elective-stereophonic
elective-stereophonic
Micro-payment service NxtTips
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 2 3 ... 6 [All]

Author Topic: Micro-payment service NxtTips  (Read 28912 times)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Micro-payment service NxtTips
« on: November 18, 2014, 08:05:10 am »

Simple and fast way to convert anyone Nxt little as a gift or payment services.

URL: https://tips.nxtex.info/
Author: scor2k
Other project: Service of Direct Exchange NXT , nxtAuth

What we offer
  • Fast payment. You must enter a PIN-code to confirm.
  • Low commission service. Total 1 NXT per transaction. The absence of any additional fees.
  • All transactions carried out with your personal Nxt-accounts on our service.
  • To receive micropayments, registration is not required, it is sufficient to place a signature on the forum Nxt address translation.
  • To make micropayments, you need to install the extension for one of the modern browsers: Google Chrome, Mozilla Firefox
Micro-instructions for micro-payments service NxtTips on the site (with step-by-step youtube video).





Welcome to our service!
« Last Edit: March 03, 2015, 03:05:46 am by scor2k »
Logged

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #1 on: November 18, 2014, 08:48:15 am »

Interesting, will try it!
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: Micro-payment service NxtTips
« Reply #2 on: November 18, 2014, 09:01:11 am »

This project was mentioned here:
Just saw somebody made a nice tips service with NXT: https://nxtforum.org/k-(russian)/e-mko-atee-nxttips/
Unfortunately the site has Russian version only but I believe it will be fixed soon.
Here is the translation of the announcement:  ......

NxtTips has been developed by author of another long-term project NXTex.net, and has been sucessfully tested for 4 days here: https://bitcointalk.org/index.php?topic=345882.msg9540294#msg9540294
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

kuku

  • Newbie
  • *
  • Karma: +0/-0
  • Offline Offline
  • Posts: 1
    • View Profile
Re: Micro-payment service NxtTips
« Reply #3 on: November 18, 2014, 12:04:31 pm »

Will try!
Logged

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: Micro-payment service NxtTips
« Reply #4 on: November 18, 2014, 12:41:38 pm »

Will try!
- why not just put "nxttip:NXT-....-....-...." in your forums signature?

Quote
For those who want to accept payments.

Place a forum signature Bitcointalk or NxtForum line of the address on the following template: nxttip:NXT-FRNZ-PDJF-2CQT-DQ4WQ (no spaces!)
« Last Edit: November 18, 2014, 12:43:41 pm by abctc »
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #5 on: November 19, 2014, 09:50:16 am »

Update userscript up to version 0.2.2 :) Please update in Tampermonkey or Greasemonkey


Addon: Extending storage of TIPS-cookies up to 31 days.
« Last Edit: November 19, 2014, 09:53:24 am by scor2k »
Logged

8

  • Full Member
  • ***
  • Karma: +6/-6
  • Offline Offline
  • Posts: 122
  • English-Chinese translation Service
    • View Profile
Re: Micro-payment service NxtTips
« Reply #6 on: November 19, 2014, 02:36:44 pm »

Great service! Competition with Changetip of bitcoin and dogetips of Dogecoins !
Logged
My crypto blog: http://coinour.com

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #7 on: November 19, 2014, 06:42:19 pm »

Great service! Competition with Changetip of bitcoin and dogetips of Dogecoins !
]
Thanks ) Do you have any idea about my service in compare Changetip and dogetips ?
Logged

Damelon

  • Administrator
  • Hero Member
  • *****
  • Karma: +792/-54
  • Offline Offline
  • Posts: 2314
    • View Profile
    • Nxt Inside
Re: Micro-payment service NxtTips
« Reply #8 on: November 21, 2014, 12:13:05 am »

Very nice!
Well done indeed :)
Logged
Member of the Nxt Foundation | Donations: NXT-D6K7-MLY6-98FM-FLL5T
Join Nxt Slack! https://nxtchat.herokuapp.com/
Founder of Blockchain Workspace | Personal Site & Blog

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #9 on: November 21, 2014, 03:03:24 am »

Very nice!
Well done indeed :)
My next step is creating addon to SMF forum engine (like NxtForum) to tip in any browser without additional extensions...
Logged

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Micro-payment service NxtTips
« Reply #10 on: November 21, 2014, 03:27:31 am »

I've been looking into this (thanks abctc for the heads up, and of course to scor2k for the cool work) and it looks as clear and straightforward as it gets. I'm sure we can add a "Tip" button to the members information in posts.

Linking the "Nxt Account ID" profile field to a button that produces the right URL to receive a tip should be easy. Then we let scor2k's code do the magic and write a simple forum guide for anyone who wants to use a NxtTips account.
Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #11 on: November 21, 2014, 07:31:08 am »

Very nice!
Well done indeed :)
My next step is creating addon to SMF forum engine (like NxtForum) to tip in any browser without additional extensions...

That would be great! I've stopped my test at "install tampermonkey to install custom script in chrome" because of security concerns. I don't like to install any plugins in my web browser.
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #12 on: November 21, 2014, 07:52:26 am »

Very nice!
Well done indeed :)
My next step is creating addon to SMF forum engine (like NxtForum) to tip in any browser without additional extensions...

That would be great! I've stopped my test at "install tampermonkey to install custom script in chrome" because of security concerns. I don't like to install any plugins in my web browser.


I understand your reason :))
Logged

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: Micro-payment service NxtTips
« Reply #13 on: November 21, 2014, 08:09:14 am »

Very nice!
Well done indeed :)
My next step is creating addon to SMF forum engine (like NxtForum) to tip in any browser without additional extensions...
That would be great! I've stopped my test at "install tampermonkey to install custom script in chrome" because of security concerns. I don't like to install any plugins in my web browser.
I understand your reason :))
- yes, but doesn't your script open-source?
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #14 on: November 21, 2014, 08:19:03 am »

Very nice!
Well done indeed :)
My next step is creating addon to SMF forum engine (like NxtForum) to tip in any browser without additional extensions...
That would be great! I've stopped my test at "install tampermonkey to install custom script in chrome" because of security concerns. I don't like to install any plugins in my web browser.
I understand your reason
- yes, but doesn't your script open-source?


 Greasemonkey & Tampermonkey - not open-source, as i known...
Logged

Berzerk

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: Micro-payment service NxtTips
« Reply #15 on: November 21, 2014, 02:23:56 pm »

Interested in the domain: http://tipnxt.com ? :)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #16 on: November 21, 2014, 02:28:18 pm »

Interested in the domain: http://tipnxt.com ? :)


No, thanks ) My projects has one global domain - nxtex :)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #17 on: November 24, 2014, 07:24:10 am »

Created addition to forum engine SMF 2.0.9, which would "tip" users of the forum without the need to install any extensions to the browser :)
At the moment, it is being tested by the administration NxtForum.
Logged

Freebieservers

  • Sr. Member
  • ****
  • Karma: +70/-34
  • Offline Offline
  • Posts: 409
    • View Profile
Re: Micro-payment service NxtTips
« Reply #18 on: November 24, 2014, 09:37:18 am »

Created addition to forum engine SMF 2.0.9, which would "tip" users of the forum without the need to install any extensions to the browser :)
At the moment, it is being tested by the administration NxtForum.
Will this work with reddit.com too ? We could use this for our marketing campaign
Logged

Berzerk

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: Micro-payment service NxtTips
« Reply #19 on: November 24, 2014, 09:48:23 am »

Yes, we need a global tipping tool.
Logged

Freebieservers

  • Sr. Member
  • ****
  • Karma: +70/-34
  • Offline Offline
  • Posts: 409
    • View Profile
Re: Micro-payment service NxtTips
« Reply #20 on: November 24, 2014, 09:49:31 am »

This could be ground breaking for us at FS :)
Really helps us in pushing both the business and Nxt forward.
If you can get this to work with reddit - I would love to include this with our promotions for mynxt.info
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #21 on: November 24, 2014, 09:57:23 am »

Created addition to forum engine SMF 2.0.9, which would "tip" users of the forum without the need to install any extensions to the browser :)
At the moment, it is being tested by the administration NxtForum.
Will this work with reddit.com too ? We could use this for our marketing campaign

Right now I can change script for Google Chrome & Mozilla Firefox to run with tampermonkey & Greasemonkey plugin. But if reddin have any plugin sytems, I can write it...

Yes, we need a global tipping tool.


For Mozilla & Chrome - it's not problem :) But not any users like to install extensions & userscripts :)
Logged

Freebieservers

  • Sr. Member
  • ****
  • Karma: +70/-34
  • Offline Offline
  • Posts: 409
    • View Profile
Re: Micro-payment service NxtTips
« Reply #22 on: November 24, 2014, 10:02:31 am »

Maybe you could look into how changetip does it currently and go from there?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #23 on: November 24, 2014, 10:08:02 am »

Maybe you could look into how changetip does it currently and go from there?


I'll try do this.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #24 on: November 29, 2014, 06:25:26 am »

Logged

Coradan

  • Full Member
  • ***
  • Karma: +21/-3
  • Offline Offline
  • Posts: 206
    • View Profile
Re: Micro-payment service NxtTips
« Reply #25 on: November 29, 2014, 08:16:58 am »

Link of NXT Tips added to www.nxt.cool wallof.

Nice Feature!
Logged
One more thing: NXT
http://www.nxt.cool

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #26 on: November 29, 2014, 09:11:19 am »

Link of NXT Tips added to www.nxt.cool wallof.

Nice Feature!

Thanks =) My second project on your wall :)
Logged

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #27 on: November 29, 2014, 11:54:17 am »


Yahoo! We started on NxtForum!

https://nxtforum.org/meta-forum/how-to-tip-nxt-in-nxtforum-with-nxttips-service/

Great!

While trying to tip someone here I've noticed that I can't copy a tips-cookie from my profile on your website to the clipboard using my iPad. Would be nice if that worked as well, because I'm often reading forums on my iPad. I think the same issue will occur on other tablet type devices too.
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #28 on: November 29, 2014, 04:18:06 pm »

While trying to tip someone here I've noticed that I can't copy a tips-cookie from my profile on your website to the clipboard using my iPad. Would be nice if that worked as well, because I'm often reading forums on my iPad. I think the same issue will occur on other tablet type devices too.

Ok. I'll try to copy-paste from iPad and fix my site...
Logged

jones

  • Hero Member
  • *****
  • Karma: +310/-8
  • Offline Offline
  • Posts: 1043
  • write code not war
    • View Profile
    • jNxt
Re: Micro-payment service NxtTips
« Reply #29 on: November 29, 2014, 08:37:44 pm »

You should talk to the people at nxter.org to set up a plugin for them, That would be a cool place to start as the articles are community sourced. Just a suggestion, but I think that would be a good team-up.
Logged
-- Jones NXT-RJU8-JSNR-H9J4-2KWKY

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #30 on: December 01, 2014, 02:52:48 am »


Great!

While trying to tip someone here I've noticed that I can't copy a tips-cookie from my profile on your website to the clipboard using my iPad. Would be nice if that worked as well, because I'm often reading forums on my iPad. I think the same issue will occur on other tablet type devices too.

I fixed this bug :) Now on my iPhone copy TIPS-cookies is very easy.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #31 on: December 01, 2014, 02:55:22 am »

You should talk to the people at nxter.org to set up a plugin for them, That would be a cool place to start as the articles are community sourced. Just a suggestion, but I think that would be a good team-up.

Nxter use WordPress engine, as far as I know.. I'll create plugin for it.
Logged

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #32 on: December 01, 2014, 07:34:40 am »


Great!

While trying to tip someone here I've noticed that I can't copy a tips-cookie from my profile on your website to the clipboard using my iPad. Would be nice if that worked as well, because I'm often reading forums on my iPad. I think the same issue will occur on other tablet type devices too.

I fixed this bug :) Now on my iPhone copy TIPS-cookies is very easy.

Now it's working, thank you!

I've tipped you for this.  ;D
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #33 on: December 01, 2014, 07:40:44 am »

Now it's working, thank you!
I've tipped you for this.  ;D

Thank you too )
Logged

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Micro-payment service NxtTips
« Reply #34 on: December 01, 2014, 09:46:04 pm »

The NxtTips SMF mod is now active in the SuperNET forums.

And since I'm here, and besides other ideas already on the table for future versions of NxtTips... how difficult would it be to add a "Message" field under the PIN request when sending a tip? To be included as message with the NXT transfer.
Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #35 on: December 02, 2014, 04:35:35 pm »

The NxtTips SMF mod is now active in the SuperNET forums.

And since I'm here, and besides other ideas already on the table for future versions of NxtTips... how difficult would it be to add a "Message" field under the PIN request when sending a tip? To be included as message with the NXT transfer.

It's a good idea =) I'll do this in several days :)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #36 on: December 03, 2014, 02:42:31 am »

There are certain unclear point in the service. Prior to their decision service is temporarily disabled.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #37 on: December 03, 2014, 04:28:55 am »

In the near future (a few hours), all their deposits will be returned to service tips.nxtex.net senders (the first account from which was replenished Ballance). The same will be returned the stolen funds.After that, I'll search for vulnerabilities that led to the breaking of the service. At the moment I checked all the logs and found no attempts.
Logged

jones

  • Hero Member
  • *****
  • Karma: +310/-8
  • Offline Offline
  • Posts: 1043
  • write code not war
    • View Profile
    • jNxt
Re: Micro-payment service NxtTips
« Reply #38 on: December 03, 2014, 06:19:35 am »

Yeah, I noticed my tips funds were stolen, all good, it was only like a dollar and a half, if you need help figuring out how they got in feel free to bounce ideas off of me, I enjoy breaking stuff  :)

hope your able to fix everything,
Jones
Logged
-- Jones NXT-RJU8-JSNR-H9J4-2KWKY

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #39 on: December 03, 2014, 07:45:21 am »

My tip nxt are still there, so not all accounts have been hacked.
 ???
« Last Edit: December 03, 2014, 07:48:34 am by CryptKeeper »
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #40 on: December 03, 2014, 07:47:24 am »

My tip nxt are still there, so not all accounts has been hacked.
 ???

