Search content
Sort by

Showing 19 of 19 results by CodeR70
Post
Topic
Board Micro Earnings
Re: FaucetBOX.com Discussion
by
CodeR70
on 24/04/2016, 21:35:13 UTC
English is not my native language, so I think I was misunderstood Smiley. When I said "Everything is basically security by obscurity", I referred just to bot protections. Do you disagree with that too? I would love to see a protection that's not easily bypassed and isn't just another CAPTCHA.

[...snip...]

Well, we should probably change that license. Our only concern is preventing reselling the script. I'll see if we can do that in next release.

Sorry about the misunderstanding. I was generalising it too much and I do agree with you that bot protection is probably impossible (hence my bike analogy in one of my posts). If people think it's worth the effort then they will try, even with closed source.

About the license, I totally understand. It's always tricky and these days you have to be high grade layer to understand all licensing issues. Maybe this helps a little:

- https://opensource.org/licenses
- https://creativecommons.org

My understanding is that the last one is formally not open source but I like the simplicity of it.
Post
Topic
Board Micro Earnings
Re: FaucetBOX.com Discussion
by
CodeR70
on 24/04/2016, 18:23:51 UTC
Everything is basically security by obscurity

Tbh, I don't believe in that. There are many open-source projects that are more secure because it's open. Bitcoin itself is open and the concept itself makes it secure.

BTW, I absolutely agree with you and most here that its gonna be incredible hard, or even impossible, to make a faucet script that is protected against bots and scammers. That's is also my dilemma (and mentioned by others) if this should be open or not.

But here is an analogy I would like to make. If people want to steal your bike, they probably will be able to do so, even if you put multiple locks on it. Does it mean I should park my bike without a lock? Of course not. Or worse, should I not own a bike at all? With cryptography it's the same not. It's not so much if a person or an organisation is able to crack a code, it's a matter of how much effort, energy, cost, etc. And obviously the level of current technology.

Anyway, I'm rambling.... sorry for that :-)

Cheers

PS: FIB is not open-source AFAIK. We are just able to read the source code and mod it although the last is formally not even allowed.
Post
Topic
Board Micro Earnings
Re: FaucetBOX.com Discussion
by
CodeR70
on 24/04/2016, 15:30:09 UTC
yep bots are bad.

I think faucetbox faucets mite be something that will die off soon because of bots and not being able to make profit I think we are going to see more signup and register faucets is the best way to avoid and catch bots out before they take you money.


Or one could code/develop his own script or one could heavily modify the faucetinabox script. Smiley

I'm actually considering that using the FIB api which seems to be pretty straight forward and simple. I'm also wondering about a custom script which includes some kind of signup mechanism but I think that would stop honest user from coming due to the extra "work" for a few satoshis. Although you probably have to up the rewards a little.

Here is the thing, if I make it open-source, would you have the same problems again? I'm convinced open-source, in the long run, makes software more secure due to the amount of "eyes" going over the source code. On the other hand, which might be an issue here with FIB, real smart scammers/bot-coders have access to the code as well.

As said before, I'm pretty new here so I'm sure it was already discussed. Of course, I don't mind to put in efforts by reviewing FIBs source code and and share my thoughts.

Cheers guys and galls
Post
Topic
Board Micro Earnings
Re: FaucetBOX.com Discussion
by
CodeR70
on 22/04/2016, 20:45:26 UTC
700 is a lot, but where to draw the line?

Some faucets are listed on popular rotators/faucet lists. Where to draw the line between suspicious and real?

My faucet is new and I get a handful, sometimes even none, payouts per day. These 700 where only in 1.5 days. The ref address was discussed in another thread here on the forums as suspicious as well.

But you are right, on a normal working mature faucet, what is suspicious and what is real? But I think faucet owners probably notice patterns which are odd. For me it was that all addresses had an auto payout limit of 0.5 bitcoins. 700 addresses with the same ref address and 0.5 auto payout address is a pattern.... ;-)

Anyway, it was a good lessons as well. I added proxy checks, IP checks, updates my ban lists, etc. So it was not a waste of time. In the mean time I learned some of the FIB coding as well.

I'm just wondering, do faucet owners "babysit" their faucets? Is it a constant watch and fight against bots/scammers? I probably know the answer seeing so much 'double your btc' and the likes.
Post
Topic
Board Micro Earnings
Re: FaucetBOX.com Discussion
by
CodeR70
on 22/04/2016, 18:47:48 UTC
Finally figured it out but I sure hope the script will be changed to include this in the future.

For a few days I noticed a high amount of payouts on my faucet from a specific ref address. Currently there are 700+ addresses related to this ref address. Each address has an auto payout of 0.5 bitcoin (via address checker). Obviously, I did ban the ref address but this only rejects ref payouts to that address. I did some private modding on the script so all sessions that include that ref address are no longer paying out. That is all that are processed with the /?r=ADDRESS url or even the addresses for which the ref address was registered.

I'm pretty new to the whole faucet concept and the FIB script. Not sure if the developer is reading this, if so, please include the above checks (optionally or not) in your next script version. If you know that a ref address is used by a scammer/bot then most likely addresses that are using the ref address are also from a scammer/bot.

Hope it all makes sense. If not then feel free to ask of course.
Post
Topic
Board Service Discussion
Re: ▁ ▂ ▄ ▅ ▆ Cloudmining 101 (ponzi risk assessment) ▆ ▅ ▄ ▂ ▁
by
CodeR70
on 29/05/2015, 15:00:26 UTC
Fb started feeding me ads from this site.. anyone care to share their opinion about this site?

https://www.genesis-mining.com/

AFAIK it's legit. but ROI is over a year.
Post
Topic
Board Service Announcements (Altcoins)
Re: Scrypt.CC | Scrypt Cloud Mining
by
CodeR70
on 10/05/2015, 18:58:00 UTC
guys I can't access the website. Whenever I log in I get server currently busy. Is the website down?

No - just laggy as hell. If you keep F5'ing, it will load eventually.

I bet you are also a person that keeps hitting the elevator button just to make sure it comes faster? Wink
Post
Topic
Board Announcements (Altcoins)
Re: [HYP] HyperStake | High PoS | Secure | MultiSend | liteStake | Adv Coin Control
by
CodeR70
on 28/04/2015, 23:14:31 UTC
You are close...

Quote
setstakesplitthreshold Edit

Syntax: setstakesplitthreshold <1 - 999,999>

Description: A stake output will split (in two parts), when the resulting amount for each of the outputs equals or exceeds the threshold value specified. For example: by setting a threshold of 5,000, stake outputs greater than 10,000 will be split into two.

groovy?

OK I get that now Smiley no problems there but I still have the problem that when I enter

setstakesplitthreshold 10000

 it says

{
"split stake threshold set to " : 10000,
"saved to wallet.dat " : "true"
}

But it sure does not seem to be doing it. I had a block of 17449 that staked and then split into 2 blocks of 9224.75. Shouldnt it have not split this block as the 2 blocks it made were both under 10,000 HYP ? Is there something I am missing here.

17,449 is greater than 10,000 so it split the Block into two.

If you want your Block of 17,449 not to split into two then you could set the threshold at 20,000.

That is not how it's explained in the help example. The example specifically says 5000 so blocks bigger then 10000 are split.
Post
Topic
Board Announcements (Altcoins)
Re: [ANN][HYP] HyperStake | 750% PoS | Secure | MultiSend | liteStake | Coin Control
by
CodeR70
on 20/04/2015, 20:04:37 UTC
what do i do if my wallet stops syncing

Do you still have connections to peers? Did you try restarting the wallet?


yes i tried restarting my wallet is there any additional peers i can put into conf?

Do you have the latest version?
Post
Topic
Board Service Discussion
Re: StakeMiners.com
by
CodeR70
on 20/04/2015, 17:22:10 UTC
No sir you were correct check it now the main page let me know if it changed, all the scripts were pulling from HTTP sites I changed the main page if it works Ill change the rest


Perfect, in Safari all the font/scripts warnings are gone and it shows the padlock now. Feel free to give me a shout if you need somebody to check these or related stuff.
Post
Topic
Board Service Discussion
Re: StakeMiner.com
by
CodeR70
on 20/04/2015, 16:58:19 UTC
We do have the padlock, and it does give our certificate information.

Aha, cool. But in safari it doesn't. Sorry for that, my bad. Read my edit in my previous note. BTW, I'm not trying to be "nasty", just a friendly reminder because I know how people abuse these mistakes to proof their points.
Post
Topic
Board Service Discussion
Re: StakeMiner.com
by
CodeR70
on 20/04/2015, 16:51:05 UTC
That would be because the website is https://stakeminers.com    Grin

But still insecure connections to various resources (scripts and fonts).

That would be the ads we have from adbit.co. I see the banner is actually not loading.

As said, it are your scripts (jquery) and fonts. Those are not a real big things, but if https is a big selling point then make sure all resources will go over an https connection. That will show the padlock icon in browsers and people can directly check the certificate.

edit: links are not the problem afaik. I use safari and it has the developer web inspector. Then you can check the page issues and in there it shows all these "warnings". It sounds very stupid and minor, but I know from my own experience that people will point to any little thing to find proof of whatever they are searching for.
Post
Topic
Board Service Discussion
Re: StakeMiner.com
by
CodeR70
on 20/04/2015, 16:12:24 UTC
That would be because the website is https://stakeminers.com    Grin

But still insecure connections to various resources (scripts and fonts).
Post
Topic
Board Service Discussion
Re: ▁ ▂ ▄ ▅ ▆ Cloudmining 101 (ponzi risk assessment) ▆ ▅ ▄ ▂ ▁
by
CodeR70
on 17/04/2015, 20:14:58 UTC
Genesis Mining has shut down their scrypt operation.

Because they were out of hashes, not because of the running costs.
Post
Topic
Board Service Announcements
Re: [ANN] BTCJam - Peer to Peer Bitcoin Lending
by
CodeR70
on 17/04/2015, 12:58:40 UTC
Net Annualized Return
Bitcoin: -7.57%
CoindeskUSD: -5.73%
CoindeskEUR: 7.18%

What happened here? These are my numbers atm.
Post
Topic
Board Service Announcements (Altcoins)
Re: Scrypt.CC | Scrypt Cloud Mining
by
CodeR70
on 22/02/2015, 15:32:14 UTC
Good to hear you are back on your feet again ScryptCC.  Hope you and the scrypt.cc site stay around for a long time!

I keep re-investing my BTC back into Khash and i'll keep doing so.



why do you keep reinvesting there?aint you aim to gain profit and ROI from them?
at this rate you wont see your initial investment again  Undecided Undecided

He can sell at anytime not?
Post
Topic
Board Securities
Re: [Havelock] Bitcoin Difficulty Derivative (BDD)
by
CodeR70
on 14/02/2015, 00:39:52 UTC
Thanks @twentyseventy, for just pointing me to read the first few pages (I was just being lazy to ask for the ELI5 Wink ). It's a bit tricky to get into it and all the calculations but I think I get it, or at least most of it. I did some calculations myself and as said before this is very interesting stuff. Even if you don't speculate on the difficulty, but just keeping an eye on the numbers and calculate what is more profitable. Definitely have a go/play at this. Cheers!
Post
Topic
Board Securities
Re: [Havelock] Bitcoin Difficulty Derivative (BDD)
by
CodeR70
on 13/02/2015, 22:54:54 UTC
Is there an ELI5 about all of this.

To be honest, there really isn't. If you read the OP and some of the subsequent pages, there's some good information there. It's really meant to be more of a sophisticated speculation tool instead of something that everyone can pick up and use easily.


Yeah, I thought so, but it looks so damn interesting. I will read it a few times more.
Post
Topic
Board Securities
Re: [Havelock] Bitcoin Difficulty Derivative (BDD)
by
CodeR70
on 13/02/2015, 18:25:27 UTC
Is there an ELI5 about all of this.