Bitcoin Forum
December 16, 2017, 01:44:19 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: [SUGGESTION] To The Signature Campaign Managers - Payout Address Changes  (Read 353 times)
cakir
Legendary
*
Offline Offline

Activity: 1274


★ BitClave ICO: 15/09/17 ★


View Profile WWW
April 06, 2015, 11:13:44 PM
 #1

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.


                  ,'#██+:                 
              ,█████████████'             
            +██████████████████           
          ;██████████████████████         
         ███████:         .███████`       
        ██████               ;█████'      
      `█████                   #████#     
      ████+                     `████+    
     ████:                        ████,   
    ████:    .#              █     ████   
   ;███+     ██             ███     ████  
   ████     ███'            ███.    '███, 
  +███     #████           ,████     ████ 
  ████     █████ .+██████: █████+    `███.
 ,███     ███████████████████████     ████
 ████     ███████████████████████'    :███
 ███:    +████████████████████████     ███`
 ███     █████████████████████████`    ███+
,███     ██████████████████████████    #███
'███    '██████████████████████████    ;███
#███    ███████████████████████████    ,███
████    ███████████████████████████.   .███
████    ███████████████████████████'   .███
+███    ███████████████████████████+   :███
:███    ███████████████████████████'   +███
 ███    ███████████████████████████.   ███#
 ███.   #██████████████████████████    ███,
 ████    █████████████████████████+   `███
 '███    '████████████████████████    ████
  ███;    ███████████████████████     ███;
  ████     #████████████████████     ████ 
   ███#     .██████████████████     `███+ 
   ████`      ;██████████████       ████  
    ████         '███████#.        ████.  
    .████                         █████   
     '████                       █████    
      #████'                    █████     
       +█████`                ██████      
        ,██████:           `███████       
          ████████#;,..:+████████.        
           ,███████████████████+          
             .███████████████;            
                `+███████#,               
1513431859
Hero Member
*
Offline Offline

Posts: 1513431859

View Profile Personal Message (Offline)

Ignore
1513431859
Reply with quote  #2

1513431859
Report to moderator
1513431859
Hero Member
*
Offline Offline

Posts: 1513431859

View Profile Personal Message (Offline)

Ignore
1513431859
Reply with quote  #2

1513431859
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Quickseller
Copper Member
Legendary
*
Offline Offline

Activity: 1260

#PathOfTotality


View Profile WWW
April 07, 2015, 01:50:13 AM
 #2

This is how evil panda handled address changes. It also keeps the campaign manager accountable as they have documentation as to why they sent payment to specific addresses. People should be able to freely change their payment addresses at the start of a payment period though

dznuts85
Full Member
***
Offline Offline

Activity: 140

★777Coin.com★ Fun BTC Casino!


View Profile
April 07, 2015, 10:10:07 AM
 #3

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.

I think this is already in cycle and most of the campaigns doesnt accept changes of payment address until the payment is made for the current week or month

TheGame
Member
**
Offline Offline

Activity: 66

You just lost


View Profile
April 07, 2015, 12:36:53 PM
 #4

I guess you can't really force people to do this but it's definitely a good idea. I've seen several campaigns require some proof from an old address but also a few that don't care but I guess it's just up to each campaign manager individually whether they do or not.
redsn0w
Legendary
*
Offline Offline

Activity: 1288


# Free market


View Profile
April 07, 2015, 12:40:38 PM
 #5

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.


If I can say my opinion: I support your idea and this is a normal use of bitcoin (signed message) so why shouldn't we use it? However to control if someone has change password (through email or directly) check here https://bitcointalk.org/seclog.php and it will be more souspicious if he change the payout address after that the password was changed.
robbo389
Jr. Member
*
Offline Offline

Activity: 56


View Profile
April 07, 2015, 06:07:35 PM
 #6

Some campaigns ask you to put your address in your profile page and don't pay if you change or remove it. A hacker controlling someone's account could not divert those funds to himself.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!