opticalcarrier
|
|
January 05, 2014, 05:39:32 PM |
|
+1 If the stolen NXT turn out to be darkNXT, then EpicThomas is just the worlds most unlucky hacker/thief, but if they are in activated accounts then Marshal Ricky has probably got more work to do: either setting the Federales on ET or tracking down some more badguys to round up.
And if the earlier thefts/incidents (ie from before ET set up the poisoned client) turn out to be darkNXT'ed and not stolen, we only have a bug to deal with, not an unknown exploit with someone siphoning account funds.
@rickyjames: good work, mate. Love the accent, btw.
Did I miss something? where did we begin suspecting the stolen nxt (from when AFTER epicthomas released his trojan) was sent to dark accounts? Its very easy to find out if an acct is dark: http://localhost:7874/nxt?requestType=getAccountPublicKey&account=PUTACCT#HEREand if a loong public key is returned then its not a dark account
|
|
|
|
xyzzyx
Sr. Member
Offline
Activity: 490
Merit: 250
I don't really come from outer space.
|
|
January 05, 2014, 05:39:59 PM |
|
Can I donate to this site owner so he can buy a domain name? Use NXTblockchain.com - it redirects to the Blockchain Explorer. nxtblockchain.com redirect to google.com for me. nxt:explorer or http://22k.io/explorer
|
"An awful lot of code is being written ... in languages that aren't very good by people who don't know what they're doing." -- Barbara Liskov
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
|
January 05, 2014, 05:49:20 PM |
|
can you give us ripple dummies a quick 1,2,3 step by step of getting USD/EUR/etc into the ripple network to buy XRP? Then I assume it operated like a normal exchange from there?
I would recommend starting with BTC and NXT. There are plenty of fiat gateways (including peercover) but with the usual paperwork delays. Step 1: create ripple acct Step 2: post your ripple address and I will send you 30 XRP Step 3: goto simpleGateway and deposit BTC (need to add trustline for this) Step 4: goto ripple wallet trade page and select NXT/BTC with peercover ra9eZxMbJrUcgV8ui7aPc161FgrqWScQxV as issuer Step 5: enjoy frictionless trading by submitting buy and sell orders James P.S. Step 6, send me back my 30XRP or .001 BTC or 10NXT Hey James, i really want to try simpleGateway, can you give a more detailed step-by-step-guide for trading BTC <-> NXT? With links and all? How exactly to deposit BTC? Are they gonna be aotomatically transferred to XRP? Also i have some LTC and i saw that on the simpleGateway i could deposit LTC too? How is that done? Edit: I'm at step 2 now - my ripple-address is r3mVGEhSxiMt8GdVfKgeC3tkw9jRPWCaNP Sent you 30XRP Currently there is no direct market for NXT/BTC. You would have to sell BTC for XRP and then use XRP to purchase NXT. If you need, I can buy your BTC or LTC at market price, just let me know how much so I can be sure I can handle it now. Basically, once you deposit BTC or LTC using the simpleGateway, it goes into your ripple wallet. To convert it to XRP you need to make sure you have a buyer for it. The orderbook on ripple is pretty thin, so prearranging is best. We agree on price, you make a sell offer at that price for BTC.peercover or LTC.peercover and I put in a matching buy offer. You get the XRP and I get your BTC or LTC. Once you have XRP you can purchase NXT/XRP. Make sure to specify peercover ripple address ra9eZxMbJrUcgV8ui7aPc161FgrqWScQxV as the issuer of NXT, BTC, LTC. XRP has no issuer. James
|
|
|
|
bitcoinrocks
Legendary
Offline
Activity: 1372
Merit: 1000
|
|
January 05, 2014, 05:49:39 PM |
|
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
|
January 05, 2014, 05:52:10 PM |
|
+1 If the stolen NXT turn out to be darkNXT, then EpicThomas is just the worlds most unlucky hacker/thief, but if they are in activated accounts then Marshal Ricky has probably got more work to do: either setting the Federales on ET or tracking down some more badguys to round up.
And if the earlier thefts/incidents (ie from before ET set up the poisoned client) turn out to be darkNXT'ed and not stolen, we only have a bug to deal with, not an unknown exploit with someone siphoning account funds.
@rickyjames: good work, mate. Love the accent, btw.
Did I miss something? where did we begin suspecting the stolen nxt (from when AFTER epicthomas released his trojan) was sent to dark accounts? Its very easy to find out if an acct is dark: http://localhost:7874/nxt?requestType=getAccountPublicKey&account=PUTACCT#HEREand if a loong public key is returned then its not a dark account I have not seen anybody actually do this. I am on Mac OSX 10.6.8 which does not run the required java so I cannot run the NRS until I get back home on Wed. Can someone do this and confirm whether these accts stolen funds have a key or not? James
|
|
|
|
salsacz
|
|
January 05, 2014, 05:58:51 PM |
|
I have updated the bounty votes spreadsheet to include all votes up to post 14728: ... All I did here was tally votes to help save folks time!
actually 24 hours passed after post nr. 14621
|
|
|
|
Come-from-Beyond
Legendary
Offline
Activity: 2142
Merit: 1010
Newbie
|
|
January 05, 2014, 06:00:50 PM |
|
I have updated the bounty votes spreadsheet to include all votes up to post 14728: ... All I did here was tally votes to help save folks time!
