Author

Topic: [ANN][KARM] Karma / ₭ / X11 - page 408. (Read 583123 times)

bcd
sr. member
Activity: 252
Merit: 250
April 26, 2014, 06:18:31 PM
full member
Activity: 182
Merit: 100
Ask me about Karmacoin
April 26, 2014, 05:32:42 PM
Here is an other food for thought

Remember how google website was at beginning? Facebook? First internet websites?

In time, everything will be smoothed out.


Now, how about improving our Part D?

sr. member
Activity: 532
Merit: 250
April 26, 2014, 04:48:14 PM
3. No one can steal your wallet signature in this method. It is TIED to your karmawallet. For example if you use MY WALLET SIGNATURE and send some coin it does not affect anything. Because the WALLET and the SIGNATURE should prove one and the other.

Of course it is tied to the Karma wallet... But it is not tied in any way to the Bitcoin address!

Lets say that an attacker got access to the signature tied to a given Karma address of someone that sent coins to Karmashares LLC.
As you probably know emails are not that hard to snoop... And the form sends an email to someone from Karmashares LLC right?

An attacker could copy a signature he got from snooping the emails sent to Karmashares LLC, put it in the form (http://karmacoin.me/contact? ) with the correspondent Karma address of the shares holder (not the atacker Karmacoin address!) and request a change of the bitcoin address associated with the shares (that are nos his) to one of his own bitcoin addresses.
This way the atacker/hacker would be paid the dividends of Karmashares LLC insted of the legit owner of the shares.

The signature of a blank message is in itself proof that it was signed by the owner of the wallet.
But if the message it was generated with does not contain the BTC address of the owner then I see a big security flaw.

MY SOLUTION:
So I suggest that you ask the shareholders to sign the message, character by character (just do copy-paste), that they put on the form (http://karmacoin.me/contact?).
With the signature pasted in a different text box; because it is obviously not possible to sign a message containing the signature itself.


I'm just trying to help.
A security flaw like the one I pointed could discredit Karmashares LLC if taken advantage off... And be sure it will if it is not solved.

Well done sir!  I'm gonna tip you for this!

Thanks!

I welcome all tips.
Specially if they are in Karma!
member
Activity: 168
Merit: 10
April 26, 2014, 04:17:43 PM
3. No one can steal your wallet signature in this method. It is TIED to your karmawallet. For example if you use MY WALLET SIGNATURE and send some coin it does not affect anything. Because the WALLET and the SIGNATURE should prove one and the other.

Of course it is tied to the Karma wallet... But it is not tied in any way to the Bitcoin address!

Lets say that an attacker got access to the signature tied to a given Karma address of someone that sent coins to Karmashares LLC.
As you probably know emails are not that hard to snoop... And the form sends an email to someone from Karmashares LLC right?

An attacker could copy a signature he got from snooping the emails sent to Karmashares LLC, put it in the form (http://karmacoin.me/contact? ) with the correspondent Karma address of the shares holder (not the atacker Karmacoin address!) and request a change of the bitcoin address associated with the shares (that are nos his) to one of his own bitcoin addresses.
This way the atacker/hacker would be paid the dividends of Karmashares LLC insted of the legit owner of the shares.

The signature of a blank message is in itself proof that it was signed by the owner of the wallet.
But if the message it was generated with does not contain the BTC address of the owner then I see a big security flaw.

MY SOLUTION:
So I suggest that you ask the shareholders to sign the message, character by character (just do copy-paste), that they put on the form (http://karmacoin.me/contact?).
With the signature pasted in a different text box; because it is obviously not possible to sign a message containing the signature itself.


I'm just trying to help.
A security flaw like the one I pointed could discredit Karmashares LLC if taken advantage off... And be sure it will if it is not solved.

Here's the thing though, anytime you sign a empty message the signature is always different. All kosmost has to do is see if the newly submitted signature is the same as the original email and then not accept the change unless they send him a new signature. Since someone who is snooping can only get the signature that you sent to begin with this would solve that problem easily and keep things simple and not so confusing.
legendary
Activity: 1554
Merit: 1044
April 26, 2014, 03:44:49 PM
another gif file: signature

full member
Activity: 238
Merit: 100
April 26, 2014, 03:35:17 PM
Am I missing something about singing my message to prove I own the shares? I can't see that info anywhere.

Any help or links to the information? Thanks.



Thank you so much Smiley.
hero member
Activity: 518
Merit: 504
April 26, 2014, 03:07:17 PM
3. No one can steal your wallet signature in this method. It is TIED to your karmawallet. For example if you use MY WALLET SIGNATURE and send some coin it does not affect anything. Because the WALLET and the SIGNATURE should prove one and the other.

Of course it is tied to the Karma wallet... But it is not tied in any way to the Bitcoin address!

Lets say that an attacker got access to the signature tied to a given Karma address of someone that sent coins to Karmashares LLC.
As you probably know emails are not that hard to snoop... And the form sends an email to someone from Karmashares LLC right?

An attacker could copy a signature he got from snooping the emails sent to Karmashares LLC, put it in the form (http://karmacoin.me/contact? ) with the correspondent Karma address of the shares holder (not the atacker Karmacoin address!) and request a change of the bitcoin address associated with the shares (that are nos his) to one of his own bitcoin addresses.
This way the atacker/hacker would be paid the dividends of Karmashares LLC insted of the legit owner of the shares.

The signature of a blank message is in itself proof that it was signed by the owner of the wallet.
But if the message it was generated with does not contain the BTC address of the owner then I see a big security flaw.

MY SOLUTION:
So I suggest that you ask the shareholders to sign the message, character by character (just do copy-paste), that they put on the form (http://karmacoin.me/contact?).
With the signature pasted in a different text box; because it is obviously not possible to sign a message containing the signature itself.


I'm just trying to help.
A security flaw like the one I pointed could discredit Karmashares LLC if taken advantage off... And be sure it will if it is not solved.

Well done sir!  I'm gonna tip you for this!
hero member
Activity: 518
Merit: 504
April 26, 2014, 03:05:31 PM
Well I went out on a little gamble and bought 5 million of shares today as it is the last day of x10 bonus. Not willing to risk a huge amount of money, but interesting concept none the less. I suppose I wont be too downhearted if it turns out to be a scam but I would feel sorry at that point for the people who have risked a lot of money.

Never put in what you can't afford to loose.

Just did 105M, wanted to do more but had already donated 100M before Cheesy
sr. member
Activity: 532
Merit: 250
April 26, 2014, 12:57:15 PM
3. No one can steal your wallet signature in this method. It is TIED to your karmawallet. For example if you use MY WALLET SIGNATURE and send some coin it does not affect anything. Because the WALLET and the SIGNATURE should prove one and the other.

Of course it is tied to the Karma wallet... But it is not tied in any way to the Bitcoin address!

Lets say that an attacker got access to the signature tied to a given Karma address of someone that sent coins to Karmashares LLC.
As you probably know emails are not that hard to snoop... And the form sends an email to someone from Karmashares LLC right?

An attacker could copy a signature he got from snooping the emails sent to Karmashares LLC, put it in the form (http://karmacoin.me/contact? ) with the correspondent Karma address of the shares holder (not the atacker Karmacoin address!) and request a change of the bitcoin address associated with the shares (that are nos his) to one of his own bitcoin addresses.
This way the atacker/hacker would be paid the dividends of Karmashares LLC insted of the legit owner of the shares.

The signature of a blank message is in itself proof that it was signed by the owner of the wallet.
But if the message it was generated with does not contain the BTC address of the owner then I see a big security flaw.

MY SOLUTION:
So I suggest that you ask the shareholders to sign the message, character by character (just do copy-paste), that they put on the form (http://karmacoin.me/contact?).
With the signature pasted in a different text box; because it is obviously not possible to sign a message containing the signature itself.


I'm just trying to help.
A security flaw like the one I pointed could discredit Karmashares LLC if taken advantage off... And be sure it will if it is not solved.
hero member
Activity: 518
Merit: 504
April 26, 2014, 12:54:58 PM
Am I missing something about singing my message to prove I own the shares? I can't see that info anywhere.

Any help or links to the information? Thanks.

legendary
Activity: 1190
Merit: 1006
April 26, 2014, 12:44:08 PM
May be devs will do a screenshots with process of creating wallet signature and add it here and on the http://karmashares.com/ ? I think it will be good answer to many simple questions.
hero member
Activity: 658
Merit: 500
April 26, 2014, 12:27:14 PM
Am I missing something about singing my message to prove I own the shares? I can't see that info anywhere.

Any help or links to the information? Thanks.

SIGNATURE is only needed so that the profit share that will be sent in the future will be sent to the owner of the SIGNED WALLET that sent the COIN SHARE.

Your coins that you sent in exchange for share can be traced using your TRANSACTION DETAILS in your local wallet. look that up in the list of shares here http://karmashares.com/explorer-v01
hero member
Activity: 658
Merit: 500
April 26, 2014, 12:23:11 PM
I'm really confused about the process of signing the message for confirmation of our shares.

1. Shoud I write something in the "message" field of the third screen from this tutorial (http://imgur.com/ZGxUZCM)?
2. Should I generate the signature with a blank message?

3. If I do not perform the wallet address signature properly I can still sign any address I used to send (before the end of 26 April) Karmacoin to Karmashares LLC after the quantum period right while still having access to the 10x bonus right?


Regards

1. NO no message is needed on the signing window of the wallet.
2. YES the important thing is the GENERATED signature.
3. You can send your SIGNED message anytime before the distribution of profit share, so that gives you a lot of time.

Thanks!

1. But shouldn't the message to sign be, character by character, exactly the same message that we send in the contact form from http://karmacoin.me/contact?
Instead of a blank message?

2. Because, as I understand, the "sign message" feature of the wallet is used for proving that a specific message was written by the owner of the exchanged address.

3. Signing the complete message (that has the Karma and BTC address) avoids that someone steals the signature and then just sends a new email (using the contact form) to the Karmashares LLC team asking for the change of a new BTC address.
Therefore stealing the profits of a legit shareholder.


I may be wrong.
I just want to learn more and help the Karma team.

1. Message in http://karmacoin.me/contact? should contain your KARMA ADDRESS, BItcoin address and the SIGNATURE of your KARMA WALLET (SO IT IS NOT BLANK)

2. When you use sign function of the wallet it PROVES that the transaction of SENDING coins to karmashare originated from your wallet as proven by wallet signature.

3. No one can steal your wallet signature in this method. It is TIED to your karmawallet. For example if you use MY WALLET SIGNATURE and send some coin it does not affect anything. Because the WALLET and the SIGNATURE should prove one and the other.
full member
Activity: 238
Merit: 100
April 26, 2014, 12:22:44 PM
Am I missing something about singing my message to prove I own the shares? I can't see that info anywhere.

Any help or links to the information? Thanks.
sr. member
Activity: 532
Merit: 250
April 26, 2014, 12:04:03 PM
I'm really confused about the process of signing the message for confirmation of our shares.

1. Shoud I write something in the "message" field of the third screen from this tutorial (http://imgur.com/ZGxUZCM)?
2. Should I generate the signature with a blank message?

3. If I do not perform the wallet address signature properly I can still sign any address I used to send (before the end of 26 April) Karmacoin to Karmashares LLC after the quantum period right while still having access to the 10x bonus right?


Regards

1. NO no message is needed on the signing window of the wallet.
2. YES the important thing is the GENERATED signature.
3. You can send your SIGNED message anytime before the distribution of profit share, so that gives you a lot of time.

