[ANN] Paytoshi: Micropayments & Faucets

[Paytoshi]

Not even 4 days, 4 new faucets using our API services! Our list is really growing fast now!

• http://bolaogrupovip.com.br/faucet
• http://coin43.com/bitcoinfaucet
• http://bitcoingold.e3w.ru/
• http://bitocheck.8nio.com/

If you need help setting up your faucet, let us know! 

[OmegaCollector]

Just a big thanks - I won 10,000 sats from BitBandit the other day, and a couple of hours later, I won 10,000 again! I love your faucets

[NeedIfFindIt]

May you allow .rocks TLD

I'm getting "This value should be a valid url." when trying to add http://steep.rocks/ to the Paytoshi faucet list.

[Paytoshi]

May you allow .rocks TLD

I'm getting "This value should be a valid url." when trying to add http://steep.rocks/ to the Paytoshi faucet list.

Hello NeedIfFindIt,

thanks for your report.

If you agree, we will fix it for you straight away while we fix the website validator.

[Paytoshi]

Just a big thanks - I won 10,000 sats from BitBandit the other day, and a couple of hours later, I won 10,000 again! I love your faucets

Glad you like it! 

Thanks to you and to our faucet owners! 

[NeedIfFindIt]

May you allow .rocks TLD

I'm getting "This value should be a valid url." when trying to add http://steep.rocks/ to the Paytoshi faucet list.

Hello NeedIfFindIt,

thanks for your report.

If you agree, we will fix it for you straight away while we fix the website validator.

Ofc. I agree (currently it is using redirect) but having direct link is always a plus.

Thanks!

[Paytoshi]

Hello NeedIfFindIt,

thanks for your report.

If you agree, we will fix it for you straight away while we fix the website validator.

Ofc. I agree (currently it is using redirect) but having direct link is always a plus.

Thanks!

Done!

Thank you for your understanding, we will fix the validator in due time

[Paytoshi]

We are aware of malicious TXs on our system. We will temporarily disable API access to investigate the situation.

On the bright side, no bitcoin has been lost at the moment.

We will keep you posted as soon as we have updates.

Thank for your patience

[Paytoshi]

Our staff just identified a security hole in our faucet script.

We are working on a fix for it. Expect updates and instructions during the day. 

Sorry for incovenience, we are working hard to get stable once again.

[Muhammed Zakir]

Is your API compatible with Microwallet faucet script? FaucetBox has migration guide and mentioned about the compatibility of their API with Microwallet faucet script. Would be helpful if you too do it.

   -MZ

[NeedIfFindIt]

Our staff just identified a security hole in our faucet script.

We are working on a fix for it. Expect updates and instructions during the day. 

Sorry for incovenience, we are working hard to get stable once again.

If the issue is only in your faucet script then can you enable the API for the faucets not using your faucet script 

Also you should publish the hacker's bitcoin address.

Other faucets may want to ban him forever

[Paytoshi]

If the issue is only in your faucet script then can you enable the API for the faucets not using your faucet script 

Also you should publish the hacker's bitcoin address.

Other faucets may want to ban him forever

Hello NeedifFindIt,

we are sorry for the situation, but we chose to address issues in order: search the security hole, patch it, revert the transactions and restart the system. Blocking all API access allowed us to work with a know database state.

We could publish the attacker addresses, however due to the Bitcoin address nature it will be a very short-lived victory. 

[Paytoshi]

Ok, we finally fixed the issue with the faucet script and restarted API access. Every faucet API key has been changed as a precautionary measure.

We notified every faucet owner via email with instructions on how to get your faucets running once again.

If you own a faucet, this is what you MUST do:

• Download the updated faucet script at https://paytoshi.org/downloads/paytoshi-faucet-v5.zip
• Extract and overwrite your faucet files (except the "themes" folder, if you made any customization)
• Go to your faucet admin area and update with the new API key (found at https://paytoshi.org/secured/faucet)
• Your captcha service providers keys may have been compromised as well, we advise to update them with new ones (either ReCaptcha or SolveMedia).
• You may change your faucet admin password as well, even if this should not be necessary
  To change your password execute this query: DELETE FROM `paytoshi_settings` WHERE `name` = 'password'

Please be aware that just updating the API key in the faucet admin area is NOT enough and could lead to the loss of all your funds, if your faucet is subject to attack.

We are sorry for any inconvenience and thank you for your patience. If you need any explanation, please let us know.

In the past 2 months we handled over 600k micropayments and will continue to do so, stay with us.

[beaknuke]

thank you... will start in a moment

[jacktheking]

Happy to see that Paytoshi is currently used by 16 different faucets. Last night, when I went to faucet list page it is blank. Glad to see it is fixed now.

[NeedIfFindIt]

Thanks for being so fast!

[OmegaCollector]

Yea - at least half of them are back online. That was pretty fast!

[Paytoshi]

Yea - at least half of them are back online. That was pretty fast!

Thanks, we have at the moment 19 active faucets.

But we hope to get soon back to over 30 

[beaknuke]

Things are okay, is there an AD Block detector in the script?  I haven't tried it

[Paytoshi]

Things are okay, is there an AD Block detector in the script?  I haven't tried it

Hello beaknuke,

thanks for feedback. Our faucet script is very lean, we don't have and AD block script embedded, sorry.