LoyceV's Bitcointalk Notifications: all posts that quoted or mentioned LoyceV in the past 7 days

Quote from: ryzaadit on Today at 12:16:54 AM

saya penasaran aktivitas-aktivitas exploit apa yang bisa dilakukan oleh server yang punya niat jahat. Apakah bisa macam kayak ngasih, pops notification update yang menjurus ke fake site atau hal lainnya.^{(sorry agak ambigu)}

Terkait penggunaan server di Electrum, kasus yang terbaru adalah Malicious server yang bisa me-replace address ketika user melakukan RBF yang dipicu oleh server tersebut.

Quote from: Husna QA on October 24, 2026, 10:43:31 PM

—snip—
https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v
(Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it)

Sementara untuk kasus yang dulu pernah juga terjadi di Electrum terkait server jahat, ketika user melakukan transaksi, mereka malah mendapat notifikasi 'error sending transaction' dan mencantumkan link agar meng-update Electrum yang padahal link tersebut adalah malware.

https://github.com/spesmilo/electrum/issues/4968#issue-394260722

Quote from: AakZaki on Today at 03:31:47 AM

Yes, terkait server milik LoyceV ini sudah menjadi solusi mentok lainnya, selain menggunakan Private Server.
Namun yang perlu dipahami adalah, seseorang yang selalu menjaga privasi biasanya akan lebih memilih untuk menggunakan Private Server. Karena sifatnya Server Publik itu bisa mendeteksi atau mengaitkan alamat-alamat BTC lain nya yang ada di Electrum itu.

Sebagai contoh, si Owo punya Wallet A dan menggunakan Public Server milik Gib. Ketika Wallet A tersebut terekspos di forum ini misalnya, dan pemilik Public Server mengetahui bahwa itu adalah Wallet A milik Owo, maka Wallet B>C>D dan seterusnya berpotensi dapat dihubungkan dengan Wallet A oleh pemilik server, apabila alamat tersebut juga diperiksa melalui server yang sama.

Hal diatas adalah salah satu solusi yang mungkin bisa digunakan sebelum memiliki server sendiri.
Mengenai keterkaitan antar wallet pada illustrasi diatas, diantara solusi untuk memutus mata rantai transaskinya adalah dengan mengirim aset melalui DEX, layanan Mixing, atau yang sejenisnya sehingga Wallet A tidak terhubung langsung ke Wallet B dan seterusnya milik user tersebut.

Wall Observer BTC/USD Report: October 2026

🎵 Post Soundtrack (in loop)

₿ Bitcoin Trend - October 2026

Fig. 1. Market Trend

📈 Historical Post Trend (5 Years)

Fig. 2. Monthly Post Volume in Wall Observer Thread

📈 Historical Merit Trend (5 Years)

Fig. 3. Monthly Merit Volume in Wall Observer Thread

📊 Monthly Comparison

Fig. 4. Monthly Statistics Comparison

💎 Top Merited Content

📊 Correlation BTC Price ↔ Post Volume

Fig. 5. Monthly Correlation Between BTC Price Change and Post Volume

🔄 Merit Flow (Chord Diagram)

Fig. 6. Merit transfers between users

🏆 Top Merit Receivers

Pos	Δ Pos	User	October 2026	September 2026	Δ Merit	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	=	xhomerx10	130	185	▼(-55)
🥈	▲(1)	d_eddie	107	102	▲(5)
🥉	▲(2)	Hueristic	105	97	▲(8 )
4	▲(7)	OutOfMemory	103	61	▲(42)
5	▲(9)	fillippone	89	53	▲(36)
6	=	AlcoHoDL	85	92	▼(-7)
7	▲(15)	Paashaas	84	37	▲(47)
8	▲(8 )	Biodom	81	51	▲(30)
9	▼(-2)	JayJuanGee	80	81	▼(-1)
10	▼(-2)	Richy_T	79	79	=

📤 Top 10 Merit Senders

Pos	Δ Pos	User	October 2026	September 2026	Δ Merit Sent	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	=	El duderino_	817	655	▲(162)
🥈	▲(2)	JayJuanGee	190	154	▲(36)
🥉	▼(-1)	vapourminer	121	184	▼(-63)
4	▼(-1)	Hueristic	115	158	▼(-43)
5	▲(1)	xhomerx10	73	85	▼(-12)
6	▲(3)	d_eddie	57	43	▲(14)
7	🆕	OutOfMemory	48		🆕
8	🆕	heslo	47		🆕
9	▼(-1)	AlcoHoDL	46	53	▼(-7)
10	▼(-3)	philipma1957	43	65	▼(-22)

🏆 Top Posters

Pos	Δ Pos	User	October 2026	September 2026	Δ Posts	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	=	ChartBuddy	674	720	▼(-46)
🥈	▲(2)	philipma1957	67	76	▼(-9)
🥉	=	Danish Ali	62	80	▼(-18 )
4	▲(2)	BobClawblaw	60	51	▲(9)
5	▼(-3)	Hueristic	59	90	▼(-31)
6	▲(3)	d_eddie	56	46	▲(10)
7	▲(1)	xhomerx10	50	49	▲(1)
8	▲(6)	JayJuanGee	47	33	▲(14)
9	▲(2)	OutOfMemory	46	43	▲(3)
10	=	Richy_T	42	45	▼(-3)
11	▼(-4)	OgNasty	37	49	▼(-12)
12	▼(-7)	vapourminer	34	56	▼(-22)
13	▼(-1)	Biodom	31	35	▼(-4)
14	▲(3)	Lucius	25	24	▲(1)
15	▲(8 )	ESG	20	11	▲(9)
15	=	cAPSLOCK	20	26	▼(-6)
17	▲(1)	Floczy	17	17	=
18	▼(-5)	AlcoHoDL	15	34	▼(-19)
19	▲(10)	El duderino_	13	6	▲(7)
20	▲(25)	shahzadafzal	12	3	▲(9)
21	▲(6)	fillippone	9	9	=
21	▲(14)	LoyceV	9	5	▲(4)
21	▼(-5)	BobLawblaw	9	26	▼(-17)
24	▼(-2)	goldkingcoiner	8	11	▼(-3)
25	▲(5)	BTC	7	6	▲(1)

🏆 All-Time Top 25 Posters

#	User	Posts	%
----	----	----	----
🥇	ChartBuddy	67,871	9.2%
🥈	JayJuanGee	24,904	3.4%
🥉	El duderino_	16,396	2.2%
4	adamstgBit	10,886	1.5%
5	LFC_Bitcoin	8,379	1.1%
6	Last of the V8s	8,283	1.1%
7	philipma1957	7,897	1.1%
8	HairyMaclairy	7,798	1.1%
9	jojo69	7,576	1.0%
10	JimboToronto	6,937	0.9%
11	Biodom	6,866	0.9%
12	xhomerx10	6,364	0.9%
13	Torque	6,244	0.8%
14	Hueristic	6,173	0.8%
15	d_eddie	5,804	0.8%
16	Richy_T	5,499	0.7%
17	bitserve	5,289	0.7%
18	BobLawblaw	5,112	0.7%
19	Fatman3001	5,053	0.7%
20	cAPSLOCK	5,049	0.7%
21	JorgeStolfi	4,712	0.6%
22	BlindMayorBitcorn	4,671	0.6%
23	OutOfMemory	4,645	0.6%
24	Toxic2040	4,463	0.6%
25	realr0ach	4,228	0.6%

🏅 All-Time Top 25 Merit Receivers

#	User	Merits
----	----	----
🥇	El duderino_	14,019
🥈	xhomerx10	10,427
🥉	LFC_Bitcoin	9,417
4	JayJuanGee	9,318
5	AlcoHoDL	7,518
6	cAPSLOCK	6,778
7	Hueristic	6,141
8	d_eddie	5,720
9	Biodom	5,538
10	OutOfMemory	5,404
11	Paashaas	5,286
12	JimboToronto	5,186
13	philipma1957	5,067
14	BobLawblaw	5,063
15	vapourminer	4,670
16	fillippone	4,586
17	Torque	4,497
18	jojo69	4,209
19	Toxic2040	4,186
20	ivomm	3,382
21	Last of the V8s	3,213
22	Gachapin	3,116
23	BitcoinBunny	2,866
24	sirazimuth	2,798
25	bitcoinPsycho	2,788

Cumulative WO statistics for posts published through 2026-10-31 (inclusive, UTC): 735,929 posts from 7,402 accounts | 242,739 all-time observed merits on those posts, including awards sent in later years. Post coverage: 2013-04-16 to 2026-10-11; ChartBuddy included. Merit totals reflect the acquired snapshot, not the balance at year-end.

DT Member - November 2026
DT1 Member periode kali ini berjumlah 111 user (berkurang 5 DT1 dari periode sebelumnya)

Daftar lama:

Code:

theymos
HostFat
gmaxwell
OgNasty
Vod
vapourminer
mprep
Foxpup
philipma1957
Cyrus
Welsh
ibminer
joker_josue
Pmalek
Mitchell
albon
wwzsocki
Timelord2067
jeremypwr
gbianchi
EFS
Swordsoffreedom
hilariousandco
buckrogers
Buchi-88
Lesbian Cow
willi9974
JayJuanGee
NeuroticFish
achow101
DaveF
examplens
nutildah
irfan_pak10
yahoo62278
bitbollo
pooya87
LFC_Bitcoin
o_solo_miner
mocacinno
Real-Duke
klarki
LoyceV
SFR10
Lucius
TryNinja
holydarkness
Lafu
Cointxz
AakZaki
giammangiato
buwaytress
crwth
Ale88
Kryptowerk
Vispilio
hosemary
JollyGood
igebotz
roycilik
CryptopreneurBrainboss
hugeblack
KTChampions
icopress
sheenshane
logfiles
Bitcoin_Arena
GazetaBitcoin
mole0815
bitmover
Lakai01
morvillz7z
fillippone
cryptofrka
abhiseshakana
The Cryptovator
lovesmayfamilis
DireWolfM14
notblox1
Little Mouse
inspace
Awaklara
efialtis
geophphreigh
zasad@
Rikafip
Etranger
NotATether
Stalker22
bullrun2024bro
decodx
Charles-Tim
Lillominato89
Free Market Capitalist
ZAINmalik75
AHOYBRAUSE
YodasRedRocket
PowerGlove
SirJohnVonSlotty
Mia Chloe

-----

Daftar Baru:

