Bitcoin Forum
July 23, 2018, 06:53:36 AM *
News: Latest stable version of Bitcoin Core: 0.16.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: [SUGGESTION] To The Signature Campaign Managers - Payout Address Changes  (Read 354 times)
cakir
Legendary
*
Offline Offline

Activity: 1274
Merit: 1000


★ BitClave ICO: 15/09/17 ★


View Profile WWW
April 06, 2015, 11:13:44 PM
 #1

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.


                  ,'#██+:                 
              ,█████████████'             
            +██████████████████           
          ;██████████████████████         
         ███████:         .███████`       
        ██████               ;█████'      
      `█████                   #████#     
      ████+                     `████+    
     ████:                        ████,   
    ████:    .#              █     ████   
   ;███+     ██             ███     ████  
   ████     ███'            ███.    '███, 
  +███     #████           ,████     ████ 
  ████     █████ .+██████: █████+    `███.
 ,███     ███████████████████████     ████
 ████     ███████████████████████'    :███
 ███:    +████████████████████████     ███`
 ███     █████████████████████████`    ███+
,███     ██████████████████████████    #███
'███    '██████████████████████████    ;███
#███    ███████████████████████████    ,███
████    ███████████████████████████.   .███
████    ███████████████████████████'   .███
+███    ███████████████████████████+   :███
:███    ███████████████████████████'   +███
 ███    ███████████████████████████.   ███#
 ███.   #██████████████████████████    ███,
 ████    █████████████████████████+   `███
 '███    '████████████████████████    ████
  ███;    ███████████████████████     ███;
  ████     #████████████████████     ████ 
   ███#     .██████████████████     `███+ 
   ████`      ;██████████████       ████  
    ████         '███████#.        ████.  
    .████                         █████   
     '████                       █████    
      #████'                    █████     
       +█████`                ██████      
        ,██████:           `███████       
          ████████#;,..:+████████.        
           ,███████████████████+          
             .███████████████;            
                `+███████#,               
1532328816
Hero Member
*
Offline Offline

Posts: 1532328816

View Profile Personal Message (Offline)

Ignore
1532328816
Reply with quote  #2

1532328816
Report to moderator
1532328816
Hero Member
*
Offline Offline

Posts: 1532328816

View Profile Personal Message (Offline)

Ignore
1532328816
Reply with quote  #2

1532328816
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1532328816
Hero Member
*
Offline Offline

Posts: 1532328816

View Profile Personal Message (Offline)

Ignore
1532328816
Reply with quote  #2

1532328816
Report to moderator
1532328816
Hero Member
*
Offline Offline

Posts: 1532328816

View Profile Personal Message (Offline)

Ignore
1532328816
Reply with quote  #2

1532328816
Report to moderator
1532328816
Hero Member
*
Offline Offline

Posts: 1532328816

View Profile Personal Message (Offline)

Ignore
1532328816
Reply with quote  #2

1532328816
Report to moderator
Quickseller
Copper Member
Legendary
*
Offline Offline

Activity: 1484
Merit: 1115


Hire BOUNTYPORTALS>Bounty management goo.gl/pSzJuA


View Profile WWW
April 07, 2015, 01:50:13 AM
 #2

This is how evil panda handled address changes. It also keeps the campaign manager accountable as they have documentation as to why they sent payment to specific addresses. People should be able to freely change their payment addresses at the start of a payment period though

3PjXm2XYDKLV5mN3oiKzNTyVvSkqP3ujeq <-- tipping address Advertise here
dznuts85
Full Member
***
Offline Offline

Activity: 140
Merit: 100

★777Coin.com★ Fun BTC Casino!


View Profile
April 07, 2015, 10:10:07 AM
 #3

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.

I think this is already in cycle and most of the campaigns doesnt accept changes of payment address until the payment is made for the current week or month

TheGame
Member
**
Offline Offline

Activity: 66
Merit: 10

You just lost


View Profile
April 07, 2015, 12:36:53 PM
 #4

I guess you can't really force people to do this but it's definitely a good idea. I've seen several campaigns require some proof from an old address but also a few that don't care but I guess it's just up to each campaign manager individually whether they do or not.
redsn0w
Legendary
*
Offline Offline

Activity: 1498
Merit: 1019


#Free market


View Profile
April 07, 2015, 12:40:38 PM
 #5

If a user wants to change payout address on a campaign you should ask for a signed message with old address.
That prevents users funds from hacking. Let's say X hacked some hero member's account on a signature campaing who earned 0.15 BTC in a week, and X comes to thread and says "hey please change my address to that one". If the campaign manager don't ask for signed message that Hero member will loose that money.

I'm asking to the campaing managers to consider that condition.

Ps: I've posted this suggestion on the Dadice campaign, posting here for more publicity.


If I can say my opinion: I support your idea and this is a normal use of bitcoin (signed message) so why shouldn't we use it? However to control if someone has change password (through email or directly) check here https://bitcointalk.org/seclog.php and it will be more souspicious if he change the payout address after that the password was changed.
robbo389
Jr. Member
*
Offline Offline

Activity: 56
Merit: 0


View Profile
April 07, 2015, 06:07:35 PM
 #6

Some campaigns ask you to put your address in your profile page and don't pay if you change or remove it. A hacker controlling someone's account could not divert those funds to himself.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!