All affected users will be refunded in full, please PM me or email [email protected].
Great, I'm not affected by this bug but that's an honorable decision!Just my 2 cents ...
Topic: Blockchain.info - Bitcoin Block explorer & Currency Statistics - page 42. (Read 482544 times)
August 20, 2013, 12:41:18 PM
Just my 2 cents ...
August 20, 2013, 11:29:48 AM
not sure if it's b/c of the update, but i haven't been getting boxcar notifications for the past day or so.
August 20, 2013, 07:15:42 AM
My funds were stolen from online wallet. Only single address affected, so seems Blockchain.info wallet has vulnerability in RNG:
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
Important!
I can confirm there is a problem with the RNG used by blockchain.info javascript clients being poorly seeded when initialised in a background webworker task. In some browsers this could lead to duplicate R values being used when signing transactions (Firefox is likely to be particularly vulnerable). This issue effects the transaction signing code only, not the generation of private keys.
Patches have now been deployed, Please ensure you upgrade to the latest version of your Blockchain.info client.
Chrome extension - v2.85
Fixefox extension - v1.97
Mac client - v0.11
Users of the web interface should clear their browsers cache before next login.
Only a handful of addresses are known to be affected thus far. Likely if you have been affected by this problem your coins will have been taken already. All affected users will be refunded in full, please PM me or email [email protected].
-----
Piuk, please, could your site implement importing password protected private keys according to BIP38? Many people use that for their offline savings and allowing to spend the key directly from blockchain.info would help a lot. Thanks!
BIP38 supported has been added.
August 19, 2013, 05:27:56 PM
My funds were stolen from online wallet. Only single address affected, so seems Blockchain.info wallet has vulnerability in RNG:
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
is it related to this, https://bitcointalksearch.org/topic/announce-android-key-rotation-271831, or do you think it's something else?
August 19, 2013, 01:39:26 PM
My funds were stolen from online wallet. Only single address affected, so seems Blockchain.info wallet has vulnerability in RNG:
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
is it related to this, https://bitcointalksearch.org/topic/announce-android-key-rotation-271831, or do you think it's something else?
August 19, 2013, 01:36:21 PM
My funds were stolen from online wallet. Only single address affected, so seems Blockchain.info wallet has vulnerability in RNG:
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
https://bitcointalksearch.org/topic/blockchaininfo-security-funds-stolen-277595
August 19, 2013, 11:20:13 AM
My Wallet Chrome App got updated to version 2.84 last week but on github its version 2.77
-Is there a log of the recent changes?
If your credentials got stolen, and a rogue my wallet app got put in the store it would auto update all users to this version. At least with an android app you get prompt to update, and can check recent threads, github, reviews, and other sources before updating.
-Is there a way to disable auto updating of the chrome app?
-Is there a way to verify that the chrome app matches sources with github and/or blockchain.info
-Is there a log of the recent changes?
If your credentials got stolen, and a rogue my wallet app got put in the store it would auto update all users to this version. At least with an android app you get prompt to update, and can check recent threads, github, reviews, and other sources before updating.
-Is there a way to disable auto updating of the chrome app?
-Is there a way to verify that the chrome app matches sources with github and/or blockchain.info
August 18, 2013, 07:42:21 AM
Got error 157 'Unknown error code ' from NDBCLUSTER
again....
again....
August 17, 2013, 07:48:04 AM
Piuk, please, could your site implement importing password protected private keys according to BIP38? Many people use that for their offline savings and allowing to spend the key directly from blockchain.info would help a lot. Thanks!
August 17, 2013, 06:36:41 AM
Seems like it would be easy (relatively, given the data you already collect) to calculate a weighted average between all the exchanges you track, which would be a better one number representation of the exchange rate.
Yeah this would probably be an improvement. Though the spreads between the other exchanges are normally pretty tight and the market price on blockchain is only a guide, it doesn't need the same accuracy as if it was being used for high frequency trading etc.
Something like bitcoinaverage.com
bitcoinaverage looks good, however for our usage direct links to the exchanges are needed.
Indeed - I thought you could still use XMPP for client to server communications
Yep your right, it must due to another reason. I'll take a look.
Awesome! It will be interesting to see if they approve it or not. Good luck!
No response yet. For anyone who is interested in testing an Alpha can be downloaded here https://blockchain.info/wallet/desktop-client - I've also put up a bit of a comparison between the available Blockchain clients here https://blockchain.info/wallet/ways-to-access
August 17, 2013, 06:00:38 AM
Something like bitcoinaverage.com
bitcoinaverage still takes the mtgox data into account when it's clear anomalous. The way coinbase or bitpay does it seems more sensible to me.
Will
August 17, 2013, 12:35:19 AM
The USD ticker was switched to bitstamp. The spread between Mt.gox and other exchanges is getting a bit ridiculous and I don't beleive it to be a fair representation of the current market price. The charts (http://blockchain.info/charts/market-price) will still use Mt.gox for consistency.
Seems like it would be easy (relatively, given the data you already collect) to calculate a weighted average between all the exchanges you track, which would be a better one number representation of the exchange rate.
Something like bitcoinaverage.com
August 16, 2013, 05:52:36 PM
Unfortunately yes http://tech.slashdot.org/story/13/05/20/2315216/google-drops-xmpp-support. Skype is still functioning. Edit: XMPP might not have been fully dropped actually
Indeed - I thought you could still use XMPP for client to server communications, but just couldn't get any of the advanced Hangouts features, also some federation (e.g. server to server) connections had been removed. [source]
Will
August 16, 2013, 05:26:58 PM
What is the default timezone on BC.info?
GMT.
Anyone noticed Google talk notifications have stopped for some reason, or is it just me?
Will
Will
Unfortunately yes http://tech.slashdot.org/story/13/05/20/2315216/google-drops-xmpp-support. Skype is still functioning. Edit: XMPP might not have been fully dropped actually
August 16, 2013, 05:19:40 PM
Anyone noticed Google talk notifications have stopped for some reason, or is it just me?
Will
Will
August 16, 2013, 06:58:27 AM
What is the default timezone on BC.info?
August 16, 2013, 12:55:20 AM
The USD ticker was switched to bitstamp. The spread between Mt.gox and other exchanges is getting a bit ridiculous and I don't beleive it to be a fair representation of the current market price. The charts (http://blockchain.info/charts/market-price) will still use Mt.gox for consistency.
Seems like it would be easy (relatively, given the data you already collect) to calculate a weighted average between all the exchanges you track, which would be a better one number representation of the exchange rate.
Submitted a Blockchain Desktop App to the Mac App Store today. I'm not sure if anyone has tried to get approval for a bitcoin client into the mac app store yet but hopefully it might get approved. If not it will be distributed by direct download.
Awesome! It will be interesting to see if they approve it or not. Good luck!
August 15, 2013, 01:58:25 PM
seems like byte order problem.
This is intentional (or at least cannot be change now). It should be fairly easy to reverse the byte order.
was there a change to the BTC/USD rate?
The USD ticker was switched to bitstamp. The spread between Mt.gox and other exchanges is getting a bit ridiculous and I don't beleive it to be a fair representation of the current market price. The charts (http://blockchain.info/charts/market-price) will still use Mt.gox for consistency.
Submitted a Blockchain Desktop App to the Mac App Store today. I'm not sure if anyone has tried to get approval for a bitcoin client into the mac app store yet but hopefully it might get approved. If not it will be distributed by direct download.
August 15, 2013, 12:36:44 PM
was there a change to the BTC/USD rate?
August 14, 2013, 02:53:03 AM
piuk,
Just to let you know that
https://blockchain.info/unspent?active=15Y9AuWpDgwh2V5Rp8ZHmeBsNkbpfUH61M
incorrectly shows tx_hash: 4424f571f663f115b8111428606db4a180eeea350ed6dd8db556a9365b4d78c8
whereas it should be : c8784d5b36a956b58dddd60e35eaee80a1b46d60281411b815f163f671f52444
seems like byte order problem.
Just to let you know that
https://blockchain.info/unspent?active=15Y9AuWpDgwh2V5Rp8ZHmeBsNkbpfUH61M
incorrectly shows tx_hash: 4424f571f663f115b8111428606db4a180eeea350ed6dd8db556a9365b4d78c8
whereas it should be : c8784d5b36a956b58dddd60e35eaee80a1b46d60281411b815f163f671f52444
seems like byte order problem.
Jump to: