Pages:
Author

Topic: Alternative Block Chains : be safe! - page 85. (Read 1636802 times)

legendary
Activity: 1274
Merit: 1050
August 25, 2013, 08:20:32 AM
#77
Just out of interest was there any any coin/mining tool infected here in past?

I knew few ppl that lost coins from Gox, BTC-e and they were "careful", even gmail verification have not helped, but i bet many mined alt crap

I've never heard of any real trojans or viruses in wallet releases yet. It seems walletstealers in coin.exes are a myth, propagated by false negatives from antivirus software.

legendary
Activity: 1901
Merit: 1024
August 11, 2013, 09:47:22 PM
#76
Just out of interest was there any any coin/mining tool infected here in past?

I knew few ppl that lost coins from Gox, BTC-e and they were "careful", even gmail verification have not helped, but i bet many mined alt crap
sr. member
Activity: 420
Merit: 250
August 08, 2013, 09:16:56 AM
#75
I think these are perfectly legitimate concerns actually but the way I found out whether Bitcoin wasn't a scam and the way I find out anything else isn't a scam is this:

. Is it open source? If it's open source then that means people will be able to look at the code and find anything suspicious or even help to improve it if the developer is unwilling, it's very difficult to plant something bad if people can investigate it with a microscope


Be careful here. As a coder, I can hide some pretty fancy run time code that calls a script from a server that can update with malicious intentions.

Or if I am really lazy, I can have an open source on git, but a private one that I compile from with the bad code.
You are not protected on most of these, the laziness of the stupid people copying/pasting the new alt-coins is the only thing that is protecting you.

If a group with the education/willfulness somewhat smarter then the average 15 year old coder decided to reek havoc on all of the folks that race to mine the alt-coin on launch; the damage wouldn't be measurable.

Thought experiment:
Pre-announce alt-coin
On release link to source on git. Publish a binary with hidden code.
Include code in binary to copy all wallet files from all altcoins traded on cryptsy.
On the server that the wallets are uploaded to, run a test to see if it is encrypted.
For unencrypted wallets send the coins to cryptsy/coins-e wallet and sell for btc/ltc.
Have code self-patch to remove the function call.
...
Wait a few months, rinse and repeat.


The above project can be done by anyone with coding experience in a matter of days.  You are not protected, please start being somewhat cautious.
 

HTH.
legendary
Activity: 1540
Merit: 1000
August 06, 2013, 10:28:11 PM
#74
I think these are perfectly legitimate concerns actually but the way I found out whether Bitcoin wasn't a scam and the way I find out anything else isn't a scam is this:

. Is it open source? If it's open source then that means people will be able to look at the code and find anything suspicious or even help to improve it if the developer is unwilling, it's very difficult to plant something bad if people can investigate it with a microscope

. Are the stores that are supportive of it just subsidiaries of the person who made the currency? Or are they independent and have accepted it willingly? This is usually a good sign that it has some actual worth, because they must have been convinced by something about the coin to accept it right?

. Does the developer regularly post updates or comments, do they chat and argue with other developers or users? Usually another good sign that the currency is going places and not just a con, if they just post it and abandon it for ages then chances are they're just looking for someone to click on the links

. Does the developer have a programming background? Have they done anything aside from this currency they've made? If they have, chances are they'll have the understanding of the source code needed to update and change it if bugs and glitches come out, they'll also usually have more respect for other peoples computers if they already work for a legitimate company

If you are an Anarchist/Libertarian Cheesy :

. Does the currency have no ties to the current aristocracy, government or financial system? If so there's probably a better chance of it being legitimate than just a way to manipulate peoples wealth
newbie
Activity: 23
Merit: 0
July 04, 2013, 10:02:17 PM
#73
thank you
newbie
Activity: 28
Merit: 0
June 26, 2013, 05:13:00 PM
#72
look at Bytecoin a byte is bigger than a bit following that line of reasoning~hmm name dat remix?..thanks


EDIT : Lmao! looks like this is the BTE thread after reading haaa
newbie
Activity: 14
Merit: 0
June 15, 2013, 06:26:31 PM
#71
I haven't seen anybody post about what would be my biggest worry if I were trying out alternative block chains. I realize this may be perceived as "Gavin is FUD'ding anything that isn't bitcoin!"  (FUD == Fear, Uncertainty and Doubt)  But I think some of you might be forgetting some basic computer security fundamentals in the excitement to be early adopters.

When I first heard about bitcoin, my questions were:lots of fishy

1) Can it possibly work (do the ideas for how it works make sense)?
2) Is it a scam?
3) If it is not a scam, could it open my computer up to viruses/trojans if I run it?

I answered those questions by:

1) Reading and understanding Satoshi's whitepaper.  Then thinking about it for a day or two and reading it again.
2) Finding out everything I could about the project.  I read every forum thread here (there were probably under a hundred threads back then) and read Satoshi's initial postings on the crypto mailing list.
3) Downloaded and skimmed the source code to see if it looked vulnerable to buffer overflow or other remotely exploitable attacks.