Code:

theymos
HostFat
OgNasty
Vod
vapourminer
Foxpup
philipma1957
babo
Cyrus
Welsh
ibminer
d5000
joker_josue
Pmalek
albon
wwzsocki
Timelord2067
jeremypwr
EFS
Swordsoffreedom
hybridsole
stompix
hilariousandco
arulbero
buckrogers
Buchi-88
willi9974
JayJuanGee
achow101
DaveF
examplens
nutildah
irfan_pak10
yahoo62278
bitbollo
LFC_Bitcoin
o_solo_miner
mocacinno
Real-Duke
LoyceV
The Sceptical Chymist
SFR10
Lucius
Lafu
Cointxz
polymerbit
tweetious
AakZaki
giammangiato
crwth
Ale88
Kryptowerk
hosemary
krogothmanhattan
JollyGood
igebotz
roycilik
CryptopreneurBrainboss
hugeblack
El duderino_
KTChampions
Trofo
icopress
JeromeTash
logfiles
Bitcoin_Arena
GazetaBitcoin
tvplus006
mole0815
bitmover
DdmrDdmr
shahzadafzal
Lakai01
Husna QA
fillippone
abhiseshakana
The Cryptovator
lovesmayfamilis
DireWolfM14
notblox1
YOSHIE
inspace
jokers10
Awaklara
geophphreigh
zasad@
Rikafip
Etranger
NotATether
Stalker22
decodx
BlackHatCoiner
Charles-Tim
MrMojoRising26
Free Market Capitalist
ZAINmalik75
AHOYBRAUSE
PowerGlove
SirJohnVonSlotty
Mia Chloe

-----

DT1 dari Indonesia:

Code:

AakZaki
roycilik
Husna QA
abhiseshakana
YOSHIE

Sumber: theymos | DT update log

Daftar perubahan DT1

Dihapus:

1. Staff gmaxwell (Trust: +12 / =0 / -1) (10663 Merit earned) (Trust list) (BPIP)
2. Global Moderator mprep (Trust: +5 / =0 / -0) (1772 Merit earned) (Trust list) (BPIP)
3. Global Moderator Mitchell (Trust: +43 / =1 / -0) (2396 Merit earned) (Trust list) (BPIP)
4. Legendary gbianchi (Trust: +3 / =0 / -0) (2699 Merit earned) (Trust list) (BPIP)
5. Legendary Lesbian Cow (Trust: +41 / =0 / -0) (758 Merit earned) (Trust list) (BPIP)
6. Legendary NeuroticFish (Trust: +3 / =0 / -0) (6297 Merit earned) (Trust list) (BPIP)
7. Legendary pooya87 (Trust: +2 / =0 / -0) (11715 Merit earned) (Trust list) (BPIP)
8. Legendary klarki (Trust: +6 / =1 / -0) (4845 Merit earned) (Trust list) (BPIP)
9. Legendary TryNinja (Trust: +10 / =2 / -0) (10867 Merit earned) (Trust list) (BPIP)
10. Legendary holydarkness (Trust: +7 / =0 / -0) (1435 Merit earned) (Trust list) (BPIP)
11. Legendary buwaytress (Trust: +27 / =0 / -0) (4064 Merit earned) (Trust list) (BPIP)
12. Legendary Vispilio (Trust: +1 / =3 / -1) (1684 Merit earned) (Trust list) (BPIP)
13. Legendary sheenshane (Trust: +5 / =0 / -0) (1172 Merit earned) (Trust list) (BPIP)
14. Legendary morvillz7z (Trust: +4 / =0 / -0) (2224 Merit earned) (Trust list) (BPIP)
15. Legendary cryptofrka (Trust: +19 / =0 / -0) (3367 Merit earned) (Trust list) (BPIP)
16. Legendary Little Mouse (Trust: +51 / =2 / -0) (3844 Merit earned) (Trust list) (BPIP)
17. Legendary efialtis (Trust: +26 / =0 / -0) (1594 Merit earned) (Trust list) (BPIP)
18. Legendary bullrun2024bro (Trust: +4 / =1 / -0) (5403 Merit earned) (Trust list) (BPIP)
19. Legendary Lillominato89 (Trust: +2 / =0 / -0) (1312 Merit earned) (Trust list) (BPIP)
20. Hero Member YodasRedRocket (Trust: +31 / =0 / -0) (651 Merit earned) (Trust list) (BPIP)

Ditambahkan:

1. Legendary babo (Trust: +7 / =0 / -0) (4909 Merit earned) (Trust list) (BPIP)
2. Legendary d5000 (Trust: neutral) (10391 Merit earned) (Trust list) (BPIP)
3. Legendary hybridsole (Trust: +18 / =0 / -0) (515 Merit earned) (Trust list) (BPIP)
4. Legendary stompix (Trust: neutral) (7004 Merit earned) (Trust list) (BPIP)
5. Legendary arulbero (Trust: +4 / =0 / -0) (1589 Merit earned) (Trust list) (BPIP)
6. Legendary The Sceptical Chymist (Trust: +28 / =3 / -0) (6410 Merit earned) (Trust list) (BPIP)
7. Hero Member polymerbit (Trust: +14 / =0 / -0) (1017 Merit earned) (Trust list) (BPIP)
8. Sr. Member tweetious (Trust: +21 / =0 / -0) (463 Merit earned) (Trust list) (BPIP)
9. Legendary krogothmanhattan (Trust: +79 / =1 / -0) (4325 Merit earned) (Trust list) (BPIP)
10. Legendary El duderino_ (Trust: +24 / =2 / -0) (15797 Merit earned) (Trust list) (BPIP)
11. Legendary Trofo (Trust: +34 / =0 / -0) (3925 Merit earned) (Trust list) (BPIP)
12. Legendary JeromeTash (Trust: +3 / =0 / -0) (1506 Merit earned) (Trust list) (BPIP)
13. Legendary tvplus006 (Trust: +13 / =1 / -0) (2734 Merit earned) (Trust list) (BPIP)
14. Legendary DdmrDdmr (Trust: +9 / =0 / -0) (11408 Merit earned) (Trust list) (BPIP)
15. Copper Member shahzadafzal (Trust: +2 / =0 / -0) (3591 Merit earned) (Trust list) (BPIP)
16. Copper Member Husna QA (Trust: +4 / =0 / -0) (3587 Merit earned) (Trust list) (BPIP)
17. Legendary YOSHIE (Trust: +10 / =1 / -0) (1916 Merit earned) (Trust list) (BPIP)
18. Legendary jokers10 (Trust: +1 / =0 / -0) (4226 Merit earned) (Trust list) (BPIP)
19. Legendary BlackHatCoiner (Trust: +1 / =0 / -0) (10234 Merit earned) (Trust list) (BPIP)
20. Hero Member MrMojoRising26 (Trust: +26 / =0 / -0) (1136 Merit earned) (Trust list) (BPIP)

Sumber: LoyceV | DefaultTrust changes

Quote from: nullius on Today at 06:55:54 PM

No, I’ve never found a 0day in Tor!

Well, that's good news for those of us who are code-illiterate.

Quote from: nullius on Today at 06:55:54 PM

Other stuff I do is sensitive; I would prefer not to discuss it publicly.

Roger that. Thanks for entertaining the question nonetheless.

Quote from: nullius on Today at 06:55:54 PM

Quote from: LoyceV on Today at 06:48:34 PM

Quote from: DireWolfM14 on Today at 03:11:35 PM

Are you guys not using the Tor repository to keep your Tor install up to date?

I'm using my Linux distro's default packages.

If that’s Debian or Debian-based, the Tor Project recommends their own .deb instead. That’s why they make it. I don’t know how it is now, but in past years the Debian tor package was poorly-maintained.

I don't recall when or why I started using the Tor repository, but years back I do recall running into an issue on Windows that's similar to what's going on with Feather. I was in the habit of running a Tor daemon as an NTService so I didn't have to start Tor Browser whenever using Electrum wallet, but I was really lazy about keeping Tor up to date. Tor's Debian repository makes keeping it up to date super easy.

Quote from: ➥ Theymos DT update [thread]

Novembre 2026

Lista New Users:

Code:

theymos (CONFIRMED)
HostFat (CONFIRMED)
OgNasty (CONFIRMED)
Vod (CONFIRMED)
vapourminer (CONFIRMED)
Foxpup (CONFIRMED)
philipma1957 (CONFIRMED)
babo
Cyrus (CONFIRMED)
Welsh (CONFIRMED)
ibminer (CONFIRMED)
d5000
joker_josue (CONFIRMED)
Pmalek (CONFIRMED)
albon (CONFIRMED)
wwzsocki (CONFIRMED)
Timelord2067 (CONFIRMED)
jeremypwr (CONFIRMED)
EFS (CONFIRMED)
Swordsoffreedom (CONFIRMED)
hybridsole
stompix
hilariousandco (CONFIRMED)
arulbero
buckrogers (CONFIRMED)
Buchi-88 (CONFIRMED)
willi9974 (CONFIRMED)
JayJuanGee (CONFIRMED)
achow101 (CONFIRMED)
DaveF (CONFIRMED)
examplens (CONFIRMED)
nutildah (CONFIRMED)
irfan_pak10 (CONFIRMED)
yahoo62278 (CONFIRMED)
bitbollo (CONFIRMED)
LFC_Bitcoin (CONFIRMED)
o_solo_miner (CONFIRMED)
mocacinno (CONFIRMED)
Real-Duke (CONFIRMED)
LoyceV (CONFIRMED)
The Sceptical Chymist
SFR10 (CONFIRMED)
Lucius (CONFIRMED)
Lafu (CONFIRMED)
Cointxz (CONFIRMED)
polymerbit
tweetious
AakZaki (CONFIRMED)
giammangiato (CONFIRMED)
crwth (CONFIRMED)
Ale88 (CONFIRMED)
Kryptowerk (CONFIRMED)
hosemary (CONFIRMED)
krogothmanhattan
JollyGood (CONFIRMED)
igebotz (CONFIRMED)
roycilik (CONFIRMED)
CryptopreneurBrainboss (CONFIRMED)
hugeblack (CONFIRMED)
El duderino_
KTChampions (CONFIRMED)
Trofo
icopress (CONFIRMED)
JeromeTash
logfiles (CONFIRMED)
Bitcoin_Arena (CONFIRMED)
GazetaBitcoin (CONFIRMED)
tvplus006
mole0815 (CONFIRMED)
bitmover (CONFIRMED)
DdmrDdmr
shahzadafzal
Lakai01 (CONFIRMED)
Husna QA
fillippone (CONFIRMED)
abhiseshakana (CONFIRMED)
The Cryptovator (CONFIRMED)
lovesmayfamilis (CONFIRMED)
DireWolfM14 (CONFIRMED)
notblox1 (CONFIRMED)
YOSHIE
inspace (CONFIRMED)
jokers10
Awaklara (CONFIRMED)
geophphreigh (CONFIRMED)
zasad@ (CONFIRMED)
Rikafip (CONFIRMED)
Etranger (CONFIRMED)
NotATether (CONFIRMED)
Stalker22 (CONFIRMED)
decodx (CONFIRMED)
BlackHatCoiner
Charles-Tim (CONFIRMED)
MrMojoRising26
Free Market Capitalist (CONFIRMED)
ZAINmalik75 (CONFIRMED)
AHOYBRAUSE (CONFIRMED)
PowerGlove (CONFIRMED)
SirJohnVonSlotty (CONFIRMED)
Mia Chloe (CONFIRMED)

. . . .

Lista Utenti Italiani:

USER..........	...DT...	.DT.October 2026.	BPIP	Ninjastic
Ale88	(DT)	SI
arulbero	(DT)	no
babo	(DT)	no
coinlocket$		no
fillippone	(DT)	SI
gbianchi		SI
bastisisca		no
bitbollo	(DT)	SI
giammangiato	(DT)	SI
mendace		no
mars78		no
simpic		no
Lillominato89		SI

Link Utili:

Quote from: DireWolfM14 on Today at 05:40:29 PM

I read up on Arti when I saw you had mentioned it before. Definitely a neat project. As much as I am a fan of Rust, I just don't see much demand for it supplant C where it's already been entrenched. For new software, or re-writes of other languages that aren't as practical as C it makes lots of sense.

This will make me as popular as a whore in church to mention here, but credit where due: The big project to rewrite Tor as Arti was funded by Zcash grants for multiple years. I have mixed feelings about this; I’m not such a fan of rusting all the world’s code, and I kinda dislike Rust, and I know the C daemon like an old friend... sigh.

Besides the whole “memory-safe language” thing, some aspects of Arti’s design are far superior to the C daemon. That’s a design issue, not a language issue; while rewriting from scratch, the Tor lead devs did their wishlist of “how we should’ve done it”. (Imagine what Bitcoin Core would do, if they could throw the whole thing out instead of slooooowly refactoring out libbitcoinkernel (a good explanation), etc.) In particular, Arti is designed from the ground up to work with other programs—either via an RPC protocol much better than the old control socket, or embedding as a crate/library.

Embedding and bundling in other programs has been a major pain point. Tor always should have been deployable a library—and also, the Tor control port protocol has always been awful. So...

Switching to Arti would not require Feather to rewrite their own project in Rust! On the integration page I linked, both FFI and RPC are noted.

The C daemon will someday be phased out. I haven’t yet tried Arti, but I know I need to dig into it sooner rather than later.

Quote from: DireWolfM14 on Today at 05:40:29 PM

Quote from: nullius on Today at 03:45:25 PM

I run a Tor daemon with my own local patches; their repo and their build/test processes are relatively easy to work with, even just for personal use.

Just curious; what exactly are you patching, why, and how?

Occasionally, I’ve fixed bugs. For instance, I discovered and locally fixed #40739 (clearnet) a few years before the Tor Project’s patch broke my branch with a merge conflict, and I had to revert my patch. And now, I didn’t help the community, and I didn’t get credit for it, and no one will ever even believe me. (No, I’ve never found a 0day in Tor!)

Other stuff I do is sensitive; I would prefer not to discuss it publicly.

But most importantly: I am heavily dependent on Tor. Some people toss around the terms “free software” and “open source” as buzzwords. I actually use the source. If my life is so deeply entwined with a piece of software as it is with Tor, I want to know that code intimately. The best way to keep in touch with the code is to build from git, spend some time poking around in the code, and customize little things to my satisfaction.

P.S., DireWolfM14, this thread was actually spawned by my alt’s needs, which delayed reply to you until OP’s aneurysm/thread lock cut it off—for now. XMR got a plug in my artfully slipped-in fungibility manifesto, though the manner thereof probably won’t make XMR people much happier than BTC/AMLed-NFT maximalists.

Quote from: LoyceV on Today at 06:48:34 PM

Quote from: DireWolfM14 on Today at 03:11:35 PM

Are you guys not using the Tor repository to keep your Tor install up to date?

I'm using my Linux distro's default packages.

If that’s Debian or Debian-based, the Tor Project recommends their own .deb instead. That’s why they make it. I don’t know how it is now, but in past years the Debian tor package was poorly-maintained.

This month 111 users were eligible.

Old:

Code:

theymos
HostFat
gmaxwell
OgNasty
Vod
vapourminer
mprep
Foxpup
philipma1957
Cyrus
Welsh
ibminer
joker_josue
Pmalek
Mitchell
albon
wwzsocki
Timelord2067
jeremypwr
gbianchi
EFS
Swordsoffreedom
hilariousandco
buckrogers
Buchi-88
Lesbian Cow
willi9974
JayJuanGee
NeuroticFish
achow101
DaveF
examplens
nutildah
irfan_pak10
yahoo62278
bitbollo
pooya87
LFC_Bitcoin
o_solo_miner
mocacinno
Real-Duke
klarki
LoyceV
SFR10
Lucius
TryNinja
holydarkness
Lafu
Cointxz
AakZaki
giammangiato
buwaytress
crwth
Ale88
Kryptowerk
Vispilio
hosemary
JollyGood
igebotz
roycilik
CryptopreneurBrainboss
hugeblack
KTChampions
icopress
sheenshane
logfiles
Bitcoin_Arena
GazetaBitcoin
mole0815
bitmover
Lakai01
morvillz7z
fillippone
cryptofrka
abhiseshakana
The Cryptovator
lovesmayfamilis
DireWolfM14
notblox1
Little Mouse
inspace
Awaklara
efialtis
geophphreigh
zasad@
Rikafip
Etranger
NotATether
Stalker22
bullrun2024bro
decodx
Charles-Tim
Lillominato89
Free Market Capitalist
ZAINmalik75
AHOYBRAUSE
YodasRedRocket
PowerGlove
SirJohnVonSlotty
Mia Chloe

New:

Code:

theymos
HostFat
OgNasty
Vod
vapourminer
Foxpup
philipma1957
babo
Cyrus
Welsh
ibminer
d5000
joker_josue
Pmalek
albon
wwzsocki
Timelord2067
jeremypwr
EFS
Swordsoffreedom
hybridsole
stompix
hilariousandco
arulbero
buckrogers
Buchi-88
willi9974
JayJuanGee
achow101
DaveF
examplens
nutildah
irfan_pak10
yahoo62278
bitbollo
LFC_Bitcoin
o_solo_miner
mocacinno
Real-Duke
LoyceV
The Sceptical Chymist
SFR10
Lucius
Lafu
Cointxz
polymerbit
tweetious
AakZaki
giammangiato
crwth
Ale88
Kryptowerk
hosemary
krogothmanhattan
JollyGood
igebotz
roycilik
CryptopreneurBrainboss
hugeblack
El duderino_
KTChampions
Trofo
icopress
JeromeTash
logfiles
Bitcoin_Arena
GazetaBitcoin
tvplus006
mole0815
bitmover
DdmrDdmr
shahzadafzal
Lakai01
Husna QA
fillippone
abhiseshakana
The Cryptovator
lovesmayfamilis
DireWolfM14
notblox1
YOSHIE
inspace
jokers10
Awaklara
geophphreigh
zasad@
Rikafip
Etranger
NotATether
Stalker22
decodx
BlackHatCoiner
Charles-Tim
MrMojoRising26
Free Market Capitalist
ZAINmalik75
AHOYBRAUSE
PowerGlove
SirJohnVonSlotty
Mia Chloe

Quote from: LoyceV on October 27, 2026, 05:18:30 PM

<...>

That's crazy Grin

That just goes to show how the person behind the hack must have been so desperate. I also sometimes think most of those big exchanges receive different forms of small hacks but they don't really make announcements of security incidents if it's just a few hundreds or thousands of dollar.

The reason hacks worth millions of dollars get announced is because of the suspicious on-chain transactions of that magnitude getting noticed by different third parties way before an exchange even makes an official announcement about an incident.
If certain exchanges had a choice of hiding such security incidents, they surely would and the public would never know if there was no on-chain data to rely on.

Quote from: LoyceV on October 28, 2026, 03:23:02 PM

Quote from: DaveF on October 28, 2026, 02:40:24 PM

Do you really need to do all of that? Not knowing your setup.

Being paranoid in my offline storage has served me well so far, so I like to stick to my annoying labor intensive system Tongue

This was my take and the reason why I only moved half a coin to Neoxa, and it was one price when I decided, one price when I actually moved the coins, another price when I sold, all lower and lower, at $300 it starts relly not being worth the hassle. Probably this is also the main reason why not so many people have dumped their lukecoins, with the other being the shady exchange, but, if it were the other way around, a way to move your lukecoins without them being replayed on the bitcoin chain more bagholders would have sold already.

Well, since they seem keen on freezing 90k rewards coins for the next 180 days maybe the price will spike a bit to make the effort worthwhile, of course, temporarily, with that tiny liquidity.

@LoyceV, @NotATether,

Quote from: https://github.com/feather-wallet/feather/pull/322

Changes:

depends: tor_linux: 0.4.9.11 → 0.4.9.15. 0.4.9.12–0.4.9.15 are security releases. The hash was checked against tor-0.4.9.15.tar.gz.sha256sum, which has good signatures from Alexander Færøy (514102454D0A87DB0767A1EBBE6A0531C18A9179) and David Goulet.

Are you guys not using the Tor repository to keep your Tor install up to date?

Instructions are here: https://support.torproject.org/little-t-tor/getting-started/installing/

Quote from: ryzaadit on Today at 12:16:54 AM

saya penasaran aktivitas-aktivitas exploit apa yang bisa dilakukan oleh server yang punya niat jahat. Apakah bisa macam kayak ngasih, pops notification update yang menjurus ke fake site atau hal lainnya.^{(sorry agak ambigu)}

Saya rasa terkait niat jahat Malicious Server sudah ada keterangan ini:

Code:

Server berbahaya dapat mengganti transmisi yang baru saja disiarkan dan mencoba mengelabui pengguna agar melakukan RBF (Remote Bounded Flash) pada transmisi tersebut.

Selengkapnya disini=> https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v

Quote

Thanks om, ane coba pakai ini deh. Saya tau, walau seberapa terpercaya seseorang tetep harus subjektif mengenai hal macam ini. Tapi setidaknya agak lebih baik kalau pakai server si LoyceV karna kita tau siapa pemilik servernya + beliau juga keep up-to-date mengenai server beliau timbang pakai server lain yang kita gak tau apa² baik dari pemilik dan juga update.

Yes, terkait server milik LoyceV ini sudah menjadi solusi mentok lainnya, selain menggunakan Private Server.
Namun yang perlu dipahami adalah, seseorang yang selalu menjaga privasi biasanya akan lebih memilih untuk menggunakan Private Server. Karena sifatnya Server Publik itu bisa mendeteksi atau mengaitkan alamat-alamat BTC lain nya yang ada di Electrum itu.

