Pages:
Author

Topic: Re: [AXIOM] AxiomMemHash, Schnorr Sigs Implemented, APOS 3.0, AXH 2.0 Proposed - page 83. (Read 204903 times)

legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
I got hacked today through one of axioms CPU miners. Beware mates , all the appdata content were downloaded...

sad to hear mate ...

everyone really should stop using miners that are NOT from trusted sources ...

... really sad to see another post like this ...

#crysx

The funny thing is that , Ive scanned it through virustotal , but apparently the embedded btc miner was harmful...

exactly ... it doesnt have to be a virus to steal your coins ...

just malicious ( and inventive ) code ...

did you lose much? ...

#crysx
legendary
Activity: 1232
Merit: 1001
I got hacked today through one of axioms CPU miners. Beware mates , all the appdata content were downloaded...
not so long i lost all my crave and various ppl are reporting of different hack on different coins getting stolen. funny thing is i believe there is some sort of 0day exploit as recently malwarebyte blocked one IP trying to remote control axoim running wallet. maybe someone with skills could explore that area.
Rainbow tables can still be usefull for weak private keys. As I have read the private key can be a sha256 hash of every possible (non zero) input. Now if you take a dictionary of common words there is a change of hitting a valid private key. Like for example 'sausage' if you hash the string 'sausage' and import the (base58 encoded) outcome in your bitcoin wallet you will see that it was used. They are als usefull for keys generated with weak random number generators (like in Android or Java). I investigated the hack where I lost my coins and I do not think it was done with a trojan. My geuss is that the axiom wallet rpc interface is vulnerble for buffer overflow or maybe it uses a weak random generator. I am still investigating it, but my network logging does not show signs of a trojan.
getting closer?
legendary
Activity: 1512
Merit: 1000
quarkchain.io
I got hacked today through one of axioms CPU miners. Beware mates , all the appdata content were downloaded...

sad to hear mate ...

everyone really should stop using miners that are NOT from trusted sources ...

... really sad to see another post like this ...

#crysx

The funny thing is that , Ive scanned it through virustotal , but apparently the embedded btc miner was harmful...
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
I got hacked today through one of axioms CPU miners. Beware mates , all the appdata content were downloaded...

sad to hear mate ...

everyone really should stop using miners that are NOT from trusted sources ...

... really sad to see another post like this ...

#crysx
legendary
Activity: 1512
Merit: 1000
quarkchain.io
I got hacked today through one of axioms CPU miners. Beware mates , all the appdata content were downloaded...
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
How can NiceHash sell GPU hashing power when their miner doesn't support the algorithm?!  Huh

edit: Nevermind, didn't notice the Miners column...

if there is a will - there is a way ... only a matter of time ...

those nicehash people know what they are doing ...

i was actually quite surprised at first that they even setup the algo so quick ...

lets see what the devs come out with over the coming weeks and months ... should be interesting ...

#crysx
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
Going to be a while to get to Blocks 156241.. Grin Grin

not really ...

the more people that come on board and mine - the more blocks get hit ...

ill be moving a lot of processor time to this coin very shortly - even though the rewards are small per block now ...

pretty much the whole farm will be running it - and thats a lot of processor time to put forward to it ...

will see how it goes and will make a judgement in a week or so i think ...

#crysx
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---

I did a scan upfront on total virus, but it says bitcoinminer which was in my eyes not harmfull. After the hack I installed trend micro antivirus and it says trojan.

Guess I have to find another hobby.

I'm sorry to hear that. You just scared me into doing everything I'm suppose to do with these coins.
1. Encrypt wallet with password generated by Keepass. Then unlock for staking only.
2. Back up wallet to DVD.
3. Run all new programs in sandboxie, until I trust them. I may start running my browser under sandboxie too. I hate the internet. You have to go through a million steps,  to make yourself more secure. Then some hacker comes up with ways to circumvent them all. (sigh)


OR use linux ... or a vps that is linux based ...

i feel for you ...

this is the reason i moved completely away from windows ... and i mean completely ...

it wont be that difficult to make a dual boot system or setup a small machine with a large hdd for all the wallets and have that running under linux ...

my own desktop is fedora 21 x64 - and that thing just runs ... without any backhanded issues with ANYONE hacking into it ...

i have to admit - there is a few times where you will get frustrated due to the lack of support that some devs will refuse to put in for a linux build - but believe me when i say that there is NOTHING like peace of mind for your coins ...

its not completely failsafe - the weakest link here is the us the user - but its miles ahead of any windows insecurities ...

still do backups and make sure your system is secure - that goes without saying ...

a small computer with a large hdd ( for the blockchains - depending on how many coin wallets you may have ) and ( in my case ) fedora installed is all i need to stop thieves dead in their tracks ... and that is not even including the LONG encryption password i have for all my wallets ...

small advice - for piece of mind ...

#crysx
Just wanted to highlight that. Cannot be stressed enough.

I'm also using GNU/Linux, only. As my work/private/trading/coins/dev machine. Didn't have any incident, and that machine runs this very operating system since 5+ years. No incidents, so far.

What I wanted to add is that just switching to GNU/Linux won't just solve all problems in an instant. One has to accumulate a lot of knowledge, because it requires a completely different way of thinking. Though, if getting used to that, it's a more logical, simpler one.
But getting used to a real user management system, rights management, the structure of the file system, literally anything, requires some time. No way around that. Smiley

agreed ...

as with any change in system from something that you are familiar with - there is always going to be teething prioblems and adjustment issues ... its just ingrained in our dna - we as humans prefer our comfort zone - and learning something new pulls us out of that zone and makes us uncomfortable ... for some - that is the end ... for others - its a new beginning ...

that show i took it when i moved from windows to fedora thos many years ago - and back then linux was still very much in its infancy so it was rather crude compared to todays ditributions ...

knowledge is key - in almost anything you do these days ...

#crysx
hero member
Activity: 756
Merit: 501
How can NiceHash sell GPU hashing power when their miner doesn't support the algorithm?!  Huh

edit: Nevermind, didn't notice the Miners column...
copper member
Activity: 1024
Merit: 513
txbit.io - cryptocurrency exchange
Even with that, can't some hacker just generate a rainbow table? They would compare their rainbow table to the blockchain, and when they get a match, just import the private key into their wallet and steal those coins? Or would that be too unwieldy?

http://directory.io <-- bitcoin
http://buttcoins.com <-- bitcoin, clamcoin, dogecoin, litecoin

Start searching. Those websites contain every possible address and private key.

Those sites are probably fake or maybe contains only a tiny fraction of the keyspace. It is not possible to create a rainbow table for Bitcoin with today's technology. It will take too much time and energy and storage space. There are so many links to quote where people have already answered why this is not possible at this point. Just google it. Ill past a few:

Link 1
Link 2
Link 3

Rainbow tables can still be usefull for weak private keys. As I have read the private key can be a sha256 hash of every possible (non zero) input. Now if you take a dictionary of common words there is a change of hitting a valid private key. Like for example 'sausage' if you hash the string 'sausage' and import the (base58 encoded) outcome in your bitcoin wallet you will see that it was used. They are als usefull for keys generated with weak random number generators (like in Android or Java). I investigated the hack where I lost my coins and I do not think it was done with a trojan. My geuss is that the axiom wallet rpc interface is vulnerble for buffer overflow or maybe it uses a weak random generator. I am still investigating it, but my network logging does not show signs of a trojan.
hero member
Activity: 658
Merit: 500
Going to be a while to get to Blocks 156241.. Grin Grin
legendary
Activity: 2320
Merit: 1292
Encrypted Money, Baby!

I did a scan upfront on total virus, but it says bitcoinminer which was in my eyes not harmfull. After the hack I installed trend micro antivirus and it says trojan.

Guess I have to find another hobby.

I'm sorry to hear that. You just scared me into doing everything I'm suppose to do with these coins.
1. Encrypt wallet with password generated by Keepass. Then unlock for staking only.
2. Back up wallet to DVD.
3. Run all new programs in sandboxie, until I trust them. I may start running my browser under sandboxie too. I hate the internet. You have to go through a million steps,  to make yourself more secure. Then some hacker comes up with ways to circumvent them all. (sigh)


OR use linux ... or a vps that is linux based ...

i feel for you ...

this is the reason i moved completely away from windows ... and i mean completely ...

it wont be that difficult to make a dual boot system or setup a small machine with a large hdd for all the wallets and have that running under linux ...

my own desktop is fedora 21 x64 - and that thing just runs ... without any backhanded issues with ANYONE hacking into it ...

i have to admit - there is a few times where you will get frustrated due to the lack of support that some devs will refuse to put in for a linux build - but believe me when i say that there is NOTHING like peace of mind for your coins ...

its not completely failsafe - the weakest link here is the us the user - but its miles ahead of any windows insecurities ...

still do backups and make sure your system is secure - that goes without saying ...

a small computer with a large hdd ( for the blockchains - depending on how many coin wallets you may have ) and ( in my case ) fedora installed is all i need to stop thieves dead in their tracks ... and that is not even including the LONG encryption password i have for all my wallets ...

small advice - for piece of mind ...

#crysx
Just wanted to highlight that. Cannot be stressed enough.

I'm also using GNU/Linux, only. As my work/private/trading/coins/dev machine. Didn't have any incident, and that machine runs this very operating system since 5+ years. No incidents, so far.

What I wanted to add is that just switching to GNU/Linux won't just solve all problems in an instant. One has to accumulate a lot of knowledge, because it requires a completely different way of thinking. Though, if getting used to that, it's a more logical, simpler one.
But getting used to a real user management system, rights management, the structure of the file system, literally anything, requires some time. No way around that. Smiley
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
Is there working wallet for win 64? Cus I can't get any connections even with conf file.

the wallet will work in windows x64 ...

if you are not getting any connections - does that mean you are not syncing either? ...

#crysx

Yes, that is what it means also.

then there must be something on your end to have it not sync ...

whether it be a firewall issue or a filenaming issue - there is something that is causing the issue ...

things to check ...

naming of the axiom.conf file ... windows has a very nasty habit of putting a .txt extension on the end of text files ... its the only operating system that does it ... so make sure you can see ALL extensions ( which you can change in the global folder options ) ...

content of the axiom.conf file ... make sure you have all that you need in it ... mine is below ... just change the rpcuser and rpcpassword to what ever you want them to be ... it wont matter unless you are solomining ...

-------

rpcuser=chrysophylax
rpcpassword=x
rpcallowip=127.0.0.1
rpcport=
port=
gen=0
server=1
addnode=104.236.231.72
addnode=45.55.172.95
addnode=174.127.110.41
addnode=162.222.181.215

addnode=93.157.25.130
addnode=104.236.231.72
addnode=158.181.253.55
addnode=187.74.206.189
addnode=72.92.19.54
addnode=24.56.61.247
addnode=89.212.140.63
addnode=46.101.23.149
addnode=68.41.180.163
addnode=46.72.126.178
addnode=193.198.102.32
addnode=161.53.40.94
addnode=192.52.166.80
addnode=104.238.133.29
addnode=197.89.64.51
addnode=122.107.182.65
addnode=82.236.68.185
addnode=5.9.72.102
addnode=212.45.26.38
addnode=104.238.133.29
addnode=197.89.64.51

-------

placement of the axiom.conf file ... make sure in windows it is in the axiom folder located in the hidden section of the 'user' folders ...

ie - C:\Users\xxx\AppData\Roaming\Axiom\ - where xxx is your username ...

if all of these things are what you currently have - then it is possibly a system issue ... check you firewall - virus scanner - any app that is blocking connections ...

THEN open the wallet and wait about 10minsutes or so ... it should start syncing as soon as it pickup a live ip ...

hope this helps ...

#crysx
newbie
Activity: 51
Merit: 0
just kinda sucks that everything is mined in a couple days... that means only the 15 miners gonna be rich lol
jr. member
Activity: 157
Merit: 1
how long does it take for coins to mature?  Just staking 200 coins... wanna know how long avg it takes to get it staking atm

couple hours 3-4hours if i remember could be less or a bit more  Grin
newbie
Activity: 51
Merit: 0
how long does it take for coins to mature?  Just staking 200 coins... wanna know how long avg it takes to get it staking atm
sr. member
Activity: 263
Merit: 250
Is there working wallet for win 64? Cus I can't get any connections even with conf file.

the wallet will work in windows x64 ...

if you are not getting any connections - does that mean you are not syncing either? ...

#crysx

Yes, that is what it means also.
member
Activity: 92
Merit: 10
Hello users axiom.
First dice site for Axiom:
https://axiom.silverdice.us/


- 1% house edge
- faucet
- affiliate program
- provably fair
- rainbot


100% Bonus!

Special welcome bonus for new players. Claiming your First Deposit Bonus.
1. Click your username
2. Check the box bonus
3. Click update
4. Make your first deposit
5. The bonus will be added automatically

Once we've received your request, we'll credit your account with a 100% bonus up to 5000 AXIOM to multiply your money for 2x the play!

For example: when you make a 50 AXIOM deposit, We will credit your balance with an additional 50 AXIOM for a total of 100 AXIOM towards play.


Good luck
legendary
Activity: 2912
Merit: 1091
--- ChainWorks Industries ---
Is there working wallet for win 64? Cus I can't get any connections even with conf file.

the wallet will work in windows x64 ...

if you are not getting any connections - does that mean you are not syncing either? ...

#crysx
legendary
Activity: 1638
Merit: 1013
Even with that, can't some hacker just generate a rainbow table? They would compare their rainbow table to the blockchain, and when they get a match, just import the private key into their wallet and steal those coins? Or would that be too unwieldy?

http://directory.io <-- bitcoin
http://buttcoins.com <-- bitcoin, clamcoin, dogecoin, litecoin

Start searching. Those websites contain every possible address and private key.

Those sites are probably fake or maybe contains only a tiny fraction of the keyspace. It is not possible to create a rainbow table for Bitcoin with today's technology. It will take too much time and energy and storage space. There are so many links to quote where people have already answered why this is not possible at this point. Just google it. Ill past a few:

Link 1
Link 2
Link 3
Pages:
Jump to: