Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
 |
December 27, 2013, 07:13:24 PM |
|
This morning when I looked it was not their, the address I sent to was wrong and now it is sitting in some random account I cannot get to 13643712185318669838.
I still don't understand how/when the hacker was able to input a different receiving account.  This is trivial if u know the passphrase.
|
|
|
|
|
superresistant
Legendary
Offline
Activity: 2156
Merit: 1136
|
 |
December 27, 2013, 07:13:30 PM |
|
Never ever use online password generators!
please enlighten us Maybe you could use this kind of password generators, but generate 3-5 passwords and mix them together in a random way and/or change some characters... that would be more secure. You never know if the website host does not save all generated passwords in a database for some kind of bruteforce dictionary attack later. FIFY Bruteforce is trying all possible combinations. Dictionary attack is using a database of common passwords.
|
|
|
|
|
|
abuelau
|
 |
December 27, 2013, 07:15:58 PM |
|
that could be a good idea to prevent people losing nxt. like the sender can put in a timelimit for the buyer to accept and if he doens't the transaction is not executed.
+1 Or the sender puts a timelimit for how long it could be reversible and only after that time limit the receiver can be sure the amount is definitely in his account... But how does this help with the problem when the address copied to the clipboard gets changed by a hacker and you end up sending to the wrong place? Users should be able to setup a whole wallet to be "reversible" by default. Or always use escrow as default...
|
|
|
|
Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
 |
December 27, 2013, 07:18:19 PM |
|
I thought the owner said he sent a transaction, but the NXT went to a different account.
...sorry if this is smacking me in the face and I still don't see it...
If u send a transaction it doesn't mean that it will be confirmed. Instead of 100 NXT fee and account A we get 1 NXT fee and account B. So it's obviously other transaction, not just a typo in recipient account.
|
|
|
|
|
|
opticalcarrier
|
 |
December 27, 2013, 07:18:34 PM |
|
All, in addition to the www.nxtcrypto.org main site we are working on that is up and has content and is being polished, we are also maintaining http://info.nxtcrypto.org for critical news and updates, and as a mirror for client download. NXT News website is here to give you the latest news updates of NXT Foundation on the goings-on in the NXT community. Our goal is to keep you updated 24/7 in real-tme mode on issues such as: latest client available for download, DDOS attacks notifications, critical news from developers, important NXT public services, and so on. Id like to provide the devs the ability to upload new client releases directly to the sites, please IM me. In addition, the latest client will be available from any active .nxtcrypto.org/client.zip URLs (www, wiki, info). All these sites are run on different systems by different people, all paying for the hosting and DDOS protection themselves. Im not running any sites themselves, my part in the foundation is to admin the DNS domain and provide coordination between the sites. So there is decentralization of control with different people running all sites.
|
|
|
|
|
|
BloodyRookie
|
 |
December 27, 2013, 07:18:42 PM |
|
I vote for:
1) Asset Exchange 2) Two-phase Payments 3) Mixing Service
|
Nothing Else Matters NEM: NALICE-LGU3IV-Y4DPJK-HYLSSV-YFFWYS-5QPLYE-ZDJJ NXT: 11095639652683007953
|
|
|
|
notsoshifty
|
 |
December 27, 2013, 07:18:46 PM |
|
In continuation of the announcement that we r looking for more Nxt core devs, there are features we r planning to implement till block 525960 (in alphabetical order):
...
I'd like to get ur opinions what features should be implemented in the 1st place.
Is transfer of an alias to another account (as part of or separate from the asset exchange) on the cards?
|
|
|
|
|
|
Noitev
|
 |
December 27, 2013, 07:19:41 PM |
|
do not implement reversible transactions please. If your scared you messed it up, just ask for a prompt to check it or something...
|
|
|
|
|
Framewood
Newbie
Offline
Activity: 49
Merit: 0
|
 |
December 27, 2013, 07:20:06 PM |
|
This morning when I looked it was not their, the address I sent to was wrong and now it is sitting in some random account I cannot get to 13643712185318669838.
Complete NIGHTMARE... will have my fingers crossed the devs are able to help you.  Yeah, I nearly blacked out  I't one of those curve balls life likes to throw at you when you are on a high just to bring you back to earth.
|
|
|
|
|
Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
 |
December 27, 2013, 07:20:37 PM |
|
But how does this help with the problem when the address copied to the clipboard gets changed by a hacker and you end up sending to the wrong place?
Users should be able to setup a whole wallet to be "reversible" by default. Or always use escrow as default...
I recall BCNext was looking for developers for Java smart-cards. I think we'll get hardware wallets soon.
|
|
|
|
|
Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
 |
December 27, 2013, 07:22:08 PM |
|
3) Mixing Service
So many ppl ask for Mixing... kLee, we really need ur help.
|
|
|
|
|
Kmonk
Member

Offline
Activity: 91
Merit: 10
|
 |
December 27, 2013, 07:22:25 PM |
|
Been running 0.4.7e with updated easyCopyString from early this morning with no prob, just updated again from post #9742 with:
162.243.214.68; 95.85.46.164; 162.243.216.55; 162.243.143.15; 95.85.46.249; 93.190.92.74; 37.209.120.192; 93.190.92.75; 85.25.134.59; 93.190.92.76; vps1.nxtcrypto.org; vps2.nxtcrypto.org; vps3.nxtcrypto.org; vps4.nxtcrypto.org; vps5.nxtcrypto.org; nxtwallet.com; 31.220.50.208; nxt.ddos.me; 203.174.12.25; 88.198.142.92; 66.197.138.90; 64.120.180.106; 109.230.224.65; 80.86.92.50; node1.nextcoin.it; node2.nextcoin.it; node3.nextcoin.it; node4.nextcoin.it; node5.nextcoin.it; nxt.homer.ru; 31.204.130.123; 209.222.0.194; 209.222.16.10; node1.nxtbase.com; node11.nxtbase.com; node21.nxtbase.com; node31.nxtbase.com; node41.nxtbase.com; node51.nxtbase.com; node61.nxtbase.com; node71.nxtbase.com; node81.nxtbase.com; node91.nxtbase.com; 85.214.222.82;
Now NRS wont connect, restarted everything but still wont connect!
Extracted original 0.4.7e to new folder without updating web.xml and ran start.jar, now I'm connecting OK but showing "Recent blocks [1568]" ?
|
|
|
|
|
|
abuelau
|
 |
December 27, 2013, 07:22:54 PM |
|
But how does this help with the problem when the address copied to the clipboard gets changed by a hacker and you end up sending to the wrong place?
Users should be able to setup a whole wallet to be "reversible" by default. Or always use escrow as default...
I recall BCNext was looking for developers for Java smart-cards. I think we'll get hardware wallets soon. That's even better! 
|
|
|
|
|
Jean-Luc
|
 |
December 27, 2013, 07:23:42 PM |
|
Account Balances pageI wanted to share a small piece of html/javascript that I wrote today to be able to keep track of multiple account balances at once. Save this under webapps/root/accountBalances.html : <!DOCTYPE html> <html> <head> <meta charset="UTF-8"/> <title>Nxt Account Balances</title> <style type="text/css"> table {border-collapse: collapse;} td {padding: 5px;} .result {white-space: pre; font-family: monospace;} </style> <script type="text/javascript"> function getAccountBalances(form) { var accounts = form.elements["accounts"].value.split('\n'); var balance = 0; var result = '<table><tr><th>account</th><th>balance</th></tr>'; for (i = 0; i < accounts.length; i++) { account = accounts[i].trim(); if (account != '') { var accountBalance = getBalance(accounts[i]) / 100; result += '<tr><td>'; result += account; result += ':</td><td>'; result += formatAmount(accountBalance); result += '</td></tr>'; balance += accountBalance; } } result += '<tr><td>total:</td><td>'; result += formatAmount(balance); result += '</td></tr></table>'; form.getElementsByClassName("result")[0].innerHTML = result; return false; } function getBalance(account) { var request = new XMLHttpRequest(); request.open("GET", '/nxt?requestType=getBalance&account=' + account, false); request.send(); return JSON.parse(request.responseText).balance; } function formatAmount(amount) { var digits=[], formattedAmount = "", i; do { digits[digits.length] = amount % 10; amount = Math.floor(amount / 10); } while (amount > 0); for (i = 0; i < digits.length; i++) { if (i > 0 && i % 3 == 0) { formattedAmount = "'" + formattedAmount; } formattedAmount = digits[i] + formattedAmount; } return formattedAmount; } </script> </head> <body> <b>Get Account Balances:</b><br/> <form action="/nxt" method="GET" onsubmit="return getAccountBalances(this);"> <table> <tr> <td>Accounts:</td> <td><textarea name="accounts" style="width: 100%; height: auto;" rows="6"></textarea></td> </tr> <tr> <td colspan="2"><input type="submit" value="submit"/></td> </tr> </table> <div class="result"></div> </form> </body> </html>
Then go to https://localhost:7875/accountBalances.html . Enter your account numbers, one per line, and click submit. If you created several accounts in order to purchase aliases, hallmark servers, mine, etc, I find it useful to be able to check all your balances on one page.
|
|
|
|
Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
 |
December 27, 2013, 07:24:01 PM |
|
Yeah, I nearly blacked out  I't one of those curve balls life likes to throw at you when you are on a high just to bring you back to earth. Where did u get that NRS version from? U should show it to a Java developer, binaries can be easily decompiled and HTML-files r very easy to read. Maybe some kind of trojan?
|
|
|
|
|
grimrog
Member

Offline
Activity: 84
Merit: 10
|
 |
December 27, 2013, 07:24:49 PM |
|
hi all,
just a quick question:
i bought my first 80 nxt yesterday at noon(36 hours ago) from the exchange and transferred them to my id. I even payed the feed to have it transferred within 3-12 hours. But until now nothing has changed in my balance, it still says 0.00.
The next thing is: how do i update this client, i figured i ran 0.4.0 until a hour ago. i downloaded the 0.4.7e zip and pasted the files into my next-client-folder. Nothing changed and the title of my client still says 0.4.0. Do i need to restart my pc or something?
kind regards,
grim
|
|
|
|
|
|
wakasaki808
|
 |
December 27, 2013, 07:25:19 PM |
|
Does NXT have some way to lock people out of an account if they aren't on the correct IP? Or like a verification process with key's to log into an account, like Google does with their gmail. Or like a way to add an authenticator (think Authy, Google Authenticator, etc.) in the current client where can set up in settings the need for one to prevent people from hacking the account? Been here since the beginning'ish but haven't kept up with all the new features in updates...although I have been updating 
|
|
|
|
|
Framewood
Newbie
Offline
Activity: 49
Merit: 0
|
 |
December 27, 2013, 07:26:10 PM |
|
that could be a good idea to prevent people losing nxt. like the sender can put in a timelimit for the buyer to accept and if he doens't the transaction is not executed.
Kinda like in any online game that requires a group. You have to get verification for groups and such, Someone sends an invite -> other person accepts the invite. If the other person doesn't accept then the invite is cancelled. Would definitely help with accounts of no owners. Add that to the two step verification. Click to "Send" -> (Gives you a review your order page) Click "Confirm to Send". So at least they can get verification of who/how much being sent to whom. This morning when I looked it was not their, the address I sent to was wrong and now it is sitting in some random account I cannot get to 13643712185318669838.
I still don't understand how/when the hacker was able to input a different receiving account.  This is trivial if u know the passphrase. I thought the owner said he sent a transaction to a certain account, but the NXT went to a different one. ...sorry if this is smacking me in the face and I still don't see it... Yes correct. I was sending it to my second account, had the right account number etc. and it went to this random account.
|
|
|
|
|
|
wakasaki808
|
 |
December 27, 2013, 07:30:24 PM |
|
Hello everybody,
I am new to NXT. I have been on the Quark bandwagon but decided to convert all my Quarks to NXTs since I saw amazing growth and potential of this community.
I couldn't really read all the 400+ pages of this forum. Can please somebody tell me, is DGEX the only place to buy NXTs at? I have been trying to log in all day and to buy NXTs but with no success. What is going on with this exchange?
I have also tried to setup my wallet, but here I got confused because it is completely different than other altcoin wallets? Is this my address, in the left upper corner? 3280310991161501989. And as I understood, the passphrase is very, very important, right? What happens if I loose it?
If somebody is willing to forward me couple of NXTs just to set up my wallet until I don' figure out how to buy some on DGEX. Thanks a lot guys and keep up a good work.
being moved to a new server or something (in regards to DGEX). Your Address you send to is indeed 3280310991161501989 your passphrase(password) is the most important thing. If you live in the US its like your SS number, your Credit Card Information, etc. Lose it and you lose everything in your wallet. Just like any encrypted altcoin wallet. If your passphrase is easy enough to bruteforce it, create a new account and think of the longest passphrase you can think of, include numbers, capital letters, symbols, everything.
|
|
|
|
|
|
morningtime
|
 |
December 27, 2013, 07:31:15 PM |
|
Hello everybody,
I am new to NXT. I have been on the Quark bandwagon but decided to convert all my Quarks to NXTs since I saw amazing growth and potential of this community.
I couldn't really read all the 400+ pages of this forum. Can please somebody tell me, is DGEX the only place to buy NXTs at? I have been trying to log in all day and to buy NXTs but with no success. What is going on with this exchange?
I have also tried to setup my wallet, but here I got confused because it is completely different than other altcoin wallets? Is this my address, in the left upper corner? 3280310991161501989. And as I understood, the passphrase is very, very important, right? What happens if I loose it?
If somebody is willing to forward me couple of NXTs just to set up my wallet until I don' figure out how to buy some on DGEX. Thanks a lot guys and keep up a good work.
Welcome, I sent you some. Peercover also trades NXT via Ripple. Bit of a hassle, but seems to work: https://peercover.com/#/simpleGatewayDon't lose your PW.
|
|
|
|
|
|