Sebagai contoh, si Owo punya Wallet A dan menggunakan Public Server milik Gib. Ketika Wallet A tersebut terekspos di forum ini misalnya, dan pemilik Public Server mengetahui bahwa itu adalah Wallet A milik Owo, maka Wallet B>C>D dan seterusnya berpotensi dapat dihubungkan dengan Wallet A oleh pemilik server, apabila alamat tersebut juga diperiksa melalui server yang sama.

Quote from: salad daging on October 31, 2026, 01:25:19 PM

Ini seperti yang terjadi kasus baru baru ini oleh pengguna Reddit yang kehilangan 70.000 USD (0,85 BTC), kasus nya hampir sama setelah menaikan biaya RBF addres nya langsung ke replace sendiri meskipun di awal sudah beberapa kali cek addres nya tetap sama.

Kebetulan ini saya udah baca sebelum agan salad daging share, ada yang re-share juga di X. Grin

Quote from: Husna QA on October 31, 2026, 11:08:25 PM

Masalah terkait 'server jahat' yang menyusup di daftar server Electrum sebenarnya dulu pernah terjadi juga.

Padahal bulan² agustus pas saya nyoba Ibis Wallet, nanya² tentang list verified atau setidaknya aman untuk Electrum. Kejadian juga sekarang, saya penasaran aktivitas-aktivitas exploit apa yang bisa dilakukan oleh server yang punya niat jahat. Apakah bisa macam kayak ngasih, pops notification update yang menjurus ke fake site atau hal lainnya.^{(sorry agak ambigu)}

Quote from: Husna QA on October 31, 2026, 11:08:25 PM

Solusi yang mungkin bisa dilakukan adalah dengan menggunakan server sendiri, atau kalaupun belum memiliki server sendiri bisa dengan memilih opsi sever secara manual dan gunakan server yang disediakan user terpercaya di Bitcointalk seperti diantaranya server miliki LoyceV:
LoyceV's 0.1 sat/vbyte Electrum Server Adventure

Thanks om, ane coba pakai ini deh. Saya tau, walau seberapa terpercaya seseorang tetep harus subjektif mengenai hal macam ini. Tapi setidaknya agak lebih baik kalau pakai server si LoyceV karna kita tau siapa pemilik servernya + beliau juga keep up-to-date mengenai server beliau timbang pakai server lain yang kita gak tau apa² baik dari pemilik dan juga update.

Quote from: ryzaadit on October 25, 2026, 02:42:03 AM

Quote from: Husna QA on October 24, 2026, 10:43:31 PM

Pada versi kali ini ada cukup banyak perbaikan dari fitur-fitur yang sudah dirilis pada versi sebelumnya.
Salah satu yang menjadi perhatian saya adalah adanya perbaikan pada isu keamanan terkait 'Malicious server' yang dikategorikan tingkat keparahannya cukup tinggi (severity: high)
Penjelasannya bisa dilihat di:
https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v
(Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it)

Untuk kasus RBF, ini ada salah satu member lokal kita yang buka thread: [TANYA] Lacak BTC yang dicuri dan ini penjelasan beliau:

Quote from: asayoyaasa on October 20, 2026, 02:42:31 AM

sampe sekarang masih belum ketawan dari mana malwarenya berasal (tapi kemungkinan besar dari app electrumnya yg dicompromise). jadi sebelumnya di electrum addressnya bener address saya, tapi txnya pending locally gitu. pas fee ditambahin addressnya kereplace sama address scammer, sama persis seperti kasus dibawah ini
https://www.reddit.com/r/Electrum/comments/1ccrfop/transaction_replaced_to_scammer_wallet/
—snip—

Apakah om @asayoyaasa jadi salah satu korban dari kasus ini ? Waktu saya baca update dari om @Husna_QA langsung teringat kasus om @asayoyaasa yang di mana dia menjelaskan setelah RBF address ke replace sehingga rugi 1.2 BTC.

Sepertinya kasus yang menimpa @asayoyaasa tersebut ada kaitannya dengan 'Malicious server' yang diumumkan dan diperbaiki pada update Electrum Electrum-4.8.3 kali ini.
Masalah terkait 'server jahat' yang menyusup di daftar server Electrum sebenarnya dulu pernah terjadi juga.

Solusi yang mungkin bisa dilakukan adalah dengan menggunakan server sendiri, atau kalaupun belum memiliki server sendiri bisa dengan memilih opsi sever secara manual dan gunakan server yang disediakan user terpercaya di Bitcointalk seperti diantaranya server miliki LoyceV:
LoyceV's 0.1 sat/vbyte Electrum Server Adventure

Quote from: LoyceV on Today at 07:28:11 PM

Just click "Custom Trust list" in the links I posted, it'll show you who Trusts their judgement you there.

Oooookay, now I admit, I am fully ~~dumb~~ blind. I kept looking for that and kept looking and keept looking, because I knew how it was supposed to look like but... I just did not see it! Therefore, one precious gem for you as well

-- Oh wait... I just realized the reason... It's because you changed the UI of the website!!! Why, Marcel, whyyyyyy? (j/k)

Quote from: NotATether on October 23, 2026, 08:32:56 AM

Monero is breaking out lately.

I wonder how much of this is due to all the recent hardware hacks. The Binance hack is only likely to help even more.

Quote from: Hueristic on October 23, 2026, 03:48:07 PM

Needs to break .008 resistance and stay above for a few months to really feel like a recovery,
...
But yup USD wise it's been doing well since we got off that scum sucking shithole binance.

My BCA is hovering just under 5mBTC so it's looking good to me from all angles. But yeah, I'm still stacking.

Quote from: LoyceV on Today at 09:16:28 AM

Feather (wallet) stopped connecting through Tor.

I don't recall ever using Feather, but maybe I played with it years ago before I dedicated a ramroach to a full a node. Now I have a very robust server running a node. On my laptop I use the official Monero wallet set to "remote node" pointing to my server. I can connect to it from anywhere via VPN. On my phone I've been using Monerujo, which I can also connect to my node via VPN.

My desktop also has a full node running (I bought a 4TB nvme just before prices went crazy) so of course, I use the official Monero wallet there as well. Interestingly enough, the desktop runs monerod through systemd just like the server, and the GUI is also set to "remote node", but it points to the local host. That way the node is always syncing regardless of whether I have the GUI open or not.

Quote from: LoyceV on October 28, 2026, 01:50:19 PM

Quote from: DaveF on October 28, 2026, 01:43:20 PM

I would move them anyway. This way if the price does go back up then you are ready to sell. Otherwise you may miss it if the price spike again.

You're right, but I'm just thinking about the amount of work to securely create new storage plus backups. It's one of the things I really don't enjoy doing.

You can always derive a different set of keys from your seed using a passphrase. Like adding the "BIP-110" passphrase to your existing mnemonic to derive the keys you would use for BLuke. If your seed is strong, then it won't matter if your passphrase is weak and you won't really need to create new backups. What you have will continue to work, just remember the simple passphrase.

Apart from that, I agree that BLuke is hardly worth the effort needed to claim it. 0.003BTC for every full BTC only makes sense if you have a large amount of coins in which case you are a billionaire, it still is not worth it Cheesy

Quote from: LoyceV on Today at 05:41:32 PM

Ask jeremypwr and CryptopreneurBrainboss

Can you point to me exactly which one trusts each of shogun47 / Leviathan.007 / vivekdhyani1? I tried to seek on loyce.club but couldn't find...

Wall Observer BTC/USD Report: 2015

Scope: retained BitList WO records, including ChartBuddy. Annual figures select posts published in 2015 (UTC); merit figures include all observed later awards on those posts. This predates the merit system: these are retrospective awards, not merits sent during 2015. Annual position changes use the complete 2014 ranking with equal ranks for ties; the new-entry symbol means no qualifying activity in the 2014 comparison.

₿ Bitcoin Trend - 2015

Fig. 1. Coin Metrics daily BTC/USD reference prices. Bars connect consecutive daily observations; HIGH and LOW are reference-series extremes, not intraday trading extremes.

📈 Historical Post Trend (April 2013-December 2015)

Fig. 2. Monthly Post Volume in Wall Observer Thread

📈 Historical Merit Trend (April 2013-December 2015)

Fig. 3. All observed merits grouped by the month of the receiving post, including awards made in later years.

📊 Annual Comparison

Fig. 4. Annual Statistics Comparison

💎 Top Merited Content

1. Automated posting by ChartBuddy (+57)
2. Re: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion by LFC_Bitcoin (+10)
3. Re: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion by tarmi (+5)
4. Re: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion by TankHankerous (+1)
5. Re: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion by mrkavasaki (+1)
6. Re: Wall Observer BTC/USD - Bitcoin price movement tracking & discussion by Richy_T (+1)

📊 Correlation BTC Price ↔ Post Volume

Fig. 5. February-December 2015 (11 observations): within-month change in daily BTC/USD reference prices versus month-on-month post-volume change. The fitted curve is descriptive, not evidence of causation.

🔄 Merit Flow (Chord Diagram)

Fig. 6. Observed merit transfers on posts published in 2015, including later awards.

🏆 Top Merit Receivers

Pos	Δ Pos	User	2015	2014	Δ Merit	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	🆕	ChartBuddy	57		🆕
🥈	🆕	LFC_Bitcoin	10		🆕
🥉	🆕	tarmi	5		🆕
4	🆕	TankHankerous	1		🆕
4	🆕	mrkavasaki	1		🆕
4	▼(-2)	Richy_T	1	2	▼(-1)

📤 Top 10 Merit Senders (including ties)

Pos	Δ Pos	User	2015	2014	Δ Merit Sent	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	🆕	El duderino_	12		🆕
🥇	🆕	DirtyKeyboard	12		🆕
🥉	🆕	fillippone	11		🆕
4	🆕	Little Mouse	10		🆕
5	🆕	nutildah	8		🆕
6	🆕	LoyceV	6		🆕
7	▼(-5)	vapourminer	5	3	▲(2)
8	🆕	EFS	4		🆕
9	🆕	friends1980	2		🆕
10	🆕	HairyMaclairy	1		🆕
10	🆕	modrobert	1		🆕
10	🆕	HI-TEC99	1		🆕
10	🆕	franckuestein	1		🆕
10	🆕	blink	1		🆕

🏆 Top Posters

Pos	Δ Pos	User	2015	2014	Δ Posts	BPIP	BitList
----	----	----	----	----	----	----	----
🥇	=	ChartBuddy	8479	7547	▲(932)
🥈	▲(110)	Fatman3001	3519	225	▲(3294)
🥉	▼(-1)	adamstgBit	1527	5042	▼(-3515)
4	▲(5)	billyjoeallen	1430	1797	▼(-367)
5	▲(46)	BlindMayorBitcorn	1421	474	▲(947)
6	▲(25)	inca	1348	859	▲(489)
7	=	NotLambchop	1293	2312	▼(-1019)
8	▲(54)	LFC_Bitcoin	1256	417	▲(839)
9	▼(-5)	JorgeStolfi	1221	3355	▼(-2134)
10	▲(238 )	Sitarow	1109	105	▲(1004)
11	▲(25)	tarmi	1096	756	▲(340)
12	🆕	Cconvert2G36	1091		🆕
13	▼(-10)	JayJuanGee	894	3772	▼(-2878 )
14	▲(12)	JimboToronto	881	928	▼(-47)
15	▼(-7)	empowering	872	1830	▼(-958 )
16	🆕	peonminer	852		🆕
17	▲(395)	aztecminer	821	45	▲(776)
18	▲(10)	hdbuck	797	893	▼(-96)
19	▲(841)	Norway	743	9	▲(734)
20	▲(4)	macsga	741	988	▼(-247)
21	▲(83)	gentlemand	701	241	▲(460)
22	▲(145)	ssmc2	693	162	▲(531)
23	▲(120)	marcus_of_augustus	691	180	▲(511)
24	▲(1584)	YourMother	684	1	▲(683)
25	▲(326)	damiano	650	59	▲(591)

🏆 All-Time Top 25 Posters

#	User	Posts	%
----	----	----	----
🥇	ChartBuddy	20,024	6.9%
🥈	adamstgBit	9,250	3.2%
🥉	JayJuanGee	4,666	1.6%
4	JorgeStolfi	4,635	1.6%
5	Fatman3001	3,744	1.3%
6	NotLambchop	3,605	1.3%
7	billyjoeallen	3,230	1.1%
8	ShroomsKit	3,035	1.1%
9	fonzie	2,873	1.0%
10	empowering	2,702	0.9%
11	Richy_T	2,612	0.9%
12	seleme	2,452	0.9%
13	macsga	2,414	0.8%
14	Davyd05	2,400	0.8%
15	JimboToronto	2,330	0.8%
16	podyx	2,255	0.8%
17	inca	2,211	0.8%
18	derpinheimer	2,160	0.7%
19	TERA	2,127	0.7%
20	tarmi	2,083	0.7%
21	spooderman	2,046	0.7%
22	mmitech	1,953	0.7%
23	aminorex	1,912	0.7%
24	BlindMayorBitcorn	1,895	0.7%
25	dreamspark	1,891	0.7%

🏅 All-Time Top 15 Merit Receivers

#	User	Merits
----	----	----
🥇	infofront	675
🥈	ChartBuddy	57
🥉	adamstgBit	17
4	LFC_Bitcoin	10
5	Richy_T	9
6	tarmi	5
7	kenji	4
8	aminorex	2
9	JayJuanGee	2
10	jojo69	2
11	kkaspar	1
12	mrkavasaki	1
13	N12	1
14	polyclef	1
15	TankHankerous	1

Cumulative WO statistics for posts published through 2015-12-31 (inclusive, UTC): 288,290 posts from 3,997 accounts | 788 all-time observed merits on those posts, including awards sent in later years. Post coverage: 2013-04-16 to 2015-12-31; ChartBuddy included. Merit totals reflect the acquired snapshot, not the balance at year-end.

Quote from: LoyceV on Today at 05:17:09 PM

Quote from: NotATether on Today at 04:46:21 PM

This affects me, so I am going to direct my clanker to write a fix for this.

I don't really get it though: I use the AppImage, nothing was changed there apart from regular OS updates. So it looks like the AppImage somehow relies on something that's not included, and no longer compatible.

I'm using my build from the Ubuntu apt repos. So I'm going to try to reproduce it there, because actually Feather Wallet builds should really be reproducible from the source tree. It would be very bad if they weren't.

Quote from: NotATether on Today at 04:46:21 PM

Quote from: LoyceV on Today at 09:16:28 AM

Feather (wallet) stopped connecting through Tor.

I use Feather with Settings: "Let Feather start and manage a Tor daemon", and that worked for a long time. Since a few days, it can't connect anymore. I've tried a few different Linux distributions, and they all have the same problem, so I guess it must have been a recent update that broke this. Reddit users have the same problem.
If I set Feather to use port 9150 on my localhost, it connects through my Tor browser's connection. That works, but it should be able to connect on its own.

I couldn't find a better topic, so I'm posting it here.

This affects me, so I am going to direct my clanker to write a fix for this.

Let us know how that worked out.

Amusingly I have a feather wallet on a phone from so many years ago that I cant even remember that got corrupted on an update and i've never recovered it. So maybe i'll have a clanker give it a shot as i'm just to lazy to go to the effort for what was pocket change back then.

Quote from: LoyceV on Today at 09:16:28 AM

Feather (wallet) stopped connecting through Tor.

I use Feather with Settings: "Let Feather start and manage a Tor daemon", and that worked for a long time. Since a few days, it can't connect anymore. I've tried a few different Linux distributions, and they all have the same problem, so I guess it must have been a recent update that broke this. Reddit users have the same problem.
If I set Feather to use port 9150 on my localhost, it connects through my Tor browser's connection. That works, but it should be able to connect on its own.

I couldn't find a better topic, so I'm posting it here.

This affects me, so I am going to direct my clanker to write a fix for this.

Quote from: LoyceV on Today at 01:32:18 PM

It could be just your Tor browser settings, designed for privacy. Do other sites also log you out when switching IPs?

Yeah they actually do regardless of the site most cases whether it is a bitcointalk or altcoinstalks I'll get logged out immediately I change my server or I reroute. Infact most times I'm always very careful to make sure that I don't accidentally close my current tab else I'll have to re-login again.

Quote from: LoyceV on Today at 01:32:18 PM

I assume the forum's myips.php uses a geolocation service to get this data. I guess it doesn't know all (new) Tor exit nodes (yet).

So basically the forum actually tries to keep record of which of the IP addresses pop up more frequently than the others and mark that as original?

Quote from: LoyceV on Today at 07:27:31 AM

I use "Always stay logged in:" when logging in, and changing IP-address doesn't log me out.

Quote from: https://bitcointalk.org/myips.php

I don't know if it is settings related but that has actually been my experience with Tor. Anyways I just noticed something kinda weird on my IP log history when I checked it just now. The forum marked some IP logs as tor and a few were recognised and registered the normal way.

Well I'm curious how the forum is able to tell I'm using Tor at some point and why it's not able to register some of the visits via tor as tor visits.

Quote from: LoyceV on October 30, 2026, 04:10:35 PM

Quote from: oll on October 24, 2026, 10:15:00 AM

This is a great method because it's even better than dice in terms of entropy

I see no reason to believe this produces better entropy than just dice rolls.

Yeah, i would rather dice rolls. It's not trivial to know how random the "cpu jitter", especially if you run this OS/app on VM or run on actual old CPU without RDRAND.

@LoyceV

I would allow 3 downloads of one file, then block and release after next update.

If you could be able to do such.

I am using torrent with success so just putting an advice.

Quote from: xhomerx10 on Today at 05:47:36 PM

Quote from: goldkingcoiner on Today at 04:31:24 PM

Quote from: LoyceV on Today at 12:33:00 PM

Quote from: goldkingcoiner on Today at 10:00:01 AM

Another day of not your keys, not your coins.

I've always been curious how well ETFs protect their Bitcoins. What if someone steals $50 billion there at some point?

Best case scenario: The insurance companies will flat out refuse to pay and eventually they get bailed out by the government.

They do not have enough insurance to pay everyone nor are they required to do so. Instead, they use the best security money can buy for their stash with military-grade physical vaults, biosecurity controls and such to fiercely guard their secure pile of air-gapped, Trezor wallets that they purchased from a third-party reseller, who applied the requisite tamper-proof sticker, on Amazon. Nothing to worry about. SAFU as they say.

0h thank god. I was almost worried.

Quote from: goldkingcoiner on Today at 04:31:24 PM

Quote from: LoyceV on Today at 12:33:00 PM

Quote from: goldkingcoiner on Today at 10:00:01 AM

Another day of not your keys, not your coins.

I've always been curious how well ETFs protect their Bitcoins. What if someone steals $50 billion there at some point?

Best case scenario: The insurance companies will flat out refuse to pay and eventually they get bailed out by the government.

They do not have enough insurance to pay everyone nor are they required to do so. Instead, they use the best security money can buy for their stash with military-grade physical vaults, biosecurity controls and such to fiercely guard their secure pile of air-gapped, Trezor wallets that they purchased from a third-party reseller, who applied the requisite tamper-proof sticker, on Amazon. Nothing to worry about. SAFU as they say.

Quote from: LoyceV on October 27, 2026, 04:57:44 PM

That's what user accounts are for Wink

If someone uses my computer, it's trivial to create a new account for them. And they won't be able to install anything system-wide.

People are most times high trusting with people they share a close relarionship with. If it's not their banking app details and a few others, any other data does not compromise them and shouldn't be protected. We all use the same netfilx account, when can share a user account on a computer with no issues Grin

It is important for people to know privacy is not entirely about distrust, you will just prefer to be the only one responsible for your data and security. A mistake from someone else shouldn't cost you. And yes, do not trust still, always verify.

- Jay -

Quote from: LoyceV on Today at 12:33:00 PM

Quote from: goldkingcoiner on Today at 10:00:01 AM

Another day of not your keys, not your coins.

I've always been curious how well ETFs protect their Bitcoins. What if someone steals $50 billion there at some point?

Best case scenario: The insurance companies will flat out refuse to pay and eventually they get bailed out by the government.

Quote from: LoyceV on Today at 07:50:19 AM

e]
Every time again, I'm surprised by the amount of money they keep in hot wallets. Do they really have regular withdrawals that justify such amounts and can't have someone who withdraws a billion in crypto wait a bit for manual cold wallet approval?

I'm kinda sick of tech dorks being lax about security and ruining the day for thousands or even millions of people when the inevitable happens. If it's not crypto, it's PII. And all that ever happens is a slap on the wrist from some class action.

Quote from: LoyceV on Today at 08:02:23 AM

Who's using their real IP-address when buying Monero? Do those people really exist?
I know, it's a rhetorical question, but I want to point it out anyway. If you go through the hassle of getting a privacy coin, at least make sure you use it properly. Tor Browser is very easy to use.

Beginner's question, but is XMR only used for privacy concerns?
Is it possible for someone to buy/sell XMR because of the trading potential? I believe that in that case, for most transactions, revealing the IP address is not too much of a concern for such people.

Quote from: dkbit98 on October 29, 2026, 10:55:48 PM

Quote from: *Ace* on October 29, 2026, 08:52:52 AM

Surely someone will have the wrong localboard flag, but they will only have it if the post counts are similar on two localboards. For many users, you will not see the flag because they do not reach the minimum count to get the badge. Others probably don't have a real localboard and post occasionally on various localboards that one day may appear as German, another day French or Spanish. It will be difficult to find a right compromise

So far everything is shown correctly.
I tested in our local board, and I check other members that are known for activity in their local boards.

Quote from: LoyceV on October 29, 2026, 09:19:33 AM

Which flag do I have? Can I have + ?

I can confirm that you don't have any flag LoyceV, but maybe Acve can give you black flag with pirate skull instead 🏴‍☠️ Cool

Captain Loyce Sparrow. I can give you the flag, but I don't have the Black Pearl.

Back on topic, if you find someone who doesn't have the right flag, tag them in this thread and I'll fix it either manually or find other solutions.

First of all, thank you so much for the help you give me day after day.

Quote from: OutOfMemory on Today at 08:27:29 AM

Quote from: LoyceV on Today at 07:50:19 AM

Quote from: shahzadafzal on Today at 02:59:22 AM

“BREAKING: Estimated $5.7 billion stolen in hack of world's largest exchange Binance“

Every time again, I'm surprised by the amount of money they keep in hot wallets. Do they really have regular withdrawals that justify such amounts and can't have someone who withdraws a billion in crypto wait a bit for manual cold wallet approval?

Just last week:

Quote from: LoyceV on October 27, 2026, 05:18:30 PM

Two days ago, there was a security incident at the Dutch exchange Bitonic. It's the oldest Dutch exchange.
Today, Bitonic's CEO talked about it in BNR's Cryptocast. The hackers used a vulnerability in their PDF document upload, and withdrew small amounts of Bitcoin from 3 accounts. Total amount stolen: €200.

Quote

A Binance hot wallet was drained via EIP-7702 and about $2.8B moved out.

11 hours old news.
Wait, what is EIP-7702?
A short www search revealed: Ethereum and smart contracts. Again?! Roll Eyes

So Bitcoin doesn't care?

The bad news is that the SAFU fund of Binance is held in BTC, so there may be a greater dip coming.
Second, if the SAFU doesn't cover all the losses, Binance will likely see a lot of sells and outflows.
This may be the dip everbody waited for, no?

EDIT: In other news: $5,8 Billion stolen in "crypto". Has anyone found info on which crypto(s)?

Attack vector is said to have been a stolen laptop from a tech.
Know the old saying? The worst error is the one that sits in front of the screen? Wink

According to Watcher.Guru:

"BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen:

• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies

This is the largest hack in crypto history."

https://twstalker.com/WatcherGuru/status/2115922259739349132

Quote from: LoyceV on Today at 08:46:07 AM

Quote from: OutOfMemory on Today at 08:27:29 AM

Wait, what is EIP-7702?
A short www search revealed: Ethereum and smart contracts. Again?! Roll Eyes

Ever since "The DAO", it was obvious to me "smart contracts" are pointless if it means trusting something you don't understand. The only one who understood the contract, was called "the attacker". I don't even get why people kept trusting and hyping that centralized shitcoin after it abandoned their USP "code is law".

Quote

EDIT: In other news: $5,8 Billion stolen in "crypto". Has anyone found info on which crypto(s)?

From the news I've seen, it's a few billion in stable coins, which are frozen already because they're completely centralized.

Quote

Attack vector is said to have been a stolen laptop from a tech.
Know the old saying? The worst error is the one that sits in front of the screen? Wink

The worst error was giving a single laptop access to crypto worth billions.

I would say the attack vector was probably CZ. He has been involved in a lot of shady stuff and this whole got hacked because of a single laptop story does not really seem realistic to me.

Another day of not your keys, not your coins.

Quote from: LoyceV on Today at 08:46:07 AM

Quote from: OutOfMemory on Today at 08:27:29 AM

Wait, what is EIP-7702?
A short www search revealed: Ethereum and smart contracts. Again?! Roll Eyes

Ever since "The DAO", it was obvious to me "smart contracts" are pointless if it means trusting something you don't understand. The only one who understood the contract, was called "the attacker". I don't even get why people kept trusting and hyping that centralized shitcoin after it abandoned their USP "code is law".

Quote

EDIT: In other news: $5,8 Billion stolen in "crypto". Has anyone found info on which crypto(s)?

From the news I've seen, it's a few billion in stable coins, which are frozen already because they're completely centralized.

From what i have found so far, i could not tell if the 2 billions were included in the $5.8bn.

Quote

Attack vector is said to have been a stolen laptop from a tech.
Know the old saying? The worst error is the one that sits in front of the screen? Wink

The worst error was giving a single laptop access to crypto worth billions.

Without further (or with too weak) security measures.

Quote from: LoyceV on Today at 07:50:19 AM

Quote from: shahzadafzal on Today at 02:59:22 AM

“BREAKING: Estimated $5.7 billion stolen in hack of world's largest exchange Binance“

Every time again, I'm surprised by the amount of money they keep in hot wallets. Do they really have regular withdrawals that justify such amounts and can't have someone who withdraws a billion in crypto wait a bit for manual cold wallet approval?

Just last week:

Quote from: LoyceV on October 27, 2026, 05:18:30 PM

Two days ago, there was a security incident at the Dutch exchange Bitonic. It's the oldest Dutch exchange.
Today, Bitonic's CEO talked about it in BNR's Cryptocast. The hackers used a vulnerability in their PDF document upload, and withdrew small amounts of Bitcoin from 3 accounts. Total amount stolen: €200.

Quote

A Binance hot wallet was drained via EIP-7702 and about $2.8B moved out.

11 hours old news.
Wait, what is EIP-7702?
A short www search revealed: Ethereum and smart contracts. Again?! Roll Eyes

So Bitcoin doesn't care?

The bad news is that the SAFU fund of Binance is held in BTC, so there may be a greater dip coming.
Second, if the SAFU doesn't cover all the losses, Binance will likely see a lot of sells and outflows.
This may be the dip everbody waited for, no?

Quote from: *Ace* on Today at 08:52:52 AM

Surely someone will have the wrong localboard flag, but they will only have it if the post counts are similar on two localboards. For many users, you will not see the flag because they do not reach the minimum count to get the badge. Others probably don't have a real localboard and post occasionally on various localboards that one day may appear as German, another day French or Spanish. It will be difficult to find a right compromise

So far everything is shown correctly.
I tested in our local board, and I check other members that are known for activity in their local boards.

Quote from: LoyceV on Today at 09:19:33 AM

Which flag do I have? Can I have + ?

I can confirm that you don't have any flag LoyceV, but maybe Acve can give you black flag with pirate skull instead Cool

Quote from: eddie13 on Today at 03:01:20 PM

I mean, if its possibly winnable I think it would be a good use of 5-10 BTC of forum funds to take it as far as possible in court..
But idk if theymos is trying to stand up against any of this, or lay low under the radar..

Legal fights do require a lot of money and this Forum does have it, but few people can handle the stress of going against the State it self in court. I tend to agree with LoyceV, this would put him under real personal stress. My brain says go for it, but I do not think theymos deserves that level of stress in his personal life.

Because this looked like a rather preventive measure than a decision he was told or forced to make by surrounding laws, by a warning letter or what ever, I do not know if it is YET worth fighting it. This could be a situation where he significantly de escalated a situation, preventing the worst, and a court case would blow up things instantly.

I do not know that much about theymos but he is clearly not wanting to speak on the subject in too much detail, so I tend to think the situation was worrying enough that backing off seemed like the better choice?

The thing is. Enough time has passed that most people do not even care whether Mixers will ever be back. Not only this, but most replies I read say about how bad Mixers are and that they are useless any way. Which also means the chances are low that theymos ever sees a ban removal even worth considering, because why fight for some thing that is not even wanted on here any more, particularly when allowing them here sounded like a pretty risky choice at one point.

Quote from: LoyceV on Today at 05:47:32 PM

Quote from: eddie13 on Today at 03:01:20 PM

Is this a legal fight bitcointalk absolutely cannot win?
~
And a 2-3 year long court battle would make a good interesting thread..

I'm not sure what the forum's legal structure is, but I guess that would also mean 2-3 years stress and uncertainty for Admin on a personal level. I'm pretty sure Admin enjoys the technical side of Bitcoin a lot more.

I agree. I dont think bitcointalk should be defending the business model of third party business. It is up to those services to defend their models... once they are safe for the forum to advertise, bitcointalk could advertise them again.

Quote from: LoyceV on Today at 09:19:33 AM

Quote from: *Ace* on Today at 08:52:52 AM

Surely someone will have the wrong localboard flag,

Which flag do I have? Can I have + ?

You don't have any flag. You're homeless. Cheesy

Are you Swiss? Or do you just like Switzerland? 90% of my family members live in Switzerland.

Quote from: LoyceV on Today at 09:38:46 AM

Guess you didn't get the memo, but Meta is the worst possible place to rehash on someone else's topic.

Whats worse is it appears to be an AI generated rehash... That's two memos he missed.

Quote from: LoyceV on Today at 03:28:24 PM

Hover your mouse above LOGOUT or quote, or the row with "unwatch" at the top/bottom of each page. Easiest: click quote, copy from URL.

And I got logged out from everywhere (including the device where I inserted that sesc code). Just great! But it worked, that's all that matters.

Quote from: nullius on Today at 03:36:43 PM

The difference in links appears to be action=logout to logout, and action=login2;sa=salt to destroy all sessions except the current session.

Even current session got obliterated. Had to re-login everywhere! I used this URL: https://bitcointalk.org/index.php?action=login2;sa=salt;sesc=insertYourSessionCodeHere

Quote from: nullius on Today at 03:36:43 PM

When this sporadically occurs, it seems to me to be worse for database-write operations (such as making a new post). Am I the only one?

(To my prior remarks, I add a fifth hypothesis: A sudden, massive increase in DDoS attacks against many sites. I think it seems less likely than other hypotheses, but worth mentioning.)

I don't think you are the only one. I was also having similar sudden slowness problems. First I thought it might be related to too many images on the threads I was visiting (you know like in some threads that contains many images, and then it starts loading slow). But that wasn't the case here. Every other pages were also slow. Just not like before.

Quote from: LoyceV on Today at 03:28:24 PM

Quote from: DYING_S0UL on Today at 03:08:05 PM

Now, from where/how can I obtain my session code again?

