molecular:
can the Trezor ppl see our balances and tx's while the Trezor is logged into myTrezor.com?
yes, unfortunately. At least they're not using your xpub key to transfer addresses to watch, so they don't know your future keys (except the 5 or so per account they scan ahead). That's my biggest criticism with myTrezor and it's why I switched to electrum as soon as the development code had trezor working. It's not perfect with electrum, either, but better (I don't know exactly what, but they do some stuff to increase privacy towards server operators). I went to the hassle of running my own electrum server (public, of course, so I can hide in the masses when broadcasting transactions). Feel free to use it (electrum.0x0000.de), I'm not logging anything or looking at the traffic in any way. How could they overlook such an obvious privacy violation when designing the wallet? It should be a local client that broadcasts tx's out to the network. The broadcast isn't the only privacy problem inherent to the client/server thin wallet design, watching for incoming money another one. They didn't overlook it, they accepted it for lack of a good solution. I have no problem with running a full node with s local client to maintain privac. That should've been an option. |
|
|
|
molecular:
can the Trezor ppl see our balances and tx's while the Trezor is logged into myTrezor.com?
yes, unfortunately. At least they're not using your xpub key to transfer addresses to watch, so they don't know your future keys (except the 5 or so per account they scan ahead). That's my biggest criticism with myTrezor and it's why I switched to electrum as soon as the development code had trezor working. It's not perfect with electrum, either, but better (I don't know exactly what, but they do some stuff to increase privacy towards server operators). I went to the hassle of running my own electrum server (public, of course, so I can hide in the masses when broadcasting transactions). Feel free to use it (electrum.0x0000.de), I'm not logging anything or looking at the traffic in any way. How could they overlook such an obvious privacy violation when designing the wallet? It should be a local client that broadcasts tx's out to the network. |
|
|
|
Awesom, awesome, awesome;  |
|
|
|
Gold Collapsing. Bitcoin bottoming.
this time gold got a punch again. If that is BTC-positive, that is another question. I think we're getting our answer; UP. |
|
|
|
|
with all this unbelievable invasion of privacy and outright disregard for constitutional rights, one HAS to believe there is a future for Bitcoin.
|
|
|
|
crimony. what a nightmare: The U.S. and British intelligence agencies pulled off the encryption key heist in great stealth, giving them the ability to intercept and decrypt communications without alerting the wireless network provider, the foreign government or the individual user that they have been targeted. “Gaining access to a database of keys is pretty much game over for cellular encryption,” says Matthew Green, a cryptography specialist at the Johns Hopkins Information Security Institute. The massive key theft is “bad news for phone security. Really bad news.”https://firstlook.org/theintercept/2015/02/19/great-sim-heist/ |
|
|
|
somehow we have to pin this on Bitcoin: If past HSBC transgressions are any indication, the amount of corrupted cash flowing through U.S. financial institutions could be absolutely startling. The aforementioned 2013 Senate report noted that HSBC allowed over $200 trillion in wire transfers to enter the U.S. unmonitored over a three-year period, including $670 billion in wire transfers from Mexico and at least $881 million in laundered money from Mexican and Columbian drug traffickers. In December 2012, HSBC agreed to pay a $1.92 billion settlement to federal and state authorities for failing to maintain an adequate AML program.http://www.americanbanker.com/bankthink/beneficial-ownership-rules-would-drag-criminals-into-daylight-1072763-1.html#comments... this is the kind of money that will inevitably start coursing through bitcoins veins in the not too distant future. that's a great image. |
|
|
|
molecular:
can the Trezor ppl see our balances and tx's while the Trezor is logged into myTrezor.com?
yes, unfortunately. At least they're not using your xpub key to transfer addresses to watch, so they don't know your future keys (except the 5 or so per account they scan ahead). you mean xpub key as it applies to an HD wallet (master public key)? what do you mean "except the 5 or so per account they scan ahead"?
That's my biggest criticism with myTrezor and it's why I switched to electrum as soon as the development code had trezor working. It's not perfect with electrum, either, but better (I don't know exactly what, but they do some stuff to increase privacy towards server operators).
why would electrum be better in terms of privacy?
I went to the hassle of running my own electrum server (public, of course, so I can hide in the masses when broadcasting transactions). Feel free to use it (electrum.0x0000.de), I'm not logging anything or looking at the traffic in any way.
how does one use electrum with the Trezor? |
|
|
|
|
molecular:
can the Trezor ppl see our balances and tx's while the Trezor is logged into myTrezor.com?
|
|
|
|
somehow we have to pin this on Bitcoin: If past HSBC transgressions are any indication, the amount of corrupted cash flowing through U.S. financial institutions could be absolutely startling. The aforementioned 2013 Senate report noted that HSBC allowed over $200 trillion in wire transfers to enter the U.S. unmonitored over a three-year period, including $670 billion in wire transfers from Mexico and at least $881 million in laundered money from Mexican and Columbian drug traffickers. In December 2012, HSBC agreed to pay a $1.92 billion settlement to federal and state authorities for failing to maintain an adequate AML program.http://www.americanbanker.com/bankthink/beneficial-ownership-rules-would-drag-criminals-into-daylight-1072763-1.html#comments |
|
|
|
you don't know it was FAKE FIAT.
gox could've been buying on behalf of a large whale. plus, volumes on Chinese exchanges were large at the time.
Yeah, buying when trading was closed, great way to give the whales a good price.  Between your hypothesis and Karpeles trying to make a quick buck even while he ruined Bitcoin for years, my gut makes a clear choice. that's not my hypothesis. it's just a possibility i'm pointing out to counterbalance what NHJT said. no doubt shady shit was going on, which is precisely why i tell ppl it would've been almost impossible to cash out at the top unless you had insider connections since getting fiat out of gox was next to impossible at the time and for sure extremely risky. when i queried MK on IRC at the time when we touched gold @1200 about his ability to wire USD as there were delays, he tried to lure me into sending BTC for this purpose by telling me he might do me a special favor. i lol'd and never did as that was a huge red flag and something to be avoided given all the delays everyone else was having. |
|
|
|
Interesting: "Another interesting fact that caught Wizsec’s eyes was the Willy’s static nature during the Japanese sleeping hours. The Mt. Gox bot was supposed to be automatic, but as it turns out there was hardly any trading activity. This speculation multiplied the belief that the bot was actually being controlled manually — probably by Mark Karpeles." I follow this guy on twitter and I admire him, but the article doesn't make much sense: "For a pump and dump, there has to be a quick pump (buy action) to generate mass momentum, followed by a dump.
In this case, there was no quick pump; the buy orders were deliberately smeared across a very long time period. And there was no dump until the very end stage.
It's as simple as that. No fast pump, no dump, therefore not a pump and dump."^^^What? This is false. A pump&dump doesn't have to be executed quickly to be a pump&dump, unless we are talking half a year to a year. The $1200 pump lasted two to three months. 2-3 months is a small time frame for a pump of that magnitude. Large buys like those WILL have a BIG impact on the price, whether made in smaller chunks or not (impossible to buy that quantity of coins in a few market buys, literally impossible). Also, is the author completely ignoring the fact that one of the mtgox bots (markus I believe) was buying with FAKE FIAT (amounts of money mtgox didn't actually have)? He didn't mention that. Markus bought a gigantic quantity of BTC basically for free and Emin argues that that doesn't indicate any fraudulent activity? you don't know it was FAKE FIAT. gox could've been buying on behalf of a large whale. plus, volumes on Chinese exchanges were large at the time. What about all the bots shorting the market now with FAKE BITCOIN. I don't really believe in market manipulation on a wide scale, especially since we have a publicly verifiable blockchain, but it could be happening. yes, it could be. i'm suspicious of BitFinex. an audit of them would be worthwhile. i'd love for naked shorts to be caught with their pants down, if it is occurring, and watch them scramble for a bailout in fiat. |
|
|
|
Interesting: "Another interesting fact that caught Wizsec’s eyes was the Willy’s static nature during the Japanese sleeping hours. The Mt. Gox bot was supposed to be automatic, but as it turns out there was hardly any trading activity. This speculation multiplied the belief that the bot was actually being controlled manually — probably by Mark Karpeles."I follow this guy on twitter and I admire him, but the article doesn't make much sense: "For a pump and dump, there has to be a quick pump (buy action) to generate mass momentum, followed by a dump.
