|
mav (OP)
|
 |
May 13, 2012, 03:15:36 AM |
|
Reward is now 5 BTC for a successful hack. See the winner link on the homepage at http://www.h4xcomp.com/ for details on the successful tactic. I was looking at the details page, and one conclusion you came to was that bitcoind running as root was more secure than bitcoind running as www-data. However, I don't think either is correct; bitcoind should run as its own user in its own group for the most ideal security. The reason is that if somehow it became possible to cause the bitcoind process to execute arbitrary code via some kind of exploit, it would be contained inside the dedicated user and group (theoretically), instead of being allowed to run rampant as root. I am fairly sure it doesn't need root privileges to run, but if it does you can then use a chroot jail for the best security. Good point, I will update it with this info. Sounds obvious now you say it, good to get these things sorted out now rather than later. Thanks for picking that up and posting. |
|
|
|
|
|
|
|
|
|
|
|
If you see garbage posts (off-topic, trolling, spam, no point, etc.), use the "report to moderator" links. All reports are investigated, though you will rarely be contacted about your reports.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
|
REF
|
|
May 13, 2012, 03:18:16 AM |
|
|
|
|
|
|
|
mav (OP)
|
|
May 13, 2012, 03:46:27 AM |
|
|
|
|
|
|
Krakonos
Member
 Offline
Activity: 60
Merit: 10
|
|
May 13, 2012, 11:02:17 AM |
|
Nice one! I hope you'll have a lot of success, letting people hack your site is the best way to gain experience!
Also, I'll be watching it closely, I'm looking forward to another round (and looking around for other exploits silently :-))
|
Tip jar: 1MWj8Etpt3ayLG5AvXwhtEU42szJD2m97z
|
|
|
|
mav (OP)
|
|
May 13, 2012, 11:50:50 AM |
|
The second round was a quick one - the server has been hacked. Once the prize is claimed, standby for round 3. This one was a bit of a giveaway, but glad to have done so.
|
|
|
|
|
a nice guy
Newbie
Offline
Activity: 27
Merit: 0
|
|
May 13, 2012, 11:59:12 AM |
|
Wow, that was really quick. Sadly I'm no python developer :/ I hope there will be a general security bounty. Thanks for this interesting stuff  kind regards, a nice guy |
|
|
|
|
|
stochastic
|
|
July 19, 2012, 02:58:03 AM |
|
Is there going to be another contest?
|
Introducing constraints to the economy only serves to limit what can be economical.
|
|
|
|
mav (OP)
|
|
July 19, 2012, 03:52:26 AM |
|
Yeah there will definitely be more comps, but probably not for at least a couple of months yet. I've been working like crazy on a product, one which will actually earn me money. For now h4xcomp has helped me learn what I needed, so unfortunately priorities means it has been put on the backburner until I have more time for it.
|
|
|
|
|
mixa2000
Newbie
Offline
Activity: 34
Merit: 0
|
|
August 24, 2018, 06:56:49 PM |
|
Trade crypto assets on a basis blockchain technologies has got for a long time already the daily form and for anybody does not cause surprise. Recently exists already more than 200 crypto stock exchanges. A considerable quantity reduces liquidity at small stock exchanges. It has led to a strong fragmentation of liquidity.
The more low liquidity, the more low average volume of a trading position in comparison with other classical markets. Moreover, during the moments of sharp market movements it can appear insufficient even for trade with low volumes crypto assets.
LIQNET is crypto changes which allows to unite liquidity from different platforms and to solve a problem of dispersion of users, their trading inquiries and orders, it forms uniform base of orders with the best depth of the trading market and more favourable prices for private persons of legal bodies of different sphere.
That does exchange LIQNET unique, is tool LEN (Liquidity Exchange Network) which allows to collect and combine orders of our clients from other trading platforms in a uniform package of orders and to do by their all clients LIQNET accessible to trade.
Owners LENtokens receive exclusive conditions.
Other advantages of platform LIQNET:
Desktop applications (own desktop application, MultiSharts, TradingView and MT5);
Completely functional mobile trading applications for Android and iOS;
The project online wallet which gives the chance to exchange crypto carrency and to fix money button click. Besides, it has an easy service for crypto carrency investments with the free and paid built in strategy; #LIQNET #Bounty
|
|
|
|
|
|
