FaucetBOX.com Discussion - page 55. | Bitcointalksearch.org

ahmedjadoon

legendary

Activity: 1414

Merit: 1000

Quote from: Kazuldur on February 23, 2016, 08:58:13 AM

Quote from: ahmedjadoon on February 23, 2016, 08:27:07 AM

Quote from: BitcoinFuture99 on February 21, 2016, 10:57:23 AM

I think users have no security issue here. Maximum the amount paid to the user less will they have to pay as fees when they spend it So little bit delayed will have no issue. 13000 Satoshi x 7 Payments will amount to more than 70000 Satoshi of miner fees . Like for Payaza Pay Pal etc verification is must thing now

Thanks for your kind support.
I've already enabled security features like ACL and withdrawal limit. This shouldn't happen again is future.

One more thing I think I forgot to tell you. Regenerate your API keys if you didn't do that yet.

I already did that yesterday. Thanks

Warrior B

sr. member

Activity: 329

Merit: 250

Hey guys I wanted to ask the experts here, I have a faucet with faucetbox, what would you guys do to increase traffic? I'm adding my faucet to different rotators, but traffic the last few days is quite flat. I've also increased the payments.

BTW the faucet is http://www.fullbitcoins.com/

Any suggestions are very welcome! Thanks

onlinepro

hero member

Activity: 714

Merit: 500

Quote from: FaucetRank.com on February 21, 2016, 11:15:09 AM

Quote from: secone on February 21, 2016, 11:07:32 AM

today i have more "free times" then i try earning bitcoin from faucetbox list, i try claiming one by one but my earnng its very low ..
anyone succes earning perday 0.01 from faucetbox faucet ?

Ha ha don't see dreams in day time . 0.01 per day with faucets not possible .
so go and sleep probably you'll earn 1 BTC in dream from faucet box faucet list. Grin

0.001btc is more realistic than 0.01btc
And even for that you need to spend a lot time claiming faucets.

Kazuldur

legendary

Activity: 971

Merit: 1000

Quote from: ahmedjadoon on February 23, 2016, 08:27:07 AM

Quote from: BitcoinFuture99 on February 21, 2016, 10:57:23 AM

I think users have no security issue here. Maximum the amount paid to the user less will they have to pay as fees when they spend it So little bit delayed will have no issue. 13000 Satoshi x 7 Payments will amount to more than 70000 Satoshi of miner fees . Like for Payaza Pay Pal etc verification is must thing now

Thanks for your kind support.
I've already enabled security features like ACL and withdrawal limit. This shouldn't happen again is future.

One more thing I think I forgot to tell you. Regenerate your API keys if you didn't do that yet.

ahmedjadoon

legendary

Activity: 1414

Merit: 1000

Quote from: BitcoinFuture99 on February 21, 2016, 10:57:23 AM

I think users have no security issue here. Maximum the amount paid to the user less will they have to pay as fees when they spend it So little bit delayed will have no issue. 13000 Satoshi x 7 Payments will amount to more than 70000 Satoshi of miner fees . Like for Payaza Pay Pal etc verification is must thing now

Thanks for your kind support.
I've already enabled security features like ACL and withdrawal limit. This shouldn't happen again is future.

FaucetRank.com

hero member

Activity: 868

Merit: 500

Quote from: secone on February 21, 2016, 11:07:32 AM

today i have more "free times" then i try earning bitcoin from faucetbox list, i try claiming one by one but my earnng its very low ..
anyone succes earning perday 0.01 from faucetbox faucet ?

Ha ha don't see dreams in day time . 0.01 per day with faucets not possible .
so go and sleep probably you'll earn 1 BTC in dream from faucet box faucet list. Grin

secone

hero member

Activity: 700

Merit: 501

today i have more "free times" then i try earning bitcoin from faucetbox list, i try claiming one by one but my earnng its very low ..
anyone succes earning perday 0.01 from faucetbox faucet ?

BitcoinFuture99

member

Activity: 120

Merit: 10

Quote from: Kazuldur on February 21, 2016, 10:26:07 AM

Quote from: BitcoinFuture99 on February 21, 2016, 10:17:43 AM

You are right but Like Payment service providers FaucetBOX should look into security of owners by implementing verification of faucet users by Identification cards or Home bills.

I don't know any payment service that does that, it's the end service (in our case: each faucet) that does such verifications, at least in Europe. Also that would pretty much kill all the traffic, no one would use faucets then.

Quote from: BitcoinFuture99 on February 21, 2016, 10:17:43 AM

Also in Future faucetbox Security Every payouts made by Faucetbox to users should be first verified by the owners of the faucets. Owners may find out some suspicious transaction. Little time limit should be provided to owners to check it.

FaucetBOX.com must not only protect the security of owners, but also users. And as owners notoriously accuse legit users of being bots or hackers, I believe that would do more harm than good. Also that overlaps with the security provided by limiting how much can be withdrawn in a 30-minute timeframe. Prevention is the key.

I think users have no security issue here. Maximum the amount paid to the user less will they have to pay as fees when they spend it So little bit delayed will have no issue. 13000 Satoshi x 7 Payments will amount to more than 70000 Satoshi of miner fees . Like for Payaza Pay Pal etc verification is must thing now

Kazuldur

legendary

Activity: 971

Merit: 1000

Quote from: BitcoinFuture99 on February 21, 2016, 10:17:43 AM

You are right but Like Payment service providers FaucetBOX should look into security of owners by implementing verification of faucet users by Identification cards or Home bills.

I don't know any payment service that does that, it's the end service (in our case: each faucet) that does such verifications, at least in Europe. Also that would pretty much kill all the traffic, no one would use faucets then.

Quote from: BitcoinFuture99 on February 21, 2016, 10:17:43 AM

Also in Future faucetbox Security Every payouts made by Faucetbox to users should be first verified by the owners of the faucets. Owners may find out some suspicious transaction. Little time limit should be provided to owners to check it.

FaucetBOX.com must not only protect the security of owners, but also users. And as owners notoriously accuse legit users of being bots or hackers, I believe that would do more harm than good. Also that overlaps with the security provided by limiting how much can be withdrawn in a 30-minute timeframe. Prevention is the key.

BitcoinFuture99

member

Activity: 120

Merit: 10

Quote from: Kazuldur on February 21, 2016, 10:09:20 AM

Quote from: BitcoinFuture99 on February 21, 2016, 10:00:04 AM

Ya it could be done through small transactions also. But also changed IP access of API should also be verified by faucet owner through email.

That's also already implemented. You can limit what IP addresses can use your API in the security tab in FaucetBOX.com Dashboard. It's called ACL.

Quote from: BitcoinFuture99 on February 21, 2016, 10:00:04 AM

Also faucetbox API is just like key to bank account. Hosting provider can easily access it. There must be some security feature for protection from hosting provider

It's technically impossible. If the script can send coins, so can a hosting provider. The only safe way is to host it yourself.

You are right but Like Payment service providers FaucetBOX should look into security of owners by implementing verification of faucet users by Identification cards or Home bills.

Also in Future faucetbox Security Every payouts made by Faucetbox to users should be first verified by the owners of the faucets. Owners may find out some suspicious transaction. Little time limit should be provided to owners to check it.

Kazuldur

legendary

Activity: 971

Merit: 1000

Quote from: BitcoinFuture99 on February 21, 2016, 10:00:04 AM

Ya it could be done through small transactions also. But also changed IP access of API should also be verified by faucet owner through email.

That's also already implemented. You can limit what IP addresses can use your API in the security tab in FaucetBOX.com Dashboard. It's called ACL.

Quote from: BitcoinFuture99 on February 21, 2016, 10:00:04 AM

Also faucetbox API is just like key to bank account. Hosting provider can easily access it. There must be some security feature for protection from hosting provider

It's technically impossible. If the script can send coins, so can a hosting provider. The only safe way is to host it yourself.

BitcoinFuture99

member

Activity: 120

Merit: 10

Quote from: Kazuldur on February 21, 2016, 09:40:27 AM

Quote from: BitcoinFuture99 on February 21, 2016, 09:21:24 AM

I think Faucetbox should introduce new restriction for Suspicious faucet payouts. for amount more than 0.001 BTC there must be a verification withdrawal email sent to owner of the faucet.

If the owner verify that then he/she can approve it. Ahmad lost allot of amount.

I think more than 0.001 BTC faucetbox payouts are rarely seen so for huge amount there must be verification. Now who will recover the amount stolen from Ahmad

It wouldn't help. The attacker could just withdraw the same amount in hundreds smaller payouts. What helps is a limit how much can be withdrawn in a given timeframe and it's already implemented as a safety limit in faucet's dashboard. So necessary protections are already there, owners just have to use them responsibly. Soon we'll also add optional email notifications and a panic mode that'll disable API access completely if these limits are reached.

Ya it could be done through small transactions also. But also changed IP access of API should also be verified by faucet owner through email.

Also faucetbox API is just like key to bank account. Hosting provider can easily access it. There must be some security feature for protection from hosting provider

Kazuldur

legendary

Activity: 971

Merit: 1000

Quote from: BitcoinFuture99 on February 21, 2016, 09:21:24 AM

I think Faucetbox should introduce new restriction for Suspicious faucet payouts. for amount more than 0.001 BTC there must be a verification withdrawal email sent to owner of the faucet.

If the owner verify that then he/she can approve it. Ahmad lost allot of amount.

I think more than 0.001 BTC faucetbox payouts are rarely seen so for huge amount there must be verification. Now who will recover the amount stolen from Ahmad

It wouldn't help. The attacker could just withdraw the same amount in hundreds smaller payouts. What helps is a limit how much can be withdrawn in a given timeframe and it's already implemented as a safety limit in faucet's dashboard. So necessary protections are already there, owners just have to use them responsibly. Soon we'll also add optional email notifications and a panic mode that'll disable API access completely if these limits are reached.

BitcoinFuture99

member

Activity: 120

Merit: 10

I think Faucetbox should introduce new restriction for Suspicious faucet payouts. for amount more than 0.001 BTC there must be a verification withdrawal email sent to owner of the faucet.

If the owner verify that then he/she can approve it. Ahmad lost allot of amount.

I think more than 0.001 BTC faucetbox payouts are rarely seen so for huge amount there must be verification. Now who will recover the amount stolen from Ahmad

s@toshiClaims

full member

Activity: 154

Merit: 100

☜★ WinBits Trade ★☞

Quote from: Kazuldur on February 21, 2016, 09:08:20 AM

Quote from: BitBustah on February 21, 2016, 09:05:49 AM

You should keep your balance low and refill it when needed. You had A LOT of satoshis in there...

It wasn't that much, it's quite possible that it was only enough for a day or two.

indeed .. max 2 days it goes realy fast down your balance

BitBustah

hero member

Activity: 1218

Merit: 534

Quote from: Kazuldur on February 21, 2016, 09:08:20 AM

Quote from: BitBustah on February 21, 2016, 09:05:49 AM

You should keep your balance low and refill it when needed. You had A LOT of satoshis in there...

It wasn't that much, it's quite possible that it was only enough for a day or two.

It was aprox 77 euros, right? Think that's a lot to lose just like that. Roll Eyes

Kazuldur

legendary

Activity: 971

Merit: 1000

Quote from: BitBustah on February 21, 2016, 09:05:49 AM

You should keep your balance low and refill it when needed. You had A LOT of satoshis in there...

It wasn't that much, it's quite possible that it was only enough for a day or two.

BitBustah

hero member

Activity: 1218

Merit: 534

Quote from: ahmedjadoon on February 20, 2016, 06:54:56 PM

Quote from: wadili89 on February 20, 2016, 06:53:00 PM

Quote from: ahmedjadoon on February 20, 2016, 11:39:05 AM

Quote from: Holdaaja on February 20, 2016, 10:51:15 AM

Quote from: ahmedjadoon on February 20, 2016, 10:49:03 AM

Someone just emptied my Faucetbox wallet! It must have 0.2-0.25BTC in it. Can you check it my username: ahmedjadoon .
I believe it was done through through database.

Where it was sent?

Don't know.

was it someone got into your faucet box account and withdraw the funds ?

or someone hacked your site and steal the database for api key ? or was it a bot attack which drained your faucet by claims ?

please provide information on it because it really had me worried because there is always some good amount in my account

It was the second one hacked my site.

You should keep your balance low and refill it when needed. You had A LOT of satoshis in there...

ahmedjadoon

legendary

Activity: 1414

Merit: 1000

Quote from: Holdaaja on February 21, 2016, 05:55:03 AM

Quote from: ahmedjadoon on February 21, 2016, 04:05:42 AM

Quote from: LyQaN on February 20, 2016, 07:27:48 PM

Quote from: ahmedjadoon on February 20, 2016, 10:49:03 AM

Someone just emptied my Faucetbox wallet! It must have 0.2-0.25BTC in it. Can you check where it was withdrawn? My Faucetbox username: ahmedjadoon .
I believe it was done through database.

Sad to know that you lost your coins.You activate 2FA for your Faucetbox account?

Yes 2FA is already active. The hacker got access to cPanel and database to steal API.

Why don't you check where he withdrew your money?
If he used your api key you should see it from faucet dashboard.

http://faucetbox.com/check/1CvFZ4xHmznEW33aNnt727wo8fULbsYyuW

Holdaaja

legendary

Activity: 1274

Merit: 1000

Quote from: ahmedjadoon on February 21, 2016, 04:05:42 AM

Quote from: LyQaN on February 20, 2016, 07:27:48 PM

Quote from: ahmedjadoon on February 20, 2016, 10:49:03 AM

Someone just emptied my Faucetbox wallet! It must have 0.2-0.25BTC in it. Can you check where it was withdrawn? My Faucetbox username: ahmedjadoon .
I believe it was done through database.

Sad to know that you lost your coins.You activate 2FA for your Faucetbox account?

Yes 2FA is already active. The hacker got access to cPanel and database to steal API.

Why don't you check where he withdrew your money?
If he used your api key you should see it from faucet dashboard.

Topic: FaucetBOX.com Discussion - page 55. (Read 237020 times)