Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 1948. (Read 2761645 times)

hero member
Activity: 854
Merit: 1001
Er...wtf?

Am i missing something?

I think you turned him into a newt, but he got better.


Hmmm...I'm mostly not that evil  Grin

And HappyCoins.nl actually are very good, low fees, fast delivery and u can pay using the Dutch iDeal system. I spit on PayPal.....

Still curious why my name is up in lights all of a sudden
full member
Activity: 184
Merit: 100
so Drexme once again stole coins by editing the downloadlink, that pointed to EpicThomas' manipulated client?
full member
Activity: 143
Merit: 100
ok,I find some clues:

the nxt zip file I downloaded(whose sha256 is diff from this thread now)
Code:
creation time:2013‎.‎12‎.‎31‎,‏‎20:31:14
‎modified time:2013‎.‎12‎.‎31,‏‎20:35:16

but in that time period, I only accessed 2 pages, they are all in this thread!!!
one is the first page of this thread!!!!
the second is https://bitcointalksearch.org/topic/m.4236250
and I found one link from the second one,it is still there:
http://info.nxtcrypto.org/nxt-client-0.4.8.zip
is it possible that the thief can change the link of this thread?
omg,Its terrible!!!
full member
Activity: 350
Merit: 100
So, are most people with the new client boned?

If not, what should you check?

Wesleyh, what's the status of the Mac client? I've only downloaded it from the links you've provided in your posts. I guess I shouldn't assume anything is safe.
full member
Activity: 196
Merit: 100
So, are most people with the new client boned?

If not, what should you check?

if the sha256 of your nxt-client-0.4.8.zip is:

ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2

you are fine, if it's:

948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06

you should download legit client and transfer your NXT immediately to another account if it's still there

how to get sha256 hash of your file is explained in this thread (nice windows tool here: http://sourceforge.net/projects/quickhash/)

OK, so I've verified I lucked out and got the "good" download completely by chance.  What's this about malware listening at digital ocean?  Can it only get data from the bad clients or all clients?
member
Activity: 98
Merit: 10
opticalc, QBTC ---

WHY does nxtcrypto.org's download page point to https://mega.co.nz/#!yV5A1BTR!oi33K7WovgccuEHvP05nzggTnxrkZHJbwFmv5tGeXNI

..instead of http://info.nxtcrypto.org/client.zip ...

... and WHY are the hases not published alongside the download link?

I dont run the www site.  QBTC over at nextcoin.org runs the WWW site.  I will hit her up to fix that ASAP.
(remember, Im really just running DNS here, and trying to coordinate between all the other sites)

good catch though, definitely need to get her to fix it NOW

In fact 0.4.8 is http://info.nxtcrypto.org/nxt-client-0.4.8.zip
full member
Activity: 238
Merit: 100
opticalc, QBTC ---

WHY does nxtcrypto.org's download page point to https://mega.co.nz/#!yV5A1BTR!oi33K7WovgccuEHvP05nzggTnxrkZHJbwFmv5tGeXNI

..instead of http://info.nxtcrypto.org/client.zip ...

... and WHY are the hases not published alongside the download link?

I dont run the www site.  QBTC over at nextcoin.org runs the WWW site.  I will hit her up to fix that ASAP.
(remember, Im really just running DNS here, and trying to coordinate between all the other sites)

good catch though, definitely need to get her to fix it NOW
full member
Activity: 157
Merit: 100
So, are most people with the new client boned?

If not, what should you check?

if the sha256 of your nxt-client-0.4.8.zip is:

ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2

you are fine, if it's:

948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06

you should download legit client and transfer your NXT immediately to another account if it's still there

how to get sha256 hash of your file is explained in this thread (nice windows tool here: http://sourceforge.net/projects/quickhash/)
sr. member
Activity: 490
Merit: 250
I don't really come from outer space.
Er...wtf?

Am i missing something?

I think you turned him into a newt, but he got better.
legendary
Activity: 1176
Merit: 1134
I think we all agree PaulyC should be made whole as he was the first to report this. Usually bounties are for the first, not sure what the feeling is about newcn's being second. There is value in confirmation, so maybe half credit?

We can't make a policy out of this, but I feel that during this critical time it is important to show the world what the NXT community is.

There are the payment fees that doesn't currently have, nor do I expect will have a team that can make a realistic claim to have added value to that feature. This creates a certain amount of the community fund that would be discretionary. The actual process of collection and disbursement of the community fund has not been completed yet, but as soon as this year gets into full gear I expect that the kinks will be worked out.

Since I seem to be the only one pushing this idea, I guess it is up to me to make discretionary calls, but I want to get people's feedback on the bounty for newcn's confirmation of this hack.

For anybody that wants to directly contribute to the community fund, all donations are welcome. I couldn't get any volunteers to deal with the logistics of all this, so I will coordinate it for now. I will disclose all contributions and disbursements. For now just post your contribution to the community fund and I will confirm receipt or if you want to do it anonymously, PM me your contribution and your contribution will be listed as from anonymous. If you want your contribution to be spread over a period of time, please state the time period.

James

P.S. The more in the community fund, the more people like wesleyh, ferment, nexern, etc. will be rewarded and this in turn will get more and more people improving NXT instead of working OT at their real jobs Smiley
legendary
Activity: 1092
Merit: 1010
So, are most people with the new client boned?

If not, what should you check?
hero member
Activity: 854
Merit: 1001
There is not so much information in the internet about evildave + bitcoin. I found something interesting, some evildave speaking dutch used the service "www.happycoins.nl" to buy bitcoins. He paid using paypal.

Here is the quote from his feedback (translated from dutch):

http://www.trustpilot.gr/review/www.happycoins.nl?page=3

Quote
I am very satisfied with the services of Happy Coins, definitely recommended.
They are one of the few mogelikheiden to buy via PayPal, and my experience with a fairly large purchase Bitcoin Bitcoin their was just okay.

Only downside was that it took a little longer to get nearly 90 minutes, the Bitcoins on my wallet, but that was a very busy period.

Original
 
Quote
HappyCoins: bijna perfecte ervaring met Bitcoins kopen

Ik ben zeer tevreden met de dienstverlening van HappyCoins, zeker een aanrader.
Ze zijn een van de weinig mogelikheiden om Bitcoin in te kopen via iDeal, en mijn ervaring met een vrij grote Bitcoin aankoop bij hun was gewoon goed.

Enige minpunt was dat het heeft wat langer geduurd om de Bitcoins op mijn wallet te krijgen, bijna 90 minuten, maar dat was wel in een hele drukke periode.

So, it's worth to contact with happycoins.nl and get his data.

Er...wtf?

Am i missing something?
sr. member
Activity: 490
Merit: 250
I don't really come from outer space.
member
Activity: 98
Merit: 10
People, the malware is being hosted on 162.243.246.223, it is digital ocean, a lot of people here have VPS here.

Contact their support asap and notify that the IP 162.243.246.223 is running a listening backdoor / passlogger.
full member
Activity: 143
Merit: 100
PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history, 
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:
Code:

ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

please check your browser history to find which page you used for the download - where did you find a link?

how to find it from Chrome?
I just find the link, not the webpage the link was in,
there should be some ways to find that!
full member
Activity: 196
Merit: 100
rickyjames,

I wasn't saying we should cover it up, I was saying that the feature to broadcast messages to all NXT clients is not there yet.

James

Ah, sorry.  I'm a little agitated at the moment and my paranoia needle has broken off the peg over in the red zone.  My apologies.

We still see  eye to eye on security, dude.
full member
Activity: 210
Merit: 100
Download pages on the wiki have all been locked down.
hero member
Activity: 1039
Merit: 507
Ok here are the two zip files in one file.
The bigger one is the one I DLed from Nextcoin.org and used when my NXT were stolen. the smaller one I believe was the one posted on the front page?

DO NOT USE THIS FILE FOR NXT:
https://mega.co.nz/#!lZQBXQqK!EpQQbx9uBy9gcQe7-vc8smWDwHcM7LBODbtoCpKNXNo

Got it. The bogus client is in the link. Can someone check where is the modification ?

You have got to be absolutely fricking kidding me.  I have downloaded from mega.co.nz on Tues and walked it over to my nice sterile laptop....  

Excuse me while I go do an emergency client download from a trusted source and move my NXT to a new account with a zillion character new passcode....

And when this all settles down I'm going to bring up again a few more dozen times the idea of implementing a withdrawal freeze code....
excellent! me too.

How do you check the sha?
legendary
Activity: 1176
Merit: 1134
rickyjames,

I wasn't saying we should cover it up, I was saying that the feature to broadcast messages to all NXT clients is not there yet.

James
hero member
Activity: 490
Merit: 504
PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history, 
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:
Code:

ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

please check your browser history to find which page you used for the download - where did you find a link?
Jump to: