Bitcoin Forum
May 06, 2024, 04:06:06 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Tracking pixels (split from Mike Hearn's blacklist thread)  (Read 3000 times)
westkybitcoins (OP)
Legendary
*
Offline Offline

Activity: 980
Merit: 1004

Firstbits: Compromised. Thanks, Android!


View Profile
November 15, 2013, 05:13:53 PM
Last edit: November 20, 2013, 07:47:32 PM by Maged
 #1

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke

Well, ain't that nice. Tracking pixels... noting every IP address that views his post.

Why am I not too surprised?  Roll Eyes

Bitcoin is the ultimate freedom test. It tells you who is giving lip service and who genuinely believes in it.
...
...
In the future, books that summarize the history of money will have a line that says, “and then came bitcoin.” It is the economic singularity. And we are living in it now. - Ryan Dickherber
...
...
ATTENTION BFL MINING NEWBS: Just got your Jalapenos in? Wondering how to get the most value for the least hassle? Give BitMinter a try! It's a smaller pool with a fair & low-fee payment method, lots of statistical feedback, and it's easier than EasyMiner! (Yes, we want your hashing power, but seriously, it IS the easiest pool to use! Sign up in seconds to try it!)
...
...
The idea that deflation causes hoarding (to any problematic degree) is a lie used to justify theft of value from your savings.
Be very wary of relying on JavaScript for security on crypto sites. The site can change the JavaScript at any time unless you take unusual precautions, and browsers are not generally known for their airtight security.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3071



View Profile
November 15, 2013, 07:01:17 PM
 #2

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke

Really looking forward to when Bitcoin Identity Protocol will allow us to BAN THESE TROLLS AND SHILLS

In the meantime, everyone please ignore this disgrace of a human being that runs the BCB account. Disgusting.

Vires in numeris
jedunnigan
Sr. Member
****
Offline Offline

Activity: 279
Merit: 250


View Profile
November 15, 2013, 09:44:29 PM
 #3

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke

BCB, you're going to have to answer for this. Care to explain?
justusranvier
Legendary
*
Offline Offline

Activity: 1400
Merit: 1009



View Profile
November 15, 2013, 09:46:08 PM
 #4

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke

BCB, you're going to have to answer for this. Care to explain?
http://www.zdnet.com/news/def-cons-sport-spot-the-fed/102697
solex
Legendary
*
Offline Offline

Activity: 1078
Merit: 1002


100 satoshis -> ISO code


View Profile
November 17, 2013, 04:28:16 AM
 #5

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke


hmm...

hmm indeed. The BF should be onto this like a ton of bricks.

justusranvier
Legendary
*
Offline Offline

Activity: 1400
Merit: 1009



View Profile
November 17, 2013, 04:30:33 AM
 #6

Again you are giving the foundation too much power.







Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke


hmm...

hmm indeed. The BF should be onto this like a ton of bricks.

BCB has posted nothing since this. It will be interesting to see if he ever posts again, or if he retires that sockpuppet.

http://www.rawstory.com/rs/2011/02/18/revealed-air-force-ordered-software-to-manage-army-of-fake-virtual-people/
NewLiberty
Legendary
*
Offline Offline

Activity: 1204
Merit: 1002


Gresham's Lawyer


View Profile WWW
November 17, 2013, 04:59:41 AM
 #7

Again you are giving the foundation too much power.

Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke


hmm...

hmm indeed. The BF should be onto this like a ton of bricks.

BCB has posted nothing since this. It will be interesting to see if he ever posts again, or if he retires that sockpuppet.

http://www.rawstory.com/rs/2011/02/18/revealed-air-force-ordered-software-to-manage-army-of-fake-virtual-people/

A tracking pixel gets outed.  It bears observation that fundamentally any post with in BitcoinTalk with an embedded picture from a domain under your control, or for which you can review server logs, will show the IP address of anyone browsing it.  Those browsing IPs addresses have a higher than average likelihood of having a bitcoin wallet on the machine, and present a target list for the would be attacker.

Good security has many layers.

FREE MONEY1 Bitcoin for Silver and Gold NewLibertyDollar.com and now BITCOIN SPECIE (silver 1 ozt) shows value by QR
Bulk premiums as low as .0012 BTC "BETTER, MORE COLLECTIBLE, AND CHEAPER THAN SILVER EAGLES" 1Free of Government
tvbcof
Legendary
*
Offline Offline

Activity: 4592
Merit: 1276


View Profile
November 17, 2013, 06:39:49 AM
 #8

Again you are giving the foundation too much power.

Mod Edit Note: Shove your tracking pixel up your ass, BCB. Cheers, Raoul Duke

hmm...

hmm indeed. The BF should be onto this like a ton of bricks.

BCB has posted nothing since this. It will be interesting to see if he ever posts again, or if he retires that sockpuppet.

http://www.rawstory.com/rs/2011/02/18/revealed-air-force-ordered-software-to-manage-army-of-fake-virtual-people/

A tracking pixel gets outed.  It bears observation that fundamentally any post with in BitcoinTalk with an embedded picture from a domain under your control, or for which you can review server logs, will show the IP address of anyone browsing it.  Those browsing IPs addresses have a higher than average likelihood of having a bitcoin wallet on the machine, and present a target list for the would be attacker.

Good security has many layers.

Typically the attacker will get the IP of one's router.  But many routers will be running UPnP (so that Bitcoin can function correctly) so it seems possible that a variety of network devices could be exploited.  At least as a starting point to further targeted attacks.

http://www.computerworld.com/s/article/9236298/UPnP_flaws_expose_tens_of_millions_of_networked_devices_to_remote_attacks_researchers_say

I really only ran bitcoind in good-citizen mode when I could run it on my router (which was home made.)  Setting up an appropriate port-forward from my now standard router would be safe enough that I would do it, but now the bandwidth is to great since I am on a satellite connection.

I'd never keep a significant sized hot wallet anywhere, and definitely not on an active full node.  There are simply to many security unknowns for my taste these days.

Oh ya.  And fuck BCB.  Unsurprisingly he was a shill for the BF (Buncha Fascists) IIRC.


sig spam anywhere and self-moderated threads on the pol&soc board are for losers.
justusranvier
Legendary
*
Offline Offline

Activity: 1400
Merit: 1009



View Profile
November 20, 2013, 07:52:48 PM
 #9

https://www.requestpolicy.com
jackjack
Legendary
*
Offline Offline

Activity: 1176
Merit: 1233


May Bitcoin be touched by his Noodly Appendage


View Profile
November 20, 2013, 10:06:34 PM
 #10

One of the guys I never trusted, along with TF and a few others
Maybe I'm a medium

Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2
Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
Kouye
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


Cuddling, censored, unicorn-shaped troll.


View Profile
November 20, 2013, 11:30:40 PM
 #11

BCB has always been very suspicious to me, too.
I had those MP exchanges with BCB:

Howdy,

Sorry to bother you with such a small matter, but I have some reasons to beleive someone hacked/bought an account which you successfully traded with before, and is now using you as a reputation token:

https://bitcointalk.org/index.php?topic=270890.0

The shill that came out of the blue on the same thread here is most likely another account of the same person, who is now accusing me of scamming here:

https://bitcointalk.org/index.php?topic=271284.0

Your name being used all over, I think you would probably want to know about it. Smiley

Who. Pyrex?


My reply :

Yes, Pyrex. I'm afraid he's been hacked or sold, sorry.
Check the loan post I linked to you, it's really fishy.

Asks for a 2h loan of 5BTC, offering an IPhone 5 as collateral (for a 2 hours loan Cheesy), then 4 hours after, when he supposedly didn't need the loan anyone, accepts one for 1 BTC, for no reason, just talking about a mysterious investment, and repays 115% after 2 hours.

After that, a shill appeared out of the blue, rooting for him. The shill is most likely a bought/sold account, too.

Well, just read up the posts I linked, and make your own mind! Smiley

And he never replied.

But thanks to my custom trust list (and tysat Wink), this guy appears as red to me, now.


[OVER] RIDDLES 2nd edition --- this was claimed. Look out for 3rd edition!
I won't ever ask for a loan nor offer any escrow service. If I do, please consider my account as hacked.
Boelens
Hero Member
*****
Offline Offline

Activity: 672
Merit: 500



View Profile
November 21, 2013, 03:00:47 PM
 #12

BCB has always been very suspicious to me, too.
I had those MP exchanges with BCB:

Howdy,

Sorry to bother you with such a small matter, but I have some reasons to beleive someone hacked/bought an account which you successfully traded with before, and is now using you as a reputation token:

https://bitcointalk.org/index.php?topic=270890.0

The shill that came out of the blue on the same thread here is most likely another account of the same person, who is now accusing me of scamming here:

https://bitcointalk.org/index.php?topic=271284.0

Your name being used all over, I think you would probably want to know about it. Smiley

Who. Pyrex?


