Bitcoin MineField - 10%-2300% winings, fully automated, with cool technologies:)

[holorga]

hey, server was out of founds during the last hour, sorry about this, founds are on their way and you'll be able to withdraw soon.

[holorga]

hey, server was out of founds during the last hour, sorry about this, founds are on their way and you'll be able to withdraw soon.

ok, founds are in

[🏰 TradeFortress 🏰]

Just a friendly tip: It's funds

[ingrownpocket]

You may want to order the transaction history query.
It's showing the Jan transactions in the bottom and Feb transactions in the top

BTW, can you create a page like Bitcoin-Kamikaze has, where you show referrals stats?

Something like this:

[holorga]

You may want to order the transaction history query.
It's showing the Jan transactions in the bottom and Feb transactions in the top

BTW, can you create a page like Bitcoin-Kamikaze has, where you show referrals stats?

Something like this:

thanks for the feedback, I'm planning a rewrite soon (will move payment processing to blockchain.info to offer instant payouts) and I'll include more details about referals..

[holorga]

Just a friendly tip: It's funds

haha thanks

[addi]

I keep getting "invalid address" when I'm trying to withdraw. I tried with several addresses. I'm 100% sure these are working addresses. What's the matter there?

[holorga]

I keep getting "invalid address" when I'm trying to withdraw. I tried with several addresses. I'm 100% sure these are working addresses. What's the matter there?

strange, can you give me your username and an address you are trying to use?

[addi]

hold on, it might be because I lack 4 confirmations on my deposit? just noticed that note

edit: thank you for your quick reaction though, gives me a lot more confidence in your service

[holorga]

hold on, it might be because I lack 4 confirmations on my deposit? just noticed that note

edit: thank you for your quick reaction though, gives me a lot more confidence in your service

don't worry your btc is safe

it still shouldn't tell you that the address is invalid, I've updated a code a bit, try it now. (reload page)

and I've changed the confirmation requirement to 2, so you'll be able to cash out sooner.

[notaek]

I sent 0.025 BTC to an address that was generated for me (you can see here:  1EY6boTD4jCY9CNdfP4i8BMioF1m4NYJ7b)  but it never went through, it wasn't every added to my account...

What should I do?

[holorga]

I sent 0.025 BTC to an address that was generated for me (you can see here:  1EY6boTD4jCY9CNdfP4i8BMioF1m4NYJ7b)  but it never went through, it wasn't every added to my account...

What should I do?

you are right, I'm not sure what happened, sorry about that.
the transaction wasn't registered by the system.. I've credited your account manually and I'll investigate.

[notaek]

Thank you.

[cleric]

Hello,

I would like to report a possible security hole in the current scheme of things.

The idea to use only 'url with secret' for logging in is neat but not entirely safe because the web server uses plain http with no encryption.

Let's say you open the site for the first time and it gives you secret like http://minefield.bitcoinlab.org/?secret=fngrOdO23tDOTuPW
Then you deposit some btc.
If someone is sniffing the traffic it is fairly easy to extract the GET /?secret=fngrOdO23tDOTuPW string from the HTTP request. Then he needs simply to open the site with that secret and he can withdraw the btc to address of his choice.

I can mention two solutions.

1/ get a https certificate and the run the website over ssl/tls. This will resolve the sniffing problem since all traffic would be encrypted.

2/ Make withdraw only possible to addresses from which deposits were received. But on second thought this is not very secure either. A hacker could break into your account, deposit minimal amount of btc and after the deposit is confirmed (and the sending address accepted as viable for withdraw) the hacker request the whole amount to his address.

Best~

[holorga]

Hello,

I would like to report a possible security hole in the current scheme of things.

The idea to use only 'url with secret' for logging in is neat but not entirely safe because the web server uses plain http with no encryption.

Let's say you open the site for the first time and it gives you secret like http://minefield.bitcoinlab.org/?secret=fngrOdO23tDOTuPW
Then you deposit some btc.
If someone is sniffing the traffic it is fairly easy to extract the GET /?secret=fngrOdO23tDOTuPW string from the HTTP request. Then he needs simply to open the site with that secret and he can withdraw the btc to address of his choice.

I can mention two solutions.

1/ get a https certificate and the run the website over ssl/tls. This will resolve the sniffing problem since all traffic would be encrypted.

2/ Make withdraw only possible to addresses from which deposits were received. But on second thought this is not very secure either. A hacker could break into your account, deposit minimal amount of btc and after the deposit is confirmed (and the sending address accepted as viable for withdraw) the hacker request the whole amount to his address.

Best~

hey, yeah I'm aware of this, I do know what https is and what it is for
I don't think that this is very important, but I do plan to switch to https soon.

and on why I don't think its important:
the number of local networks being sniffed by attackers interested in bitcoin is super small, people that know what https and sniffing is, will make sure that they have a secure connection if they care to, and people that don't, will probably get owned anyway. so I'm maybe saving one person in a few millions, and this website didn't receive that much GET requests yet. and statistically, I'm saving them around 0.05 bitcoin...
but still, yes, https, soon.

PS
I may sound too dismissive, that's not the idea, thanks for reporting

[cleric]

hey, yeah I'm aware of this, I do know what https is and what it is for

Sorry, I didn't mean to offend you. I have no doubt you know all that, but since the post will probably be read by other people, I wrote it in a more detailed manner, so they could know what we are talking about

[hiddenoreo]

i dont understand how i lost 3 - 4 btc playing this.....
waste of btc.

[ingrownpocket]

 

I'm really interested to see more details from my referrals 

[holorga]

I'm really interested to see more details from my referrals 

yeah yeah will implement it I'm finishing another project these days, in a month or two I'll be able to get back to this..

[🏰 TradeFortress 🏰]

I'm really interested to see more details from my referrals  

yeah yeah will implement it I'm finishing another project these days, in a month or two I'll be able to get back to this..

I deposited 1 bitcoin but it's not showing up

user-5125f42adf7b95cc10034bba