Pages:
Author

Topic: Bitcoin MineField - 10%-2300% winings, fully automated, with cool technologies:) - page 10. (Read 88284 times)

full member
Activity: 140
Merit: 100
My latest transaction has been unconfirmed since 27.02.13

If it cant be fixed, can you remove it?

My username is: HotHubHD
sr. member
Activity: 354
Merit: 250
service is offline atm,
my bitcoind is stuck at a block 225459 so transactions after that block didn't get registered.


An upgrade should fix it, I'm running a really old (debian package) version.


the site will be online in a few hours.


ok, back online, let me know if your transaction didn't get registered and I'll credit your account manually.



oh, in case you've won something but can't cash out due to 'not enough funds' error, please wait 30ish minutes, funds have been sent to this new wallet, the transaction just needs to be confirmed.
sr. member
Activity: 354
Merit: 250
service is offline atm,
my bitcoind is stuck at a block 225459 so transactions after that block didn't get registered.


An upgrade should fix it, I'm running a really old (debian package) version.


the site will be online in a few hours.


ok, back online, let me know if your transaction didn't get registered and I'll credit your account manually.

sr. member
Activity: 354
Merit: 250
service is offline atm,
my bitcoind is stuck at a block 225459 so transactions after that block didn't get registered.


An upgrade should fix it, I'm running a really old (debian package) version.


the site will be online in a few hours.
sr. member
Activity: 354
Merit: 250
Grin Grin Grin Grin Grin Grin Grin

I'm really interested to see more details from my referrals  Wink

yeah yeah will implement it Smiley I'm finishing another project these days, in a month or two I'll be able to get back to this..
I deposited 1 bitcoin but it's not showing up Sad

user-5125f42adf7b95cc10034bba

just so this isn't a last message in a thread, we've resolved this Smiley
vip
Activity: 1316
Merit: 1043
👻
Grin Grin Grin Grin Grin Grin Grin

I'm really interested to see more details from my referrals  Wink

yeah yeah will implement it Smiley I'm finishing another project these days, in a month or two I'll be able to get back to this..
I deposited 1 bitcoin but it's not showing up Sad

user-5125f42adf7b95cc10034bba
sr. member
Activity: 354
Merit: 250
Grin Grin Grin Grin Grin Grin Grin

I'm really interested to see more details from my referrals  Wink

yeah yeah will implement it Smiley I'm finishing another project these days, in a month or two I'll be able to get back to this..
legendary
Activity: 952
Merit: 1000
 Grin Grin Grin Grin Grin Grin Grin

I'm really interested to see more details from my referrals  Wink
full member
Activity: 140
Merit: 100
i dont understand how i lost 3 - 4 btc playing this.....
waste of btc.
newbie
Activity: 7
Merit: 0

hey, yeah I'm aware of this, I do know what https is and what it is for Smiley
Sorry, I didn't mean to offend you. I have no doubt you know all that, but since the post will probably be read by other people, I wrote it in a more detailed manner, so they could know what we are talking about Smiley
sr. member
Activity: 354
Merit: 250
Hello,

I would like to report a possible security hole in the current scheme of things.

The idea to use only 'url with secret' for logging in is neat but not entirely safe because the web server uses plain http with no encryption.

Let's say you open the site for the first time and it gives you secret like http://minefield.bitcoinlab.org/?secret=fngrOdO23tDOTuPW
Then you deposit some btc.
If someone is sniffing the traffic it is fairly easy to extract the GET /?secret=fngrOdO23tDOTuPW string from the HTTP request. Then he needs simply to open the site with that secret and he can withdraw the btc to address of his choice.

I can mention two solutions.

1/ get a https certificate and the run the website over ssl/tls. This will resolve the sniffing problem since all traffic would be encrypted.

2/ Make withdraw only possible to addresses from which deposits were received. But on second thought this is not very secure either. A hacker could break into your account, deposit minimal amount of btc and after the deposit is confirmed (and the sending address accepted as viable for withdraw) the hacker request the whole amount to his address.

Best~

hey, yeah I'm aware of this, I do know what https is and what it is for Smiley
I don't think that this is very important, but I do plan to switch to https soon.

and on why I don't think its important:
the number of local networks being sniffed by attackers interested in bitcoin is super small, people that know what https and sniffing is, will make sure that they have a secure connection if they care to, and people that don't, will probably get owned anyway. so I'm maybe saving one person in a few millions, and this website didn't receive that much GET requests yet. and statistically, I'm saving them around 0.05 bitcoin...
but still, yes, https, soon.

PS
I may sound too dismissive, that's not the idea, thanks for reporting Smiley
newbie
Activity: 7
Merit: 0
Hello,

I would like to report a possible security hole in the current scheme of things.

The idea to use only 'url with secret' for logging in is neat but not entirely safe because the web server uses plain http with no encryption.

Let's say you open the site for the first time and it gives you secret like http://minefield.bitcoinlab.org/?secret=fngrOdO23tDOTuPW
Then you deposit some btc.
If someone is sniffing the traffic it is fairly easy to extract the GET /?secret=fngrOdO23tDOTuPW string from the HTTP request. Then he needs simply to open the site with that secret and he can withdraw the btc to address of his choice.

I can mention two solutions.

1/ get a https certificate and the run the website over ssl/tls. This will resolve the sniffing problem since all traffic would be encrypted.

2/ Make withdraw only possible to addresses from which deposits were received. But on second thought this is not very secure either. A hacker could break into your account, deposit minimal amount of btc and after the deposit is confirmed (and the sending address accepted as viable for withdraw) the hacker request the whole amount to his address.

Best~
legendary
Activity: 1268
Merit: 1009
sr. member
Activity: 354
Merit: 250
I sent 0.025 BTC to an address that was generated for me (you can see here:  1EY6boTD4jCY9CNdfP4i8BMioF1m4NYJ7b)  but it never went through, it wasn't every added to my account...

What should I do?

you are right, I'm not sure what happened, sorry about that.
the transaction wasn't registered by the system.. I've credited your account manually and I'll investigate.
legendary
Activity: 1268
Merit: 1009
I sent 0.025 BTC to an address that was generated for me (you can see here:  1EY6boTD4jCY9CNdfP4i8BMioF1m4NYJ7b)  but it never went through, it wasn't every added to my account...

What should I do?
sr. member
Activity: 354
Merit: 250
hold on, it might be because I lack 4 confirmations on my deposit? just noticed that note

edit: thank you for your quick reaction though, gives me a lot more confidence in your service Smiley

don't worry your btc is safe Smiley

it still shouldn't tell you that the address is invalid, I've updated a code a bit, try it now. (reload page)

and I've changed the confirmation requirement to 2, so you'll be able to cash out sooner.
hero member
Activity: 626
Merit: 500
https://satoshibet.com
hold on, it might be because I lack 4 confirmations on my deposit? just noticed that note

edit: thank you for your quick reaction though, gives me a lot more confidence in your service Smiley
sr. member
Activity: 354
Merit: 250
I keep getting "invalid address" when I'm trying to withdraw. I tried with several addresses. I'm 100% sure these are working addresses. What's the matter there?

strange, can you give me your username and an address you are trying to use?
hero member
Activity: 626
Merit: 500
https://satoshibet.com
I keep getting "invalid address" when I'm trying to withdraw. I tried with several addresses. I'm 100% sure these are working addresses. What's the matter there?
sr. member
Activity: 354
Merit: 250
Pages:
Jump to: