NXT :: descendant of Bitcoin - Updated Information

[Damelon]

I did the same for some community domains like nxtassetexchange.com and nxtaliasexchange.com. Yesterday's irritating squat of localnxt.com moved me to "anti-squat" some of these domains. I have

We know what you're doing on there

Hey, sex sells!
If it ain't broken, don't fix it.

[Mistafreeze]

NXT Reference Client Web Installer BETA

Nxt 0.5.9 Web Setup.exe

SHA-256: 1E7AF548B4996E13635529EAB807D059A3E1BF31C20FA9437649162EB39859E4

Virus Scan : Jotti.org

If you guys wouldn't mind, give this a shot for me. This is a web installer for Nxt 0.5.9. It will download nxt-client-0.5.9.zip and Blocks.zip during the install. nxt-client-0.5.9.zip will be left behind at C:\nxt\ if you do not check the box (shown below) at the end of the install to delete it. This gives the user the opportunity to verify the checksum of the sources used.



If you guys like this, I'll go this route from now on with my installer starting with 0.6.0.
I also updated all icons and logos to ones from the Nxt Media Kit.

[newcn]

NEWS FLASH: Stolen NXT On The Move

To catch a thief, follow the money NXT

Huh, nothing like a big price rise to make a thief break cover.

I just got a PM from plasticAiredale, who has been looking longingly at his lost/stolen NXT in its bandit/darkNXT/who-knows-what account.  

What an amazing coincidence, the price of NXT skyrockets and that NXT has now apparently been transferred into Dgex.  

Guess that wasn't darkNXT after all - SOMEBODY had a code to move it around...

For the record, where we left the EpicThomas saga in our last chapter:

13643712185318669838  contains 100088 NXT taken from Framewood's   697109629372813510  
15182566201738727933  contains 18665 NXT taken from plasticAiredale's    8439060069775407509      
9793828175536096502   contains 18197 NXT taken from newcn's   16886318053889080545    
12152013998194592943  contains  147690 NXT  taken from sparta_cuss's  11794318797680953099
  
16204974692852323982  contains 7808  NXT taken from PaulyC's  16821029889165561706  

...with 16204974692852323982 containing transfers in of an additional 1155NXT from four other transfers on 29.12.2013 08:19:00 thru 08:21:32, and EpicThomas claiming he never touched any of these accounts and the transfers just sort of happened on their own as part of some software bug or piggy-back hacker, and me showing a little mercy...

Now, the saga continues:


13643712185318669838 has transferred Framewood's 100,087 NXT to 2647797480528736696 at timestamp 20.01.2014 00:12:24
15182566201738727933 has transferred plasticAiredale's 18,663 NXT to 2647797480528736696 at timestamp 20.01.2014 00:13:55
9793828175536096502 has transferred newcn's 18,196 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:24
12152013998194592943 has transferred sparta_cuss's 147,690 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:59

16204974692852323982 has transferred PaulyC's 8,962 NXT to 7434018619814562489 at timestamp 19.01.2014 23:44:52

7434018619814562489 has transferred 61,372 NXT total to 12407220479703463755 at timestamp 19.01.2014 23:44:52

Note:

7434018619814562489 has previously received 9,527 NXT from 6164081464868000542 at timestamp 19.01.2014 23:44:05 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,194 NXT from 16143592223796100493 at timestamp 19.01.2014 23:42:11 ; is this stolen NXT from a previous heist ?
7434018619814562489 has previously received 24,648 NXT from 17670462608804215164 at timestamp 19.01.2014 23:41:31 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,042 NXT from 14527793117125736279 at timestamp 19.01.2014 23:40:35 ; is this stolen NXT from a previous heist?

2647797480528736696 has previously received 1,226 NXT from 11093204588975801957 at timestamp 20.01.2014 00:15:50 ; is this stolen NXT from a previous heist?

