonkey plugin if that helps at all. |
|
|
|
|
1052
|
Economy / Web Wallets / Re: Blockchain.info - Bitcoin Block explorer & Currency Statistics
|
on: July 23, 2012, 06:36:25 PM
|
I have noticed that my status is constantly disconnected in Firefox. Anyone else see this behavior?
+1, and hitting the refresh button forces me to log in again, including the OTP and all that. That is to be expected; there is however a sync button at the top right corner (looks like a little circle) that will sync the data... it just isn't realtime. EDIT: Just fired up firebug and there is a security exception happening that I wonder if it is related:  |
|
|
|
|
1055
|
Economy / Long-term offers / Re: [BitcoinMax.com] Paying 6.9% per week... Small accounts welcome.
|
on: July 23, 2012, 05:02:17 PM
|
i'm not sure if anyone will need to know this, but just as a 'heads up' the next payment run will be done with a new automated script.
i won't personally be able to be on the net at 21:00*, but all things going well, a magical soup of cron+php+curl+json+rpc will take care of things.
i'm 99% confident this will run correctly, but i guess i'm letting you guys know not to panic if you can't get hold of me at 21:00... i should be available around 'midnight' to sort out any issues.
*all times are UTC
This isn't a cron job on the server is it? i.e. the wallet/bitcoind isn't on the actual bitcoinmax server, but a private server/desktop, correct? cron is local, bitcoin is local. server is just for transaction records. +1, thanks payb.tc ! Enjoy your trip. |
|
|
|
|
1056
|
Economy / Long-term offers / Re: [BitcoinMax.com] Paying 6.9% per week... Small accounts welcome.
|
on: July 23, 2012, 01:36:47 PM
|
i'm not sure if anyone will need to know this, but just as a 'heads up' the next payment run will be done with a new automated script.
i won't personally be able to be on the net at 21:00*, but all things going well, a magical soup of cron+php+curl+json+rpc will take care of things.
i'm 99% confident this will run correctly, but i guess i'm letting you guys know not to panic if you can't get hold of me at 21:00... i should be available around 'midnight' to sort out any issues.
*all times are UTC
This isn't a cron job on the server is it? i.e. the wallet/bitcoind isn't on the actual bitcoinmax server, but a private server/desktop, correct? |
|
|
|
|
Show Posts
Anyone else have this problem?
