NXT :: descendant of Bitcoin - Updated Information

[opticalcarrier]

+1
If the stolen NXT turn out to be darkNXT, then EpicThomas is just the worlds most unlucky hacker/thief, but if they are in activated accounts then Marshal Ricky has probably got more work to do: either setting the Federales on ET or tracking down some more badguys to round up.

And if the earlier thefts/incidents (ie from before ET set up the poisoned client) turn out to be darkNXT'ed and not stolen, we only have a bug to deal with, not an unknown exploit with someone siphoning account funds.

@rickyjames: good work, mate. Love the accent, btw.

Did I miss something?  where did we begin suspecting the stolen nxt (from when AFTER epicthomas released his trojan) was sent to dark accounts?  Its very easy to find out if an acct is dark:

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=PUTACCT#HERE

and if a loong public key is returned then its not a dark account

[xyzzyx]

Can I donate to this site owner so he can buy a domain name?

Use NXTblockchain.com - it redirects to the Blockchain Explorer.

nxtblockchain.com redirect to google.com for me.

nxt:explorer or http://22k.io/explorer

[jl777]

can you give us ripple dummies a quick 1,2,3 step by step of getting USD/EUR/etc into the ripple network to buy XRP?  Then I assume it operated like a normal exchange from there?

I would recommend starting with BTC and NXT.  There are plenty of fiat gateways (including peercover) but with the usual paperwork delays.

Step 1: create ripple acct
Step 2: post your ripple address and I will send you 30 XRP
Step 3: goto simpleGateway and deposit BTC (need to add trustline for this)
Step 4: goto ripple wallet trade page and select NXT/BTC with peercover ra9eZxMbJrUcgV8ui7aPc161FgrqWScQxV as issuer
Step 5: enjoy frictionless trading by submitting buy and sell orders

James

P.S. Step 6, send me back my 30XRP or .001 BTC or 10NXT

Hey James, i really want to try simpleGateway, can you give a more detailed step-by-step-guide for trading BTC <-> NXT? With links and all? How exactly to deposit BTC? Are they gonna be aotomatically transferred to XRP?

Also i have some LTC and i saw that on the simpleGateway i could deposit LTC too? How is that done?


Edit: I'm at step 2 now - my ripple-address is r3mVGEhSxiMt8GdVfKgeC3tkw9jRPWCaNP

Sent you 30XRP
Currently there is no direct market for NXT/BTC. You would have to sell BTC for XRP and then use XRP to purchase NXT. If you need, I can buy your BTC or LTC at market price, just let me know how much so I can be sure I can handle it now. Basically, once you deposit BTC or LTC using the simpleGateway, it goes into your ripple wallet. To convert it to XRP you need to make sure you have a buyer for it. The orderbook on ripple is pretty thin, so prearranging is best. We agree on price, you make a sell offer at that price for BTC.peercover or LTC.peercover and I put in a matching buy offer.

You get the XRP and I get your BTC or LTC.

Once you have XRP you can purchase NXT/XRP.

Make sure to specify peercover ripple address ra9eZxMbJrUcgV8ui7aPc161FgrqWScQxV as the issuer of NXT, BTC, LTC. XRP has no issuer.

James

[bitcoinrocks]

nxt:explorer or http://22k.io/explorer

Thank you.

[jl777]

+1
If the stolen NXT turn out to be darkNXT, then EpicThomas is just the worlds most unlucky hacker/thief, but if they are in activated accounts then Marshal Ricky has probably got more work to do: either setting the Federales on ET or tracking down some more badguys to round up.

And if the earlier thefts/incidents (ie from before ET set up the poisoned client) turn out to be darkNXT'ed and not stolen, we only have a bug to deal with, not an unknown exploit with someone siphoning account funds.

@rickyjames: good work, mate. Love the accent, btw.

