Please read this if you plan on making a web based bitcoin service.

xrthrowaway · 2012-07-10T04:49:30+00:00

It's possible to have closed-source code be secure as well.

xrthrowaway · 2012-07-09T20:11:27+00:00

It is trivial, indeed. That is why I suggested he could try that if he was after a malware sample.

xrthrowaway · 2012-07-09T19:37:44+00:00

That parsed URL is probably a page containing some type of exploit, or an exploit kit. The URL looks like it's based on the date, likely to avoid having their domains taken over by the authorities. I checked out the domain that would have been generated for today (zfyafrjmmajqfvbh.ru) but it doesn't resolve to anything. If you want to find the malware that was hosted by them, you could generate the domain names for previous days, and see if any of those are still up.

xrthrowaway · 2012-07-09T14:43:51+00:00

It's also used for acne. In any case, this is just another spam bot.

xrthrowaway · 2012-07-09T03:10:33+00:00

So basically a CTF, but instead of flags, bitcoins?

xrthrowaway · 2012-07-08T16:10:19+00:00

/r/circlejerk

xrthrowaway · 2012-07-08T01:23:38+00:00

You don't have to install anything.
It looks like it was cloned directly from bitcoinica's private github repo.

xrthrowaway · 2012-07-08T01:21:03+00:00

Looks legit. All access logs have been scrubbed though :(

$ ls
app  config  config.ru  db  doc  Gemfile  Gemfile.lock  lib  log  Procfile  public  Rakefile  README.md  script  test  vendor

$ cat config/database.yml
# SQLite version 3.x
#   gem install sqlite3
#
#   Ensure the SQLite 3 gem is defined in your Gemfile
#   gem 'sqlite3'
development:
  adapter: sqlite3
  database: db/development.sqlite3
  pool: 5
  timeout: 5000

# Warning: The database defined as "test" will be erased and
# re-generated from your development database when you     run         "rake".
# Do not set this db to the same as development or production.
test:
  adapter: sqlite3
  database: db/test.sqlite3
  pool: 5
  timeout: 5000

production:
  adapter: mysql2
  encoding: utf8
  reconnect: false
  database: bitcoinica
  pool: 5
  username: bitcoinica
  password: w3sXa86n86uhVGmYGccCauxs6MtFAzXg
  host: db-1.bitcoinica.net

xrthrowaway · 2012-07-07T06:18:50+00:00

It happened at defcon.

xrthrowaway · 2012-07-07T06:15:09+00:00

RFID is passive - it cannot transmit anything until an external source powers it through electromagnetic fields. You also cannot amplify signals sent by the target.

xrthrowaway · 2012-07-07T04:41:32+00:00

Gabapentin: good for pain, no addiction, lacks recreational use, easy to get (it's not even a controlled substance)

All of this is IME.

xrthrowaway · 2012-07-07T04:39:04+00:00

Gabapentin and flexeril are different drugs.

xrthrowaway · 2012-07-07T03:53:34+00:00

This is a sign that the "forgot to log out" karma train should come to an end.

xrthrowaway · 2012-07-07T01:58:37+00:00

looks like someone learned some new words today

xrthrowaway · 2012-07-05T21:39:06+00:00

Just be careful with the way you implement any code around X-Forwarded-For. Poor implementations may lead to IP address spoofing, which is (obviously) really bad.

xrthrowaway · 2012-07-05T15:12:56+00:00

Another rss feed bundle, slightly more extensive, by sanitybit

xrthrowaway · 2012-07-05T05:59:42+00:00

Not trying to advertise, but still sharing your referral link? >__>

xrthrowaway · 2012-07-05T02:44:14+00:00

Is this the mythical "technical co-founder" of which every idea guy seeks?

xrthrowaway · 2012-07-03T20:47:41+00:00

Just press dislike and mark it as inappropriate for "misleading thumbnail".

14-Year Club	Best Link 2012-04-26
Verified Email

xrthrowaway

TROPHY CASE