Hi folks, I've changed the bitcoin address I wish to use for the campaign (and other forum stuff). I've updated my profile info. Can I be sure that you'll pay to my new address this week based on this? Or should I send someone a private message to remind to update the spreadsheet? Thanks!
Hi, post your address in this thread with a request to change it. Just for the record.
Thanks
Just a reminder for a caution;
I don't say that account is hacked but it's a common sense that if an account wants to change payout addres it might be hacked.
I think tspacepilot should post a signed message with the old payout address that says "I want to change my payout address to this one. today's date."
That prooves his identity, if the account is hacked hacker won't be able to proove that one.
Also this method should be a standard for all signature campaings (who wants to change payout address).
I certainly can sign a message with my old address (because I still have the keys to do so).
However, if this were a requirement of the campaign, it's really important that it be said upfront because, had the situation been different, I may have simply lost my device or had a wallet stolen. FWIW, if my wallet had been hacked then you could be forcing the attacker to sign a message. Signing a message doesn't prove that my situation hasn't changed and it would be unfortunate if people who had lost a wallet for some reason or another couldn't prevent the campaign from sending bitcoins to a lost or stolen address.
I'm not saying payout address signing is a must it's a should.
If the participant looses the control of the current payout address (or maybe using an exchange address), (s)he can sign another address which is posted before on an unedited post to proove identity.
I guess it depends on what you mean by "before". Certainly it's difficult to predict that you are about to lose your address or be hacked. What you say, signing a mesage from an address (or perhaps signing messages from several addresses) seems like a good idea, but it's impossible to be prepared for every imaginable bad scenario.
I recall that a few years ago I lost about 0.09BTC because I updated the software on my phone one sleeplessnight only to recall afterwards that "whoops" the only backup of the private keys in that wallet was an old one and I had forgotten the password. I tell this story just to emphasize that accidents happen, and it's be a shame to punish someone again who was already in the shitstorm having had an old address lost or stolen.
I agree with you and for that reason an address change is allowed without conditions. If one of our participants is losing his/her bitcointalk account, I would expect to receive a PM from his new account to get informed about that. Then we can take action and request a signed address before any change of address is accepted.
.
