Quote from: SHNICI on January 01, 2015, 10:51:02 AM

Quote from: fenghush on January 01, 2015, 10:18:58 AM

Quote from: faluyt on January 01, 2015, 10:08:26 AM

Quote from: fenghush on January 01, 2015, 09:54:40 AM

Quote from: faluyt on January 01, 2015, 09:50:59 AM

Quote from: fenghush on January 01, 2015, 09:47:24 AM

Quote from: afall on January 01, 2015, 04:08:03 AM

You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.

Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

What you mentioned is illegal activity. How about paying for VPS like me? This is "in-wallet-distribution", not "in-person-distribution", right? More over, these activities you mention are not easy as you said.

The "in-wallet-distribution" system is broken, the system is prone to abuse and people with mediocre skill can easily abuse it, the legality of some action hasn't stopped people from not doing it.
I raised the flag that the distribution system is broken since day one. I informed the devs about a quite frankly, stupid info leak and I expected them to patch it, but instead they decided to roll with it and now everyone's butt is hurt because someone hammered the faucet system with a botnet.
There is no ultimate fix, but there are tons of ways to make it difficult for attackers to take advantage of the design flaw.

1. to all: HAPPY NEW YEAR..... (I say it with pain in my heart cuz in the new year we was scamed from few cheaters.....)
2. just stop to fight one other Please ....
3. Every one who got and know any kinda exploit send the explanation to us (Please)
4. We will decide what to do..., mby we can relaunch the faucet distr. But with new wallet version if we can protect it better.... with new fixes...

The time will show us... I suppose we always will get cheaters.., but this like hrs ago was really bad one ....
You know the our IRC chat channel, join us and write there too your example you got/know about cheating/exploit | Join to IRC http://webchat.freenode.net/?channels=#FindCoin

I'll do you one better and post a write-up right here and let the people decide who dropped the ball.