Quote from: y3804 on March 09, 2014, 04:58:38 AM

Quote from: DawgDCG on March 09, 2014, 04:45:47 AM

Quote from: y3804 on March 09, 2014, 03:44:45 AM

Quote from: kino on March 09, 2014, 03:43:08 AM

show of hands! how many addresses have you got?

I didn't attempt to get more stakes today.

I'm at 350+

So I get home and its all over. The 10 tokens I got yesterday are worthless because you can't save them, you have to use them before you get a new token. Please don't tell me that's my fault because no where was that indicated on the site nor should it be necessary, I reserved my stake by acquiring a token, that token should represent my stake.
Regardless now I've got 1 stake.

This fuck has 350x the amount I do and most likely 10x the amount most other people have (even 35 is stretching it).
And we don't even know how many thousand the developer is taking for himself because this is not transparent at all.

How is this fair again?

Dude, stop being mad. I'll send you 10 stakes if you want.

Now, the reason why you're mad is because you're a fucking idiot. Why? It's obvious that you don't understand the security protocols behind the stake process.

I found 3 main checks in their protocol:

1. Token is unique to IP. Token can therefore only be used on the registered IP address.
2. Token is unique to session cookie. If you use the same cookie to generate different tokens on different IP addresses, it won't work. It will produce invalid tokens (at least for me)
3. Only one token is valid at any given time for any registered IP address. You can't 'save' them and use them later.

Of course, if you reset your token, the previous one becomes invalid, as there's only one valid for IP. If you were 'saving' them instead of using them.. sorry bud, you're an idiot

Also, devs did the best to save their coin.

1. 2x Captcha protection (Google captcha + sweetCaptcha)
2. Proxy detection (this was hard for me)
3. One hour delay
4. Registered token only works on registered IP and unique session cookie.

How I did it:

VPN (access to 200 private gateways with unblocked servers) + rasdial, fiddler2, autohotkey, scripts, and lots of time on my hands to enter those damn captchas. It took me about 24 hours of work for the first 150 tokens, then 5 hours for the last 200ish.
I have developed a script so complex I can consistenly register more than 3 addresses/minute (100/hour). Everything is automated but the damn Google recaptcha. SweetCaptcha can be bypassed using image detection
Unfortunately I was gone for the most part today and when I came back it was already 46kish/49k, so couldn't make it

Using scripts should be considered cheating.
The whole reason people are made to wait an hour before the token becomes valid is to prevent the use of scripts. (bots)
Devs, since this person admitted they are using scripts and other deceptive methods can we please remove their stake?