In this case, there was no quick pump; the buy orders were deliberately smeared across a very long time period. And there was no dump until the very end stage.
It's as simple as that. No fast pump, no dump, therefore not a pump and dump."^^^What? This is false. A pump&dump doesn't have to be executed quickly to be a pump&dump, unless we are talking half a year to a year. The $1200 pump lasted two to three months. 2-3 months is a small time frame for a pump of that magnitude. Large buys like those WILL have a BIG impact on the price, whether made in smaller chunks or not (impossible to buy that quantity of coins in a few market buys, literally impossible). Also, is the author completely ignoring the fact that one of the mtgox bots (markus I believe) was buying with FAKE FIAT (amounts of money mtgox didn't actually have)? He didn't mention that. Markus bought a gigantic quantity of BTC basically for free and Emin argues that that doesn't indicate any fraudulent activity? you don't know it was FAKE FIAT. gox could've been buying on behalf of a large whale. plus, volumes on Chinese exchanges were large at the time. |
|
|
|
Interesting: "Another interesting fact that caught Wizsec’s eyes was the Willy’s static nature during the Japanese sleeping hours. The Mt. Gox bot was supposed to be automatic, but as it turns out there was hardly any trading activity. This speculation multiplied the belief that the bot was actually being controlled manually — probably by Mark Karpeles." |
|
|
|
Significant short term reversal in gold fortunes overnight:  |
|
|
|
Finally capitulated and got a Trezor. Very cool.
I think they are cool. It's just like a locked down tiny computer whose sole purpose is to keep private keys safe and sign things. The same technology that makes bitcoin security easy can be used for everything else where a private key needs to be kept secret. BitID, Password Manager app, pgp, encryption, and others. Perhaps the first "personal crypto-computer"? By having it's own secure display and a pin that can't be stolen by spyware, and with locked down firmware, you can be certain what message you are signing. I can't wait to sign into a website with no password and be impossible for anyone to impersonate me! And the bonus is that websites who use key auth means there is no password to steal. All they get is the ID/public key. I'm sure you're following Steve Gibson's SQRL project. There's also a Bitcoin variant of this also. |
|
|
|
|
Finally capitulated and got a Trezor. Very cool.
|
|
|
|
that is cool.
reminds me of back when i was solo mining with Stratum. you really get the feel of the power of the network watching hash guesses scrolling rapidly up your monitor in realtime.
Yes, that was definitely a fun part of mining, just sitting there and watching the hashes tick by and then realizing that there were many thousands of other miners doing the exact same thing. Bitcoin is easily the largest computer by far, the fact it is a distributed computer is amazing. since slush was the guy who wrote Stratum, i assume it was he who was responsible for the hidden humor embedded in hashes with >100,000 difficulty --> "Yay!" |
|
|
|
Slightly OT, but I really like Coinbase's feed to track their exchange's order book in real time. I used to have a MtGox tracker, but Coinbase's is _much_ more functional. If you are interested in seeing the feed work in real time, do the following. In Chrome go to: https://exchange.coinbase.com/tradeNext click the bars in the upper right hand corner of Chrome. Select "More Tools" then "Developer Tools". Next select the "Network" tab in the tools window. Then hit F5 to refresh the full page. A long list of network interfaces will appear, click on the one that starts with "ws-feed." After clicking "ws-feed." a new windows will appear. Click on the "Frames" tab. You might want to expand the window a bit to see more by dragging the left side of the developer tools window over a bit. What you will now see is the real time feed of order flow, showing new orders to the book, trade matches, order cancellation, order changes, etc. The webpage will track these changes and visually display the real time book in the left side of the page. Documentation on the feed is here: https://docs.exchange.coinbase.com/#websocket-feedIt's pretty fun to watch, well at least for me... that is cool. reminds me of back when i was solo mining with Stratum. you really get the feel of the power of the network watching hash guesses scrolling rapidly up your monitor in realtime. |
|
|
|
|
Show Posts
