Quote from: molecular on September 13, 2011, 07:57:39 PM

Quote from: bitfoo on September 12, 2011, 02:09:25 AM

On another note, I noticed that the server provides the same bitcoin payment address for every transaction, since the address already has a few transactions on blockexplorer. I also confirmed this by downloading a second torrent. This should probably be changed ASAP for user privacy protection and security. See this wiki page: https://en.bitcoin.it/wiki/Merchant_Howto#Common_Errors

I'm assuming it's a "session based address". This begs the question how you determine which download a payment is for. Could you elaborate on that a little?

May I ask how you do session identification?

This is interesting both for privacy reasons and for evaluating possible gains from referral program Wink

This is from a private conversation I had with mjcmurfy.

Quote

At the moment, the service is monitoring a single bitcoin address. This wouldn't work for many retailers who sell items that have a set price. The reason it works for me is that the price that I charge per download is pretty much unique to each user. The cost is calculated at 0.1 btc / GB, and rounded to 4 non zero digits, meaning that unless two users simultaneously request a file of the EXACT same size, it doesn't matter. The price itself is what I am currently using to identify users to successful payments.