FaucetBOX.com Discussion

[BigBadBitBaron]

Because faucetbox not yet included login email and bitcoin wallet?

Today just put the bitcoin wallet and request payment.

I block a day over 1000 bitcoin wallets, I'm giving up faucetbox.

Faucetbox has no interest in helping anyone.
Faucetbox only want to profit 2.5%.

We won't require email registration for users, that's our main feature. You can always use a custom script to do that. Blocking wallets is pointless, only blocking whole IP networks can help.

We're working on a new version of NastyHosts, but it will take time. However many faucets have dealt with bots by using custom captchas, requiring email or just banning networks. Dude, if running a faucet would be easy and hassle free, we wouldn't make FaucetBOX public in the first place, we'd just make hunderds of faucets ourselves. You have to work a lot, monitor your faucet, customize it and implement your own security features.

There are no security features that can't be bypassed. The only thing that matter is the cost/benefit ratio of doing that. If we implement something in the main script, bots have enough incentive to work on bypassing it. If you implement something yourself, then no bot will bother to customize it's script just to abuse your faucet. I'm really tired of explaining that over and over again...

why am I getting a warning message that you are moderating this thread, and if I don't like it start my own thread...

is this not an open forum ??

I often delete spam messages here.

Trust me Sir, I am no spammer.  

I have been lucky enough to have only used your service for a few weeks, so my loses have been minimal compared to a lot of people.

Like it or not, you ARE a payment processor, therefore it is your responsibility for faucet owners funds.

can you imagine paypal acting like you are.... hmm

before you excuse yerself... you are both payment processors, both responsible for user funds...

In my opinion you act as a gateway for robbers anonymous, and are quite happy to profit from it...

pleas answer my query from a few posts ago ??

[datalore]

You indicate someone to make custom script?

Here in the forum has someone to make custom script?

[Kazuldur]

Trust me Sir, I am no spammer.  

Yea, don't worry

I have been lucky enough to have only used your service for a few weeks, so my loses have been minimal compared to a lot of people.

Like it or not, you ARE a payment processor, therefore it is your responsibility for faucet owners funds.

can you imagine paypal acting like you are.... hmm

before you excuse yerself... you are both payment processors, both responsible for user funds

We're constantly fighting this. Each release of our script adds something new for bots to work around. For about six months now we're working on a new version of NastyHosts that uses MachineLearning to test users and classify them as bots or not, I hope we'll be able to release it in next month.

As a payment processor we're not responsible for bots. We're responsible for handling the payment requests, which we do. The PayPal analogy doesn't hold here, because they don't protect you from someone abusing your e-commerce store or something. If there's a request to process a payment, they'll do that. What you have on PayPal that you don't have on FaucetBOX.com is chargeback, but that's because cryptocurrencies don't support it.

As a script creators, we're responsible to do whatever we can and we really try to do that. However I think that you should actually talk to CAPTCHA creators. They're the ones that are responsible for catching bots, aren't they? And FunCaptcha is quite good at that from what I heard...

You indicate someone to make custom script?

Here in the forum has someone to make custom script?

It's easy if you know HTML and PHP, you can use our library: https://faucetbox.com/en/php-library
There's elbandi's MiniFaucet: https://bitcointalk.org/index.php?topic=333748.0
And I think that it wouldn't cost more than 0.5 BTC to hire someone to write a custom script for you.

Custom script will always be better that ours. Just as I said, no bot maker will bother to make their bot work with your single faucet, they'll focus on thousands of faucets that use the same script and the same security features.

[BigBadBitBaron]

Don't be mistaken here guys.

Faucetbox charges a 2.5% fee to administer payments thru your faucets.

by taking this fee they owe you a duty of care to ensure that your payments are not going to fraudelent claimants.

As they act as a payment processor, they must act immediately to make sure bot's etc do not get to enter your faucet.

the software for this is not that expensive in comparison to what faucetbox charges for a deposit..

This would be quite different if you had your own scrypted site and relied only on faucetbox to convey your payments.

But as most of us built our faucets via the faucetbox scrypt....  faucetbox are 100% responsible for the security of that scrypt and any captcha service they offer via that scrypt

the same captcha's that they are now blaming on the breach of security


I dont expect an answer to this either...

[Kazuldur]

Don't be mistaken here guys.

Faucetbox charges a 2.5% fee to administer payments thru your faucets.

by taking this fee they owe you a duty of care to ensure that your payments are not going to fraudelent claimants.

As they act as a payment processor, they must act immediately to make sure bot's etc do not get to enter your faucet.

the software for this is not that expensive in comparison to what faucetbox charges for a deposit..

I dont expect an answer to this either...

Please show me this software. We as a FaucetBOX.com would love to buy an affordable solution if one exists. However the only ones we know are MaxMind's minFraud and GetIPIntel and both would cost more in a month than we collected as fees since the launch of our service.

Also stop making this 2.5% fee such a big deal. 1% of that goes to miners as a transaction fees, the remaining 1.5% barely covers infrastructure costs, it's not even enough for a wage for one developer.

