jtimon
Legendary
Offline
Activity: 1372
Merit: 1002
|
|
February 15, 2012, 06:57:17 PM |
|
http://blockchain.info/poolsWhy are to big unknown hashing sources separated? Is one of them only one miner/pool? Also, does anybody knows more about what's happening? I was used to see known pools dominating the market.
|
|
|
|
pirateat40
Avast Ye!
Sr. Member
Offline
Activity: 378
Merit: 250
"Yes I am a pirate, 200 years too late."
|
|
February 15, 2012, 06:58:55 PM |
|
http://blockchain.info/poolsWhy are to big unknown hashing sources separated? Is one of them only one miner/pool? Also, does anybody knows more about what's happening? I was used to see known pools dominating the market. He just said pool stats would be messed up for a little while.
|
|
|
|
jtimon
Legendary
Offline
Activity: 1372
Merit: 1002
|
|
February 15, 2012, 07:02:14 PM |
|
He just said pool stats would be messed up for a little while.
Thank you. I was kind of worried.
|
|
|
|
realnowhereman
|
|
February 16, 2012, 08:18:03 AM |
|
Let's remember that it is there to prevent someone who has your password gaining access. But if they have the password you'll disable two factor anyway.
The secret phrase is not the same thing as the password. It is a separate phrase that you can optionally set under Account Details. I suppose that is slightly better. It's still one factor authentication though.
|
1AAZ4xBHbiCr96nsZJ8jtPkSzsg1CqhwDa
|
|
|
piuk (OP)
|
|
February 16, 2012, 02:59:04 PM Last edit: February 16, 2012, 03:44:55 PM by piuk |
|
I assume you aren't planning to backload more accurate timestamps (e.g. the time from the block header) and that I should work around this myself?
Sorry no, I don't have any automated way to fix this. You could work around it by fetching the block and getting the correct timestamp. I suppose that is slightly better. It's still one factor authentication though.
The email has to come from the email address registered with the account and the Secret phrase can be as long/random as you want it to be. I'm open to suggestions for better ways to verify the true owner of an account, but this is an anonymous service so asking for any real life identification is out of the question. ----- There have been an increasing number of double spends recently. I'm worried this could be an attempt to exploit blockchain.info's liberal display of transactions. Any address page or transaction will now have a warning attached when a double spend is detected: https://blockchain.info/tx/591b3e1d38e928d35bfef19751da0377b16646ba8af482422d6a0983598da0b9q/getreceivedbyaddress may include unconfirmed double spends in some circumstances. You should not use this to process payments, or at the very least cross check with blockexplorer as well.
|
|
|
|
Rassah
Legendary
Offline
Activity: 1680
Merit: 1035
|
|
February 16, 2012, 03:31:56 PM |
|
There have been an increasing number of double spends recently. I'm worried this could be an attempt to exploit blockchain.info's liberal display of transactions. Any address page or transaction will now have a warning attached when a double spend is detected: https://blockchain.info/tx/591b3e1d38e928d35bfef19751da0377b16646ba8af482422d6a0983598da0b9q/getreceivedbyaddress may include unconfirmed double spends in some circumstances. You should use this to process payments, or at the very least cross check with blockexplorer as well. Every one of my mined P2Pool transactions is marked as a possible Double Spend. I sent an email about that to the person on the contact page. If that's a bug, then the increase in double spends may just be due to increasing popularity of P2Pool.
|
|
|
|
Rassah
Legendary
Offline
Activity: 1680
Merit: 1035
|
|
February 16, 2012, 03:52:55 PM |
|
That's strange, mine aren't. Are you still using spinner as your P2Pool wallet? I wonder if that has anything to do with it?
Two minutes after I posted that I got an email reply that he fixed it
|
|
|
|
Rassah
Legendary
Offline
Activity: 1680
Merit: 1035
|
|
February 16, 2012, 04:15:46 PM |
|
I see. But that leaves me in the dark about the cause! Was it because of using spinner as your P2Pool wallet?
Edit: I'm just curious because at some point I will probably use spinner as my P2Pool address.
No, I was mining to bitcoind to my own address
|
|
|
|
Technomage
Legendary
Offline
Activity: 2184
Merit: 1056
Affordable Physical Bitcoins - Denarium.com
|
|
February 16, 2012, 04:58:39 PM |
|
Down again?
|
Denarium closing sale discounts now up to 43%! Check out our products from here!
|
|
|
piuk (OP)
|
|
February 16, 2012, 05:19:51 PM |
|
I see. But that leaves me in the dark about the cause!
I wasn't checking whether the outpoint of an input was null, so all newly generated coins were showing as double spends. It was a problem with the site, nothing to do with spinner. The bug was only active for a minute or two, before Rassah reported it. Down again?
Looks like tomcat may have stalled for a bit, a rogue spider is causing heavy load.
|
|
|
|
finway
|
|
February 16, 2012, 05:21:57 PM |
|
piuk: do you need Chinese localization service? i'll do it for free.
|
|
|
|
wtfman
Member
Offline
Activity: 118
Merit: 10
BTCServ Operator
|
|
February 17, 2012, 09:33:12 PM |
|
This looks pretty nifty. I noticed on that BTCServ hack that the small part gets spent twice to merge into a 40 BTC address. It would be useful to know what addresses payments get combined with as that may give clues about wallet (like a "back-link" on an address). I have no idea how it could be fit in a diagram because it would get "hairy" fast.
My hypothesis is that the coins change hands at the 40 BTC merge as the ip addresses switch from Germany to U.S. Maybe you could hover over a node to show any new inputs. Also the "Purity" of the coins (i.e. how much they have been mixed with the other transactions) could be represented by the thickness of the line. So, that means the hacker either is close topologically by default or has added manually BTCServ IP as a peer? If the hacker is manually relaying thru BTCServ that's a bit like rubbing salt in a wound! Or another interpretation is that it's still controlled by BTCServ, though obviously not provably.
Or maybe the attacker sent some change back to BTCServe for some reason. I guess no matter how good future tools like this get it will still be almost impossible to prove anything. The 0.63 transaction was a legit withdrawal. I think its displayed because it was happend at the same block count. Also the 419 transaction has been relayed by an US ip, apparently Tor Network. The 0.63 transaction did go out from btcserv.net ip
|
|
|
|
HostFat
Staff
Legendary
Offline
Activity: 4270
Merit: 1209
I support freedom of choice
|
|
February 20, 2012, 01:35:49 PM |
|
Can you add a graph that show the most active countries by transactions? ( on days/months/... )
|
|
|
|
Stephen Gornick
Legendary
Offline
Activity: 2506
Merit: 1010
|
|
February 20, 2012, 07:51:59 PM |
|
Can you add a graph that show the most active countries by transactions? ( on days/months/... ) Are you asking for charts of this data? - http://blockchain.info/nodes-globeAs far as transactions though? Bitcoin, as a peer-to-peer network doesn't reveal the ip address or geographic info. To explain this, do a transaction yourself, and then look at what blockchain.info shows as the "Relayed by ip" -- chances are it is not yours nor a node in the same geographic area as you.
|
|
|
|
piuk (OP)
|
|
February 21, 2012, 03:37:35 PM |
|
Site will be up and down for the next few hours. Making some schema changes.
|
|
|
|
Ente
Legendary
Offline
Activity: 2126
Merit: 1001
|
|
February 21, 2012, 06:36:40 PM |
|
I still see "Warning! this bitcoin address contains transactions which maybe double spends. You should be extremely careful when trusting any transactions to/from this address." on my p2pool payout address. I only received payments from p2pool there, from nowhere else, and didnt transfer funds away yet.
Ente
|
|
|
|
nebulus
|
|
February 21, 2012, 06:41:24 PM |
|
Same shit here, WTF?
|
|
|
|
m3ta
|
|
February 22, 2012, 01:19:52 AM |
|
About the "Warning! this bitcoin address contains transactions which maybe double spends. You should be extremely careful when trusting any transactions to/from this address. ":
- ignorant of how p2pool works. - pathetic. - discriminating. - unprofessional.
To sum it up, sod off, blockchain.info.
|
|
|
|
realnowhereman
|
|
February 22, 2012, 09:52:23 AM |
|
About the "Warning! this bitcoin address contains transactions which maybe double spends. You should be extremely careful when trusting any transactions to/from this address. ":
- ignorant of how p2pool works. - pathetic. - discriminating. - unprofessional.
To sum it up, sod off, blockchain.info.
It's obviously a bug; do calm down.
|
1AAZ4xBHbiCr96nsZJ8jtPkSzsg1CqhwDa
|
|
|
piuk (OP)
|
|
February 22, 2012, 10:02:51 AM |
|
Can someone point me to an address where this bug is occurring please.
|
|
|
|
|