Hover your mouse above LOGOUT or quote, or the row with "unwatch" at the top/bottom of each page. Easiest: click quote, copy from URL.

Scooped me with Warning - while you were typing a new reply has been posted. You may wish to review your post. Tongue

Quote from: nullius on Today at 02:02:03 PM

Please note, that is not the ordinary logout link. So, logging out is not enough. The logout button is:
https://bitcointalk.org/index.php?action=logout;sesc=insertYourSessionCodeHere

Quote from: DYING_S0UL on Today at 03:08:05 PM

Quote from: LoyceV on Today at 12:10:23 PM

Quote from: theymos on February 20, 2026, 09:18:23 PM

https://bitcointalk.org/index.php?action=login2;sa=salt;sesc=insertYourSessionCodeHere

Now, from where/how can I obtain my session code again?

Many places. The easiest way is to right-click on the logout button in the top menu bar, and copy the link.

The difference in links appears to be action=logout to logout, and action=login2;sa=salt to destroy all sessions except the current session.

Quote from: DYING_S0UL on Today at 03:08:05 PM

Quote from: nullius on Today at 02:02:03 PM

Given weird slowness and sporadic failures as observed,

So I wasn't the only one? I also noticed this the other day.

When this sporadically occurs, it seems to me to be worse for database-write operations (such as making a new post). Am I the only one?

(To my prior remarks, I add a fifth hypothesis: A sudden, massive increase in DDoS attacks against many sites. I think it seems less likely than other hypotheses, but worth mentioning.)

Quote from: LoyceV on Today at 12:10:23 PM

This post suggests that logging out is enough to invalidate all active sessions:

Quote from: theymos on February 20, 2026, 09:18:23 PM

https://bitcointalk.org/index.php?action=login2;sa=salt;sesc=insertYourSessionCodeHere

Visited that URL without inserting any session code, and it gave me a "Session verification failed" error.

Now, from where/how can I obtain my session code again?

I would appreciate if you could enlighten me.

Quoted!

Quote from: philipma1957 on Today at 03:06:51 PM

So I altered password.

I found myself signed out of all devices I was signed into.

2 tablets
4 mac minis
1 mac studio

And the new password is long and random.

Here is hoping that was good enough.

I will not do any sales or buys on forum until next year.

I would ask for a quote of this. Thanks.

Quote from: LoyceV on Today at 01:50:19 PM

Quote from: DaveF on Today at 01:43:20 PM

I would move them anyway. This way if the price does go back up then you are ready to sell. Otherwise you may miss it if the price spike again.

You're right, but I'm just thinking about the amount of work to securely create new storage plus backups. It's one of the things I really don't enjoy doing.

Do you really need to do all of that? Not knowing your setup.

In theory all you need to do is move your coins with a TX that would not be valid on the 110 chain. Then you wait. If 110 goes up then you just import the old keys into a 110 client and send them off to an exchange.

-Dave

Quote from: LoyceV on Today at 12:10:23 PM

This post suggests that logging out is enough to invalidate all active sessions:

Quote from: theymos on February 20, 2026, 09:18:23 PM

https://bitcointalk.org/index.php?action=login2;sa=salt;sesc=insertYourSessionCodeHere

Wow, that’s an interesting thread: Hidden pages/ features on the forum. Bookmarked to read in detail later!

@theymos, please clarify re OP?

Quote from: LoyceV on Today at 12:10:23 PM

OP suggests that requires a password change:

Quote from: theymos on October 22, 2026, 03:00:13 AM

it wouldn't hurt to change your password (mainly just to invalidate all of your sessions).

Quote from: Cryptoprincess101 on Today at 12:14:39 PM

Your first hypothesis could be true since theymos upgraded PHP. About your second hypothesis, could it be true? even after Cloudflare blocked the attacks?

I suggested that perhaps, emergency WAF rules that Cloudflare designed in a hurry may themselves have unintended failure cases. Though I’d expect that by now, Cloudflare has had more than adequate time to find any such bugs in their own code. As a diagnostic brainstorm, I’m just trying to think of all possibilities.

Quote from: Cryptoprincess101 on Today at 12:14:39 PM

For your third hypothesis, theymos has already stated that all the attempt failed, except there is new vulnerability that he didn't notice but I don't think so because theymos will sure be at alert after that first attempt happened.

There is no absolute certainty here. I don’t want to FUD the forum’s security; I just allow a proverbial 1% or 0.1% chance that an attacker may have persistent access. Given weird slowness and sporadic failures as observed, I’d lean toward the 1% chance. Of course, there is always some nonzero chance of this on any website.

Quote from: LoyceV on Today at 01:21:30 PM

Quote from: stompix on Today at 12:31:41 PM

So, finally starting to crumble?

The price isn't worth the effort of moving my coins anymore. In cases like this I always regret my offline setup that doesn't allow to act quickly.

I would move them anyway. This way if the price does go back up then you are ready to sell. Otherwise you may miss it if the price spike again.

Quote from: stompix on Today at 12:31:41 PM

So, finally starting to crumble?

I just briefly checked their Discord, it seems like they are all over the place with how they want to govern it, and seemly Luke has a contrary opinion..
Might it be that he and Convoy have bot a ton of miners and the punishment proposal would punish him also?
Quite funny the most "centralized" mining pool is Convoy itself, lol!

But, I have to admit, some of the tools they have are funny:
https://cesspool.lol/

Quote

Last 24 hours 64.37% of block space taken by sewage

Except for the person who keeps posting the same images in the blocks time after time I don't see anyone else really doing anything.

As for everything else. Luke probably got a bunch of money from all the things he has been doing with the coin and at this point probably does not care that much. I could be wrong but who knows.

-Dave

Per the below discussion, this incident suggests a feature request: A “logout all” button, which kills all of a user’s active sessions on the server side.

Most high-security sites nowadays have a page where you can view all active sessions, the date, time, and IP address that created each session, kill sessions, and kill all sessions. It would be faster and easier to implement a simple “please destroy all active sessions, including this one” button.

Use case: I want to clear old sessions routinely, but not to make frequent password changes.

Quote from: Quickseller on October 27, 2026, 09:19:37 PM

PHP is a much more complex system than PGP or other cryptography algorithms, so theres less a chance a vulnerability exists [in PGP].

I think that it’s less a question of complexity, and more one of competence. PHP is, and always has been a mess. And its shit code is deeply embedded in the infrastructure of the Web. There’s no easy way for theymos to stop using PHP, unless he wants to pay me big BTC for a new new forum project I will probably never deliver. That would(n’t) work!

Quote from: nullius on April 12, 2021, 12:53:38 AM

The project is called Nulltalk, because its distinguishing innovation shall be that it autobans all users, and stores all posts in the /dev/null NoSQL database. Thus, there shall be no talk. Silence!

As for cryptography, let’s put it this way: Could a frontier LLM have discovered the catastrophic (Castryck and Decru, 2022) key recovery break of SIDH, which was based on an obscure mathematics paper (Kani, 1997) that cryptographers simply hadn’t noticed before 2022? For better or for worse (and I think it’s for the worse), after the September 2026 mathematical news, I would not bet no.

It is not that “AI is smart”, but an LLM has an enormous capacity to search stores of human knowledge. And note to newbies: You will not get results prompting a chatbot. For its September 2026 discoveries, OpenAI spent many millions of dollars on computational cost—with a model they haven’t yet made available to the public in any way.

Quote from: Quickseller on October 27, 2026, 09:19:37 PM

I believe an attacker could also have either created new sessions or obtained sufficient information to impersonate someone using an active session. This would allow them to impersonate someone after the fact until the session is invalidated.

Indeed...

Quote from: theymos on October 22, 2026, 03:00:13 AM

change your password (mainly just to invalidate all of your sessions).

...but in my case, I think I had no active sessions. I distinctly recall that my last long-term login cookie’s expiry was in 2023; does cookie expiry match server-side expiry?

As you note, an attacker could have created new sessions—which a password change would invalidate. This could even affect, say, an acknowledged alt of mine that hasn’t logged in since 2018.

For the time being, I have also stopped using long-term login cookies. It’s inconvenient.

Quote from: Quickseller on October 27, 2026, 09:19:37 PM

This would be a lot cheaper than trying to reverse the hash of a password that has an unknown complexiety.

In 2017, I created my account with a 30-char alphanumeric random password; that’s infeasible to hashcat, even if the password database used unsalted MD5. It’s now changed to >30 chars, with new code I wrote that builds a base-62 string from getrandom(2) output with no modulo bias.

YMMV. When password managers exist, why does anyone use a password with <128 bits of min-entropy? (See also.)

Quote from: LoyceV on Today at 06:38:14 AM

Quote from: Cryptoprincess101 on Today at 03:23:29 AM

Every since the PHP attack, I have been experiencing this error where Cloudflare is unable to communicate with the forum's web server.

Shortly before you posted this, my scraper failed some of it's attempts. That usually means the forum can't be reached.
I've seen this screenshot on many sites in the past week.

I have noticed that the forum seems sometimes very slow. This perception is qualitative, not quantified. Does this match anyone else’s perception?

Four hypotheses:

PHP emergency patch is buggy.
Cloudflare’s emergency WAF rules (which only partly mitigate this 0day) are buggy.
Attackers gained persistent access to many sites, including the Bitcoin Forum.
New 0day.

My apologies to everyone, I’m way behind on about a half-dozen threads. Besides other distractions, my forum-fu is rusty.

Quote from: LoyceV on October 20, 2026, 11:58:18 AM

I can't help but feel that needing hardware to verify hardware makes it more appealing to go back to basics: verifying your own blockchain and using your own cold storage.

But it is more appealing. You do not rely on storage space for 'Applications', on new updates and whether they will include a way to extract the Seed over the Internet, on proprietary software and hardware particularly designed for a Bitcoin Wallet et cetera.

It is only less comfortable and makes you look basic. I suppose many prefer to simply be less basic?

Quote from: DireWolfM14 on Today at 04:41:04 PM

Quote from: https://bitcointalk.org/index.php?action=trust;u=2746694

LoyceV

2024-10-10

Reference

Chat bot spammer. Don't waste your time interacting with it.

Quote from: Sg4j1n3ll0 on Today at 03:47:48 PM

The need arises to create an incentive—provided by someone—that encourages the creation of higher-quality content within the various sections. By offering a reward, users are motivated to start high-quality threads, which in turn fosters high-quality discussions and helps to repopulate the forum.
P.S. The certificate is on its way.

What data are you collecting when users visit the site, and what are you going to do with it?

I am trying to put in the effort for this as well; I hope that initiatives like these might also change how I am perceived.

Quote from: *Ace* on Today at 06:53:58 PM

This will in no way act as an anti-farm or alt-account filter. Because if a farm has 3 or 4 accounts on Bitcointalk, they can just as well use those accounts individually to vote.
To limit the problem, you should save the IP addresses of all the profiles generated, but even that is easy to bypass with a little care.

The idea is not bad anyway, but I would do it differently, without using external sites, maybe using a browser extension and take data like red trust to exclude alt farms

That’s exactly the idea—to create something along those lines. It started as a way to gather ideas, but now it’s evolving into something like a script that you can "wear" [use/apply] to support the forum.

Thank you all for the interest shown; I hope to improve and create something that truly provides support for Bitcointalk.

Quote from: https://bitcointalk.org/index.php?action=trust;u=2746694

LoyceV

2024-10-10

Reference

Chat bot spammer. Don't waste your time interacting with it.

Quote from: Sg4j1n3ll0 on Today at 03:47:48 PM

The need arises to create an incentive—provided by someone—that encourages the creation of higher-quality content within the various sections. By offering a reward, users are motivated to start high-quality threads, which in turn fosters high-quality discussions and helps to repopulate the forum.
P.S. The certificate is on its way.

What data are you collecting when users visit the site, and what are you going to do with it?

Quote from: DYING_S0UL on Today at 02:24:50 PM

Quote from: *Ace* on Today at 02:00:37 PM

I've implemented a userscript. I've created a notification center where I aggregate all notifications for merit received, post quotas, and mentions in posts.
I need someone to offer to be a tester, I just need someone to make a post quoting one of my posts, and another where they mention my username, a simple hello *Ace* would be enough. Thanks to those who volunteer

This yours? Huh

It works, but there are some weird numbers showing up! Perhaps, it's due to the local board/section, the subject/title is in "Bangla" language, which may have been incorrectly converted/fetched?
Actually this has happened with other bots as well. Sometimes they would mess up the title, show broken like texts and all. This was the post: https://bitcointalk.org/index.php?topic=631891.msg67281721#msg67281721

I'm pretty sure, everything is alright with the global section.

Btw, you planning on replacing the notifier bots? Lmao! Someone got a competition. Roll Eyes

Lastly, it works for someone "quoting" and someone using "@" as well?

Quote from: Royal Cap on October 27, 2026, 02:42:18 PM

@*Ace* (I intentionally didn't mention you in quotes, Instead I mentioned you with @)

Thanks to both of you for the tests. And also to LoyceV who wrote hello *Ace* and then deleted the post. The script works but obviously and as usual it is full of bugs LoL the quotes arrive but the mentions do not, even the Merit are notified.
Mine will not be a tool that will replace the Telegram bot but it will simply serve to have everything available when you are connected to Bitcointalk

I'll make some adjustments this evening, especially the feedback you've given. Thanks again.

Quote from: LoyceV on Today at 06:19:09 PM

Encrypt your data.

Ok noted!

Quote

That would be very annoying on mobile, when my IP switches a lot.

I totally forgot about this one. But there are other fingerprints, right? To identify a device!
Ignoring the IP switching, we can look at device info, time, location and maybe like browser or operating system information...

How about device bound sessions? Will that work? Afaik, even if attacker steals the cookies, he still needs a private key! CMIIW anywhere!

Quote

I tend to switch once in a while. My suggestion: just try a few, and see what works for you.

Always wanted to try Arch! No idea why people keep saying I use Arch BTW! So far, I have tested, Mint, Ubuntu, RedHat, Kali Linux, Manjaro, Zorin and lastly Garuda.

I used to do something similar when I was into cracking (as a hobby), to watch series on Netflix/Amazon Prime without actually paying for it. Tongue

(It's probably illigal right?)

So there we had this checker and the logs collected from certain cracking community/forum/TG groups. And when we fed that into the checker, it checks for valid cookie seesions. Then we take that cookie, load it into the cookie editor (an extension found in Chrome/Mozila store), and visit the targetted site. And there we were, watching movies.

So yeah, it seems the same concept applies here! Info stealer malwares steals your logs or you expose it some other ways (cookies, login credentials etc), and checks it's validity! And illigally takes over that session.

Quote from: LoyceV on Today at 04:06:51 PM

Old-fashioned brick-and-mortar burglary.

Is there no way to prevent cookies from being used that way?

Like a countermeasure where the site actually checks whether the cookies being used originated from the same device/browser/system/IP address/environment?

Quote

Don't run Windows Wink

Which distro are you using? Just being curious. Roll Eyes

Quote from: LoyceV on October 24, 2026, 11:50:39 AM

Quote from: Welsh on October 23, 2026, 09:47:32 PM

Quote from: snipie on October 23, 2026, 07:20:57 PM

Any idea how many forum members changed their passwords recently?

You can check: https://bitcointalk.org/seclog.php

If you want to compare with older data: see my seclog log.

Thank you Welsh and LoyceV.
From what I see, only a minority of active members of the forums who decided to change their password.

This metric is good if there’s a proper distribution of merit sources on each board.

Let’s remove the gambling board for the sake of discussion and focus in local board merit distribution alone. You will easily have an understanding that users that belong to a local board with a high merit transfer rate often gain the highest merit compared to user from local board with low merit transfer rate.

Apply it to other board situations, then you will get the inequality on merit distribution. There’s also the reputation, gang, friends and other connection factor that usually makes users get much easier merit compared to normal users. Like LoyceV saying 1-liner troll can easily get merit while other users doing it will be judged as spammer.

Point being said here is there’s no way to measure how quality the user post it using these metrics instead of manually reviewing it. Same as campaign manager should be doing before they pay user post because if you are still finding someone to ban then it means they are not doing their job.

Gambling is the most under-merited board based on the total post and merit ratio. I know there’s a lot of useless post in there but maybe it’s the product of lack of merit to motivate quality posters to hang in there to gain merit as it was considered a no merit board. Why not introduce more merit sources to motivate users to create quality content there instead of focusing to other board that has over flowing merit already.

Quote from: LoyceV on Today at 08:47:08 AM

Quote from: OrangeFren on October 23, 2026, 10:52:12 PM

Who in their right mind sends $913k in an anonymous privacy coin to an anonymous service? Even if they would have downloaded the Letter of Guarantee, that would be a ridiculous risk.

We see some of our users do big swaps quite often, but never does someone send $400k, not wait for it to clear and then send another $400k.

Considering this oddity, and the lack of a Letter of Guarantee, my belief is it's just a smear campaign by a competitor.

Quote from: NotATether on Today at 08:55:36 AM

Quote from: LoyceV on Today at 08:47:08 AM

Who in their right mind sends $913k in an anonymous privacy coin to an anonymous service? Even if they would have downloaded the Letter of Guarantee, that would be a ridiculous risk.

They should show the letter, because otherwise I'm calling bullshit.

There's way too many people claiming to have "lost funds" sending money to these platforms, without providing the letter of guarantee (sometimes, they don't even download it). It's on them to provide the evidence of that! DMing big accounts on Twitter to post about it does not count.

Yep...

Quote from: LoyceV on Today at 08:47:08 AM

Who in their right mind sends $913k in an anonymous privacy coin to an anonymous service? Even if they would have downloaded the Letter of Guarantee, that would be a ridiculous risk.

They should show the letter, because otherwise I'm calling bullshit.

There's way too many people claiming to have "lost funds" sending money to these platforms, but it's on them to provide the evidence of that! DMing big accounts on Twitter to post about it does not count.

Quote from: LoyceV on October 25, 2026, 07:35:19 AM

Great. Now thiefs will steal your seed phrase even without knowing it's a seed phrase.

Well, if you leave a gold washer out in plain sight where it’s gleaming brightly, someone is bound to steal it, and that thief might not necessarily be an outsider.

An intruder doesn’t have time for an extensive search, so they’ll typically just grab whatever is left lying around in plain view.

You could always disguise a gold item by blending it into your decor or everyday household objects. The only catch is making sure you don’t forget about it yourself, and that you’re still able to track down your own "hidden treasure" later on.

Quote from: Cricktor on October 25, 2026, 11:41:38 AM

[smartass]
Definitely not easy to source (especially as washers), too expensive, too low melting point, too precious on its own, very likely melts in a house fire.

What’s stopping from casting your own washers (or any other shape)? You can buy material from a pawn shop as scrap metal, though keep in mind that the fineness (purity) of gold items can vary, which, in a sense, already counts as an investment (and a form of diversification).

I am, of course, exaggerating a bit, but it is always possible to find an optimal (accessible) solution (in terms of materials and formats for storing seed-phrase) that is tailored to each individual’s specific needs.

Quote from: Cricktor on October 25, 2026, 11:41:38 AM

Yes, I know, you were joking. Grin Let's go for Platinum washers: more expensive, more inert, higher melting point than Titanium, less conspicuous color than gold! And don't ask for Tungsten, not "noble" enough.

Why not?

It might be a bit harder to track down this metal, though.

But then again, the advantages mentioned more than make up for any extra effort.

Quote from: LoyceV on October 25, 2026, 12:39:05 PM

I'll make a deal: if someone gives me a 2 mm thick plate of pure gold, I'll drill out the washers for them. All I ask is to keep the saw dust.

Aim higher: take the leftover pieces from the cutting process, too. Wink

Quote from: DireWolfM14 on Today at 03:21:50 AM

4140 Chromoly washers are common, and have melting point of over 1400° C. Although the corrosion resistance of steel is rather poor, there is a practical solution (pun intended) that can be applied at home. Parkerization is the treatment applied to almost all military grade rifles, and is significantly more corrosion resistant than untreated steel. It builds a thin layer of manganese phosphate on the surface of steels that slightly hardens the shell, and since it chemically bonds to the steel, it protects against rust if done right.

Parkerizing solutions are easy to source, and the whole process is very affordable if you already have an outdoor twin-burner stove. I don't recommend doing it in-doors. Although not harmful to your health, the process requires boiling the solution and the steam can discolor typical household items found in a kitchen.

You’re right; one can look to industrial practices used to protect metals from corrosion. I believe galvanization, using an electrolyte to deposit a thin layer of another metal (for instance, gold, which would reduce the amount of that expensive metal needed) has, it seems, already been mentioned. In short, there are many methods, and the choice depends on your skills and the availability of materials \ tools.

Quote from: DireWolfM14 on Today at 08:02:45 PM

Ah, yes, the old "I can't pay my loan on time because my account got hacked" bit. Got it.

Yes, shockers, shit fucking happens. I paid it off in the end, and once I get my account back, I will have LoyceV tagging my main account barring it from ever taking a loan. Hell, why don't you? I wouldn't mind either way lol.

Quote from: DireWolfM14 on Today at 08:02:45 PM

Now I'm going to cry in the corner because you don't respect me. Roll Eyes

I'll bring a towel so you don't wet yourself with your tears xD.