Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 1945. (Read 2761645 times)

full member
Activity: 238
Merit: 100
can you get a timestamp from the file or some autid log that you can correlate in your web browser?
legendary
Activity: 1512
Merit: 1004
the max bit length of NXT Password is  ?
legendary
Activity: 1372
Merit: 1000
Quote
I ended up with the bad client on 3 out of 3 VPS nodes.  FOR SURE I downloaded the bad client like this:

wget http://162.243.246.223/nxt-client-0.4.8.zip

It's as plain as day in my bash history.  The weird part is I had about 2000 Nxt in the 3 accounts and none of it was transferred out.  I just transfered it out myself and I'm shutting down the nodes.

Quote
Where was it posted ? Why did you go to a private ip address to download the client ?

I don't know how I could find out where it was posted.  I'm sure I copied and pasted it from a page in the browser to wget in the console.

EDIT: I have a lot of experience with IT security so it would have been made to look legit.
legendary
Activity: 1512
Merit: 1124
Invest in your knowledge
Was the client on the offical Nxt forums safe? Anyone get jacked from that yet?

I downloaded it an hour or two after it got uploaded. I do not have the ZIP file anymore to check the hash.
hero member
Activity: 840
Merit: 1000
I wonder where the modified client was posted originally, I can't find any record of it on Google using the links provided in this thread, odd... maybe the main NXT site was compromised briefly?

I think it's very important that SHA-256 hashes are provided with any release builds posted from now on. They aren't visible on the main site anywhere which isn't a good thing
sr. member
Activity: 602
Merit: 268
Internet of Value
I ended up with the bad client on 3 out of 3 VPS nodes.  FOR SURE I downloaded the bad client like this:

wget http://162.243.246.223/nxt-client-0.4.8.zip

It's as plain as day in my bash history.  The weird part is I had about 2000 Nxt in the 3 accounts and none of it was transferred out.  I just transfered it out myself and I'm shutting down the nodes.

Where was it posted ? Why did you go to a private ip address to download the client ?
hero member
Activity: 658
Merit: 500
need help urgently!

I downloaded 0.4.8 client from xxxttps://xxxxxxxxx.html
as you guys told, i probably lose Nxt for this. so i must transfer Nxt to another account
now i have download new client from first page of this thread, but the client doesn't sync.
What should i do?

Don't repeat dodgy links on forums, someone is likely to click it....... Roll Eyes
legendary
Activity: 1372
Merit: 1000
I ended up with the bad client on 3 out of 3 VPS nodes.  FOR SURE I downloaded the bad client like this:

wget http://162.243.246.223/nxt-client-0.4.8.zip

It's as plain as day in my bash history.  The weird part is I had about 2000 Nxt in the 3 accounts and none of it was transferred out.  I just transfered it out myself and I'm shutting down the nodes.
hero member
Activity: 966
Merit: 501
need help urgently!

I downloaded 0.4.8 client from https://nextcoin.org/index.php/topic,4.0.html
as you guys told, i probably lose Nxt for this. so i must transfer Nxt to another account
now i have download new client from first page of this thread, but the client doesn't sync.
What should i do?

You need block and transaction files. But at first check to see whether your client is bogus.

The easy guide using checksum here

https://bitcointalksearch.org/topic/m.4264340

Blockchain explorer is online now go there to check your account http://87.230.14.1/nxt/nxt.cgi?action=20

thanks, but i can't connect to http://onlinemd5.com/
said Error establishing a database connection
i just used [BETA][NXT 0.4.8] Windows Installer https://nextcoin.org/index.php/topic,1902.0.html
and it sync well also i found my balance there.
just to make sure, this "[BETA][NXT 0.4.8] Windows Installer" is totally safe, right???
sr. member
Activity: 490
Merit: 250
I don't really come from outer space.
need help urgently!

I downloaded 0.4.8 client from https://nextcoin.org/index.php/topic,4.0.html
as you guys told, i probably lose Nxt for this. so i must transfer Nxt to another account
now i have download new client from first page of this thread, but the client doesn't sync.
What should i do?

Be calm.

Check the hash of your .zip.  Go to:
http://hash.online-convert.com/sha256-generator

Choose the option to upload and generate a SHA-256 checksum of a file, and select your .zip.

The good hash is
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2

If you got that then you're ok.

If not, follow these instructions:
https://bitcointalksearch.org/topic/m.4264317

sr. member
Activity: 490
Merit: 250
I don't really come from outer space.
Can anyone confirm that the size of the good client is 7173063 and the bad client is 7177834?

The size of my good client is 7173063 bytes.

The way to know for sure if you have a good or bogus client is to check the SHA-256 hash.

0.4.8 good hash is:
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2

How to check SHA256 on Win/OSX/Linux:
https://bitcointalksearch.org/topic/m.4259260
sr. member
Activity: 602
Merit: 268
Internet of Value
need help urgently!

I downloaded 0.4.8 client from https://nextcoin.org/index.php/topic,4.0.html
as you guys told, i probably lose Nxt for this. so i must transfer Nxt to another account
now i have download new client from first page of this thread, but the client doesn't sync.
What should i do?

You need block and transaction files. But at first check to see whether your client is bogus.

The easy guide using checksum here

https://bitcointalksearch.org/topic/m.4264340

Blockchain explorer is online now go there to check your account http://87.230.14.1/nxt/nxt.cgi?action=20
hero member
Activity: 966
Merit: 501
need help urgently!

I downloaded 0.4.8 client from https://nextcoin.org/index.php/topic,4.0.html
as you guys told, i probably lose Nxt for this. so i must transfer Nxt to another account
now i have download new client from first page of this thread, but the client doesn't sync.
What should i do?
full member
Activity: 238
Merit: 100
I'm sorry, I didn't know you r the admin of nxtcrypto.org DNS,
but In my post, I didn't accuse the DNS admin either, I just  talked about the possibilities,
and now you elliminated one(I trust you from your eliear posts!).
the thief might be an expert on computer/networks, he might have some skills we don't understand.
the chrome history is ok, I didn't miss anything, but the thief might changed the history, that's also an possibility

I didnt take it as accusation.  but we MUST KNOW where you and paulyc got the link from!!!!  And where EXACTLY you clicked all around.  Come on guys we need to track this down.
full member
Activity: 143
Merit: 100

Im the DNS admin for all nxtcrypto.org sites.  46.28.204.121 has always been the address, since info got created; its never been 162.243.246.223.  No one else has access to change the records.

Someone else admins the info website, the guy Intel from these forums here.

So did you ever download 0.4.8 from any other place than the info site?  If that is the only place you downloaded from then there are only 2 explanations I can think of.  Either I changed the IP in DNS temporarily to make people download a bogus client, or intel made a temporary redirect to a bogus client at 162.243.246.223.  Which would have been dumb, it would have been much much simpler for him to just temporarily post a bogus client directly on his info site.

So step back, take a few deep breaths, go through your chrome history, and be detailed and tell us how you got the bogus client.

I'm sorry, I didn't know you r the admin of nxtcrypto.org DNS,
but In my post, I didn't accuse the DNS admin either, I just  talked about the possibilities,
and now you elliminated one(I trust you from your eliear posts!).
the thief might be an expert on computer/networks, he might have some skills we don't understand.
the chrome history is ok, I didn't miss anything, but the thief might changed the history, that's also an possibility
sr. member
Activity: 602
Merit: 268
Internet of Value
How to check the integrity of your client

Copy the whole client zip file here

http://onlinemd5.com/

Select checksum SHA-256

compare to the hash of 0.4.8 here

https://bitcointalksearch.org/topic/nxt-descendant-of-bitcoin-updated-information-345619

SHA256 hash - ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2
sr. member
Activity: 490
Merit: 250
I don't really come from outer space.
Can anyone confirm that this is the bogus client?(Huh)

7177834 Dec 31 11:43 nxt-client-0.4.8.zip

If that is your installed client, do this:

1. Copy the files nxt/blocks.nxt and nxt/transactions.nxt to a different directory.  

2. Delete your current client.

3. Go to this link and download a new client:
http://info.nxtcrypto.org/nxt-client-0-4-8-released/

4. Install.

5. Copy the two saved .nxt files over to the new install.

6. Open a new account with a new secret phrase.

7. Open old account in a new tab.

8. Transfer your balance from the old account to the new account.

Do this now.



Edit:  I forgot about well-known peers.  If you find your new client can't connect to the network, here's my list:

      
         wellKnownPeers
         78.46.63.221; 95.85.22.142; 95.85.46.233; 162.243.140.133; 146.185.129.54; 162.243.117.63; 192.241.155.44; 162.243.214.68; 95.85.46.164; 162.243.216.55; 162.243.143.15; 95.85.46.249; 93.190.92.74; 37.209.120.192; 93.190.92.75; 85.25.134.59; 93.190.92.76; vps1.nxtcrypto.org;  vps2.nxtcrypto.org;  vps3.nxtcrypto.org;  vps4.nxtcrypto.org;  vps5.nxtcrypto.org; nxtwallet.com; 31.220.50.208; nxt.ddos.me; 203.174.12.25; 88.198.142.92;
      


If your client doesn't connect, edit this into the file
nxt/webapps/root/WEB-INF/web.xml 
legendary
Activity: 1372
Merit: 1000
Can anyone confirm that the size of the good client is 7173063 and the bad client is 7177834?
member
Activity: 98
Merit: 10
intel, the person you're after is EpicThomas, not EvilDave

PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history,  
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:
Code:
 
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

162.243.246.223 looks like it is "epicdices.com" (http://domain-kb.com/www/epicdices.com)
Owner of epicdices - EpicThomas - is a member of this topic:
https://bitcointalksearch.org/user/epicthomas-172850

Yes, it was my mistake. During fast-track i was confused by the fact that EpicThomas replied to EvilDave and that somehow saved in my brain as EvilDave.
member
Activity: 98
Merit: 10
EpicThomas <> EvilDave, sorry my error, just was confused by a screen where EpicThomas quotes the EvilDave message.
Jump to: