BitcoinRetail-Lite | 1-2-3 Library for integrating Bitcoin into any store

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: Skybuck on November 27, 2011, 02:17:45 PM

https://github.com/Xenland/BitcoinRetail-Lite/blob/master/bitcoin_controller/bitcoin.inc.php

Line 338:

/** * Safely copies wallet.dat to destination, which can be a directory or * a path with filename. *

Your software is flawed because it stores the wallet on the webserver, and probably passwords to access it as well or whatever.

I do not trust webserver administrators/web hosters.

the part your referring to is part of the bitcoin-php library.

It uses it to interface with BitcoinRetail-Lite

I want people to test the software before i add the feature were all Bitcoins sent to the server will be sent to an offline address set by the installer.

Oh yeah learn how to read. You neckbeard

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: Skybuck on November 30, 2011, 08:57:29 PM

Quote from: Xenland on November 30, 2011, 02:03:47 PM

Terrytibs my advice to you is to read skybucks pastmessages they are all trolling messages i found out just ignore him.

No, I think you pretty stupid

HEHE i think you pretty stupid too hahhaha

thanks for the lulz bro-ski mate bro man

a troll thinks he security expert, you guys just get better and better.

Thanks mate! come back again.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: Skybuck on November 30, 2011, 08:57:29 PM

Quote from: Xenland on November 30, 2011, 02:03:47 PM

Terrytibs my advice to you is to read skybucks pastmessages they are all trolling messages i found out just ignore him.

No, I think you pretty stupid, if you expect people to use any kind of software where bitcoins are actually stored on some server somewhere, out of their control.

If a criminal would find out where that server is, perhaps in some facility where people share hardware, the criminal could then rent some equipment there and then try to steal that server or it's information...

Pretty damn dangerous scenerio !

You still have not responded to my posting about: "copieing the wallet" ?!?

So does that mean I was correct, and your software is flawed ? Wink

Starting to seem like it based on your silence.

lol

I think you pretty stupid if you expect experimental software to be perfect or secure? really? go home.....

Skybuck

full member

Activity: 385

Merit: 110

Quote from: Xenland on November 30, 2011, 02:03:47 PM

Terrytibs my advice to you is to read skybucks pastmessages they are all trolling messages i found out just ignore him.

No, I think you pretty stupid, if you expect people to use any kind of software where bitcoins are actually stored on some server somewhere, out of their control.

If a criminal would find out where that server is, perhaps in some facility where people share hardware, the criminal could then rent some equipment there and then try to steal that server or it's information...

Pretty damn dangerous scenerio !

You still have not responded to my posting about: "copieing the wallet" ?!?

So does that mean I was correct, and your software is flawed ? Wink

Starting to seem like it based on your silence.

Skybuck

full member

Activity: 385

Merit: 110

Quote from: terrytibbs on November 30, 2011, 01:44:48 PM

Quote from: Skybuck on November 30, 2011, 01:08:40 PM

And how does a "dedicated server" offer more protection/security then a webhoster ?

I think you need to get a clue !

Are you serious?

Yes, as far as I know anybody can access dedicated servers who have access to where ever the facility is.

Cases have been know where people walk in, take equipment with them and walk out...

I am not the troll, it seems you are, the forum marks you as a scammer ? Wink

Wouldn't you love getting your hands on some nice dedicated server, eh ?, full with bitcoins !?! Wink

LOL.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Terrytibs my advice to you is to read skybucks pastmessages they are all trolling messages i found out just ignore him.

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: Skybuck on November 30, 2011, 01:08:40 PM

And how does a "dedicated server" offer more protection/security then a webhoster ?

I think you need to get a clue !

Are you serious?

Skybuck

full member

Activity: 385

Merit: 110

Quote from: terrytibbs on November 27, 2011, 02:29:35 PM

Quote from: Skybuck on November 27, 2011, 02:21:55 PM

That requires running expensive hardware/servers/software/bandwidth/power surge protectors/power ups/backups/cooling/licenses/etc.

For £13.99 a month, you can get a dedicated server from Kimsufi, a subsidiary of OVH (the largest host of servers in Europe), with 2GB of ram, practically unlimited bandwith (5TB), a dedicated IP, and a sufficient CPU for hosting pages and a Bitcoin daemon. No setup fees, and you can pay month-to-month. http://www.kimsufi.co.uk/

Their support is awful, though. That's what I hear, anyway.

I've owned one of their more powerful boxes, the Kimsufi 16G, for close to three months now, and it's been flawless. Not a single minute of downtime (including scheduled). Their huge networking backbone even takes care of any denial-of-service attacks for you. It's great!

And how does a "dedicated server" offer more protection/security then a webhoster ?

I think you need to get a clue !

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: terrytibbs on November 25, 2011, 12:36:46 PM

This is great, thanks.

What is this licensed under?

I think i missed this question

The BitcoinRetail-lite project will always be completely open-source and available for free to the public under the MIT or X11 license the license/readme pages will tell you this

Quote

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE. ENJOY.

How ever I have another Repo called BitcoinRetail which will be used with BitcoinRetail-Lite but it will be an out of the box installation setup and the BitcoinRetail Repo will be open source but in the future could be a money maker but with purchasable mods approved by the BitcoinRetail team.

I'm looking for BitcoinRetail-Lite volunteers who can spend 20minutes to an hour a month to write & add code to the project.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Looks like I didn't actually make the cronjob functions send confirmed bitcoins to an off line address although I did put a variable in the config section of the library so I can later implement it.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

I can't remember if I implemented this feature into the software yet or not. But it is suppose to send all available funds to the set off-line address when the cronjobs are ran.

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: Skybuck on November 27, 2011, 02:21:55 PM

That requires running expensive hardware/servers/software/bandwidth/power surge protectors/power ups/backups/cooling/licenses/etc.

For £13.99 a month, you can get a dedicated server from Kimsufi, a subsidiary of OVH (the largest host of servers in Europe), with 2GB of ram, practically unlimited bandwith (5TB), a dedicated IP, and a sufficient CPU for hosting pages and a Bitcoin daemon. No setup fees, and you can pay month-to-month. http://www.kimsufi.co.uk/

Their support is awful, though. That's what I hear, anyway.

I've owned one of their more powerful boxes, the Kimsufi 16G, for close to three months now, and it's been flawless. Not a single minute of downtime (including scheduled). Their huge networking backbone even takes care of any denial-of-service attacks for you. It's great!

Skybuck

full member

Activity: 385

Merit: 110

That requires running expensive hardware/servers/software/bandwidth/power surge protectors/power ups/backups/cooling/licenses/etc.

Instead I have a cheap webhoster which does that for me Wink

Problem is I am not gonna trust a webhoster with my wallet Wink

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: Skybuck on November 27, 2011, 02:17:45 PM

I do not trust webserver administrators/web hosters.

So be your own.

Skybuck

full member

Activity: 385

Merit: 110

https://github.com/Xenland/BitcoinRetail-Lite/blob/master/bitcoin_controller/bitcoin.inc.php

Line 338:

/** * Safely copies wallet.dat to destination, which can be a directory or * a path with filename. *

Your software is flawed because it stores the wallet on the webserver, and probably passwords to access it as well or whatever.

I do not trust webserver administrators/web hosters.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: Skybuck on November 25, 2011, 02:09:23 PM

Seeing "copy wallet" in the source code is laughable

However there is some merit in this idea:

1. I generate bit coin addresses on my computer, on my "secure" wallet.

2. I then transfer my public bit coin addresses into a file.

3. I then upload this file to some webserver.

4. Your PHP script then simply selects a public bit coin address at random.

That way it becomes harder to identify me, but there is also a problem.

I cannot identify the user which sent me something if the bit coin addresses are reused.

So instead:

1. Each public bit coin address should only be used once.

2. The php script should maintain which bit coin addresses, where used, this can become difficult since it's not known if the transaction occured.

3. The user has to get a warning if addresses used up.

So there are still some technical hurdles with this concept/idea.

Before i answer your 20 random ramblings I'll just say I pressed cntrl+F you know for the "Find" program
and it couldn't find anything that said

"copy wallet"

...... explain...

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

Quote from: terrytibbs on November 26, 2011, 07:44:55 AM

Quote from: Xenland on November 26, 2011, 02:53:57 AM

If you dont mind me asking have you used the software or even tried it?

I don't know if it works out-of-the-box, but I modified it for Postgres and an alternate cryptocurrency, and it works wonders.

thats good to hear
I'd love to see an example

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: Xenland on November 26, 2011, 02:53:57 AM

If you dont mind me asking have you used the software or even tried it?

I don't know if it works out-of-the-box, but I modified it for Postgres and an alternate cryptocurrency, and it works wonders.

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

I. Should note that this script works with the bitcoin client directly and every invoice or order gets an unique address associated with it. You run a cronjob every minute and it updates the database accordingly.

1.2.3. Library just like it sounds.

There are only two commands you need to know to run this script

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

If you dont mind me asking have you used the software or even tried it?

Topic: BitcoinRetail-Lite | 1-2-3 Library for integrating Bitcoin into any store (Read 2368 times)