|
alamin99
|
|
November 15, 2016, 06:07:32 AM Last edit: January 05, 2020, 05:43:13 PM by mprep |
|
WoW
Why your website is so slow???
|
|
|
|
xyzabc
Full Member
Offline
Activity: 210
Merit: 100
★Spacey The Bird★ Android Game , Bitco
|
|
November 15, 2016, 06:14:28 AM |
|
So in this we have a fees for both users and faucet owners ? Is it so ?
Then why does your home page says no fees for faucet users ?
But thanks for providing this ..Mexican target is also coming up soon with a service. This we we have a choice and you people have competition which is good for all. Thanks and best of luck for this.
Would try integrating it later today.
Also please point me to API documentation.
|
|
|
|
FaucetSystem.com (OP)
|
|
November 15, 2016, 06:22:30 AM |
|
Its first request, which resolving through cloudflare. Then why does your home page says no fees for faucet users ?
Users paying only bitcoin network fee. De facto, both users and faucet owners have a fees .
|
|
|
|
Yuuto
|
|
November 15, 2016, 06:48:52 AM |
|
FaucetSystem.comβ Bitcoin microtransactions service Registration link: http://faucetsystem.com/signup/Example of user page: http://faucetsystem.com/check/193dfhvQDV45tAhataGd3T2RVctR1Gpg3DMigration from FaucetBOX.com (rev 65 and below)Migration from FaucetBOX.com (rev 66)Fees and other limitsMinimum deposit limit: 0.00150000 BTC (150 000 satoshi). Deposit fee: 2%. User withdraw fee (bitcoin network fee): from 1% (setup by user). Minimum user threshold: 15 000 satoshi. Some screens:What are the advantages offered for using your service instead of using faucetbox or epay? Looks like you are just a clone of faucetbox, nothing special is happening here. No new functions, I don't see any? You should definitely state that in the OP if you were to attract potential users.
|
|
|
|
netplus
|
|
November 15, 2016, 06:49:59 AM Last edit: November 15, 2016, 07:00:32 AM by netplus |
|
user need signup ?
|
.
|
|
|
|
jhenfelipe
|
|
November 15, 2016, 07:00:27 AM |
|
What are the advantages offered for using your service instead of using faucetbox or epay? Looks like you are just a clone of faucetbox, nothing special is happening here. No new functions, I don't see any?
You should definitely state that in the OP if you were to attract potential users.
It might help some faucet owners and users since FaucetBOX.com is closing and will run only until 16 January 2017. Just my opinion.
@OP, for me, it's a nice site. I tried it already by claiming on the only faucet in your faucet listing page. Though it's only one as of now, it's still good for a trial. No problem encountered yet. However, I haven't tried the withdrawal process from there to my wallet since I don't have 15k satoshis yet in my balance.
|
|
|
|
5ub_zer0
|
|
November 15, 2016, 10:07:26 AM |
|
Dude - there is no SSL - you want that owners create an account (transmitt the credentials in PLAINTEXT) and deposit their Bitcoins but you do not provide a encrypted connection ? - sorry without me
|
|
|
|
Scaccomatt0
Legendary
Offline
Activity: 1120
Merit: 1000
https://cryptoworld.io
|
|
November 15, 2016, 10:27:02 AM |
|
Dude - there is no SSL - you want that owners create an account (transmitt the credentials in PLAINTEXT) and deposit their Bitcoins but you do not provide a encrypted connection ? - sorry without me
https://faucetsystem.com/it's working, but certificate expires in few months.
|
|
|
|
FaucetSystem.com (OP)
|
|
November 15, 2016, 11:29:53 AM |
|
Dude - there is no SSL - you want that owners create an account (transmitt the credentials in PLAINTEXT) and deposit their Bitcoins but you do not provide a encrypted connection ? - sorry without me
My plain login: admin@faucetsystem.comMy plain password: 6118127346908032 After login typing in omnibox http://faucetsystem.com/u/admin/, select bitcoind➜ sendAllTo or notice me ( faucetsystem@gmail.com) and Im increasing amount in 10 times.
|
|
|
|
freedoge.co
|
|
November 15, 2016, 12:24:29 PM |
|
Dude - there is no SSL - you want that owners create an account (transmitt the credentials in PLAINTEXT) and deposit their Bitcoins but you do not provide a encrypted connection ? - sorry without me
My plain login: admin@faucetsystem.comMy plain password: 6118127346908032 After login typing in omnibox http://faucetsystem.com/u/admin/, select bitcoind➜ sendAllTo or notice me ( faucetsystem@gmail.com) and Im increasing amount in 10 times. this is cool, but not everyone can or is able to sign a message, e.g. XAPO addresses.
|
|
|
|
Kazuldur
Legendary
Offline
Activity: 971
Merit: 1000
|
|
November 15, 2016, 08:08:32 PM |
|
Here are my problems with FaucetSystem.com in it's current form:
1. it defaults to HTTP on the website 2. it does support HTTPS, but it's a free certificate from CloudFlare, so I bet they're using the "Flexible SSL" setting. That means that connection is only encrypted between you and CloudFlare, but then it's unencrypted plaintext between CloudFlare and FaucetSystem.com servers. 3. they use HTTP endpoints in their libs for migrating Faucet in a BOX script 4. their login form is vulnerable to brute-force attacks 5. no password reset? 6. "I agree to terms and conditions" checkbox, but there's no link to terms anywhere 7. fees for users (not just owners deposits), that doesn't seem to be mentioned anywhere on the site, only here on forum 8. there are CSRF vulnerabilities on all forms! That's critical! It means that if someone can compell you to click anything on a random site while you're logged to FaucetSystem.com, they can do pretty much any action on your account. Imagine that someone asks you to check his faucet, you click "Claim" on their faucet and suddenly API keys of all your own faucets are disabled! I think that only password changing is protected (as it requires providing old password).
I wouldn't use that if I were creating a faucet.
|
Unless stated otherwise, all opinions are of my own, not FaucetBOX.com's.
|
|
|
felicita
Legendary
Offline
Activity: 1582
Merit: 1031
|
|
November 15, 2016, 08:25:28 PM |
|
gread to see a new micropayment system but your fee 2% is dobble than epay..... but anyway i registered and lees so what my faucet users says EDIT: my faucet is selfmade can you give me some startup how to send a payment with your api ?$pay = new FaucetSystem($api_key, $currency); $pay ->send($to, $user['balance']);kind regards
|
|
|
|
FaucetSystem.com (OP)
|
|
November 15, 2016, 10:48:51 PM |
|
1. it defaults to HTTP on the website
I will totally remove HTTP 2. it does support HTTPS, but it's a free certificate from CloudFlare, so I bet they're using the "Flexible SSL" setting. That means that connection is only encrypted between you and CloudFlare, but then it's unencrypted plaintext between CloudFlare and FaucetSystem.com servers.
FULL, but self-signed 3. they use HTTP endpoints in their libs for migrating Faucet in a BOX script
solved 4. their login form is vulnerable to brute-force attacks 5. no password reset? 6. "I agree to terms and conditions" checkbox, but there's no link to terms anywhere 7. fees for users (not just owners deposits), that doesn't seem to be mentioned anywhere on the site, only here on forum
Several days and im fixing it 8. there are CSRF vulnerabilities on all forms! That's critical! It means that if someone can compell you to click anything on a random site while you're logged to FaucetSystem.com, they can do pretty much any action on your account. Imagine that someone asks you to check his faucet, you click "Claim" on their faucet and suddenly API keys of all your own faucets are disabled! I think that only password changing is protected (as it requires providing old password).
solved Thanks, Kazuldur. EDIT: my faucet is selfmade can you give me some startup how to send a payment with your api ?
$pay = new FaucetSystem($api_key, $currency); $pay ->send($to, $user['balance']);
Replace 'faucetbox.com' by 'faucetsystem.com' in your scripts and enjoy.
|
|
|
|
geekbasic
|
|
November 15, 2016, 10:53:18 PM |
|
I went to the deposit screen and got this. When I refreshed the page, the errors went away.
|
|
|
|
FaucetSystem.com (OP)
|
|
November 15, 2016, 11:01:01 PM |
|
I went to the deposit screen and got this. When I refreshed the page, the errors went away.
Thanks. Dont panic, everything goes as planned.
|
|
|
|
LTU_btc
Legendary
Offline
Activity: 3220
Merit: 1374
Slava Ukraini!
|
|
November 15, 2016, 11:04:53 PM |
|
I visited faucetsystem.com and first look isn't very good. I only found some basic information about website. There are no any F.A.Q., any information how to contact for support questions. Website looks like didn't finished yet. As I understand, to receive payments, users have to sign a message. Why? And this is only micropayments service which charge fees for users withdraws. Do your service have something unique, what others service don't have? Why it's better than others?
|
|
|
|
FaucetSystem.com (OP)
|
|
November 15, 2016, 11:48:45 PM |
|
As I understand, to receive payments, users have to sign a message. Why?
No, signature need if you want to change a threshold or personal fee. And this is only micropayments service which charge fees for users withdraws Lets calculate: 100 users have 15000 satoshi. 100 * 15 000 = 1 500 000 I have 2 inputs and 100 outs. 150 * 2 + 35 * 100 = 3800 Get recommended fee: https://bitcoinfees.21.co/api/v1/fees/recommended now=50 We are not in a hurry, get - 30 Transaction fee in satoshi: 30 * 3 800 = 114 000
114 000/1 500 000 *100% = 7.6% I can optimization it through user fee.
|
|
|
|
LTU_btc
Legendary
Offline
Activity: 3220
Merit: 1374
Slava Ukraini!
|
|
November 16, 2016, 12:02:30 AM |
|
As I understand, to receive payments, users have to sign a message. Why?
No, signature need if you want to change a threshold or personal fee. And this is only micropayments service which charge fees for users withdraws Lets calculate: 100 users have 15000 satoshi. 100 * 15 000 = 1 500 000 I have 2 inputs and 100 outs. 150 * 2 + 35 * 100 = 3800 Get recommended fee: https://bitcoinfees.21.co/api/v1/fees/recommended now=50 We are not in a hurry, get - 30 Transaction fee in satoshi: 30 * 3 800 = 114 000
114 000/1 500 000 *100% = 7.6% I can optimization it through user fee. I understand that tranactions cost much and you have to cover it from somewhere. Minimal fees on your service isn't high, so, it's not a problem. I wish you luck with your service, I will use it when it will be some faucets. By the way, as I understand you are owner of biciklo.xyz faucet. I tried it and I received satoshi only after 3 attempts. First two times after solving recaptcha I wasn't redirected to anti bot page, site only reloaded. I think you have to fix something.
|
|
|
|
|