If I were going to experiment with an alternative block-chain, I'd go through the same process again. But I'm an old conservative fuddy-duddy.

If you want to take a risk on a brand-new alternative block-chain, I'd strongly suggest that you:

1) Run the software in a virtual machine or on a machine that doesn't contain anything valuable.
2) Don't invest more money or time than you can afford to lose.
3) Use a different passphrase at every exchange site.


full member
Activity: 266
Merit: 100
NXT is the future
June 14, 2013, 05:09:44 AM
#70
thank you
sr. member
Activity: 439
Merit: 250
June 12, 2013, 08:31:53 PM
#69
Thanks Gavin!

That is great advice and it includes the absolute basic measures that everyone should take. Since we are connecting right to someones server anything could happen. Well, not "anything". Im not going  to start mining and open an inter-dimensional portal.

This advice is especially prescient now that we see "the newest alt coin is here!" 20 times per day. (btw, is there a way to stop people from creating thousands of altcoins? I have been trying to just ridicule them but it is barely slowing them down)

Thanks again
legendary
Activity: 4592
Merit: 1851
Linux since 1997 RedHat 4
May 26, 2013, 05:29:34 PM
#68
A lot of these coins are just pump and dump.
Which ones aren't? Tongue

What is your opinion on Bytecoin, released on April 1?

"April 1" Smiley
legendary
Activity: 1246
Merit: 1002
May 26, 2013, 11:12:36 AM
#67
A lot of these coins are just pump and dump.
Which ones aren't? Tongue

What is your opinion on Bytecoin, released on April 1?

erk
hero member
Activity: 826
Merit: 500
May 25, 2013, 06:55:26 AM
#66
I think FTC had a block chain split from a 51% attack around block 33,000. No slow block rate from the high diff helped the attacker.
staff
Activity: 3304
Merit: 4115
May 15, 2013, 10:40:14 AM
#65
Very good advise here, even though I don't believe on using alternative currencies to Bitcoin.


There are a number of virtual programs which can be installed for free, and they are also safe and pretty reliable.
Also very easy to setup, google on how to setup. It takes no longer than 5 minutes.
legendary
Activity: 4592
Merit: 1851
Linux since 1997 RedHat 4
May 11, 2013, 08:39:10 AM
#64
A lot of these coins are just pump and dump.
Which ones aren't? Tongue
sr. member
Activity: 448
Merit: 250
Changing avatars is currently not possible.
May 11, 2013, 07:42:27 AM
#63
A lot of these coins are just pump and dump.
hero member
Activity: 714
Merit: 500
May 09, 2013, 12:50:58 PM
#62
Most of the new coins coming out daily are created by ignorant developers. Now that's scary.
full member
Activity: 126
Merit: 100
May 08, 2013, 12:06:33 PM
#61
necromancers...
member
Activity: 110
Merit: 10
May 06, 2013, 09:33:15 PM
#60
If anybody is reading this and also wants to solo mine with virtual box for safety I used this and it worked.

Many alt-coin/modded/patched clients are very interesting but less than fully trustworthy,
and VirtualBox has no good GPU support.

So, for solo mining the miner should run on the physical host machine and connect to the client
in the virtual machine, via "virtual box port forwarding".
Expert level manuals are easy to find, but is there a simple step-by-step howto for beginners?


Very short version would be like:

-Miner: connect to localhost 127.0.0.1 and to some unused port xxxx.

-VBox network settings (for this virtual machine): networking mode: NAT (default)
                                            port forwarding: host IP
                                                                    host port
                                                                    guest IP
                                                                    guest port

-in config file for client in guest machine: rpcallowip=*

This should do it. Guest firewall (in its default state, tested on Linux mint and Win7) is mostly harmless.


The asterisk in rpcallowip is literal. In the conf file put that exactly with the asterisk.
member
Activity: 110
Merit: 10
May 06, 2013, 05:24:24 PM
#59
Guys, there is no point in GPU-mining in VMs!

Alternative chains with GPU-based miners are compatible with standard (trusted) miners that don't need to be virtualized. This means you only need to run the (untrusted) alternative chain app in a VM, and expose its RPC port to the network where the physical miners are running...

Could you please expand on this bit more? (I'm pretty new to VirtualBox) I set up VirtualBox with Windows 7 in a host OS that's Windows 8. The windows 8 machine is my miner and I can't figure out how to get the config to point my solomine to my CHNcoin wallet on the Guest OS.  When I go to ipconfig on the VirtualBox it has an ipv6 address and an ipv4 address that is 10.x.x.x (there are numbers where the x's are). So in my conf file when I run my CHN coin wallet as server do I use the rpcallowip as the 10.x.x.x address and then set my cgminer to point to that as my url?  Will I have to configure anything else in VirtualBox to let the miner through to the ports?
newbie
Activity: 33
Merit: 0
May 04, 2013, 09:21:43 PM
#58
Thanks for the heads up!
Pages:
Jump to: