Search content
Sort by

Showing 20 of 69 results by MasterX
Post
Topic
Board Service Discussion
Re: 【Resolved - Thanks escrow.ms】Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 13/05/2014, 01:11:07 UTC
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 23:30:37 UTC
That source came from dogecoin/peercoin price ticker extension and yeah if you have some free time and there's no important stuff, you can do a reinstall. Don't forget to take back of imp documents,downloaded files,desktop data (whatever comes in c drive).
no, of course i wont forget to backup. but i have a 4tb d drive so thats no problem, i have 2tb spare space left.
i'm an engineer myself, i just hate cleaning up desktops :p especially my own. I prefer linux servers to work on, u just need windows for tons of stuff impractical on linux! damn commercial crap.
the installation is straightforward, i have build an unattended install, its just every little piece of software that you need to install after the os is ready.
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 23:11:40 UTC
Quote
you mean "GoogleChromeAutoLaunch_A199C6FC886122F66FF15DDAA4146851"?
Yes, as a precaution .

I can see "1Mega XG1bd6mT EQCdAMjVz GexcYrF5LJKv"  (Added spaces so you can see properly) and If Mbam shows your PC clean, you can just remove chrome and do a reinstall or use firefox till then.


ok, thats the correct address.
i removed it already. so far i see the correct nmc address on btc-e... i'm crossing my fingers.
but as i mentioned before, right after my first post and when i explained my findings to btc-e i was able to see the address correctly, it was like it/he knew i was looking for answers. lol
it could be coincidence but anyway, it was weird.
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 23:10:35 UTC
Ps: If you have teamviewer let me know TV ID/Pass  I can try to help you directly.
Yes i have tv, version 6 however (licenced).

Thanks for the offer, but if something nasty happens to my computer, i always prefer a reinstall instead of a patched up computer; especially with bitcoin, antivirus providers are not yet into bitcoin so they do not always have the latest patches and detection techniques for bitcoin viruses or malware. i just do a reinstall tomorrow night and in the mean time i wont do any cryptocoin payments :-)

I do want to know myself "what is", "what was" or "what is going to be" wrong with my computer and my coins but in this case, we do not know the source yet; but we both know its malware related as the address was found in that pastebin you've showed, so its the same malware writer, definately. luckily he got only 19$ from me! :-)

do you know from wich extention the source code came? i want to dig deeper into this.

Anyway thanks for the help so far!
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 22:51:59 UTC
You should disable and remove that GoogleChromeAutoRun entry and scan your pc btw what happens when you copy paste some address on chrome? it stays same or changes?

it's possible that your pc got infected by some malware version of that extension.
you mean "GoogleChromeAutoLaunch_A199C6FC886122F66FF15DDAA4146851"?
the address stays the same.

i'm also noticing my signature address on btc-e bitcointalk is not always starting with 1MegaX witch is my custom vanity address. what is the one you see in my signature?
i have just noticed this 2 times but on the next page view it was back, i was almost thinking i was getting nuts. next time i notice it i'll make note of it.
is was an address starting with 1Ba...blablabla

anyway, i think i should do a reinstall tomorrow, only thing is i did not have time to do that.
but i guess its necessary!
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 22:35:21 UTC

And whats in chrome's tab?  Tongue
Main reason to use ccleaner is, it shows all extensions even if they are hidden in browser and their folder locations.



not really a lot more than from within chrome itself.
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 22:25:47 UTC
Umm, no click on "Gereedschap" and then click on "startup" and check startup entries and browser extension entries.
oh, lol, my bad. miss understood you the first time.




the image is not showing completely here...
that is the url: http://i57.tinypic.com/2v3k8hy.png
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 22:18:35 UTC
Download CCleaner, install and click on tools -> Startup -> Chrome and check if any extension which you have not installed is added.

Take a screenshot of your windows startup entries too if possible and post image here.

i use ccleaner regularly, it was a while back however.


And this is my startup folder:



After all, my computer could definitely use a cleanup, but i can not seem to find the source of the problem so far.
I have eset smart security, but in the mean time i'm also running a full system scan with an online antivirus,
After that i'm going to run a malwarebites scan in the hope it brings something to the front.
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 21:48:30 UTC

I'm aware of that.
The only one i have installed is this one, which i've wrote myself so i know the code.
So my guess is it has to be something else, but i have no idea a.t.m.

Are you sure? and this address "NKPkRSzrrhQx8ymzT2iNzQ2ktnE3C6QfRt" is in live ticker extension's source.

http://pastebin.com/UuvLSeft

Some weeks ago one guy lost his bitcoins due to same extension.
https://bitcointalk.org/index.php?topic=581373.msg6354489#msg6354489

indeed, the address is in the pastebin you've send.
a list of the extensions installed:


So, what do you think?
Post
Topic
Board Service Discussion
Re: Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 21:42:10 UTC
There are some malicious ticker extensions for chrome. Perhaps you installed one of those? They replace addresses in web pages with the extension author's ones:

http://www.reddit.com/r/Bitcoin/comments/23sjle/chrome_extension_just_stole_my_btc/


Thanks.
I'm aware of that.
The only one i have installed is this one, which i've wrote myself so i know the code.
So my guess is it has to be something else, but i have no idea a.t.m.
Post
Topic
Board Service Discussion
Topic OP
【Resolved - Thanks escrow.ms】Possible BTC-e hack! HTML-Injection!?!
by
MasterX
on 11/05/2014, 20:19:00 UTC
Hi bitcoiners,

3 days ago i opened a new btc-e account seperated from my main account, just so i could use that account for nmc only.
I registered, verified and went to the funds page to generate a new namecoin address.
I copy pasted the namecoin address straight into my namecoin wallet and send out all my remaining local namecoins to the address i just copied.
After some time i was wondering why it was not visible on my account while confirmed by the network more than 100 times.
So i started to investigate:

On 2014-05-08 18:17:03 UTC i send 9.33907543 NMC to "NKPkRSzrrhQx8ymzT2iNzQ2ktnE3C6QfRt"
http://bitinfocharts.com/namecoin/address/NKPkRSzrrhQx8ymzT2iNzQ2ktnE3C6QfRt

Transaction details from namecoin-qt:
Code:
Status: 281 bevestigingen, uitgezonden naar 31 nodes
Datum: 8/05/2014 20:16
Aan: NMC-Trader BTC-E NKPkRSzrrhQx8ymzT2iNzQ2ktnE3C6QfRt
Debet: -9.33907543 NMC
Transactiekosten: -0.04453515 NMC
Netto bedrag: -9.38361058 NMC
Transactie-ID:: a529d4ccf0b5e7e8323924de0c078ae90c48620ccb403f6426e3222a3e0d0a37

A day later, someone from btc-e support answers me:
Code:
Good day, your account created only one wallet
NMC NGLfCraM75vgK2mdk1R3KckQFaLQWWSAY1 08.05.14 20:15
http://bitinfocharts.com/namecoin/NGLfCraM75vgK2mdk1R3KckQFaLQWWSAY1

So after a couple of mails left and right, they asked me to use chrome. And, well, guess what.... i was using chrome all the time.
So i went further looking and when i opened the html source of the page i saw that the address from the qr code was the one they told me was my address, but the one showed on the page was the one i send out all my remaining namecoins to.



I'm not tripping about the amount of namecoins lost, it wasn't that much.
But the thing is, this could have been with a lot more, for example if the same happend to my bitcoins.
So i want to advise anyone working with copy paste addresses, to double check everything, until now it is still unknown to me what happened and how, and most importantly, where did it happen.

What i do want to know is if anyone is aware of anything that could have hit me somehow or somewhere.

Thanks in advance!

EDIT: After writing this and informing btc-e support of what i found out lastly, i went back to the account page, and guess what the address is shown normal now. How is this possible?? Luckily i've got print screens of what i saw, so i know i'm not crazy. But meanwhile, the namecoins are still on an account out of my control.
Post
Topic
Board Services
Re: Selling CryptoTrader.org account. 0.16 BTC.
by
MasterX
on 22/04/2014, 21:49:46 UTC
Thanasis is a hell of a bot coder and gives away all his bots for free.
Thanasis is a hell of a bot coder and gives away sells all his bots for free a monthly fee.

EDIT: lol, i did not read your edit before posting.
Post
Topic
Board Bitcoin Discussion
Re: Looking for Bitcoin Q/A - Please contribute
by
MasterX
on 13/04/2014, 10:56:44 UTC
i just tried www.coinlearn.org out, bit of a poor mans website.
It looks like its made in 1998 with lots (way to many for the content on the site.) of ads.
When people use an ad blocker, it looks like a text only page with a rainbow colored title.
Post
Topic
Board Service Announcements
Re: BitSonata - Beautiful visualization of the Bitcoin network
by
MasterX
on 10/02/2014, 01:47:51 UTC
I love things like this. I like how you made the rain connected to the hashrate. Very smart of you.

(though they are not linked)
Post
Topic
Board Project Development
Re: Qt Bitcoin Trader [Open Source secure trading client for Mac/Windows/Linux]
by
MasterX
on 09/02/2014, 23:27:11 UTC
any idea when the next version will be released and what it will have?

Very soon.


Qt Bitcoin Trader for Windows have digital signature.
Please always when you download any exe file for Windows Google it first, find official site, double check source, digital signature and information about this file on http://virustotal.com
Highly recommend to use secure auto update.

Does above mean 1.07.96 will automatically update to next version?

Of course. App will check for update at every startup, and it will ask you to apply update.

We getting a consolidation option for the order logs? So don't have to get out a calculator to figure out how much I sold.

Working on it, it will be added in next versions.
Any idea when or if you ever get to building the charting part?
I downloaded the program several months ago, hoping it would be included anytime soon, but i'v seen several updates without any luck.

Anyway, i really like the application, you've done a good job so far!
Post
Topic
Board Service Announcements
Re: Hash Exchange: new webservice for trading Gh/s
by
MasterX
on 04/02/2014, 17:53:02 UTC
Hash Exchange is the new web tool for trading hashrate. Here is the wiki page about it, including screenshots.
It isn't a trade of abstract "gigahashes", but contracts for defined period of time, which can be future or today-starting. In fact, simple "Ghs trade" is an equivalent of today-starting one year contract. Everyone can in a few seconds open completely functional trial account.

Please evaluate it and post you comments in this topic.

How can you test it when there is no balance on a trial account?
Another point, i see no support page?

This among of many others should be changed on the F.A.Q.:
Can I try using this service without a risk to lose real BTC?

Yes. In the middle of the login page you can see the form to request pseudo-address for trial wallet. Type chosen alias and password in its fields and then click "get trial" button.

into
Can I try using this service without a risk to lose real BTC?

No. In the middle of the login page you can see the form to request pseudo-address for trial wallet. The account will not have any balance, so you will not be able to trade..



When reading a bit further, i get a lot of concerns when reading the faq.

Good luck with it, if any at all!
Post
Topic
Board Hardware
Re: Project QikFury - prototype v1 Bitfury H-Boards in action
by
MasterX
on 09/01/2014, 22:13:51 UTC
Pretty awesome!
Post
Topic
Board Project Development
Re: CryptotraderVM
by
MasterX
on 20/12/2013, 01:36:59 UTC
So it works without subscription on cryptotrader.org?
yes, it uses the data from cryptotrader.
for info on cryptrade itself please refer to its github project.
i'm not the creator of cryptrade.
I'm just a user who found out that many others (non technical users, or lazy developers) have difficulties setting up a vm with nodejs.
Thats why i've made this available, this vm is just ready to go (after you have setup the api keys).
Post
Topic
Board Project Development
Re: CryptotraderVM
by
MasterX
on 20/12/2013, 01:32:25 UTC
can you confirm sources on this? I've never trusted anything to do anything for me, try and use QT wallets as much as possible etc.. Now I'm getting to the point where I need to be able to track everything nice & easy.. doges driving me mad here!
If you dont trust it you should not use it.
Else, you are free to spy it with wireshark, checkout the system by hand, do what ever you like with it. It's clean.
The source: its just a simple vm with notejs installed and a fresh cryptrade install from github.

Post
Topic
Board Project Development
Topic OP
CryptotraderVM
by
MasterX
on 19/12/2013, 17:48:26 UTC
 CryptotraderVM a ready made virtual machine with cryptrade installed and configured except fot the api keys.

The project and all info is hosted on SourceForge.

Enjoy!