Did I miss something?  where did we begin suspecting the stolen nxt (from when AFTER epicthomas released his trojan) was sent to dark accounts?  Its very easy to find out if an acct is dark:

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=PUTACCT#HERE

and if a loong public key is returned then its not a dark account

I have not seen anybody actually do this. I am on Mac OSX 10.6.8 which does not run the required java so I cannot run the NRS until I get back home on Wed. Can someone do this and confirm whether these accts stolen funds have a key or not?

James

[salsacz]

I have updated the bounty votes spreadsheet to include all votes up to post 14728:
...
All I did here was tally votes to help save folks time!

actually 24 hours passed after post nr. 14621

[Come-from-Beyond]

I have updated the bounty votes spreadsheet to include all votes up to post 14728:
...
All I did here was tally votes to help save folks time!

actually 24 hours passed after post nr. 14621

No problem here. Rewards will be paid within several days coz a lot of links have to be revised.

[xyzzyx]

I have not seen anybody actually do this. I am on Mac OSX 10.6.8 which does not run the required java so I cannot run the NRS until I get back home on Wed. Can someone do this and confirm whether these accts stolen funds have a key or not?

I did it locally back when they first were reported.  They didn't have public keys assigned then.

The list from the rickyjames post https://bitcointalk.org/index.php?topic=345619.msg4321533;topicseen#msg4321533 returns:

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=15182566201738727933
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=9793828175536096502
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=12152013998194592943
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

[pinarello]

please go vote for the forum lay out

thank you

https://forums.nxtcrypto.org/viewtopic.php?f=26&t=343

Pin

[mcjavar]

Guys any link to 0.5? First page link doesnt work.

• Open Jean-Luc profile
• Press "Show the last posts of this person."
• Scroll down

We didn't organize it well for this release, but from now on new releases should always appear on http://info.nxtcrypto.org in addition to my announcement here. And you should be able to use the built-in update checker, http://localhost:7874/update.html to check for new versions, and download and verify the zip package.

Would it be possible to add a simple button in the current ui that leads to the update.html?

[EvilDave]

I have not seen anybody actually do this. I am on Mac OSX 10.6.8 which does not run the required java so I cannot run the NRS until I get back home on Wed. Can someone do this and confirm whether these accts stolen funds have a key or not?

I did it locally back when they first were reported.  They didn't have public keys assigned then.

The list from the rickyjames post https://bitcointalk.org/index.php?topic=345619.msg4321533;topicseen#msg4321533 returns:

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=15182566201738727933
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=9793828175536096502
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=12152013998194592943
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

Just checking this myself, but xyzzyx beat me to posting it.

I can confirm that all of these accounts return no public string:

For the record, the lost/stolen NXT is here:

13643712185318669838  contains 100088 NXT taken from Framewood's   697109629372813510  
15182566201738727933  contains 18665 NXT taken from plasticAiredale's    8439060069775407509      
16204974692852323982  contains 7808  NXT taken from PaulyC's  16821029889165561706    
9793828175536096502   contains 18197 NXT taken from newcn's   16886318053889080545    
12152013998194592943  contains  147690 NXT  taken from sparta_cuss's  11794318797680953099    


Note that

16204974692852323982  also contains 1155  NXT moved from four other accounts

and just to check, I ran my account and a couple of other sig accounts, all returned nice fat public keys.

Looks like ET is an unlucky thief.....

[jl777]

I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:

****
I have come up with non-standard attack, call it financial attack.

Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?

Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?

All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.

Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.

James

P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.

[opticalcarrier]

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

yes, everyone should keep that part i italicized in mind.  though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure

[bitcoinpaul]

I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:

****
I have come up with non-standard attack, call it financial attack.

Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?

Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?

All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.

Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.

James

P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.

Very good, Sir. And so simple!

[opticalcarrier]

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

yes, everyone should keep that part I italicized in mind.  though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure

Looks like ET is an unlucky thief.....

no, it just means that those accounts havent paid/sent NXT yet.  ET (or his "stalker" as he calls "it) still has the passphrase to those accounts.

[jl777]

I have not seen anybody actually do this. I am on Mac OSX 10.6.8 which does not run the required java so I cannot run the NRS until I get back home on Wed. Can someone do this and confirm whether these accts stolen funds have a key or not?

I did it locally back when they first were reported.  They didn't have public keys assigned then.

The list from the rickyjames post https://bitcointalk.org/index.php?topic=345619.msg4321533;topicseen#msg4321533 returns:

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=15182566201738727933
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=9793828175536096502
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=12152013998194592943
{}

http://localhost:7874/nxt?requestType=getAccountPublicKey&account=16204974692852323982
{}

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

Thanks!

So, either the tainted code had a bug and sent to wrong address or we have a very clever thief who uses accts he has the password to but hasn't funded yet, so it looks like darkNXT.

I request a new "feature" for next release. Please make it so that nobody can add a key to these accts in the next release. I think the thief intended to lie low for a while and when we forget about these accts to activate them and retrived loot. Is he that clever? In case he is, why not hard code these accts into new codebase. It already hardcodes genesis block acct #s, small work to prevent heist

James

[jl777]

All haven't had transactions out yet.  Doesn't mean the're necessarily darkNXT, though.


BTW, if you need to check, you can use a public node:
http://node1.nxtbase.com:7874/nxt?requestType=getAccountPublicKey&account=13643712185318669838

for example.

yes, everyone should keep that in mind.  though preferably I wish a API were made that would give the total nxt in circulation as 1billion minus destroyed nxt minus darknxt and I wish coinmarketcap would use that figure

There is no way to be sure something is darkNXT, it can only be unconfirmed darkNXT. Some point down the road when 64bit keys are cracked, it won't be darkNXT anymore, just belongs to server farm that crack all the darkNXT.

James

[gbeirn]

Any trusted people on here want to do a p2p trade of LTC or BTC for NXT?  I'm looking to get more NXT

I can do some. How much are you looking for?

[laowai80]

I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:

****
I have come up with non-standard attack, call it financial attack.

Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?

Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?

All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.

Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.

James

P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.

I thought it'd be really something terrible when you posted in the flaws thread. I am disappointed, to say the least. No solution is needed. They would have already tried that with bitcoin, if that could work. The more price goes up, the more people will want to buy, it works that way with 95% of people this attack is not possible.

[bidji29]

I have "discovered" a serious flaw in NXT. The IMF exists to stop the opposite attack on fiats, eg. massive short selling. CfB says this attack is well known, but I didn't know about it and so maybe you don't know about it either. I was told to post it publicly, so here it is:

****
I have come up with non-standard attack, call it financial attack.

Short term, this "attack" would be considered as fantastic by most NXT'ers and it consists of simply buying up all the NXT. Crazy, expensive?

Consider you are large govt with fiat of trillions of dollars, billion dollars is lunch money. They can easily win the "war on NXT". What happens if large scale accumulation of NXT occurs with $10 billion budget. How much of NXT will be left?

All accumulated NXT can be destroyed by sending to genesis acct permanently crippling NXT market. Or it can be converted to many darkNXT accts so nobody would even realize it is happening. I am assuming if we started seeing a lot of NXT being sent to genesis acct, we would notice, but so far no darkNXT detection is implemented. Without realizing, 90%+ of NXT could be destroyed with $10 billion.

Actually at $10 NXT, who wouldn't sell their NXT, so how much NXT will survive a financial attackers $10/NXT bid, especially if it was done cleverly to avoid detection? 1% left? Maybe even less. With .01 precision, smallest increment will be 10 cents even without any more price increase. NXT would be useless for microtransactions, until support is added for microNXT.

James

P.S. Solution is to not destroy NXT when sent to genesis acct, just have it automatically put into community fund. Also, PREVENT darkNXT at the protocol level. I guess evil financial attacker could simply destroy their key though so even with darkNXT fixed, there is no solution to this attack.

In this case it doesn't matter if the NXT send to genesis account are destroyed or not.
Because the effect would be the same if the NXT stay in the big buyers account without the intention to sell them. They would be out of the system.

And this "attack" work on all cryptocurrency.
And I think if a single buyer can buy all of the supply of a currency, then this currency is probably not threatening enough for them to bother