Search content
Sort by

Showing 20 of 40 results by traiz
Post
Topic
Board Securities
Re: newbie wants to do business with CT
by
traiz
on 05/02/2014, 01:19:49 UTC
PayPal is only available for withdrawals, because a PP transaction can be reverted and their TOS are not very Bitcoin friendly.


Even though generally funds can be "reverted" and the "TOS are not very Bitcoin friendly"  the is a material difference between sending funds to fund an account (of any type) and purchasing an item.   

Paypal's  'Mass payment' option is not an disputable item.  CT should look into that as a paypal funding option

I'm not sure about that. If you were to do the mass payment using a credit card, then have your CC issue a charge-back.
Post
Topic
Board Securities
Re: [CRYPTO-TRADE] Crypto-trade.com IPO and official thread!
by
traiz
on 31/01/2014, 22:58:40 UTC
While I have no issues with receiving dividends in other currencies other than btc and ltc (since it probably makes it easier to automate), I would prefer they at least told us about it before.

What was the point have having separate stocks for LTC and BTC?
Post
Topic
Board Announcements (Altcoins)
Re: [ANN] [SCRYPT JANE] UltraCoin (UTC) - Newly Launched
by
traiz
on 19/01/2014, 18:55:20 UTC
Just saw this and wanted clarification on the following quote

Please note that every partner gets 0.1% of the total number of coins, we feel this is not unreasonable as a compensation for our time and investment.

If the total pre-mined is 2000 with
1600 for bid
100 to partner 1:Ziggy (dev)                                                                                                                      
100 to partner 2:bumface (founder)                                                                                                                
 
100 to professional consultant
100 to rewards to developer
 

So 100/2000 = 5% of the initial coins

So where is the 0.1% from? Are you saying that the partners get 0.1% of all future coins (both mined and staked) as well?
Post
Topic
Board Mining
Re: Want help looking at my mining options and which one to pick
by
traiz
on 13/01/2014, 04:14:49 UTC
What's the energy use of a raspberry pi compared to an old android smart phone?
Post
Topic
Board Mining
Re: It appears that our bitcoin bretheren have been creating FUD amongst Miners
by
traiz
on 13/01/2014, 04:01:57 UTC
People can make their own choice whether they want to mine or not.
However, my gut feeling is that the amount of BTC a miner gets is dependant on his hashing power compared to the rest of the network, so of course he wants to discourage an increase in hash rate.

But they do have a point, unless you have a recent ASIC, you might not make back your electricity cost from mining, in addition to your machine's cost.
And no one can really predict what's going to happen 3 months from now, with all the new manufacturers popping up.
Post
Topic
Board Mining speculation
Re: For Individuals looking to get into the Mining Game in 2014, please read this!
by
traiz
on 13/01/2014, 03:51:58 UTC
you can get 2 x 200 GH/s machines for 5K

they will mine 1BTC a week between them at current difficulty.

with increased difficulty you sould get ROI in 7 weeks.

Seems pretty good to me.

How accurate are profitability calculators? According to all of the ones I've checked, profitability will go way down in about 5 months from now. It seems that the next three to four months are all that are left for mining in the black.

I want to jump in, but difficulty is not making an investment in hardware very attractive.

It's a risk you have to take. Do you believe that the 3 TH machines will be released on schedule, and are you slated to get one? Alternatively, do you have access to the latest 650 GH/s machines?
If you're not, I wouldn't bother mining BTC. - Look into alt-coins or arbitrage in the financial markets (ie, trade 1 crypto currency for another)

My personal estimate is that a 650 GH/s machine has about 14 BTC left in its life, so if you want to get one, bid appropriately.
disclaimer - I have a batch 1 KNC Neptune on order that I'm thinking about cancelling since the batch 2 comes out a month later, and if it follows KNC's historical info, it will probably be faster


Post
Topic
Board Beginners & Help
Re: How many bitcoins in an average day would i earn?
by
traiz
on 09/01/2014, 02:31:05 UTC
I realize that but what would someone with this hashrate get on an average day of mining, i want to see what they make usually

Try this link to calculate your earnings >
http://www.bitcoinx.com/profit/

However be aware that is not 100% correct because of difficulty changes...

At a difficulty of 1418G, your 36GH/s will earn at ~.01269 BTC/day
Post
Topic
Board Securities
Re: [CRYPTO-TRADE] Crypto-trade.com IPO and official thread!
by
traiz
on 08/01/2014, 05:45:47 UTC
@d5000 I haven't had any issues accessing the site nor logging in.

Since this thread has been fairly quiet lately; It had been awhile since I last read the contract so I just wanted to gloss over it again in case I was missing anything. I found a few things fairly interesting:

Quote
The dividend will be issued, the first day of each month.

Quote
Communication
All important announcements will be made on:
 - Exchanges where listing are listed using their own mailing or inside system
 - bitcointalk.org

Quote
We don't really need any funding for this project as we paid all ourself already and we could financially cover all cost for the launch and marketing, However this operation could have multi effects. While assuring a huge promotion of the site in the community the fund of sales will be used in part to add more features, deposit and withdraw option and more. Good dividend can also be provided to a lot of people in the community according to trade volume and fees calculation as observed daily with respect to actual competitors. I would like to indicate that I don't really need funding for this project and can fund everything by myself, however I see a great potential and benefit to make the public 50% shareholder , as explained previously, mainly for promotion purposes.

Quote
Actual company Esecurity SA is owned by 2 shareholders. ME and my associate in business for years (Technical manager of koddos.com)

The new company we will create specially for cryto-trade will be owned by 3 people.

I will own 34% of the company

My associate of esecurity SA will own 33%

The main developer working on this project will own 33%

I will be the main manager of website and ceo of the company. My associate will manage server and hardware part, while the developer will keep updated the website.

Quote
The listing itself and the fact that 50% of the company will be publically owned, make the promotion done mainly by itself. Each shareholder will have great interest to use our service instead another.


I realize the situation has vastly changed since the contract's birth but it is certainly unnerving to see communication develop to where we find it now.


So should we be getting December's dividends in Jan? Or was the payment on Dec 22 for Nov/Dec up to that point?
Post
Topic
Board Goods
Re: [WTS] 8in KING size Memory Foam Mattress Livingsocial Voucher
by
traiz
on 07/01/2014, 05:08:29 UTC
Will you take ~.25 BTC if I pay escrow?
Maybe through BTCrow?
Post
Topic
Board CPU/GPU Bitcoin mining hardware
Re: how do i expand my mining operations?
by
traiz
on 06/01/2014, 06:56:22 UTC
dump a lot of money in cloudhashing and check it once a week. thats whats i do  Cheesy

Do you actually make a return mining xpm?
Post
Topic
Board Economics
Re: How and why to hold bitcoins in your Roth IRA (yes, you can do it today!)
by
traiz
on 03/01/2014, 15:14:49 UTC
The percentage of your holdings to put in a Roth IRA depends on your age and how likely you are to want to access that money before you reach retirement age.

If you are young, you probably only need a smallish number of bitcoins in the IRA.  By the time you reach retirement age, their value will probably either have grown a whole lot, or they won't be worth much at all.  So a small investment in a Roth IRA today either means a very comfortable retirement or a small loss.  At some point making a larger investment multiplies the risk without significantly improving the outcome.  Your retirement won't be that much different if you're worth $100 million instead of just $10 million.

However, the rules of the Roth IRA allow unlimited, tax-free deductions once you reach age 59 1/2 (as long as you have had any Roth IRA account for at least 5 years).  So if you're already that age, or are willing to wait until that age to touch the money, you would want to put most of your coins into the Roth and avoid all those capital gains taxes!

Fair enough, but this is different than moving your already existing bitcoins into an account you control (*cough* money laundering).
As you stated previously, you can only invest what you're allowed to contribute, which are qualified funds subjected to the IRS's contribution limits, or funds you have already invested in IRAs or another retirement account previously.
So that's $5500 of earned income if you're under 50

Then again, I've already been doing this via IRA financial group (in a roth so I'm not hit by a tax penalty if I had mis-characterized my funds/made a mistake).
There are cheaper options but I'm only using my contribution limits for one year.
Post
Topic
Board Economics
Re: How and why to hold bitcoins in your Roth IRA (yes, you can do it today!)
by
traiz
on 03/01/2014, 06:30:40 UTC
The problem is that you can not directly transfer your bitcoin to your IRA.
Your funds have to go to your custodian first, before it can go into your LLC.

Otherwise, you are self-dealing, and will lose the tax advantage of the IRA
Post
Topic
Board Mining speculation
Re: No ROI on future Mining, its a FACT!
by
traiz
on 03/01/2014, 04:41:10 UTC
I think every miner, that bought an asic, would of made more by buying btc instead. if there is anybody, that has more btc from mining I would be very surprised.

I brought a knc jupiter when btc was close to $1000USD.
So it would have gotten me 5, maybe 6 BTC.
So far, my jupiter hashed close to 7 BTC.
Post
Topic
Board Mining
Re: .25 BTC BOUNTY for the best answer
by
traiz
on 01/01/2014, 08:54:30 UTC
We have a lot of the "silliest" answers here, from people who have no datacenter or AC experience. You put up a bounty, you get stupid spammers and beggars.

You basically have two choices:

- Traditional refrigerant air conditioning with a condensing outdoor unit,
- Evaporative "Swamp coolers", where facilities allow large outside berth for building flow-through, and the local weather is favorable.

*snip*


Evaporative cooling is measured a different way, in the temperature drop from intake air temp, with accompanying increased humidity. You can make 100F outside air into 75F inside air. However, you will need to look at the cubic feet per minute ratings of the systems to see what can keep up with your heat load. You may decide that 85F will be the maximum "output" temperature rise after air goes through your racks - for this much cooling, you will be looking at garage-door sized walls of fans from the outside and gallons of water per minute.

However, the evaporative cooling does have the advantage that you are putting in a massive outside air circulation system - the 75% of the day and year when outside air is below 75F, you will need nothing more than to run the fans.

Inside a closed air conditioned building, evaporative cooling may enhance efficiency a bit. AC removes humidity, to the point where the IDUs need to pump water out. You could add some humidity back to pre-cool the hot AC intake air (you can't humidify cold air AC output). The humidity would have to be strictly monitored to not go overboard or add more humidity than the AC can remove.

Whatever system is implemented, you need to direct airflow through your facility and systems, ideally in a typical contained hot/cool-aisle system:
*cut*

You could always try an evaporative system base on old technology, like a windcatcher
http://en.wikipedia.org/wiki/Windcatcher
Just get a mechanical engineer to do the required calculations
Post
Topic
Board Hardware
Re: Hashfast Scam Timeline (Do not give hashfast your money)
by
traiz
on 01/01/2014, 08:43:11 UTC
Can you clarify something for me?
Is hashfast a scam because they took the preorder btc, saved some, and are going to only refund the amount of btc at the current rate (instead of when the pre-orders paid)?
Or because they aren't able to ship?

Did anyone confirm that they have a working product?
Post
Topic
Board Beginners & Help
Re: Newbie's first words + question about stealing wallets!
by
traiz
on 01/01/2014, 00:32:13 UTC

Greetings to all members of BTCTalk forum, I'm new to this forum, but I have some basic knowledge about BTC in general. I hope that we'll all get along. I currently have miserable amount of BTC in my wallet, but I hope that will change from time to time. I write in my free time and I hope that my book will see the light soon. Cheesy Anyways, I searched the forum, but couldn't really get the answer from it so I ask for people who know to answer me.

Question:
How can someone steal your wallet? I mean can they just grab it from a website or can they steal your wallet like they could steal your email and its password by keylogging, infecting with trojan and so on? And what happens if I for e.g. crate a backup of my wallet that has 0.01BTC and someone steals it from me and spends everything from it and I back it up after a day or two?

Thank you all in advance for taking your time to read my topic! Wink




To simplify, your funds aren't actually kept inside a wallet. It's kept as part of the bitcoin network.

As such, if anyone have your private key, they can steal all the contents in your wallet (send all your btc to themselves)
If you're using an online wallet like coinbase (who maintains your bitcoin address and the private key for that address), if they have your user name and password, they can steal everything in your wallet.

Post
Topic
Board Beginners & Help
Re: Mining charity
by
traiz
on 31/12/2013, 22:09:12 UTC
I think gridcoin contributes to BOINC
Post
Topic
Board Mining
Re: KnC Miner : Security hacked - Take remote control over miner!
by
traiz
on 31/12/2013, 21:49:33 UTC
what do you expect me to think?

That you should have some evidence beyond pure circumstance before slinging around legal threats?

Would you somehow have been better off if OP had been intimidated by legal liabilities into never discovering and posting this information?

P.S. If you don't want people "attacking" your gear through a public IP interface, simply configure it to not fulfill requests so promptly and politely.  Is it that difficult?

first off I am not the op.  i did not brute force 28 knc machines he did.  now when he did the brute force on the 28 machines he did not tell us he had permission to do it. so stop defending him for  doing something that is not legal.

 did his brute force attack hurt this person?

https://bitcointalk.org/index.php?topic=31163.msg4140767#msg4140767

maybe I do not know but time wise it matches.  was he off line for 3 or 5 hours extra due to the password attack ? do not know.  I ask you this. would you want someone coming to the front door of your home and testing your door knob to see if it opens easily ?  

  so to the op  did you have permission to attack the 28 machines? yes or no?  my apologies if you informed those miners. before you attacked them

Wait... the OP is kind enough to inform us of a possible exploit and you're nailing him for it???
I rather this type of information is made public than kept under wraps and have "hackers" exploit it.

Besides, if you have a machine directly connected to the internet, you should sort of expect something like this to happen.

I mean if someone had remote access to your machine, locking you out should be the least of your concerns (since you would know something was wrong).
Instead, they could have reflashed your machine with a custom rom who's gui looks exactly like the standard knc one, but is set to mine for them on a part time basis (but also keep your settings as well).
Then you're paying resources to mine for them, all the while thinking your miner was defective/had stale shares. Not knowing its compromised.

It's even worst if they had it randomly mine for them on one of the larger pools (that only requires an address) - say like 2am to 6am, 10am to 12pm, then 2pm to 4pm. While occasionally submitting shares to your pools so it doesn't time out and alert you.

Then again, if this was a troll post, good job.
You got me
Post
Topic
Board Mining
Re: KnC Miner : Security hacked - Take remote control over miner!
by
traiz
on 31/12/2013, 15:23:15 UTC
No, the details are not public yet.
There is a significant difference in making a custom rom, and explaining how you can gain access to thousands of remote miners out there.

Custom ROM is intented to use on your own hardware.

My hack is intented to remotely control another miner, making it useless to the owner, since he can no longer login.

Ok.
But just wanted to check its different than brute-forcing the credentials of the remote miner
And loading your custom rom on it.

And would like to confirm that a true factory reset (not software - but the physical hold for 5 seconds to load image from rom, etc)
is unable to restore the miner to its default.
Post
Topic
Board Mining
Re: KnC Miner : Security hacked - Take remote control over miner!
by
traiz
on 31/12/2013, 14:53:16 UTC
Hi all,

So, what else to do in my spare time while mining some BTC? Exploiting security holes in my hardware.
It turns out that every KnC miner can be hacked within 5-10 minutes, making it possible to control the CGMiner remotely.

I've submitted a higly detailed report to KNC, explaining how i did it, and how they can patch it with a new firmware upgrade.
To avoid a huge breach, i will not reveal all details, but i give you a short summary [proof of concept].

1: Scan the internet, using a special tool, for the default KnC Miner header response
Code:
WWW-Authenticate: Digest realm="KnC Miner configuration", nonce="f76e06a34c00b5fec1da6749d4ed0bfc", qop="auth"

EVERY miner uses this header, so in 10 seconds, i found about 1180 responses vulnerable to my attack.

2: Cricial information remains hidden for public, but the http digest can be bypassed with ease.

3: Run basic HTTP bruteforce. Since the digest is bypassed, i can run unlimited bruteforce attempts.
Within a timespan of 20 minutes, i managed to bruteforce 28 miners !! (Most of them poor passwords tough)

Now comes the fun part...

Login using SSH. If the SSH port is not enabled, simply login to the web console and enable it.

The source code of
Code:
factory_config_reset.sh
tells us exactly what we need.

VI (edit) the default factory files, as found in the factory reset code, making a second login inside the factory reset files.

The digest file requires you a special hash to create the password. This can be done using special tools, but for safety reasons, i will not go further on this part in public.

Alter these files to gain access after factory reset

Code:
/etc/shadow.factory
Code:
/etc/lighttpd.htdigest.user

Now remove all the default credentials in the factory files, making it impossible to login using the default admin:admin for the owner

RUN THE FACTORY RESET...

And enjoy your personal miner, that just became unusable to the owner, since he can no longer login.

Disclaimer:

I intend to do no harm. No miner has ever been in my control, or ever will be. I just expose this threat to put pressure on KnC to hurry their firmware upgrade.
Do not ask or PM me for information about this hack, it will not be provided !! Only KNC has the entire manual !


Note to all KnC miners out there: Please change your passwords to long, safe password!
If needed, simply hashing your firstname to MD5 will do the trick to scare away hackers.

PLEASE USE A ROUTER INSTEAD OF DIRECT INTERNET ACCESS !!!


Greetings!!

EDIT: Email to KnC

Quote
Hello KnC team,

As you might picked up on bitcointalk.org, i managed to successfully scan and exploit KnC Miner configuration software running on all your miners.
Attachted is my HowTo, showing you how i managed to succeed in this hack.

I feel, as a software developer and penetration tester, that you do not take user security in account with your services.
The only thing you care about, is selling hardware. What happens with it, seems to be the least of your concerns.

You should now that the user is always the weakest security, but instead of anticipating on that, you go with that flow.

I did not post exactly how i did it on the forum for security reasons, but however, i urge you to push a new firmware closing up those holes.
Holidays or not, i will expose the detailed howto on bitcointalk.org on January 1st 2014 at 12h00.

Once this exploit go public, you will receive a lot of complaints and behalf of your clients, and loose lots of trust in the general public.
If you have not patched your firmware, this will confirm my statement that you do not carry about user security.

I can only imagine all blogs picking up that posts just before Neptune delivery...

I just created a custom firmware patching all the security flaws, it took me about one hour.
So surely, your developers can do the trick also.

For the sake of the general public, who have put their trust and funds in you, please patch up your firmware!!


Aren't the details already public?
Correct me if I'm wrong, but aren't you in effect trying to create a custom rom like bertmod?
The hash information is already out there...