actually 24 hours passed after post nr. 14621 No problem here. Rewards will be paid within several days coz a lot of links have to be revised.
|
|
|
|
xyzzyx
Sr. Member
Offline
Activity: 490
Merit: 250
I don't really come from outer space.
|
|
January 05, 2014, 06:05:40 PM |
|
|
"An awful lot of code is being written ... in languages that aren't very good by people who don't know what they're doing." -- Barbara Liskov
|
|
|
pinarello
Full Member
Offline
Activity: 266
Merit: 100
NXT is the future
|
|
January 05, 2014, 06:07:21 PM |
|
|
|
|
|
mcjavar
|
|
January 05, 2014, 06:10:08 PM |
|
Guys any link to 0.5? First page link doesnt work.
We didn't organize it well for this release, but from now on new releases should always appear on http://info.nxtcrypto.org in addition to my announcement here. And you should be able to use the built-in update checker, http://localhost:7874/update.html to check for new versions, and download and verify the zip package. Would it be possible to add a simple button in the current ui that leads to the update.html?
|
|
|
|
EvilDave
|
|
January 05, 2014, 06:12:17 PM |
|
Just checking this myself, but xyzzyx beat me to posting it. I can confirm that all of these accounts return no public string: For the record, the lost/stolen NXT is here:
13643712185318669838 contains 100088 NXT taken from Framewood's 697109629372813510 15182566201738727933 contains 18665 NXT taken from plasticAiredale's 8439060069775407509 16204974692852323982 contains 7808 NXT taken from PaulyC's 16821029889165561706 9793828175536096502 contains 18197 NXT taken from newcn's 16886318053889080545 12152013998194592943 contains 147690 NXT taken from sparta_cuss's 11794318797680953099
Note that
16204974692852323982 also contains 1155 NXT moved from four other accounts and just to check, I ran my account and a couple of other sig accounts, all returned nice fat public keys. Looks like ET is an unlucky thief.....
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
|
January 05, 2014, 06:13:42 PM |
|
I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:
**** I have come up with non-standard attack, call it financial attack.
Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?
Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?
All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.
Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.
James
P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.
|
|
|
|
opticalcarrier
|
|
January 05, 2014, 06:14:08 PM |
|
yes, everyone should keep that part i italicized in mind. though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure
|
|
|
|
bitcoinpaul
|
|
January 05, 2014, 06:17:41 PM |
|
I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:
**** I have come up with non-standard attack, call it financial attack.
Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?
Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?
All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.
Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.
James
P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.
Very good, Sir. And so simple!
|
|
|
|
opticalcarrier
|
|
January 05, 2014, 06:17:52 PM |
|
yes, everyone should keep that part I italicized in mind. though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure Looks like ET is an unlucky thief.....
no, it just means that those accounts havent paid/sent NXT yet. ET (or his "stalker" as he calls "it) still has the passphrase to those accounts.
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
|
January 05, 2014, 06:18:29 PM |
|
Thanks! So, either the tainted code had a bug and sent to wrong address or we have a very clever thief who uses accts he has the password to but hasn't funded yet, so it looks like darkNXT. I request a new "feature" for next release. Please make it so that nobody can add a key to these accts in the next release. I think the thief intended to lie low for a while and when we forget about these accts to activate them and retrived loot. Is he that clever? In case he is, why not hard code these accts into new codebase. It already hardcodes genesis block acct #s, small work to prevent heist James
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
|
January 05, 2014, 06:20:55 PM |
|
yes, everyone should keep that in mind. though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure There is no way to be sure something is darkNXT, it can only be unconfirmed darkNXT. Some point down the road when 64bit keys are cracked, it won't be darkNXT anymore, just belongs to server farm that crack all the darkNXT. James
|
|
|
|
gbeirn
|
|
January 05, 2014, 06:22:33 PM |
|
Any trusted people on here want to do a p2p trade of LTC or BTC for NXT? I'm looking to get more NXT
I can do some. How much are you looking for?
|
NXT VPS Server Donations can be sent here: 6044921191674841550At the end of each month I will donate some of them back to the community. This is separate from my main wallet so you can keep track of them. I will keep them in there and only use them for hosting.
|
|
|
laowai80
Member
Offline
Activity: 98
Merit: 10
|
|
January 05, 2014, 06:24:20 PM |
|
I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:
**** I have come up with non-standard attack, call it financial attack.
Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?
Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?
All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.
Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.
James
P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.
I thought it'd be really something terrible when you posted in the flaws thread. I am disappointed, to say the least. No solution is needed. They would have already tried that with bitcoin, if that could work. The more price goes up, the more people will want to buy, it works that way with 95% of people this attack is not possible.
|
|
|
|
bidji29
|
|
January 05, 2014, 06:24:53 PM |
|
I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:
**** I have come up with non-standard attack, call it financial attack.
Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?
Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?
All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.
Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.
James
P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.
In this case it doesn't matter if the NXT send to genesis account are destroyed or not. Because the effect would be the same if the NXT stay in the big buyers account without the intention to sell them. They would be out of the system. And this "attack" work on all cryptocurrency. And I think if a single buyer can buy all of the supply of a currency, then this currency is probably not threatening enough for them to bother
|
|
|
|
|