My reply :

Yes, Pyrex. I'm afraid he's been hacked or sold, sorry.
Check the loan post I linked to you, it's really fishy.

Asks for a 2h loan of 5BTC, offering an IPhone 5 as collateral (for a 2 hours loan Cheesy), then 4 hours after, when he supposedly didn't need the loan anyone, accepts one for 1 BTC, for no reason, just talking about a mysterious investment, and repays 115% after 2 hours.

After that, a shill appeared out of the blue, rooting for him. The shill is most likely a bought/sold account, too.

Well, just read up the posts I linked, and make your own mind! Smiley

And he never replied.

But thanks to my custom trust list (and tysat Wink), this guy appears as red to me, now.



Pyrex is most likely a hacked/sold account, I went through his post history and it was VERY different. I'm so glad I got my 1.15BTC back, I could've been scammed easily. When I said I wouldn't loan him 5 BTC he replied with "fuck you", so I'd assume he was hacked, although before that I contacted BCB who said he had verified with him that the account was NOT hacked or sold. I questioned it, but went with it. Seems it was most likely a fake too, and I wouldn't be surprised. As someone above said, of some people who I thought would scam, most seem to acually turn out scamming.
justusranvier
Legendary
*
Offline Offline

Activity: 1400
Merit: 1009



View Profile
November 21, 2013, 04:51:30 PM
 #13

BCB has posted nothing since this. It will be interesting to see if he ever posts again, or if he retires that sockpuppet.

http://www.rawstory.com/rs/2011/02/18/revealed-air-force-ordered-software-to-manage-army-of-fake-virtual-people/
He's back after all, posting as if nothing happened:

https://bitcointalk.org/index.php?topic=333824.msg3664200#msg3664200
RedRobin2442
Full Member
***
Offline Offline

Activity: 168
Merit: 100


View Profile
November 22, 2013, 11:36:11 PM
 #14

Why not go the reverse route? He used to go into OTC back in the day completely naked. SOmewhere in the last year there is a ip somewhere in Ny.

Kouye
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


Cuddling, censored, unicorn-shaped troll.


View Profile
November 22, 2013, 11:39:24 PM
 #15

Why not?
Because we don't give a fuck? I don't, for sure.

[OVER] RIDDLES 2nd edition --- this was claimed. Look out for 3rd edition!
I won't ever ask for a loan nor offer any escrow service. If I do, please consider my account as hacked.
Mondy
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
November 23, 2013, 12:35:23 AM
 #16

One of the guys I never trusted, along with TF and a few others
Maybe I'm a medium

lucky you Sad i trusted tf

deepceleron
Legendary
*
Offline Offline

Activity: 1512
Merit: 1028



View Profile WWW
November 23, 2013, 08:57:41 AM
Last edit: November 23, 2013, 09:24:21 AM by deepceleron
 #17

I brought this up to theymos over two years ago. I even PM'd him his IP address and a log of every time he viewed his messages. Letting users embed images has this risk.

The solution, used by forums such as vBulletin, is to have users upload their pictures to the forum, sometimes with a login required to view them. This would be nice for me, because daily, dozens of robots hit every file, link, or image I have posted here (along with skript kiddies).

While protecting users, allowing image upload puts the forum software at risk, for the same reason that avatar uploading is disabled.

A (sanitized) illustration: https://bitcointalk.org/index.php?topic=309601.msg3578415#msg3578415

What's even funnier is that I can just put a php in image tags, now you are immediately logged to a text file:
()

Another thread with tracking fun: https://bitcointalk.org/index.php?topic=139030.msg1490461#msg1490461
deepceleron
Legendary
*
Offline Offline

Activity: 1512
Merit: 1028



View Profile WWW
November 23, 2013, 10:11:02 AM
 #18

And like that, everything is going through http://images.weserv.nl/
What I see:
101.165.121.91.in-addr.arpa domain name pointer rbx.weserv.nl.

img code example:
https://images.weserv.nl/?url=i.qkme.me/3pvloj.jpg&fnr


Lots of meme pics from different domains for the testing: https://bitcointalk.org/index.php?topic=90138.0
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!