Thanks!

But shouldn't the message to sign be, character by character, exactly the same message that we send in the contact form from http://karmacoin.me/contact?
Instead of a blank message?

Because, as I understand, the "sign message" feature of the wallet is used for proving that a specific message was written by the owner of the exchanged address.

Signing the complete message (that has the Karma and BTC address) avoids that someone steals the signature and then just sends a new email (using the contact form) to the Karmashares LLC team asking for the change of a new BTC address.
Therefore stealing the profits of a legit shareholder.


I may be wrong.
I just want to learn more and help the Karma team.
hero member
Activity: 658
Merit: 500
April 26, 2014, 11:43:43 AM
I'm really confused about the process of signing the message for confirmation of our shares.

1. Shoud I write something in the "message" field of the third screen from this tutorial (http://imgur.com/ZGxUZCM)?
2. Should I generate the signature with a blank message?

3. If I do not perform the wallet address signature properly I can still sign any address I used to send (before the end of 26 April) Karmacoin to Karmashares LLC after the quantum period right while still having access to the 10x bonus right?


Regards

1. NO no message is needed on the signing window of the wallet.
2. YES the important thing is the GENERATED signature.
3. You can send your SIGNED message anytime before the distribution of profit share, so that gives you a lot of time.
sr. member
Activity: 532
Merit: 250
April 26, 2014, 09:48:26 AM
I'm really confused about the process of signing the message for confirmation of our shares.

Shoud I write something in the "message" field of the third screen from this tutorial (http://imgur.com/ZGxUZCM)?
Should I generate the signature with a blank message?

If I do not perform the wallet address signature properly I can still sign any address I used to send (before the end of 26 April) Karmacoin to Karmashares LLC after the quantum period right while still having access to the 10x bonus right?


Regards
full member
Activity: 183
Merit: 100
April 26, 2014, 09:06:59 AM
I am going to ask what was already asked by Mouseman and was not answered:

Do you mind telling us a bit about your background/experience from before the last few weeks of Karmacoin activities?


Sure. But if you don't mind, I'd like to wait until after this busy period. Much to do.

Briefly, I studied art, worked at the largest public relations firm of its kind (youngest exec in its history), was a consultant for Proctor & Gamble, Unilever, a Big 6 accounting firm, the largest ad company in the world at the time, and some other big names. Was also the project manager for a very large municipal IT project (more than 100,000 students), all before I turned 25. After that, I started a tech company in Asia.

In between that time I discovered a new mathematical maxim, taught ESL and philosophy (volunteer), invented a language, patented a couple of tech-related things, wrote a couple of books (poetry and philosophy), and a variety of other stuff.

Generally-speaking, I don't discuss my background that much. (That's not even the unbelievable stuff.) I prefer to think not only about ideas and their evolution but, more importantly, their execution.

But rather than focus on me, let's discover how to drive revenue for Karmashares, thus increasing the value of Karmacoin Smiley

Kosmost, you are very smart...I am only 25% of your smart...
full member
Activity: 238
Merit: 100
April 26, 2014, 08:55:24 AM
Well I went out on a little gamble and bought 5 million of shares today as it is the last day of x10 bonus. Not willing to risk a huge amount of money, but interesting concept none the less. I suppose I wont be too downhearted if it turns out to be a scam but I would feel sorry at that point for the people who have risked a lot of money.

Never put in what you can't afford to loose.
newbie
Activity: 3
Merit: 0
April 26, 2014, 08:47:10 AM
Post everyday on Twitter, Facebook, Google+ something about Karma - takes 2-5 minutes.
Post in forums and little soc nets new things about Karma - takes 2-5 minutes.
Tell the people you know about Karma - talking about crypto is always interesting because they are so mysterious for 99,999999% of the people.

Do not neglect this simple steps. They are very important!
Jump to: