NXT :: descendant of Bitcoin - Updated Information

[newcn]

Paulc
how much did you lost?
I lost about 18k nxt!

[utopianfuture]

This is the thread started by epicdices owner:

https://asktom.cf/index.php?topic=356282.0

I made a note in his thread https://asktom.cf/index.php?topic=356282.msg4263313#msg4263313

[S3MKi]

Paulc
how much did you lost?
I lost about 18k nxt!

about 7000 i think

[PaulyC]

Yea i saw that.. that hurts man, mine was a total loss of 7808, hurt a lot, i bought slowly over time since Dec. 21st. but I still love this currency!

[S3MKi]

What to do if other users have false client?

[rickyjames]

Ok here are the two zip files in one file.
The bigger one is the one I DLed from Nextcoin.org and used when my NXT were stolen. the smaller one I believe was the one posted on the front page?

DO NOT USE THIS FILE FOR NXT:
https://mega.co.nz/#!lZQBXQqK!EpQQbx9uBy9gcQe7-vc8smWDwHcM7LBODbtoCpKNXNo

Got it. The bogus client is in the link. Can someone check where is the modification ?

You have got to be absolutely fricking kidding me.  I have downloaded from mega.co.nz on Tues and walked it over to my nice sterile laptop....  

Excuse me while I go do an emergency client download from a trusted source and move my NXT to a new account with a zillion character new passcode....

And when this all settles down I'm going to bring up again a few more dozen times the idea of implementing a withdrawal freeze code....

[newcn]

PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history,  
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:

Code:

 
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

162.243.246.223 looks like it is "epicdices.com" (http://domain-kb.com/www/epicdices.com)
Owner of epicdices - EpicThomas - is a member of this topic:
https://asktom.cf/index.php?action=profile;u=172850;sa=showPosts

Thank you very much for the information!

[PaulyC]

How about just renaming the *correct client, posting it on Page 1, and saying don't use 4.8 at all? or is that too drastic?

[rickyjames]

Now that we seem to have figured out this breach, we need to warn anybody that downloaded that version, but I guess we can't broadcast message yet...

P.S. also maybe a bounty to PaulyC of 7808 NXT for finding this?

I made a pact with Intel to publish news at http://info.nxtcrypto.org/, and this is news.  I will be typing something up for submission ASAP.  If you want to keep a lid on it, good luck with that.

Absolutely PaulyC should be made whole via bounty fund.

[intel]

There is not so much information in the internet about evildave + bitcoin. I found something interesting, some evildave speaking dutch used the service "www.happycoins.nl" to buy bitcoins. He paid using paypal.

Here is the quote from his feedback (translated from dutch):

http://www.trustpilot.gr/review/www.happycoins.nl?page=3

I am very satisfied with the services of Happy Coins, definitely recommended.
They are one of the few mogelikheiden to buy via PayPal, and my experience with a fairly large purchase Bitcoin Bitcoin their was just okay.

Only downside was that it took a little longer to get nearly 90 minutes, the Bitcoins on my wallet, but that was a very busy period.

Original
 

HappyCoins: bijna perfecte ervaring met Bitcoins kopen

Ik ben zeer tevreden met de dienstverlening van HappyCoins, zeker een aanrader.
Ze zijn een van de weinig mogelikheiden om Bitcoin in te kopen via iDeal, en mijn ervaring met een vrij grote Bitcoin aankoop bij hun was gewoon goed.

Enige minpunt was dat het heeft wat langer geduurd om de Bitcoins op mijn wallet te krijgen, bijna 90 minuten, maar dat was wel in een hele drukke periode.

So, it's worth to contact with happycoins.nl and get his data.

[salsacz]

PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history, 
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:

Code:

 
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

please check your browser history to find which page you used for the download - where did you find a link?

[jl777]

rickyjames,

I wasn't saying we should cover it up, I was saying that the feature to broadcast messages to all NXT clients is not there yet.

James

[mnightwaffle]

Ok here are the two zip files in one file.
The bigger one is the one I DLed from Nextcoin.org and used when my NXT were stolen. the smaller one I believe was the one posted on the front page?

DO NOT USE THIS FILE FOR NXT:
https://mega.co.nz/#!lZQBXQqK!EpQQbx9uBy9gcQe7-vc8smWDwHcM7LBODbtoCpKNXNo

Got it. The bogus client is in the link. Can someone check where is the modification ?

You have got to be absolutely fricking kidding me.  I have downloaded from mega.co.nz on Tues and walked it over to my nice sterile laptop....  

Excuse me while I go do an emergency client download from a trusted source and move my NXT to a new account with a zillion character new passcode....

And when this all settles down I'm going to bring up again a few more dozen times the idea of implementing a withdrawal freeze code....

excellent! me too.

How do you check the sha?

[joefox]

Download pages on the wiki have all been locked down.

[rickyjames]

rickyjames,

I wasn't saying we should cover it up, I was saying that the feature to broadcast messages to all NXT clients is not there yet.

James

Ah, sorry.  I'm a little agitated at the moment and my paranoia needle has broken off the peg over in the red zone.  My apologies.

We still see  eye to eye on security, dude.

[newcn]

PaulyC:
the 0.4.8 client I used, I forgot where I downloaded it, but from chrome history, 
the link was http://162.243.246.223/nxt-client-0.4.8.zip
this client is different from what I Just downloaded from this thread:

Code:

 
ec7c30a100717e60d8abe50eedb23641952847d91ff90b9b05a74ff98d8a4cf2  nxt-client-0.4.8 (1).zip
948ce760c379f13f4ea9def6babaa36b0d706bf91098f1d64945fdde3eac5f06  nxt-client-0.4.8.zip

please check your browser history to find which page you used for the download - where did you find a link?

how to find it from Chrome?
I just find the link, not the webpage the link was in,
there should be some ways to find that!

[intel]

People, the malware is being hosted on 162.243.246.223, it is digital ocean, a lot of people here have VPS here.

Contact their support asap and notify that the IP 162.243.246.223 is running a listening backdoor / passlogger.

[xyzzyx]

How do you check the sha?

https://asktom.cf/index.php?topic=345619.msg4259260#msg4259260

[EvilDave]

There is not so much information in the internet about evildave + bitcoin. I found something interesting, some evildave speaking dutch used the service "www.happycoins.nl" to buy bitcoins. He paid using paypal.

Here is the quote from his feedback (translated from dutch):

http://www.trustpilot.gr/review/www.happycoins.nl?page=3

I am very satisfied with the services of Happy Coins, definitely recommended.
They are one of the few mogelikheiden to buy via PayPal, and my experience with a fairly large purchase Bitcoin Bitcoin their was just okay.

Only downside was that it took a little longer to get nearly 90 minutes, the Bitcoins on my wallet, but that was a very busy period.

Original
 

HappyCoins: bijna perfecte ervaring met Bitcoins kopen

Ik ben zeer tevreden met de dienstverlening van HappyCoins, zeker een aanrader.
Ze zijn een van de weinig mogelikheiden om Bitcoin in te kopen via iDeal, en mijn ervaring met een vrij grote Bitcoin aankoop bij hun was gewoon goed.

Enige minpunt was dat het heeft wat langer geduurd om de Bitcoins op mijn wallet te krijgen, bijna 90 minuten, maar dat was wel in een hele drukke periode.

So, it's worth to contact with happycoins.nl and get his data.

Er...wtf?

Am i missing something?

[Damelon]

So, are most people with the new client boned?

If not, what should you check?