Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 2022. (Read 2761645 times)

hero member
Activity: 784
Merit: 500

I have a large account balance, and the other day I noticed a few separate transactions in my history where unknown users to me had sent 1 NXT amounts to my account. I hadn't noticed them before, as the only difference between a forged NXT and a sent NXT is the small icon next to the transaction number.

I suspect someone was experimenting with trying to identify the location of accounts with large balances on the network. I don't have much experience with these things, but I suspect there could be ways of analysing transaction logs and other data sources to try and determine the IP address, or identity/location of an open account.

My account number is one of the accounts on the block explorer page of top accounts, so I think someone was searching for the location & account status of big accounts.


Dont worry. It was me, who added your account to one of NXT faucet, as you seems too poor to fund activity of NXT supporters or too busy watching your balance growing.

Joke. Or not?

Dont take it personally. This is my message to all high volume shareholders.

Why don't you read what I said? I'm suggesting all large holders of NXT, like myself, pool a big wad of NXT together and donate ALL the forged NXT to community activities that further all out interests FOR MANY YEARS.

This is my message to the NXT community - read & think before you comment and act.

Rather than set myself up as a 'leader' of NXT on the basis that I got lucky and sent BcNext 1 bitcoin, I'm advocating trying to be smart about things. I can see there are much better people than me to co-ordinate the distribution of any contribution I can make. I can also see that donating to random people who ask is not the best way to go. Some of them might have big voices but small minds, and lack talent and good ideas. Some might be scam merchants.

I revealed myself as having a big stake  - maybe that was unwise.

I'm suggesting that  decisions on how to spend any donated NXT be made by the best and brightest in the NXT community - to avoid donating NXT to people who post negative comments without reading and thinking first.

I'm looking for a structure to support NXT for years, not a few random acts to the loudest voices.

I want to support smart people. Does your comment to my post about setting up a forging trust account suggest you are smart? I just offered to support the NXT community for many years, and you replied "as you seems too poor to fund activity of NXT supporters or too busy watching your balance growing" Then you make a joking reference about hacking my account to donate it to a NXT faucet, presumably because I'm not donating enough.

I'm not taking it personally (you don't know me), but I'm suggesting you need to consider your approach if you want my support . I expect that you would read and think before posting a reply.


Now I see your point, but I think that instead of forging with the big accounts, let others, with smaller Nxt stakes forge, and better donate couple of hunders k for bounties that will really help Nxt to succeed. Like bybitcoin is doing it.
member
Activity: 98
Merit: 10
full member
Activity: 129
Merit: 100

I have a large account balance, and the other day I noticed a few separate transactions in my history where unknown users to me had sent 1 NXT amounts to my account. I hadn't noticed them before, as the only difference between a forged NXT and a sent NXT is the small icon next to the transaction number.

I suspect someone was experimenting with trying to identify the location of accounts with large balances on the network. I don't have much experience with these things, but I suspect there could be ways of analysing transaction logs and other data sources to try and determine the IP address, or identity/location of an open account.

My account number is one of the accounts on the block explorer page of top accounts, so I think someone was searching for the location & account status of big accounts.


Dont worry. It was me, who added your account to one of NXT faucet, as you seems too poor to fund activity of NXT supporters or too busy watching your balance growing.

Joke. Or not?

Dont take it personally. This is my message to all high volume shareholders.

Why don't you read what I said? I'm suggesting all large holders of NXT, like myself, pool a big wad of NXT together and donate ALL the forged NXT to community activities that further all out interests FOR MANY YEARS.

This is my message to the NXT community - read & think before you comment and act.

Rather than set myself up as a 'leader' of NXT on the basis that I got lucky and sent BcNext 1 bitcoin, I'm advocating trying to be smart about things. I can see there are much better people than me to co-ordinate the distribution of any contribution I can make. I can also see that donating to random people who ask is not the best way to go. Some of them might have big voices but small minds, and lack talent and good ideas. Some might be scam merchants.

I revealed myself as having a big stake  - maybe that was unwise.

I'm suggesting that  decisions on how to spend any donated NXT be made by the best and brightest in the NXT community - to avoid donating NXT to people who post negative comments without reading and thinking first.

I'm looking for a structure to support NXT for years, not a few random acts to the loudest voices.

I want to support smart people. Does your comment to my post about setting up a forging trust account suggest you are smart? I just offered to support the NXT community for many years, and you replied "as you seems too poor to fund activity of NXT supporters or too busy watching your balance growing" Then you make a joking reference about hacking my account to donate it to a NXT faucet, presumably because I'm not donating enough.

I'm not taking it personally (you don't know me), but I'm suggesting you need to consider your approach if you want my support . I expect that you would read and think before posting a reply.
legendary
Activity: 2142
Merit: 1010
Newbie
No sooner than you sell me yours and I wait a year or two and sell you back Cheesy

No need to wait so long.
member
Activity: 98
Merit: 10
Thr price is falling, hurry up and sell me some nxt Smiley

yeah, right! Smiley

Check DGEX.com again. Then send me your nxt before I change my mind.

No sooner than you sell me yours and I wait a year or two and sell you back Cheesy
hero member
Activity: 924
Merit: 1001
Unlimited Free Crypto
Thr price is falling, hurry up and sell me some nxt Smiley

yeah, right! Smiley

Check DGEX.com again. Then send me your nxt before I change my mind.
full member
Activity: 266
Merit: 100
NXT is the future
I think he mentioned yesterday that he has been selling at a steady rate since the beginning.




Ah, ok I missed that.

Aldrin doesn;t want to crash the market....I think his approach is very wise at the present moment.


He has been moving his stack down from 5% to 1% of Nxt....which is more than 80% reduction.


He sets a very good example for others to follow.



Thank you for taking the time to actually read and think about what i have said!


No thank you, becausse you are willing to do it that way


thank you
member
Activity: 98
Merit: 10
Thr price is falling, hurry up and sell me some nxt Smiley

yeah, right! Smiley
full member
Activity: 129
Merit: 100
I think he mentioned yesterday that he has been selling at a steady rate since the beginning.




Ah, ok I missed that.

Aldrin doesn;t want to crash the market....I think his approach is very wise at the present moment.


He has been moving his stack down from 5% to 1% of Nxt....which is more than 80% reduction.


He sets a very good example for others to follow.



Thank you for taking the time to actually read and think about what i have said!
hero member
Activity: 924
Merit: 1001
Unlimited Free Crypto
Buying 125k nxt, 0.00007btc each! Thr price is falling, hurry up and sell me some nxt Smiley
hero member
Activity: 490
Merit: 504
legendary
Activity: 2184
Merit: 1000
I think he mentioned yesterday that he has been selling at a steady rate since the beginning.




Ah, ok I missed that.

Aldrin doesn;t want to crash the market....I think his approach is very wise at the present moment.


He has been moving his stake down from 5% to 1% of Nxt....which is an 80% reduction.


He sets a very good example for others to follow.

sr. member
Activity: 392
Merit: 250
It's better to use http://localhost:7874/nxt?requestType=getAccountPublicKey&account=100000
If u get unknown account message, then there were no transactions to that account.
More precisely, the account public key becomes known to the blockchain when the first outgoing transaction has been sent from this account. And you can't make an outgoing transaction unless there are funds in the account. So there is some chicken and egg problem here, the very first time you open an account and want to fund it, the above request will tell you that the account is unknown. Client developers should still allow sending money to such an account, but just give a warning.
To be even more specific, there are three possible cases:

errorCode 5, "Unknown account" - there have been neither incoming nor outgoing transactions to the account

an empty response (i.e., no public key known) - there has been at least one incoming transaction (so that the blockchain knows the account number), but public key is not known (and is not sure if anyone in the world knows the password, as is the case with account 100000)

a valid publicKey returned - there has been at least one outgoing transaction (and necessarily at least one incoming), the public key is known, somebody really has used this account and hopefully remembers the password

In the first two cases, the risk of mistyping the account number is that the money goes into a blackhole, which increases the value of the remaining Nxt in circulation. In the last case, the risk is that the money goes to somebody else, who can still put them to a good use.
hero member
Activity: 784
Merit: 500
I think he mentioned yesterday that he has been selling at a steady rate since the beginning.




Ah, ok I missed that.
legendary
Activity: 2184
Merit: 1000
I think he mentioned yesterday that he has been selling at a steady rate since the beginning.


hero member
Activity: 784
Merit: 500

You might have overlooked this... but it still SOLVES the issue because a hacker would not get far if he/she found only the cmd window open because the passphrase is needed in order to send NXT this way... as opposed to finding the browser open with an unlocked account where they would freely send NXT without needing the passphrase (at least until a client comes out that will ask for the passphrase again).

Just explaining for the rest... I know you get it!   Wink

Then I did misunderstand your original question. Yes, with the cmd window open there appears to be no easy way to s(p)end NXT without knowing the passphrase. Certainly no supported API call.

However, if someone does get SSH access to your server and can login with the unix user that is running the Java process (or root, or a user that can sudo, etc), and you have used the web browser to unlock your account using your passphrase since Java was last restarted (i.e. your are actively trying to forge), then that person can get your passphrase. It's not trivial, but it's not difficult either. I've tested it on a remote instance just now, and it was relatively straightforward. It could probably be scripted to get the passphrase quickly and transparently, and bundled into your favourite trojan/virus/rat/etc.

(I was testing on Linux, but the same would likely apply with remote access to Windows).

So there are interesting questions about where you should forge, what precautions you should take, and with how much of your nxt stash. Don't assume that typing your passphrase over SSL to your VPS is necessarily enough. I don't believe this is purely a client-related topic, so long as the key required to forge is the same as the key required to send/spend nxt. I understand that transparent mining/forging and/or multi-sig (?) may fix this, but I don't know much about those concepts yet.





Thanks for spelling this out!! The fear of being hacked has stopped me forging now. I asked a question along these lines a couple of days ago on a related theme but haven't had a response yet (I know everyone on the dev side is super busy now) - My question is, is it possible to detect the location and status of unlocked accounts on other nodes? If it is, then forging with a large account is too risky IMO.

https://bitcointalksearch.org/topic/m.4182386


I have a large account balance, and the other day I noticed a few separate transactions in my history where unknown users to me had sent 1 NXT amounts to my account. I hadn't noticed them before, as the only difference between a forged NXT and a sent NXT is the small icon next to the transaction number.

I suspect someone was experimenting with trying to identify the location of accounts with large balances on the network. I don't have much experience with these things, but I suspect there could be ways of analysing transaction logs and other data sources to try and determine the IP address, or identity/location of an open account.

My account number is one of the accounts on the block explorer page of top accounts, so I think someone was searching for the location & account status of big accounts.

That said, I have done some thinking, and I would like to explore the possibility of using my account to forge NXT for community activities like faucets, promotion, and bounties. I would retain full ownership of the account, but I would be happy for all the forging revenue to go into funding community activities.

My intention would be to help create a consistent revenue stream to help fund worthwhile activities. I have enough NXT, but I don't have the time or skills to contribute much to all the good things going on at the moment. I am also not interested in choosing worthwhile people and projects myself. I have too many commitments (work & family), and I'm finding it too hard to keep up with all the reading required to be an active, and informed, participant. I can see that there are others in the NXT community with time, passion and skills. I want to help supply those people with a small, but consistent revenue stream.

I am prepared to investigate this, but I think the hacking threat of forging with a known account is too great at the moment. Once this risk is eliminated (if it can be) my account could forge 24/7. That would be 1-4% of the NXT supply, depending on how much more NXT I sell. If other big stake holders contributed we could create a semi-permanent funding source to help NXT in these formative years.

But the security situation has to be 100% water tight.



You should donate or at least SELL your nxts as people like you are the ones why our reputation is so low..
full member
Activity: 154
Merit: 100
What do I have to do to forge? Just stay logged in?

yes! exactly. only one thing you have to know, you should fill up acc first with ample NXT. otherwise, "forge" is a tale, you may spend your whole life for this, but you will get 0 NXT in the end!
legendary
Activity: 2142
Merit: 1010
Newbie
It's better to use http://localhost:7874/nxt?requestType=getAccountPublicKey&account=100000
If u get unknown account message, then there were no transactions to that account.
More precisely, the account public key becomes known to the blockchain when the first outgoing transaction has been sent from this account. And you can't make an outgoing transaction unless there are funds in the account. So there is some chicken and egg problem here, the very first time you open an account and want to fund it, the above request will tell you that the account is unknown. Client developers should still allow sending money to such an account, but just give a warning.

Btw, account # 100000 is still waiting for someone with a supercomputer to get the jackpot... Smiley
legendary
Activity: 1199
Merit: 1047
What do I have to do to forge? Just stay logged in?
full member
Activity: 154
Merit: 100
im not expert at computer, but one of the NXT follower, i believe, more and more people like me will join the NXT, most of us come for the beautiful design, then after we get closer to NXT, we found lots of "unfair" for new joiner, then what we will do, only one choice---give up!!
Jump to: