Bot to automatically check signatures.

[lulucrypto]

Just another note here, when the bot is quoting a message which could not be verified, you should post a warning like ( failed to verify), otherwise everyone can stake a fake addresses and possibly scam people.

I guess you're talking about this message.

Currently, the addresses "bc1" are not checked by the bot, it deals only with quoting and archiving.

Verification of these signatures is expected shortly.


Hello everyone,

This post is a translation of my French post.

A small point on the bot is needed ( In this post, I will refer to points raised on the subject FR and EN ) !

So I had the opportunity to chat with Theymos about bot security.
In the end, he does not see the benefit of preventing the bot from deleting his messages.
In the sense, or, there are already people who take care of archiving the posts.
In addition to that, if needed, he is able to restore a deleted message up to two years back.

So starting from there, you have to know that from now on, I archive all the messages of the subject in question.
This archive can be found easily here : https://signatures.bitcointalk.luc-mergault.fr/
In addition to serving as an archive, this site allows you to perform a very basic search among all messages recorded on the subject.

History to ensure a little more the reliability of the bot and more globally of all the messages of the subject, I propose now a small very simple script, which allows whoever wishes to use it to be alerted by mail in case of suppression / edit the subject or are posted addresses.
This script allows anyone to help ensure the reliability of the messages on this topic ( The idea is that if you receive an alert, it makes sense to alert the forum ).

Note that deleted message detection is not yet in place on the script.

In addition to serving as an alert script, it also allows you to archive all messages, and if you want to make this archive public !

For those who wish to install it ( Very simple ) : https://github.com/luluwebmaster/bitcointalk-auto-verify-signatures-archive-and-alert
If you install the script, do not hesitate to provide the link to consult the archived messages, I would be happy to list it in the first post !

By the way I took the opportunity to install it on the machine of Cryptos-Currencies.Com :
- https://signatures.bitcointalk.cryptos-currencies.com/

Note that this script is not fixed, and improvements must still be made ( Especially on loading archived messages ).

It is now possible not to have his messages checked by the bot, simply by adding "no-bot" some by your post.

In addition to that, the bot supports Bech32 addresses using this method:
- https://bitcointalk.org/index.php?topic=5198585.0

The P2SH addresses are not yet, but the bot detects them.
It takes care of quoting and archiving messages containing messages signed from this type of address.

So much for this "small" point !

If you have other proposals, do not hesitate !


Hello everyone!

Little update of the project

Today, I have more or less finished the public bot ( Available on Github ).

If you have installed it, I invite you to update it ( Please note that the DB will be reset given the structural modification of it for messages ).

I would like to recall an important point, if you have a VPS or a machine running H24, do not hesitate to install it, and share the link of archived messages, it would be a big plus for the security of the project !
And if you have installed the script, the same, do not hesitate to share the link, it would be great

Now, the bot also detects deleted messages, and you alert if you want !

I took the opportunity to detail a little more the README Github, so that it is more understandable ( If you have a question, do not hesitate ).

Also, tonight, I'll take care to update the first post of this topic to provide all the missing info since launching ^^

Edit : First post edited !

[1714174218]

1714174218

[1714174218]

1714174218

[LoyceV]

I saw the discussion in the French section about detecting edited or deleted messages (but can't really read it so let's continue here): if you scrape all posts just once a week, it's enough considering the long-term purpose of the Stake your Bitcoin address here thread.
It would be really nice to have a bot that updates all changes to staked addresses in a new topic in Reputation.

I also keep track of all posts (only since a few months) here (not updated by a cronjob yet).

[lulucrypto]

I saw the discussion in the French section about detecting edited or deleted messages (but can't really read it so let's continue here): if you scrape all posts just once a week, it's enough considering the long-term purpose of the Stake your Bitcoin address here thread.

Hmm, I did not understand everything

It would be really nice to have a bot that updates all changes to staked addresses in a new topic in Reputation.

Do you mean to create a topic dedicated to all posts updated or removed coming from the subject "Stake your Bitcoin address here" ?

I also keep track of all posts (only since a few months) here (not updated by a cronjob yet).

Yes, I know that

[LoyceV]

Do you mean to create a topic dedicated to all posts updated or removed coming from the subject "Stake your Bitcoin address here" ?

Correct. That would instantly highlight possible suspicious activity.

[lulucrypto]

Hmm, ok I understand,  it's good idea, I'll see what I can do

Edit : Do not hesitate to install the archive bot elsewhere, it would be cool to have other links available for archives ^^

[LoyceV]

I have not yet received other url's for archived messages ^^

http://loyce.club/archive/posts/5304/53043222.html

[lulucrypto]

Thank you, I was talking about the message archiving system built into the bot precisely

Like here :

https://signatures.bitcointalk.cryptos-currencies.com/

It's easy to install the bot and archive messages from subject ^^

https://github.com/luluwebmaster/bitcointalk-auto-verify-signatures-archive-and-alert


Little update of the bot !

For those who have missed out on the subject, there is now a dedicated topic to post alerts about the topics "Stake your Bitcoin address here".

The subject :
- https://bitcointalk.org/index.php?topic=5202039.msg53094495#msg53094495

In addition to that, the bot now integrates a system allowing it to automatically post in this same subject ( Only deletion alerts ).

For that it will be necessary to create an account on the forum dedicated to that, once created, it is enough for you to configure the bot following the file of config ( See README ).

As a reminder, if you install the bot, do not hesitate to say it here !

Reminder of the Github project link :
- https://github.com/luluwebmaster/bitcointalk-auto-verify-signatures-archive-and-alert

[Bitcoin_BOy$]

I have already worked on the same idea back in 2015, Built it with PHP:
https://bitcointalk.org/index.php?topic=934229.msg10253433#msg10253433

It was worth it, I was considering to make it available for everyone for generous donations, but forum members warned that I should not expect donations  .
Finally, I decided to make it paid service, I was on behalf waves platform campaign bot, I managed to relay the bot with my personal address https://www.blockchain.com/btc/address/16pe2twTgrjKC8mioPjX3f2UbCMGvWbVz4,
so every week I receive bitcoins on my address the bot automatically distribute payments for signature campaign members.

I'm not sure if the idea is still applicable since theymos has set a limit for 1 second for requests.
Anyway, thank you for sharing your hard work.

[lulucrypto]

Ho, your project is very interesting too !

If I understand correctly you have abandoned it ?

I thought precisely as a next project, to develop an extension ( Or a website ), which would manage very easily signing campaigns.

Would you mind if I developed a similar idea ?

[Bitcoin_BOy$]

Ho, your project is very interesting too !

If I understand correctly you have abandoned it ?

I thought precisely as a next project, to develop an extension ( Or a website ), which would manage very easily signing campaigns.

Would you mind if I developed a similar idea ?

I have not abandoned the project, but the waves campaign stopped at a given time, they were paying me a very high salary.

I would suggest to you, to make a campaign manager, it's hard to find campaigns who going to trust you, but you can at least develop the system,
bot to count posts and filter the bad ones, create an admin dashboard with good statistics and overview of all posts, and duties,
and let the campaign manager use it to make his job easier. So, in that case, you can ask for pay to develop for the new features + maintenance.

[lulucrypto]

Oh ok, but you could have adapted the project for another project for example

To tell the truth, I do not really know if I can afford, to my level, to offer this kind of paid services ( Who am I to do it ? ).

Anyway, I will think about the idea

[TheBeardedBaby]

Regarding to the bot that checks signed messages for changes, I think you should consider posting the original messages in quotation tags, otherwise there is another bot checking for plagiarism which can accidentally report those posts as a plagiarism. Too many bots working the same time can have some issues.

[lulucrypto]

Hello,

Thank you for your proposal, for cons I'm not sure I understand ( Thank you my bad English ).

If I understand correctly, you say that I should quote updated / deleted messages instead of putting them in plain text in the message ?

You speak well of the messages sent on this subject :
- https://bitcointalk.org/index.php?topic=5202039.new;topicseen#new

[LoyceV]

If I understand correctly, you say that I should quote updated / deleted messages instead of putting them in plain text in the message ?

I've edited your post to what I think it should look like:

This message is a alert sent by : Bitcointalk : Auto Verify Signatures - Archive and alert !

This message from realknow has been updated.

Old message :

Code:-----BEGIN BITCOIN SIGNED MESSAGE-----
2019-24-11 : I am Realknow (bitcointalk.org #924845),
bc1qmcmgk7fgreg6gzn4k0kf423ql9hz6w8w3nk84c as my Bitcoin address.
-----BEGIN SIGNATURE-----
bc1qmcmgk7fgreg6gzn4k0kf423ql9hz6w8w3nk84c
H7TqNXhFx270LjlI9NyuJkcUOtuAE4Z11TmczhjlIFQHWn835pWHsFudAggwA2NoIrFl8snhlQhUx/EXtw8An6U=
-----END BITCOIN SIGNED MESSAGE-----
I signed message a bitcoin address with a Electrum, and I think it is correct and verified. Waiting to be quoted. thanks.

New message :

Code:-----BEGIN BITCOIN SIGNED MESSAGE-----
Today, Nov 23, 2019. I'm realknow UID:924845 sign this wallet address as my own
-----BEGIN SIGNATURE-----
bc1qmcmgk7fgreg6gzn4k0kf423ql9hz6w8w3nk84c
IM/i8sQD0ls9RHtH2EHnvHcY2LRyvNMJsBJFJlkZOJZSHIDC7QvNVxFMxjJCsPKqg8qrrH7rVuFyiJh6GKXsMmA=
-----END BITCOIN SIGNED MESSAGE-----

I signed message a bitcoin address with a Electrum, and I think it is correct and verified. Waiting to be quoted. thanks.

Just add [ quote]-tags, just to be sure.

[TheBeardedBaby]

The other solution is to request your signature checking bot to be whitelisted from the plagiarism reporting bot. Since this is not an official bot it won't be easy and in addition there might be few people (bots) reporting for copy/paste. The easiest solution is to add quotation tags, as LoyceV already gave example.

Just to explain it simple. AFAIK the plagiarism bot check all the recent messages and compares the posts to a database for similarities. If you don't use the quotes your messages will probable end up automatically reported. I guess the mods will look into each case and probably mark them as bad or your posts will be deleted but this is again extra unnecessary work for the mods. To stay on the save side just add quotes.

[lulucrypto]

I've edited your post to what I think it should look like:

[...]

Just add [ quote]-tags, just to be sure.

Yes I understand what you mean

I'll see to change that ( This week is very busy for now )

I will see to propose an update of the bot by the end of the week.


Note : Translation of my French post.

A small update of the bot that handles the checks.

Now, the bot can check up to one request every 30 minutes.
Allowing, in case of several simultaneous requests, not to give the monopoly to the bot.

In addition to that, it adds a certain security :
In case there is a bug, the bot will not be able to post 10 messages in 10 seconds ( No reason that it happens, but we never know ).

Signature detection has been improved. Now the bot no longer detects the signatures of "examples" like this one for example.

In addition to all that, it is now possible to see the addresses linked to a nickname.

To do this, go to this url :
- https://signatures.bitcointalk.luc-mergault.fr/user/{your-username}.html

Example:
- https://signatures.bitcointalk.luc-mergault.fr/user/lulucrypto.html

And finally I corrected two more three bugs ( Which crashed the bot ).

[Saint-loup]

In addition to all that, it is now possible to see the addresses linked to a nickname.

To do this, go to this url :
- https://signatures.bitcointalk.luc-mergault.fr/user/{your-username}.html

Example:
- https://signatures.bitcointalk.luc-mergault.fr/user/lulucrypto.html

And finally I corrected two more three bugs ( Which crashed the bot ).

Very interesting and convenient feature but unfortunately it doesn't work for my nickname.  
I don't know if it's because of the spelling of my pseudo or if it's because of the post where my address is staked...

[lulucrypto]

Thanks for the report, indeed the bot does not yet correctly detect all the signatures.

I did a search with your nickname, is this the signature you are looking for ?

https://bitcointalk.org/index.php?topic=996318.msg22803423#msg22803423

Unfortunately, this kind of signatures are complicated to scrap with the bot.

I need to see to further improve this part.

[Saint-loup]

Thanks for the report, indeed the bot does not yet correctly detect all the signatures.

I did a search with your nickname, is this the signature you are looking for ?

https://bitcointalk.org/index.php?topic=996318.msg22803423#msg22803423

Unfortunately, this kind of signatures are complicated to scrap with the bot.

I need to see to further improve this part.

Yes, it's the post where is staked my signature.
Ok I understand now, it should have been more formatted.

[lulucrypto]

Note : Translation of my French post.

Another quick update

Added information about the signature request in the bot message ( Address, message, signature, version ).

The bot is now able to detect the following signature formats :
- https://bitcointalk.org/index.php?topic=996318.msg53276206#msg53276206
- https://bitcointalk.org/index.php?topic=996318.msg53280675#msg53280675

On top of that, from the moment a message does not contain "standard" format signatures, the bot will automatically look for a Bitcoin address in the message.
If an address is found, it will automatically be attributed to the person who posted the message. The next ones posting this address will be considered as "verifiers".
Note that for this case, the bot will not post an automatic response.

Also note that for old signatures ( Without "standard" format ), this system is not perfect.
The bot may associate an address with a bad account.
Similarly, it is possible for the bot to detect addresses that are not really addresses.
All this is part of its "error rate" possible, and I consider this error rate not very embarrassing ( Too much work to optimize it even more ).


On top of that, I released a little update of the public bot.

Now, the messages of the users whom he quotes are between quote tag.

And I took the opportunity to fix a bug on the replacement of dates in messages.