So... known stolen NXT from five known heists plus possible stolen NXT from five other possible heists are now in two brand-new "CLEAN NUMBER" accounts:

12407220479703463755 containing 61,372 NXT currently worth approximately $6,500 USD (PaulyC)
2647797480528736696 containing 285,859 NXT currently worth approximately $30,000 USD (Framewood, plasticAiredale, newcn, sparta_cuss)


Now the NXT is in "clean" new NXT accounts, time for the thief to send it to exchanges for BTC:


12407220479703463755 has transferred 61,371 NXT total to 10715382765594435905 at timestamp 19.01.2014 00:18:44

10715382765594435905 is a huge trading account, 1,340+ transfers, currently with 21M NXT ; salsacz thinks this is Bter?

2647797480528736696 has transferred 284,634 NXT to 6635869272840226493 at timestamp 20.01.2014 00:18:44

6635869272840226493 is definitely DGex

I have sent numerous emails and PMs to Graviton asking him to freeze trading on 2647797480528736696 and ID the user

I will send the same to Bter about 12407220479703463755.

EpicThomas, if I find out this is you and that you have played me for a fool, I am going to take vacation days from work and come to visit my sister in Florida and do a ride-along with the Orlando FBI when they come to put handcuffs on you.

great job!  
I focused on some of the accounts in the early days when I was stolen, but I didn't check them recently.
thank you rickyjames, and other people who helped  discovering the case.

[gbeirn]

Just for old times sake, here is a block check:

46958      8797677203327163788      woensdag 22 januari 2014 1:27:55   
      
      3      1'043 + 3      384 B   
      
      2      9393619519750392302      204 %   



And I want to put in a claim for a possible NXT record:

My VPS has been up running NRS 5.7 for over 6 days straight. No reboot, no problems.
146 hours !

I've accumulated 2236 active peers, is this a record ? Can anyone beat it?



Last very important point;

Everyone who reads this, pat yourselves on the back.
NXT is going to be huge and it is all because of ............you.
To the awesome community of talented, dedicated and sometimes just plain weird and wonderful NXT'ers:

Nice work, guys, onwards and upwards !
   

I got you beat EvilDave:

[okaynow]

bter, a minute ago
909,090.909 NXT @ 0.00011000

[opticalcarrier]

If you guys like this, I'll go this route from now on with my installer starting with 0.6.0.
I also updated all icons and logos to ones from the Nxt Media Kit.

This is more along the lines of how I felt it should go, with a core provided by dev an a wrapper-type installer.  Very slick you provide options to download.  Even better would be to have it ship with a list of wellknown hosts that your app can use to poll public VPSs to query the latest version and checksum and upon a consensus will download that, and optimally even checksum the downloaded file before unzipping

nice work

[rickyjames]

NEWS FLASH: Stolen NXT On The Move

To catch a thief, follow the money NXT

Huh, nothing like a big price rise to make a thief break cover.

I just got a PM from plasticAiredale, who has been looking longingly at his lost/stolen NXT in its bandit/darkNXT/who-knows-what account.  

What an amazing coincidence, the price of NXT skyrockets and that NXT has now apparently been transferred into Dgex.  

Guess that wasn't darkNXT after all - SOMEBODY had a code to move it around...

For the record, where we left the EpicThomas saga in our last chapter:

13643712185318669838  contains 100088 NXT taken from Framewood's   697109629372813510  
15182566201738727933  contains 18665 NXT taken from plasticAiredale's    8439060069775407509      
9793828175536096502   contains 18197 NXT taken from newcn's   16886318053889080545    
12152013998194592943  contains  147690 NXT  taken from sparta_cuss's  11794318797680953099
  
16204974692852323982  contains 7808  NXT taken from PaulyC's  16821029889165561706  

...with 16204974692852323982 containing transfers in of an additional 1155NXT from four other transfers on 29.12.2013 08:19:00 thru 08:21:32, and EpicThomas claiming he never touched any of these accounts and the transfers just sort of happened on their own as part of some software bug or piggy-back hacker, and me showing a little mercy...

Now, the saga continues:


13643712185318669838 has transferred Framewood's 100,087 NXT to 2647797480528736696 at timestamp 20.01.2014 00:12:24
15182566201738727933 has transferred plasticAiredale's 18,663 NXT to 2647797480528736696 at timestamp 20.01.2014 00:13:55
9793828175536096502 has transferred newcn's 18,196 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:24
12152013998194592943 has transferred sparta_cuss's 147,690 NXT to 2647797480528736696 at timestamp 20.01.2014 00:14:59

16204974692852323982 has transferred PaulyC's 8,962 NXT to 7434018619814562489 at timestamp 19.01.2014 23:44:52

7434018619814562489 has transferred 61,372 NXT total to 12407220479703463755 at timestamp 19.01.2014 23:44:52

Note:

7434018619814562489 has previously received 9,527 NXT from 6164081464868000542 at timestamp 19.01.2014 23:44:05 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,194 NXT from 16143592223796100493 at timestamp 19.01.2014 23:42:11 ; is this stolen NXT from a previous heist ?
7434018619814562489 has previously received 24,648 NXT from 17670462608804215164 at timestamp 19.01.2014 23:41:31 ; is this stolen NXT from a previous heist?
7434018619814562489 has previously received 9,042 NXT from 14527793117125736279 at timestamp 19.01.2014 23:40:35 ; is this stolen NXT from a previous heist?

2647797480528736696 has previously received 1,226 NXT from 11093204588975801957 at timestamp 20.01.2014 00:15:50 ; is this stolen NXT from a previous heist?

So... known stolen NXT from five known heists plus possible stolen NXT from five other possible heists are now in two brand-new "CLEAN NUMBER" accounts:

12407220479703463755 containing 61,372 NXT currently worth approximately $6,500 USD (PaulyC)
2647797480528736696 containing 285,859 NXT currently worth approximately $30,000 USD (Framewood, plasticAiredale, newcn, sparta_cuss)


Now the NXT is in "clean" new NXT accounts, time for the thief to send it to exchanges for BTC:


12407220479703463755 has transferred 61,371 NXT total to 10715382765594435905 at timestamp 19.01.2014 00:18:44

10715382765594435905 is a huge trading account, 1,340+ transfers, currently with 21M NXT ; salsacz thinks this is Bter?

2647797480528736696 has transferred 284,634 NXT to 6635869272840226493 at timestamp 20.01.2014 00:18:44

6635869272840226493 is definitely DGex

I have sent numerous emails and PMs to Graviton asking him to freeze trading on 2647797480528736696 and ID the user

I will send the same to Bter about 12407220479703463755.

EpicThomas, if I find out this is you and that you have played me for a fool, I am going to take vacation days from work and come to visit my sister in Florida and do a ride-along with the Orlando FBI when they come to put handcuffs on you.

great job!  
I focused on some of the accounts in the early days when I was stolen, but I didn't check them recently.
thank you rickyjames, and other people who helped  discovering the case.

Let me give my final update on this topic by reaching out with an open hand to two outstanding NXTers.  

I could not have done what little I have done regarding EpicThomas without the real detective work by all the folks mentioned in this post by Salsacz :

https://bitcointalk.org/index.php?topic=345619.msg4651128#msg4651128

...and most importantly by detective work by Salsacz himself.   I believe in giving credit where credit is due, and Salsacz deserves A LOT of credit for his work on this site in MANY areas - advertising and hacker tracking and much more.   I may have made a big splash in the past few weeks chasing EpicThomas with big words and big graphics, but I never intended for that to overshadow the real work and real dedication and real effort by others who deserve praise for their actions that further the cause of NXT a lot more than I do.  If I've ruffled any feathers with my bluster, I apologize for that.

Secondly I would like to clarify something I said above about Graviton.  I mentioned that I had sent numerous PMs and emails to him to inform him of the movement of stolen NXT thru DGex.  This was not meant to imply that he was unresponsive and needed prodding from repeated communications from me.  Just the opposite - I sent one email to many locations simultaneously, to reach him as quickly as possible, not knowing which would reach him first, and he responded back to me very quickly.  Graviton has taken a lot of heat over Dgex lately, and I do not want to add any further fuel to any of the fires around him.   He has always given me good service at Dgex and has always been responsive to my direct communications with him.  I consider Graviton to be an honorable man trying hard to provide not one but two vital services to the NXT community, both with his forum and with his exchange.  As with Salsacz, Graviton's service to the NXT community far exceeds my own in chasing EpicThomas.

And with that, let me pass on what information I have received from Graviton:

*********** BEGIN GRAVITON COMMENTS**********************

"The BTC from the apparently stolen NXT were cashed out yesterday morning, so what I have left is some info if anything....

10715382765594435905 is not a DGEX account.

We had a moderately large deposit two days ago from 2647797480528736696, washing it quickly through instant withdrawals to BTC.

The owner of the account is a well known and reputable NXT community member."

*********** END GRAVITON COMMENTS**********************

If the owner of 2647797480528736696 is "a well known and reputable NXT community member", then it's not EpicThomas.

Guess I'm not going to Florida to see my sister Connie.

Instead, it looks like maybe darkNXT can be harvested, or maybe (to quote Hamlet) something is rotten in the state of Denmark, or maybe something else is going on that I don't understand and that's way beyond me.  

I think I will pull the brim of my fedora down over my eyes and walk away down the dark street now, becoming increasingly distant in bright pools of light laid down by the streetlamps.  

See y'all.

[opticalcarrier]

so whats it gonna take to get graviton to release the name?  did his users agree to any privacy policy?

And I think you misunderstand hiberNXT - just because it doesnt have a public key associated with it does NOT mean that nobody knows the password to the account.

Think about your very first NXT account you had when someone sent you some NXT but you had no outgoing transactions.  Those funds in your NXT account were hiberNXT.  The only difference is you did know its password, you just hadnt used it yet.

How can we get the name???  And what was the total funds stolen by this wellknown/respected member?

[Mistafreeze]

If you guys like this, I'll go this route from now on with my installer starting with 0.6.0.
I also updated all icons and logos to ones from the Nxt Media Kit.

This is more along the lines of how I felt it should go, with a core provided by dev an a wrapper-type installer.  Very slick you provide options to download.  Even better would be to have it ship with a list of wellknown hosts that your app can use to poll public VPSs to query the latest version and checksum and upon a consensus will download that, and optimally even checksum the downloaded file before unzipping

nice work

I'm playing with checksum verification within the installer, but I'm not quite there yet.

[salsacz]

so whats it gonna take to get graviton to release the name?  did his users agree to any privacy policy?

Privacy Policy: Any details provided to us as a result of requesting any of our services are strictly confidential. Your details will not be shared, sold, rented or divulged to any third party under any circumstances unless specifically being forced to do so by appropriate legal authorities and / or in the event that your transactions are proven to be fraudulent.

Ricky, you know what to do

[rickyjames]

And I think you misunderstand hiberNXT - just because it doesnt have a public key associated with it does NOT mean that nobody knows the password to the account.

Think about your very first NXT account you had when someone sent you some NXT but you had no outgoing transactions.  Those funds in your NXT account were hiberNXT.  The only difference is you did know its password, you just hadnt used it yet.

Nope, I fully understand the difference between darkNXT and hiberNXT. 

DarkNXT is effectively like sunken treasure on a ship that has sunk to the bottom of the ocean.  If you are somehow smart enough to hack the entrance code (or maybe have a trapdoor to find it?) , it's pretty much morally yours under salvage law.

HiberNXT is, as you say, sitting there waiting for somebody who deliberately created the passcode to use it for the first time.  Like possibly a "well known and reputable NXT community member" who did so four times in a 180 second window after a three-week cool-down period. 

As I've always said, something scary is going on that we STILL haven't gotten to the bottom of.  And I'm not the man to go down this mean street...

http://quotes.dictionary.com/down_these_mean_streets_a_man_must_go

[rickyjames]

Ricky, you know what to do

Sigh.  I'm pretty sure Dgex is European, right?  That's your side of the pond, not mine.

Edited to add:

I've narrowed it down to Scenario 3 as being the truth:

https://bitcointalk.org/index.php?topic=345619.msg4321533#msg4321533


"3. There is one or more completely independent hacker(s) out there who took the 300K NXT from five accounts as part of a completely different heist and is laughing at all of us right now because we are not even on their trail yet."

Maybe the community can vote on what to do next.

[TwinWinNerD]

So guys, i decided to reenter the NXT market after my theft. Could you all please dump the price to 0.00005?
 I want to atleast own 50000 NXT. (Or someone could sell me 50000 NXT pretty please )

[salsacz]

How can we get the name???  And what was the total funds stolen by this wellknown/respected member?

ask graviton

12407220479703463755 containing 61,372 NXT currently worth approximately $6,500 USD (PaulyC)
2647797480528736696 containing 285,859 NXT currently worth approximately $30,000 USD (Framewood, plasticAiredale, newcn, sparta_cuss)

[r3animation]

Ricky, you know what to do

Sigh.  I'm pretty sure Dgex is European, right?  That's your side of the pond, not mine.

Edited to add:

I've narrowed it down to Scenario 3 as being the truth:

https://bitcointalk.org/index.php?topic=345619.msg4321533#msg4321533


"3. There is one or more completely independent hacker(s) out there who took the 300K NXT from five accounts as part of a completely different heist and is laughing at all of us right now because we are not even on their trail yet."

Maybe the community can vote on what to do next.

Can you add my 500,360 NXT (86162509365658888) to your list?

[evanxxx]

please check this
http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=6635869272840226493

While I am writing, recent transfers for the account are all transfer in, the transfer amount is more than 6M, while the balance of the account is less than 3M, how could this happen?

[LiQio]

please check this
http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=6635869272840226493

While I am writing, recent transfers for the account are all transfer in, the transfer amount is more than 6M, while the balance of the account is less than 3M, how could this happen?

there are more pages
(that's dgex account btw)

[evanxxx]

please check this
http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=6635869272840226493

While I am writing, recent transfers for the account are all transfer in, the transfer amount is more than 6M, while the balance of the account is less than 3M, how could this happen?

there are more pages
(that's dgex account btw)

Page 1 is the most recent records, right?  The balance is less than the recent transfer amount (which all are transfer in),  doesn't that mean the balance is negative before those transfers?

[LiQio]

*********** BEGIN GRAVITON COMMENTS**********************

"The BTC from the apparently stolen NXT were cashed out yesterday morning, so what I have left is some info if anything....

10715382765594435905 is not a DGEX account.

We had a moderately large deposit two days ago from 2647797480528736696, washing it quickly through instant withdrawals to BTC.

The owner of the account is a well known and reputable NXT community member."

*********** END GRAVITON COMMENTS**********************

@Graviton: would you mind to define "well known and reputable"?
(amount of posts in forums? which forums? member status? anything...)

[relm9]

please check this
http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=6635869272840226493

While I am writing, recent transfers for the account are all transfer in, the transfer amount is more than 6M, while the balance of the account is less than 3M, how could this happen?

there are more pages
(that's dgex account btw)

Page 1 is the most recent records, right?  The balance is less than the recent transfer amount (which all are transfer in),  doesn't that mean the balance is negative before those transfers?

Something is wrong with the site, on the blockchain in my local client I'm seeing 213 confirmations on that transaction - while on the site, it says 3

http://87.230.14.1/nxt/nxt.cgi?action=2000&tra=10556286089892141388

Also see here

http://www.mynxt.info/blockexplorer/details.php?action=ac&ac=6635869272840226493

I believe those other transactions came after the 5 M, not sure why the other blockchain site has the order messed up.