[BigBadBitBaron]

please answer the edited question..

2.5% paid 4 times is 10% in anyones language...

due to your lack of security...

don't forget...

it's not our sites their compromising...

its you're feckin scrypt !!!!!

the scrypt you charge us 2.5% deposit fee for ..!!!!

[vodaljepa]

The faucetbox script is infested with bots, as soon as one faucet goes online using the script bots automatically connect to it, faucetbox fix your shit or you will not have many faucet owners using your service

[Kazuldur]

2.5% paid 4 times is 10% in anyones language...

No it's not and I don't even know how to start explaining such a basic thing...

However, that's our official position. We do everything we can to fix the bot problem, but currently bots are smarter and we have no solution. We do plan to release a new version of NastyHosts somewhere in July that we hope will help.

If you're not satisfied, you can Withdraw your remaining funds in the Balance tab in your FaucetBOX.com Dashboard.

I'll not reply further as your posts use too much offensive language and add no value to the discussion.

[BigBadBitBaron]

2.5% paid 4 times is 10% in anyones language...

No it's not and I don't even know how to start explaining such a basic thing...

However, that's our official position. We do everything we can to fix the bot problem, but currently bots are smarter and we have no solution. We do plan to release a new version of NastyHosts somewhere in July that we hope will help.

If you're not satisfied, you can Withdraw your remaining funds in the Balance tab in your FaucetBOX.com Dashboard.

I'll not reply further as your posts use too much offensive language and add no value to the discussion.

Sir,
I have not used any offensive language, other than to accuse you lot of being less than obliging with the truth...

I have sent you a PM, as I didn't wanted to make all your problems public.

But I'm quite happy to share the message here if you remain condescending

BTw 2.5 + 2.5 + 2.5 + 2.5 = 10

[minifrij]

snip

Would just like to start by saying that I am in no way related to FaucetBox, just in case you decide to use what I say to you against them. I'm just talking as someone who has been here for a while and understands how this works a lot more than you seem to.

Faucetbox charges a 2.5% fee to administer payments thru your faucets.

Correct. This fee can be reduced, though something will have to change. Would you prefer:

• FaucetBox to shut down as it cannot afford to pay it's infrastructure,

OR

• Transactions to faucet users take days to confirm (or may never) as fees are not paid.

by taking this fee they owe you a duty of care to ensure that your payments are not going to fraudelent claimants.

If you can find a way to do this using only a Bitcoin address, I'm sure that FaucetBox will be happy to implement it. Otherwise, it is not their responsibility.

As they act as a payment processor, they must act immediately to make sure bot's etc do not get to enter your faucet.

FaucetBox has no reason to look after your site for you. It is your responsibility to look after your website.
If you added a way to withdraw from your website using PayPal, do you think they would help you stop bots visiting your site? Absolutely not. This is no different.

the software for this is not that expensive in comparison to what faucetbox charges for a deposit..

You do not have any idea what you're talking about, though that wasn't hard to pick up on based on the rest of your posts. If you can find such software for a low price, use it.

But as most of us built our faucets via the faucetbox scrypt....  faucetbox are 100% responsible for the security of that scrypt[1] and any captcha service[2] they offer via that scrypt

1. Yes, if there were any security exploits in the FaucetBox script then they are responsible for fixing them. However, the bot problem is because a bot looks no different from a human. A user comes from a valid browser, checks the captcha and gets a withdrawal to their address. How do you prove that this user is not a bot?
2. Are you stupid? Why is FaucetBox responsible whatsoever for external services that they use in their script? Is FaucetBox responsible for the Bitcoin, Litecoin, Dogecoin networks too? (Hint: Of course not).

the same captcha's that they are now blaming on the breach of security

Learn how the bots complete captchas and you will see that the captcha is the reason for the bot attacks. Of course, you once again have no idea what you're talking about and want to blame a scapegoat (that being FaucetBox).

it's not our sites their compromising...
its you're feckin scrypt !!!!!

No, it is your site. As far as I'm concerned, FaucetBox has given you more than enough to get started on running a faucet. Expecting them to do everything for you and crying like a child when they don't is stupid.

the scrypt you charge us 2.5% deposit fee for ..!!!!

The fee is for the Bitcoin network and the site's (not faucet script's, though I expect that comes into it somewhat) running costs. This was explained to you clearly here:

1% of that goes to miners as a transaction fees, the remaining 1.5% barely covers infrastructure costs, it's not even enough for a wage for one developer.

I have sent you a PM, as I didn't wanted to make all your problems public.
But I'm quite happy to share the message here if you remain condescending

Threatening people because you can't get your own way, what a clever and mature way to handle things. Child.

The faucetbox script is infested with bots, as soon as one faucet goes online using the script bots automatically connect to it, faucetbox fix your shit or you will not have many faucet owners using your service

As explained above, this is not their problem. The faucet is infested with bots as the script is exactly the same as every other, making it easy for bots to attack multiple sites at the same time. This is the inherent flaw with faucet scripts.
If you want to reduce bots without putting any sort of measures into place, make your faucet layout/function unique. Chances are (unless your rewards are amazingly good) bot creators won't bother to create/fix a bot just for your website.

[Holdaaja]

2.5% paid 4 times is 10% in anyones language...

No it's not and I don't even know how to start explaining such a basic thing...

However, that's our official position. We do everything we can to fix the bot problem, but currently bots are smarter and we have no solution. We do plan to release a new version of NastyHosts somewhere in July that we hope will help.

If you're not satisfied, you can Withdraw your remaining funds in the Balance tab in your FaucetBOX.com Dashboard.

I'll not reply further as your posts use too much offensive language and add no value to the discussion.

Sir,
I have not used any offensive language, other than to accuse you lot of being less than obliging with the truth...

I have sent you a PM, as I didn't wanted to make all your problems public.

But I'm quite happy to share the message here if you remain condescending

BTw 2.5 + 2.5 + 2.5 + 2.5 = 10

4 times 2.5% fee is not same as 10% fee, it is still 2.5% fee.
If you deposit 4 times 100$ the fee is same as if you would deposit 400$ once.

100$ - 2.5% + (100$ - 2.5%) + (100$ - 2.5%) + (100$ - 2.5%) = 390$
400$ - 2.5% = 390$
400$ - 10% = 360$

[Kazuldur]

NastyHosts.com now returns AS numbers if it could find it: http://v1.nastyhosts.com/52.30.0.1

{"status":200,"asn":{"asn":"16509","name":"Amazon.com, Inc."},"hostnames":["ec2-52-30-0-1.eu-west-1.compute.amazonaws.com"],"suggestion":"deny"}

You can customize your script to use that for blocking bots. Next version of Faucet in a BOX will probably also use this.

[Bytecoiner419]

NastyHosts.com now returns AS numbers if it could find it: http://v1.nastyhosts.com/52.30.0.1

{"status":200,"asn":{"asn":"16509","name":"Amazon.com, Inc."},"hostnames":["ec2-52-30-0-1.eu-west-1.compute.amazonaws.com"],"suggestion":"deny"}

You can customize your script to use that for blocking bots. Next version of Faucet in a BOX will probably also use this.

nice work admin

Also can you maybe add an option to block countries in the security section of the faucet admin panel?

Like let us choose countries that we want to block and it blocks all IP's from that country.

[zenitzz]

You indicate someone to make custom script?

Here in the forum has someone to make custom script?

Hey dude, you can make custom script? let me know what the price you offer for request 1 custom script.

[nipol]

In my FaucetBox account I set security limits - Access Control List.
All was fine some month till today.
Now I see in account ("Hosts that used your API key"):

#   IP address   Recently requested method   Response code (last request)   Last access
1.   172.68.11.134   /api/v1/send   401 - Disallowed IP   2016-06-14 16:27:21 MSK

This log renew every second.
It's not my allowed IP.
So my users can't withdraw the money.


Also the strange situation when I try to see LOGIN HISTORY:
Last entrances are mine, but not my IP (IP' shown: 172.68.10.122, 172.68.10.120).


I changed:
password and API key, but situation is the same.


What to do?
Thank you!

[Kazuldur]

In my FaucetBox account I set security limits - Access Control List.
All was fine some month till today.
Now I see in account ("Hosts that used your API key"):

#   IP address   Recently requested method   Response code (last request)   Last access
1.   172.68.11.134   /api/v1/send   401 - Disallowed IP   2016-06-14 16:27:21 MSK

This log renew every second.
It's not my allowed IP.
So my users can't withdraw the money.


Also the strange situation when I try to see LOGIN HISTORY:
Last entrances are mine, but not my IP (IP' shown: 172.68.10.122, 172.68.10.120).


I changed:
password and API key, but situation is the same.


What to do?
Thank you!

These are CloudFlare's IP addresses (FaucetBOX.com uses CloudFlare), so it's a bug on our end. I'm working on it already, sorry.

Your account is safe.

EDIT: It should show correct IP addresses now.

[misterbit]

Kazuldur, cloudflare.txt and incapsula.txt they have ip ranges, I can put other ranges of ips there?
In the case of what if it can, those blocked ips can send them to a for example lock.php?

Thanks a lot

[Kazuldur]

Kazuldur, cloudflare.txt and incapsula.txt they have ip ranges, I can put other ranges of ips there?

No, these are not IPs to be blocked. You can only put CloudFlare's and Incapsula's IP addresses there (and make sure you put them in correct file). The script uses these ranges to check the legitimacy of headers containing real user's IP address when you're using CloudFlare or Incapsula. You're putting yourself at a security risk if you put other IPs there.

In the case of what if it can, those blocked ips can send them to a for example lock.php?

Thanks a lot

You can put IPs to be block in your faucet's admin panel. If you want to change what happens on block, you'll have to edit the "banned" function in main index.php file (it's line 1506 in r63)

[misterbit]

OK, I thought it was to block servers with cloudflare etc.
It is something that he is needed as well to block ranges of Ips and not to overload the .htaccess

[datalore]

Faucetbox is abandoned.
The bots dominate faucetbox