[CLOSED] CoinLenders

[Kouye]

How stupid can one be to not read the difference between CoinChat and CoinLenders.

The problem is that people tend to use the same password for all those registrations...
I'm pretty sure a lot of people on CoinChat have the same password on their input account.

You can argue that they shouldn't, although it wouldn't really be their fault if the CoinChat db is leaked and their input account gets hacked.

[1714716589]

1714716589

[1714716589]

1714716589

[1714716589]

1714716589

[🏰 TradeFortress 🏰]

The problem is that people tend to use the same password for all those registrations...
I'm pretty sure a lot of people on CoinChat have the same password on their input account.

You can argue that they shouldn't, although it wouldn't really be their fault if the CoinChat db is leaked and their input account gets hacked.

When you sign up for Inputs, we have giant text telling you to not reuse passwords. Unfortunately some people don't follow that, but they are the same kind of user who will enter their passwords on inputsio.myfreesite.com or download wallet.dat.exe.

[🏰 TradeFortress 🏰]

How stupid can one be to not read the difference between CoinChat and CoinLenders.

One thing I noticed though is that I saw that the salt is a global variable in CoinLenders -> the salt is the same for everyone? -> if the database leaks the attacker can find people having the same password easily since the sha256 of (salt.pwd) is the same for everyone when pwd1 === pwd2

This is no longer the case. All passwords has been rehashed and salted with a user unique salt.

[katie.mckinley]

How stupid can one be to not read the difference between CoinChat and CoinLenders.

One thing I noticed though is that I saw that the salt is a global variable in CoinLenders -> the salt is the same for everyone? -> if the database leaks the attacker can find people having the same password easily since the sha256 of (salt.pwd) is the same for everyone when pwd1 === pwd2

This is no longer the case. All passwords has been rehashed and salted with a user unique salt.

Can we make sure my salt is Kosher?

[QuiveringGibbage]

Hi,

Credit Rating Support Needed

Having trouble linking my to my OTC nick QG. I get this:

Code:

string too short, not a MPIstring too short, not a MPIstring too short, not a MPI

 
On the occasions that it does work, I fail to decrypt.

I'm a bit of a noob with GPG. What am I doing wrong:

Terminal output -

Code:

jason@jason-DellXPS17-L702X:~$ gpg --decrypt
-----BEGIN PGP MESSAGE-----
Version: CreditRatingVerify v1.4.7

hQEMAzqakJaG/KrvAQgAmALZUD9njg+ksTsMlozHCZzoyok5SitzUo/T3ven
RP4I0w8dp8pLQknbU+nMvAwFZLBW/EzwMym0s1xADgujzte0iJ+0pBCgexAh
Cw/QpRedVCz7+40SOERn/IJlNH2foHySh3u9sEZi7FnL3Lbwbl5OStkdLOo0
KG1Xa6HQQP/JWkaytAHC6SI9t5uq6MBWMswvv5YhH59sJawvcEB6p+ut6F4Y
JBS6unwXM/vGV2YhI87X0oSn9+VKobXOYleddhib63EJcgMdvgOzrhQJSDFH
10S8ahsR1jw/nZ6TKm9V4U/sFfkyX/5H5KzSDTOewcY2P7fFFveQREhB/u+5
66QuqfsF4qeL5+gyv+lLlzmSFMf45pTbOf9CT5W+oLUMjesezY18ECVjl1LV
IYIP6w==
=7zV5
-----END PGP MESSAGE-----gpg: encrypted with 2048-bit RSA key, ID 86FCAAEF, created 2013-05-22
      "Jason Soon <j####n@gmail.com>"
5849b52194a9831fgpg: WARNING: message was not integrity protected
jason@jason-DellXPS17-L702X:~$

Should I copy "5849b52194a9831fgpg: WARNING: message was not integrity protected" into the decrypt box?

Cheers,
QG

[🏰 TradeFortress 🏰]

Hi QuiveringGibbage,

Have you tried saving it to a file and then calling gpg like this:

gpg --decrypt myfile.txt

[QuiveringGibbage]

same result,

Code:

jason@jason-DellXPS17-L702X:~$ gpg --decrypt test
gpg: encrypted with 2048-bit RSA key, ID 86FCAAEF, created 2013-05-22
      "Jason Soon <j####n@gmail.com>"
5849b52194a9831fgpg: WARNING: message was not integrity protected
jason@jason-DellXPS17-L702X:~$ gpg --decrypt http://pastebin.com/z92DkV5N
gpg: can't open `http://pastebin.com/z92DkV5N'
gpg: decrypt_message failed: file open error
jason@jason-DellXPS17-L702X:~$ gpg --decrypt test.txt
gpg: encrypted with 2048-bit RSA key, ID 86FCAAEF, created 2013-05-22
      "Jason Soon <####n@gmail.com>"
5849b52194a9831fgpg: WARNING: message was not integrity protected
jason@jason-DellXPS17-L702X:~$ 

is just me then?

QG

[🏰 TradeFortress 🏰]

bumping.

[shawshankinmate37927]

TradeFortress, I tried to make a withdrawal from my CoinLenders account a while ago, but it's still not appearing in my Inputs.io wallet.  Can you please look into it?

[🏰 TradeFortress 🏰]

PM'd.

[wolverine.ks]

TradeFortress,

is there anyway to leverage your site to offer loans of our own?

[mechs]

Hi Trade,
   What sort of things do you invest the bitcoins in to have such a high guaranteed return?

[shawshankinmate37927]

TradeFortress, I tried to make a withdrawal from my CoinLenders account a while ago, but it's still not appearing in my Inputs.io wallet.  Can you please look into it?

Resolved.  Thank you.

[halfawake]

Hi TradeFortress,

I have a question about the Inputs.io wallet.  Do we need to create an account on there if we don't have any plans to add or remove any money from our Coinlenders CD?  I'm assuming your Inputs.io wallet verifies with my email address so someone else can't create an account with my email address.

[BTCdude007]

Hi Trade,
   What sort of things do you invest the bitcoins in to have such a high guaranteed return?

Trade, can you categorically deny that you are providing funds to just-dice.com to act as banker?

[🏰 TradeFortress 🏰]

Yes, CoinLenders has zero coins with Just-Dice. btcinvest does invest in just-dice.

[mechs]

How much does btcinvest have invested as a banker in just-dice?  They currently are sitting on a loss and some rumors Doog may pull the plug on the site after losing a lot of BTC personally

[theGECK]

When attempting to use a recovery key, the balloon that pops up on "New Password" pops up to the left off of the screen. If I drag my screen so it is windowed over two monitors, then the fields stay in the center and I can read the balloon.

[Lohoris]

In the "Your CDs" paragraph could you please add a "total"?

I second that.

That would be great, and also a projected total at the end of the CD would be amazing

pretty please?

[Rishodi]

How long does the loan approval process typically take? I have an application that's been pending for a few days and I'm just wondering. Thanks.