dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 03, 2013, 11:13:51 PM |
|
OMG Are existing coins safe? ?
|
|
|
|
casascius (OP)
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
August 03, 2013, 11:31:38 PM |
|
Spoke with him today and he was pretty open with me on what he did, and expressed a willingness to test some improvements I have in mind. Existing coins are safe, of course: one had to have physical access to your coin to compromise it, and as I understood it, there was slight visible damage in the process. Remember, this guy attacks stuff like this as a hobby, it is not as though everyone out there will suddenly succeed in attacking their coins. The rimming I do on the 1 BTC silver may be more challenging and he says he will be getting one tomorrow to attack. With what I know of the attack, making laser marks on the hologram will make it far more difficult.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 03, 2013, 11:41:57 PM |
|
Spoke with him today and he was pretty open with me on what he did, and expressed a willingness to test some improvements I have in mind. Existing coins are safe, of course: one had to have physical access to your coin to compromise it, and as I understood it, there was slight visible damage in the process. Remember, this guy attacks stuff like this as a hobby, it is not as though everyone out there will suddenly succeed in attacking their coins. The rimming I do on the 1 BTC silver may be more challenging and he says he will be getting one tomorrow to attack. With what I know of the attack, making laser marks on the hologram will make it far more difficult. ok, I will rpobably sleep well now (I have about half of my bitcoins in your physical form, for investment reasons. I think the premium on those coins will rise in a few years )
|
|
|
|
casascius (OP)
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
August 04, 2013, 11:14:01 PM |
|
Hi Mike
I put in a big order and was about to pay tonight when i noticed the apparent issue with the holograms from deacon.
Obviously i completely trust them coming from you but for me to be able to resell them it is going to be harder.
Is there anyway of letting my potential customers know that I am the only other person to have touched this coin and it has come directly from you? Ideally a list of the coins i have purchased from you?
Thanks mate, sorry to hear about the crack, it must be very frustrating
Since your question is going to be asked frequently, I answered it publicly here. http://casascius.wordpress.com/2013/08/04/def-con-21-preliminary-results-from-sunday/Not frustrated though - I presumed an attack was possible, I assume one always will be, it's just a matter of time and interest. Casascius Coins are now interesting enough to attack at Def Con... an achievement in and of itself.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
miffman
Legendary
Offline
Activity: 1904
Merit: 1005
PGP ID: 78B7B84D
|
|
August 13, 2013, 06:00:54 PM |
|
Edit: And for a size comparison for Europeans, there's the €2 and €0.05 coin. the amount of money this is worth today makes me wanna cry
|
█ █ █ █ █ █ █ █ █ █ █ █
|
█ █ █ █ █ █ █ █ █ █ █
| | BitBlender |
█ █ █ █ █ █ █ █ █ █ █ █
|
█ █ █ █ █ █ █ █ █ █ █ █
| |
█ █ █ █ █ █ █ █ █ █ █
| █ █ █ █ █ █ █ █ █ █ █
| |
|
|
|
|
icey
Legendary
Offline
Activity: 1578
Merit: 1000
May the coin be with you..
|
|
August 13, 2013, 06:34:30 PM |
|
Now, those are two sexy pictures!
|
|
|
|
BTCurious
|
|
August 13, 2013, 08:48:55 PM |
|
Now, those are two sexy pictures! Thanks ^_^ I've sold nearly all of the coins in that picture. I've got 1 silver left that I'm not selling, and none of the original series coins. I've got a number of series 2 still though, and a few 5BTC coins. All in a bank safe nowadays, since these things are so expensive The only coins in that picture that didn't significantly increase in value... ...are the Euro coins for size comparison
|
|
|
|
nubbins
Legendary
Offline
Activity: 1554
Merit: 1009
|
|
August 13, 2013, 08:57:13 PM |
|
Love the look of those 25s as well. Really classy.
|
|
|
|
BTCurious
|
|
August 14, 2013, 07:46:55 AM |
|
Love the look of those 25s as well. Really classy. Personally, they're not my favorite. I prefer the look of the 1000 BTC gold coin, but I never bought one
|
|
|
|
dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 14, 2013, 10:38:55 PM |
|
Maybe a n00b question, but I received 2 x 1BTC coins today from a respectable dealer and when I type the firstbits on blockchain.org, I get: Firstbits not found
How is that possible? With my 3 previous coins from Casascius (same dealer) I didn't had that problem. Just type in the code on the back and you can verify the BTC ammount... Any help?
|
|
|
|
Raize
Donator
Legendary
Offline
Activity: 1419
Merit: 1015
|
|
August 14, 2013, 10:43:37 PM |
|
I've had problems with firstbits not working on blockchain.info before. It usually happens when the API is down on the firstbits site, too.
|
|
|
|
steelboy
|
|
August 14, 2013, 10:47:27 PM |
|
Maybe a n00b question, but I received 2 x 1BTC coins today from a respectable dealer and when I type the firstbits on blockchain.org, I get: Firstbits not found
How is that possible? With my 3 previous coins from Casascius (same dealer) I didn't had that problem. Just type in the code on the back and you can verify the BTC ammount... Any help? The code on the back is not always the first bits. Try searching for the code on here. http://casascius.uberbills.com
|
|
|
|
dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 14, 2013, 10:48:55 PM |
|
I've had problems with firstbits not working on blockchain.info before. It usually happens when the API is down on the firstbits site, too.
can you explain a little bit more please? Why is API needed? I thought there was some methematical relationship between the full public address and the firstbits? (firstbits are the "first generated address with these 8 characters). Or am I completly wrong?
|
|
|
|
dnaleor
Legendary
Offline
Activity: 1470
Merit: 1000
Want privacy? Use Monero!
|
|
August 14, 2013, 10:50:11 PM |
|
Maybe a n00b question, but I received 2 x 1BTC coins today from a respectable dealer and when I type the firstbits on blockchain.org, I get: Firstbits not found
How is that possible? With my 3 previous coins from Casascius (same dealer) I didn't had that problem. Just type in the code on the back and you can verify the BTC ammount... Any help? The code on the back is not always the first bits. Try searching for the code on here. http://casascius.uberbills.comI already have the public address The dealer is Molecular and he sends nice certificates with the coins (including a tiff-image used for certification) I trust him that he didn't steal my money But thanks for the link, I'll look into it!
|
|
|
|
Raize
Donator
Legendary
Offline
Activity: 1419
Merit: 1015
|
|
August 14, 2013, 11:05:36 PM |
|
can you explain a little bit more please?
Go here: http://casascius.uberbills.com/?type=1&status=active (warning, will take a long time to load, may crash browser) Hit CTRL+F and type in your firstbits. If it doesn't say it's Active or you can't find it, it's possible it was compromised. When I said the API was down I mean this: https://blockchain.info/q/resolvefirstbits/1QReplace the "1Q" part of the above with your first bits and see if the page loads. If it's not loading, there's something wrong with the API, typically.
|
|
|
|
|
Raize
Donator
Legendary
Offline
Activity: 1419
Merit: 1015
|
|
August 14, 2013, 11:31:46 PM |
|
Ahh, okay, I even own several first print Casascius coins and didn't know that distinction.
|
|
|
|
casascius (OP)
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
August 14, 2013, 11:46:49 PM |
|
Uberbills isn't aware of my most recent batch of keys for silver coins and won't show them. A complete list can be found at https://casascius.com/fulllist.txt.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
molecular
Donator
Legendary
Offline
Activity: 2772
Merit: 1019
|
|
August 15, 2013, 11:00:00 AM |
|
can you explain a little bit more please?
Go here: http://casascius.uberbills.com/?type=1&status=active (warning, will take a long time to load, may crash browser) Hit CTRL+F and type in your firstbits. If it doesn't say it's Active or you can't find it, it's possible it was compromised. When I said the API was down I mean this: https://blockchain.info/q/resolvefirstbits/1QReplace the "1Q" part of the above with your first bits and see if the page loads. If it's not loading, there's something wrong with the API, typically. Mike also publishes a list of all addresses: https://casascius.com/fulllist.txt
|
PGP key molecular F9B70769 fingerprint 9CDD C0D3 20F8 279F 6BE0 3F39 FC49 2362 F9B7 0769
|
|
|
shadallion
|
|
August 15, 2013, 06:13:14 PM |
|
Can I start a petition for a 10 BTC 1 oz gold coin?
That would be an extremely efficient store of wealth for people who like bitcoin AND gold as a hedge against future hyperinflation.
|
|
|
|
|