NXT :: descendant of Bitcoin - Updated Information

[EmoneyRu]

WARNING: DO NOT USE VANITYGEN

Why not? Just use it with prefix like z<@\fw4hpt;1Gu4d+;=RfJ4%(/ebqy7H`$:QI2vCTqeg(TAG1F7*6)7dY8b}EgeM

[Come-from-Beyond]

With Account Control, we have the solution. I hope it will get implemented very soon. CfB, ETA?

ETA depends on client developers.

[gimre]

Does anyone have any suggestions on the best tools to find and remove spyware, keyloggers and all others of similar nature?

Avast is the best free antivirus tool that I know of - http://www.avast.com

I use it since 2005, never let me down.

You never heard about FUD crypting, right? I could compromise your machine with a password stealer and you'd never know it, till all your money is gone. Avast or any other anti-virus software can't protect you in this case.

I got 2 FREE GOLDEN advices for Windows users:

• USE INTERNET ON A VIRTUAL MACHINE and use host for banking and currency stuff.
• KEEP YOUR SYSTEM UPDATED
• not an advice - I hope noone here is using Win XP, this is just asking for troubles

There are few out there. VM Player (from VMWare) is available for free, VirtualBox is free, but I remember it having I/O slower than VmWare.
There's paid VmWare workstation. There was also Microsoft Virtual PC, now I think it was rebranded to Hyper-V (I think it's available in Win8).

As soon as you're done with "teh internetz", revert virtual machine to initial state. There, that's it.

Most malware this days relies on 0day exploits. Even with VM you shouldn't feel safe, there's always possibility,
that's something's gonna escape from VM to host. (There were bugs in VMware in it's history)

As a last resort: Use your browser inside sandboxie.

PS Don't think FF is secure.
PS2 Don't think Chrome is secure. (I have access to data that suggest there are in-the-wild WORKING exploits for chrome, sorry, cannot share that data).

If you think the above is worth 0.02$, here's nxt: 6669070404060812420

[allwelder]

The decentralized marketplace will allow people in China to purchase goods with Nxt and other assets listed on the Nxt network.  There won't be a need to convert your cryptocurrency into Reminbi.

Yes,but with more assets and goods listed for exchange is a good news for all of the cryptocurrencies,isnt ?

[Come-from-Beyond]

Bounty announcement

1st one who implements a working (during 7 days at least) SMS-to-NXT gateway will get a bounty. Amount of the bounty will be considered by the community.

Deadline: 28th of February, 2014.

[minusbalancer]

minusbalancer will be open source (minus please elaborate when and how)

Sources will be published to bitbucket, somewhere between 30 Jan - 7 Feb

[rb2]

The decentralized marketplace will allow people in China to purchase goods with Nxt and other assets listed on the Nxt network.  There won't be a need to convert your cryptocurrency into Reminbi.

Yes,but with more assets and goods listed for exchange is a good news for all of the cryptocurrencies,isnt ?

If you want to use a vm, you might consider http://nextcoinbox.github.io/nextcoinbox

[bitcoinpaul]

Bounty announcement

1st one who implements a working (during 7 days at least) SMS-to-NXT gateway will get a bounty. Amount of the bounty will be considered by the community.

Deadline: 28th of February, 2014.

Very nice. Go, folks. Do it!

[Jean-Luc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Release 0.5.9:

http://download.nxtcrypto.org/nxt-client-0.5.9.zip

sha256: 35e0454c0eba551637674fa0e607774b864b0f428b5618f0d14f1ddc8d42cb62

Change log:

Resolved all remaining thread concurrency issues in the block and
transaction handling. All reported null pointer exceptions, division by
zero, and related bugs should not happen anymore. If you see any
errors in the log at all, please report them in our bug database:
https://bitbucket.org/JeanLucPicard/nxt-public/issues

Added Asset Exchange related APIs:
getAskOrder, getAskOrderIds, getBidOrder, getBidOrderIds,
getAccountCurrentAskOrderIds, getAccountCurrentBidOrderIds.

Prevent the Recent Blocks tab in the browser UI from growing beyond
60 blocks. This should help avoid browser slowdown and freeze during
downloading of the whole blockchain from scratch.

Added transaction re-broadcasting. To make sure a new transaction has
been received by the network, it is broadcasted every minute, until
it shows in the list of unconfirmed or confirmed transactions.

The debug logs are quiet now, in fact I haven't seen any exceptions in
the last 24 h of testing this release. Everybody should give it a try as
I hope this is a really stable release. In particular, peers still
running the buggy 0.5.7 will get blacklisted if they don't upgrade,
because they keep broadcasting malformed JSON blocks and will be treated
as zombies.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=EHOk
-----END PGP SIGNATURE-----

[instacalm]

Thank you Jean-Luc, keep it up!

[salsacz]

Apologies to author of vanitygen, this is all conjecture on my part and I do not know if the previous unsolved theft had anything to do with vanitygen.

Author of the Vanitygen is Jean-Luc.

WARNING: For a given secret prefix, the passwords this program generates
are always the same. Therefore, using a strong secret prefix is crucial.
Anyone who can guess your secret prefix can use this program to also
discover your password. You have been warned.

Unless you have a clue what the secret prefix of a particular account would be, it is extremely unlikely to find the password of a specific account.

so the mystery solved? the guy got robbed because he used vanitygen without a prefix. It also means we cannot know who the thief is, we can only check these money. But only if all 3 accs were created by vanitygen.

[instacalm]

Apologies to author of vanitygen, this is all conjecture on my part and I do not know if the previous unsolved theft had anything to do with vanitygen.

Author of the Vanitygen is Jean-Luc.

WARNING: For a given secret prefix, the passwords this program generates
are always the same. Therefore, using a strong secret prefix is crucial.
Anyone who can guess your secret prefix can use this program to also
discover your password. You have been warned.

Unless you have a clue what the secret prefix of a particular account would be, it is extremely unlikely to find the password of a specific account.

so the mystery solved? the guy got robbed because he used vanitygen without a prefix. It also means we cannot know who the thief is, we can only check these money.

No, his Windows system was most likely compromised with keylogger/trojan. He didn't use vanitygen at all, afaik.

[pinarello]

minusbalancer will be open source (minus please elaborate when and how)

Sources will be published to bitbucket, somewhere between 30 Jan - 7 Feb

Thank you very much.

Your work is much appreciated by the community

Pin

[bitcoinpaul]

did you use any additional program? non official client? ballancer?

well, i used the 2 Java vanity files posted in this thread. But that was days ago.

so the mystery solved? the guy got robbed because he used vanitygen without a prefix.

No, his Windows system was most likely compromised with keylogger/trojan. He didn't use vanitygen at all, afaik.

Well, he used it for at least one account with this password: es4678jhGR5.,uTTGGGdef35ujfg!7e3
But the other 2 account# look normal, so it was most likely a keylogger/trojan.

[Jean-Luc]

No, his Windows system was most likely compromised with keylogger/trojan. He didn't use vanitygen at all, afaik.

I also want to repeat my advice to use private browsing mode, or a separate browser profile, when accessing the Nxt server at localhost. It is a known issue that localhost url's containing the user secret phrase are retained in the browser memory cache. Could a malicious javascript planted on some website access and retrieve those?

[admiral.fu]

After news about NEX maybe it makes sense to hold the horses a bit and do less opensource for now.

[pinarello]

After news about NEX maybe it makes sense to hold the horses a bit and do less opensource for now.

 

[starik69]

WARNING: DO NOT USE VANITYGEN

pump.

Well, i used vanitygen for account in my sig. If hacker is reading this he can prove his skills by cracking it. Btw, passphrase is less than 30 characters.

[pinarello]

I am very impressed the way 0.5.9 downloaded the blockchain without the hanging of the browser!

also very fast

congratz

Pin

[Come-from-Beyond]

After news about NEX maybe it makes sense to hold the horses a bit and do less opensource for now.

There r still a few surprises left for guys who used to use decompiled binaries.