Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CoinDash’s ICO Website Has Been Hacked

financemagnates.com

Post reply on HN
Print view View original

111–120 of 255 posts

Re: CoinDash’s ICO Website Has Been Hacked

#111

Post by sjbase »

ericfrederich wrote: post #81
AsyncAwait wrote: post #6

This seems to be the same problem that many open-source projects have, where the md5 hash to verify your download is at a single, (often the same) location. One possible solution would be to use Twitter pinned tweet to also announce the address, however it's questionable how many people would actually cross check.

I always found that fascinating myself, serving the download and checksum from the same source. Doesn't http have enough redundancy checks built in to make this pointless? The only time to really do a checksum isn't on a browser download, it's when you push it over some serial connection, or android adb or something else.

I suppose the "Here's the MD5 for your download" concept is useful if the file is being served from a different host than the website itself. Someone could tamper with the file server, but may not have access to the HTML rendering a link to that file server.

But you're right about serving the data & checksum from the same source. I don't see what extra layer of security or integrity it adds. Someone tampering with server file system, or the data transfer (MitM) inherently has the access they need to inject their own MD5 into the HTML.

Re: CoinDash’s ICO Website Has Been Hacked

#112

Post by JustAnotherPat »

ericfrederich wrote: post #22
mcherm wrote: post #8

Where does the amount in the title ("45k ether") come from? I didn't see that in the article. EDIT: Apparently from https://etherscan.io/address/0x6a164122d5cf7c840D26e829b46dC... , which is something I don't have the depth of knowledge to assess for myself.

wow... 6 minutes ago, 1 minute ago... people are still sending this address money?

Yes, it's not really being talked about anywhere because people like to keep this stuff hush hush, so crypto doesn't look bad.

Re: CoinDash’s ICO Website Has Been Hacked

#113

Post by metroidfan832 »

pavel_lishin wrote: post #63
aw3c2 wrote: post #20

Earlier quoted context omitted.

s/People/Gamblers If you cannot afford losing everything you put into cryptocurrencies, don't do it.

I think there's a whole subreddit dedicated to Bitcoin schaudenfreude. It's fun at first, but then you start reading about the people (presumably with undiagnosed gambling addictions, but hey, I'm not a psychologist) who dump their entire savings, their kids' college funds, etc. into Bitcoin and then lose the whole shebang. That's the kind of decision that will break apart families.

One Bitcoin is over $2000. How could someone dump everything into Bitcoin and lose the whole shebang?

Re: CoinDash’s ICO Website Has Been Hacked

#114

Post by droidist2 »

sqeaky wrote: post #108
lucaspiller wrote: post #96

Earlier quoted context omitted.

I paid ~$0.60 to transfer ~$900 of Bitcoin the other day. For that amount it's not too bad, but you'd pay basically the same if you are paying for a $3 coffee. The transaction fee is based on the byte size of the transaction, not the monetary amount, so in it's current form it doesn't make sense to use Bitcoin for low-value transactions.

> fee is based on the byte size of the transaction Aren'y all bitcoin transaction really close to the same size? The amount being transferred doesn't change the size an integer contain 1 and another container 1,000,000,000 take the same amount of space (32 or 64 bits) because the spec says so. I thought transaction fees encouraged miners to include your block in a transaction.

I think you're both saying the same thing

Re: CoinDash’s ICO Website Has Been Hacked

#115

Post by annabellish »

sqeaky wrote: post #108
lucaspiller wrote: post #96

Earlier quoted context omitted.

I paid ~$0.60 to transfer ~$900 of Bitcoin the other day. For that amount it's not too bad, but you'd pay basically the same if you are paying for a $3 coffee. The transaction fee is based on the byte size of the transaction, not the monetary amount, so in it's current form it doesn't make sense to use Bitcoin for low-value transactions.

> fee is based on the byte size of the transaction Aren'y all bitcoin transaction really close to the same size? The amount being transferred doesn't change the size an integer contain 1 and another container 1,000,000,000 take the same amount of space (32 or 64 bits) because the spec says so. I thought transaction fees encouraged miners to include your block in a transaction.

Yes, but also no. The trick here is that if you're paying for your £1,000,000 space rocket by transfering the bitcoins from one address, it's a small transaction.

If you're paying for your £3 coffee by transfering small amounts from many addresses, it's a big transaction.

Address fragmentation happens when your coins are distributed across many addresses, and can be caused by things like spending coins, because all transactions actually spend everything at an address and just route the "change" elsewhere. Buy two cups of coffee too close to each other and your next transaction is going to cost twice as much in fees, whoops!

Re: CoinDash’s ICO Website Has Been Hacked

#116

Post by vertex-four »

Marazan wrote: post #109
lucaspiller wrote: post #96

Earlier quoted context omitted.

I paid ~$0.60 to transfer ~$900 of Bitcoin the other day. For that amount it's not too bad, but you'd pay basically the same if you are paying for a $3 coffee. The transaction fee is based on the byte size of the transaction, not the monetary amount, so in it's current form it doesn't make sense to use Bitcoin for low-value transactions.

I paid £0 to transfer £10000 the other day. I had to split it into two transfers of £5000 but otherwise it was free to transfer between two completely separate financial institutions.

On the other hand, they fund that ability off significant fees whenever you buy something with a debit/credit card. You rarely see those fees, but the shop does, meaning the shop has to increase prices of everything by a couple of percent to cover it - and usually don't provide a discount when you're paying by cash.

Re: CoinDash’s ICO Website Has Been Hacked

#117

Post by criddell »

root_axis wrote: post #107
endless1234 wrote: post #85

Earlier quoted context omitted.

So there's a party that takes n% of a big percentage of your purchases, yet that doesn't affect the prices? How?

The majority of purchases inside the store were cash because we required a $5 dollar minimum purchase for accepting cards. Most card purchases were used for gas which was already a loss leader most months out of the year, so it made more sense to keep posted prices competitive with stations in the area in order to bring people into the store rather than charge a few more cents in order to offset the cost of cards.

I thought minimum purchase requirements were against the terms of service for most credit cards. I've bought plenty of < $1 items with my credit card. I try to use it for everything to "earn" the rewards.

Re: CoinDash’s ICO Website Has Been Hacked

#118

Post by 52-6F-62 »

kin wrote: post #45

Does Ethereum not have an escrow like Bitcoin where a 3rd party can confirm a transaction first? But also, if it's really as easy as replacing some arbitrary address with another I'm surprised Coindash wasn't more careful.

I believe that is entirely up to the contract programmer(s), and the potential buyers to vet.

Re: CoinDash’s ICO Website Has Been Hacked

#119

Post by icoicoico »

Waiting for their announcement, but this would be a great way to pull a quick scam. Make a decent looking site promising a random piece of software that seems legit, promote an ICO, setup a fake wallet, then when the ICO goes live claim your site was "hacked" and points to a fake wallet you control. Grab a few million and never have to actually write said piece of software.

Re: CoinDash’s ICO Website Has Been Hacked

#120

Post by [deleted] »

davnicwil wrote: post #41
nikolay wrote: post #16

Where's the news?! Why do people continue to bang heads against the wall with this madness? Unless you're a thief, how is the craptocurrency thing better than my credit card that's insured from unauthorized use and gives me a cash back?! Yeah, you can't speculate with credit cards, and get rich quick, because $1 = $1 like forever, but isn't that what the real investment tools are for?

Just to pick up on this one small point: as I understand it, the cashback you get with a credit card is more or less taken straight from the card processing fee charged to the vendor, which of course, raises prices overall and is therefore not really cashback at all. Without the fee, you would likely have just paid a lower price in the first place. The only party benefitting from the cashback scheme is, of course, th…

[deleted]
Post reply on HN