Hacked only 4 accounts (my included)...
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #41 on: December 03, 2014, 08:47:55 am »

All users were tips.nxtex.net returned funds from internal accounts. Transactions: 13899270028266019164, 1690823300272364765, 10189066652119471259, 8256565597418971099, 6883549286649452039, 5910164018423016701, 11970454658174868413, 646263189511555032, 10313231332282855407, 10863568029570054317, 14080439766592936036, 9678405528271572912, 7221039002063577511. Recovered the stolen money, the transaction: 1703526922393187434, 13289921332883233931, 17124052872197985977 (4th account belongs to me, so compensation is not required).
Currently the service is audited security, therefore temporarily not available. Thank you for your understanding and patience.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #42 on: December 03, 2014, 10:11:00 am »

Yeah, I noticed my tips funds were stolen, all good, it was only like a dollar and a half, if you need help figuring out how they got in feel free to bounce ideas off of me, I enjoy breaking stuff  :)

Thank you for your suggestion in finding vulnerabilities. If you wish, I can reveal to you the access to the site (need your ip address), then you can hack it ... or is there another method? ))

Most likely (80%) I already know what was the reason and why only 4 flowed account, but unfortunately, I can not prove.
Logged

Neomadra

  • Sr. Member
  • ****
  • Karma: +37/-6
  • Offline Offline
  • Posts: 441
    • View Profile
Re: Micro-payment service NxtTips
« Reply #43 on: December 03, 2014, 11:05:35 am »

I hope you can fix this, because I really liked this service. I guess I tipped already 150 NXT and had still 450 NXT on my tip account which you have just returned as I see.
I don't get why anybody hacks tips account for some NXT but better now than when many people start using this service.
Logged

Cassius

  • Hero Member
  • *****
  • Karma: +207/-18
  • Offline Offline
  • Posts: 2459
  • Rather be a pirate than join the navy
    • View Profile
Re: Micro-payment service NxtTips
« Reply #44 on: December 03, 2014, 11:15:57 am »

Great service, hope you can fix it!
Logged
I head up content for BitScan, crypto business hub.

crimi

  • Hero Member
  • *****
  • Karma: +122/-11
  • Offline Offline
  • Posts: 863
    • View Profile
Re: Micro-payment service NxtTips
« Reply #45 on: December 03, 2014, 02:26:48 pm »

Started yesterday to tip with your service. Good work hope it returns soon.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #46 on: December 03, 2014, 05:05:27 pm »

We open in the next couple of days...
Logged

jones

  • Hero Member
  • *****
  • Karma: +310/-8
  • Offline Offline
  • Posts: 1043
  • write code not war
    • View Profile
    • jNxt
Re: Micro-payment service NxtTips
« Reply #47 on: December 03, 2014, 06:43:22 pm »

Yeah, I noticed my tips funds were stolen, all good, it was only like a dollar and a half, if you need help figuring out how they got in feel free to bounce ideas off of me, I enjoy breaking stuff  :)

Thank you for your suggestion in finding vulnerabilities. If you wish, I can reveal to you the access to the site (need your ip address), then you can hack it ... or is there another method? ))

Most likely (80%) I already know what was the reason and why only 4 flowed account, but unfortunately, I can not prove.

I looked through your js and everything looks fine there, no vulnerabilities that I could find, I think the problem was in how you generated the passphrases for the accounts, I would make sure that the passphrase key generation is secure and they are stored in a place that no one can get to, I've found that storing one level of a hash and generating the passphrase from some 1000 round of sha256 on top of the stored passphrase data. I wish you luck on updating it.
Logged
-- Jones NXT-RJU8-JSNR-H9J4-2KWKY

Cassius

  • Hero Member
  • *****
  • Karma: +207/-18
  • Offline Offline
  • Posts: 2459
  • Rather be a pirate than join the navy
    • View Profile
Re: Micro-payment service NxtTips
« Reply #48 on: December 03, 2014, 07:12:31 pm »

Attacker was good enough to send an AM with his method. Will let scor2k elaborate if he wants.
Logged
I head up content for BitScan, crypto business hub.

crimi

  • Hero Member
  • *****
  • Karma: +122/-11
  • Offline Offline
  • Posts: 863
    • View Profile
Re: Micro-payment service NxtTips
« Reply #49 on: December 03, 2014, 07:34:59 pm »

We open in the next couple of days...

It would be recommended to check for sql injection(also login, signup etc...). Its not coincidence that only 4 accounts are cleaned out. Is some value(checked) in the database thats distinguish them from the rest. Probably they were waiting for a cronjob to be send?
Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #50 on: December 03, 2014, 08:19:52 pm »

Please post the method for password generation. If it cannot withstand being known (eg. it is security via obscurity) it is not secure.

There are usually ways to make it cryptographically secure, so that even with full disclosure of the method, the attacker would need to crack something pretty difficult, eg. SHA256 collision, reverse curve25519, etc.

James
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: Micro-payment service NxtTips
« Reply #51 on: December 03, 2014, 08:39:24 pm »

It would be recommended to check for sql injection(also login, signup etc...). ...

..  the method for password generation.

- that was much, much simpler. I'm sure, scor2k will explain it to public, like he had showed to me, including that attacker's AM. Note: the server was not compromised (and attacker admitted that in his AM), for example p2p exchange nxtex.net still working without any issues.
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #52 on: December 04, 2014, 03:04:07 am »

I looked through your js and everything looks fine there, no vulnerabilities that I could find, I think the problem was in how you generated the passphrases for the accounts, I would make sure that the passphrase key generation is secure and they are stored in a place that no one can get to, I've found that storing one level of a hash and generating the passphrase from some 1000 round of sha256 on top of the stored passphrase data. I wish you luck on updating it.

Thanks for audit Passphrase is 80 random chars from string below:
 
Code: [Select]
$chars="qazxswedcvfrtgbnhyujmkiolp1234567890QAZXSWEDCVFRTGBNHYUJMKIOLP#_-^&!@()";After that, the passphrase is encrypted public key (2048 bits) and stored in the database.


The private key for decryption is not stored on the server in the clear. Just I developed defense mechanisms that block decoding data in the presence of any suspicious events on the server (for example, a ssh connection from an unknown address, though it is blocked on the iptables).


Today I was planning to add additional cryptographic protection in the generation of a passphrase, even though it does not affect the security, as the password itself is hardly possible to pick up and more importantly safe storage.
« Last Edit: December 04, 2014, 03:08:38 am by scor2k »
Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #53 on: December 04, 2014, 03:08:56 am »

I looked through your js and everything looks fine there, no vulnerabilities that I could find, I think the problem was in how you generated the passphrases for the accounts, I would make sure that the passphrase key generation is secure and they are stored in a place that no one can get to, I've found that storing one level of a hash and generating the passphrase from some 1000 round of sha256 on top of the stored passphrase data. I wish you luck on updating it.

Thanks for audit Passphrase is 80 random chars from string below:
 
Code: [Select]
$chars="qazxswedcvfrtgbnhyujmkiolp1234567890QAZXSWEDCVFRTGBNHYUJMKIOLP#_-^&!@()";After that, the passphrase is encrypted public key (2048 bits) and stored in the database.


The private key for decryption is not stored on the server in the clear. Just I developed defense mechanisms that block decoding data in the presence of any suspicious events on the server (for example, a ssh connection from an unknown address, though it is blocked on the iptables).
how do you generate your random number?
SHA256 on the 80 char password would make it more effective, especially if the random number generator is not random.
still I am confused at how 4 different accts could have been compromised...

Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

jones

  • Hero Member
  • *****
  • Karma: +310/-8
  • Offline Offline
  • Posts: 1043
  • write code not war
    • View Profile
    • jNxt
Re: Micro-payment service NxtTips
« Reply #54 on: December 04, 2014, 03:10:46 am »

I looked through your js and everything looks fine there, no vulnerabilities that I could find, I think the problem was in how you generated the passphrases for the accounts, I would make sure that the passphrase key generation is secure and they are stored in a place that no one can get to, I've found that storing one level of a hash and generating the passphrase from some 1000 round of sha256 on top of the stored passphrase data. I wish you luck on updating it.

Thanks for audit Passphrase is 80 random chars from string below:
 
Code: [Select]
$chars="qazxswedcvfrtgbnhyujmkiolp1234567890QAZXSWEDCVFRTGBNHYUJMKIOLP#_-^&!@()";After that, the passphrase is encrypted public key (2048 bits) and stored in the database.


The private key for decryption is not stored on the server in the clear. Just I developed defense mechanisms that block decoding data in the presence of any suspicious events on the server (for example, a ssh connection from an unknown address, though it is blocked on the iptables).

there was an AM send to my tip address that stated that the funds were stolen due to the fact that the secretphrase showed up on his public node due to TCP listening during a request to start forging.
Logged
-- Jones NXT-RJU8-JSNR-H9J4-2KWKY

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #55 on: December 04, 2014, 03:14:52 am »

Please post the method for password generation. If it cannot withstand being known (eg. it is security via obscurity) it is not secure.

There are usually ways to make it cryptographically secure, so that even with full disclosure of the method, the attacker would need to crack something pretty difficult, eg. SHA256 collision, reverse curve25519, etc.

James

I posted my method in the previous post.

I does not make sense to encrypt passphrase irreversible encryption methods as required to confirm the transfer of donations constantly, so I use 2048 bit public and private key. The private key is encrypted with the PGP and my fits in server memory manually after entering the personal code (more than 16 chars) from keyboard.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #56 on: December 04, 2014, 03:19:53 am »

there was an AM send to my tip address that stated that the funds were stolen due to the fact that the secretphrase showed up on his public node due to TCP listening during a request to start forging.

I know this.

It was my fault, I was trying to abandon the use of the local Nxt node and not fully worked send transactions to a remote server. now I'm back to using the local node and more of these problems should not be.

how do you generate your random number?
SHA256 on the 80 char password would make it more effective, especially if the random number generator is not random.
still I am confused at how 4 different accts could have been compromised...

Ok. I'll add a few iterations SHA256 (or other) after password generation, it really is a nice addition :)
Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #57 on: December 04, 2014, 03:20:44 am »

I looked through your js and everything looks fine there, no vulnerabilities that I could find, I think the problem was in how you generated the passphrases for the accounts, I would make sure that the passphrase key generation is secure and they are stored in a place that no one can get to, I've found that storing one level of a hash and generating the passphrase from some 1000 round of sha256 on top of the stored passphrase data. I wish you luck on updating it.

Thanks for audit Passphrase is 80 random chars from string below:
 
Code: [Select]
$chars="qazxswedcvfrtgbnhyujmkiolp1234567890QAZXSWEDCVFRTGBNHYUJMKIOLP#_-^&!@()";After that, the passphrase is encrypted public key (2048 bits) and stored in the database.


The private key for decryption is not stored on the server in the clear. Just I developed defense mechanisms that block decoding data in the presence of any suspicious events on the server (for example, a ssh connection from an unknown address, though it is blocked on the iptables).

there was an AM send to my tip address that stated that the funds were stolen due to the fact that the secretphrase showed up on his public node due to TCP listening during a request to start forging.
why would someone use a public node to start forging?
this tipservice is really cool, so I want to make sure it is secure
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #58 on: December 04, 2014, 03:21:43 am »

there was an AM send to my tip address that stated that the funds were stolen due to the fact that the secretphrase showed up on his public node due to TCP listening during a request to start forging.

I know this.

It was my fault, I was trying to abandon the use of the local Nxt node and not fully worked send transactions to a remote server. now I'm back to using the local node and more of these problems should not be.

how do you generate your random number?
SHA256 on the 80 char password would make it more effective, especially if the random number generator is not random.
still I am confused at how 4 different accts could have been compromised...

Ok. I'll add a few iterations SHA256 (or other) after password generation, it really is a nice addition :)
almost all tx are ok to send publicly (as long as they are signed locally), but start forging is one of the exceptions
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #59 on: December 04, 2014, 03:53:39 am »

why would someone use a public node to start forging?
this tipservice is really cool, so I want to make sure it is secure

almost all tx are ok to send publicly (as long as they are signed locally), but start forging is one of the exceptions

It was my fault, as I wrote above :( I do not run forging, I made the transaction and did not sign them locally, as it was necessary. Now I have corrected the situation, now uses only the local node!

PS. I'll planed to use this code:
Code: [Select]
$pwd2 = '';
for ( $i=0; $i<rand(4)+4; $i++ ) { $pwd2 .= substr(str_replace('+', '.', base64_encode(pack('N4', mt_rand(), mt_rand(), mt_rand(),mt_rand()))), 0, 22); }
$hash2 = hash('sha512', $pwd2);
Code: [Select]

tips@tips:~$ for i in `seq 1 5`; do php -f 1.php; done
password: O831bHr.Z5xGZ2m3XG5g0gZMV7sleIVadXqzxhFdiQZgXEf77kCHcKBTjfd2bsskBwDu/KnRol8DU6knGWGEy1qQZ31Nmw9xttY5J9fzOviBAQ
after hash512: e4fc583fb1f911211af32c07e698f4f5a254481787214a53e848149dfa916d9010a4dab143e02c05c757cbc1f1d3e5e57773bbfe89e7c6bb836b39a4df606b57


password: SGuQZnkQVMtYRDlsciXIcgPRAfEQCpu8NDpHfKT1qrUQUIFWm3ePBIkjGqm/ZUCDNAcj03NjmbaflNqK4SAXbiSAdAE5Q2YOkYJ86kWQEuBoPwE477sGXMY8BvuXcfaKqX5A
after hash512: bd3d4180e0312be88d90a4b40aab87385a6f001e10f0f392dc481f0cf8e6ab53e41fe7a48f151930856e9e38d7d022661262611c09a065c69126ccb75db2b637


password: Z11tTSWZIfQ6S6AnZn1BHgBBoBM2NFpbhLfv1XBWzTpwcyWCnF3gXedcn31aSkgqXwYqwgR3ZtUjhAATN/d9Jr9gKTDD0V2nOFsmu8I5GeLjMAPR6WbT7hvmER5i4yV17EBQ
after hash512: 2a0496db6d3146ebd20be710e2431512f7640305c939991489c7d2dada4a4104325ad20cbade8fd438f367f35cf1beca0dacf4019d8adafa3b18125a6179c983


password: ZbdmpBkQcHJnF5FgCtBqiAecyBuxFM/2AGYDMPW/YpRQcUb83xUG0UYJgSjYYzgDJADP7iix2hdgNrM9uvNEZ/eAd5Xlblw/cYMeQYJlFvNZjw
after hash512: 2154ea5da26314d6c54456abd5bb2626c508d36240f5588f65c6ce4259e170656e6879f1ed24e59fa4164d2767dabeb7ef5e78be9d5431b9fa19c269b64a0282


password: S.ImJghF1IYS0xHlZYnELAVmdF4wwq96ALrDDdePJRRQMWmDHFs87KpKcKA8c0lYXwOucVz2caxzYPADJvLD.FPQO/VQmHdvj58357bvL3bkCw
after hash512: f1123197873e7fe9b131993ea4033fd46f2e1cef58d3ec92cc2108523740e13438357565ad71fd7a85fc4e53fe8c36f202a7e6957566cc6ffa83ca18635b200b


Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #60 on: December 04, 2014, 04:08:52 am »

why would someone use a public node to start forging?
this tipservice is really cool, so I want to make sure it is secure

almost all tx are ok to send publicly (as long as they are signed locally), but start forging is one of the exceptions

It was my fault, as I wrote above :( I do not run forging, I made the transaction and did not sign them locally, as it was necessary. Now I have corrected the situation, now uses only the local node!

PS. I'll planed to use this code:
Code: [Select]
$pwd2 = '';
for ( $i=0; $i<rand(4)+4; $i++ ) { $pwd2 .= substr(str_replace('+', '.', base64_encode(pack('N4', mt_rand(), mt_rand(), mt_rand(),mt_rand()))), 0, 22); }
$hash2 = hash('sha512', $pwd2);
Code: [Select]

tips@tips:~$ for i in `seq 1 5`; do php -f 1.php; done
password: O831bHr.Z5xGZ2m3XG5g0gZMV7sleIVadXqzxhFdiQZgXEf77kCHcKBTjfd2bsskBwDu/KnRol8DU6knGWGEy1qQZ31Nmw9xttY5J9fzOviBAQ
after hash512: e4fc583fb1f911211af32c07e698f4f5a254481787214a53e848149dfa916d9010a4dab143e02c05c757cbc1f1d3e5e57773bbfe89e7c6bb836b39a4df606b57


password: SGuQZnkQVMtYRDlsciXIcgPRAfEQCpu8NDpHfKT1qrUQUIFWm3ePBIkjGqm/ZUCDNAcj03NjmbaflNqK4SAXbiSAdAE5Q2YOkYJ86kWQEuBoPwE477sGXMY8BvuXcfaKqX5A
after hash512: bd3d4180e0312be88d90a4b40aab87385a6f001e10f0f392dc481f0cf8e6ab53e41fe7a48f151930856e9e38d7d022661262611c09a065c69126ccb75db2b637


password: Z11tTSWZIfQ6S6AnZn1BHgBBoBM2NFpbhLfv1XBWzTpwcyWCnF3gXedcn31aSkgqXwYqwgR3ZtUjhAATN/d9Jr9gKTDD0V2nOFsmu8I5GeLjMAPR6WbT7hvmER5i4yV17EBQ
after hash512: 2a0496db6d3146ebd20be710e2431512f7640305c939991489c7d2dada4a4104325ad20cbade8fd438f367f35cf1beca0dacf4019d8adafa3b18125a6179c983


password: ZbdmpBkQcHJnF5FgCtBqiAecyBuxFM/2AGYDMPW/YpRQcUb83xUG0UYJgSjYYzgDJADP7iix2hdgNrM9uvNEZ/eAd5Xlblw/cYMeQYJlFvNZjw
after hash512: 2154ea5da26314d6c54456abd5bb2626c508d36240f5588f65c6ce4259e170656e6879f1ed24e59fa4164d2767dabeb7ef5e78be9d5431b9fa19c269b64a0282


password: S.ImJghF1IYS0xHlZYnELAVmdF4wwq96ALrDDdePJRRQMWmDHFs87KpKcKA8c0lYXwOucVz2caxzYPADJvLD.FPQO/VQmHdvj58357bvL3bkCw
after hash512: f1123197873e7fe9b131993ea4033fd46f2e1cef58d3ec92cc2108523740e13438357565ad71fd7a85fc4e53fe8c36f202a7e6957566cc6ffa83ca18635b200b


yes, I saw the post. you can use remote node with local signing, just block the forging tx!
I cant read the code that is not C, but hashing the output of the rand() seems much safer. as long as the rand() is not always making the same sequence (eg. always srand with same seed), it should be good enough for input into hash.

what is the actual algo for this hash512  function?

James
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #61 on: December 04, 2014, 05:00:44 am »

what is the actual algo for this hash512  function?
SHA-2 512 bit hash function.
Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #62 on: December 04, 2014, 05:09:06 am »

what is the actual algo for this hash512  function?
SHA-2 512 bit hash function.
since it is for tip accts, should be fine, but if you are feeling ambitious: http://security.stackexchange.com/questions/4687/are-salted-sha-256-512-hashes-still-safe-if-the-hashes-and-their-salts-are-expos

maybe another random number that determines the number of iterations? not knowing how many iterations of hashing, even if the original password was cracked, the output after each hash would need to be tested. wont stop a determined attacker, but with the relatively small amounts any deterrent should be effective.

I was also thinking this random number could be used as a PIN that is displayed on the screen and if the user chooses to, not stored anywhere. Just an idea to experiment with making the user experience more like real world things where they say here is a 4 digit PIN, dont lose it!

James
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #63 on: December 04, 2014, 02:09:32 pm »

Micro-payment service NxtTips came back!


Vastly improved security as well fixed bug, which resulted in the hacked of 4 passphrases :)  Old users only need to create a new Nxt-account, all other settings unchanged. I hope that in the near future it will again be included on NxtForum & SupernetForum.


Thanks to everyone who took part in this!
Logged

Cassius

  • Hero Member
  • *****
  • Karma: +207/-18
  • Offline Offline
  • Posts: 2459
  • Rather be a pirate than join the navy
    • View Profile
Re: Micro-payment service NxtTips
« Reply #64 on: December 04, 2014, 03:03:08 pm »

Micro-payment service NxtTips came back!


Vastly improved security as well fixed bug, which resulted in the hacked of 4 passphrases :)  Old users only need to create a new Nxt-account, all other settings unchanged. I hope that in the near future it will again be included on NxtForum & SupernetForum.


Thanks to everyone who took part in this!

Thanks scor2k! Looking forward to seeing this back on the forum.
Logged
I head up content for BitScan, crypto business hub.

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #65 on: December 04, 2014, 03:20:59 pm »

Micro-payment service NxtTips came back!


Vastly improved security as well fixed bug, which resulted in the hacked of 4 passphrases :)  Old users only need to create a new Nxt-account, all other settings unchanged. I hope that in the near future it will again be included on NxtForum & SupernetForum.


Thanks to everyone who took part in this!

Good news!

I've just logged in and created a new Nxt account with 0 NXT. How can I transfer my NXT from the old tips account to the new one?
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #66 on: December 04, 2014, 05:31:30 pm »

Good news!

I've just logged in and created a new Nxt account with 0 NXT. How can I transfer my NXT from the old tips account to the new one?

Today I return all money from accounts and all money that was stolen.

https://nxtforum.org/index.php?topic=6631.msg136825#msg136825


P.S. Sent some Nxt to "old" users Nxt account :)
« Last Edit: December 05, 2014, 03:12:51 am by scor2k »
Logged

xcn

  • Full Member
  • ***
  • Karma: +22/-4
  • Offline Offline
  • Posts: 249
    • View Profile
Re: Micro-payment service NxtTips
« Reply #67 on: December 05, 2014, 08:53:19 am »

What about tipping in NXT via twitter?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #68 on: December 05, 2014, 09:07:00 am »

What about tipping in NXT via twitter?

My plans include completion plugin for Mozilla & Chrome that there was an opportunity to send micro-payments by clicking on Nxt-address on any website.
Logged

xcn

  • Full Member
  • ***
  • Karma: +22/-4
  • Offline Offline
  • Posts: 249
    • View Profile
Re: Micro-payment service NxtTips
« Reply #69 on: December 05, 2014, 10:04:47 am »

What about tipping in NXT via twitter?

My plans include completion plugin for Mozilla & Chrome that there was an opportunity to send micro-payments by clicking on Nxt-address on any website.

What about mobile?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #70 on: December 05, 2014, 10:07:10 am »

What about mobile?

In the near future I do not plan to develop mobile applications.
Logged

xcn

  • Full Member
  • ***
  • Karma: +22/-4
  • Offline Offline
  • Posts: 249
    • View Profile
Re: Micro-payment service NxtTips
« Reply #71 on: December 05, 2014, 10:30:38 am »

What about mobile?

In the near future I do not plan to develop mobile applications.

So, twitter tipping might be a good alternative.
And what's the ETA for "plugin for Mozilla & Chrome"?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #72 on: December 05, 2014, 10:39:59 am »

So, twitter tipping might be a good alternative.
And what's the ETA for "plugin for Mozilla & Chrome"?

I do not want to deceive you, so I will say: 2-3 weeks.
Logged

xcn

  • Full Member
  • ***
  • Karma: +22/-4
  • Offline Offline
  • Posts: 249
    • View Profile
Re: Micro-payment service NxtTips
« Reply #73 on: December 05, 2014, 11:03:16 am »

So, twitter tipping might be a good alternative.
And what's the ETA for "plugin for Mozilla & Chrome"?

I do not want to deceive you, so I will say: 2-3 weeks.

Great, thank you!
Logged

Tosch110

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +211/-18
  • Offline Offline
  • Posts: 2365
    • View Profile
Re: Micro-payment service NxtTips
« Reply #74 on: December 06, 2014, 05:37:13 pm »

Awesome tool for the forum. I have also signed up to tip easier ;)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #75 on: December 10, 2014, 06:47:19 am »

Hi all!

Some news service NxtTips:

Updated script for Greasemonkey and Tampermonkey, now do not need to write a signature nxttip: (on BTT forum) what would the script found your address. Refused to use the image as it is not all like it did just a reference. Just completely rewrote the code in pure javascript, that would not use heavy type library jQuery.




Just set the start-up script for the site nxter.org - there is also looking for links to news and replaces them with the ability to reference type. If you have the addresses of sites where you have to run my script - write, I might add. GetStarted update the site will be in the near future.




Small RoadMap (ToDo):
  • Finalization of NxtForum (SMF engine) plugin  that would just get away from jQuery
  • Replacing the video in the GetStarted as well as updated information
  • Creating a Twitter bot to implement features such as via twitter (idea xcn)
  • Integration with SuperNET (idea jl777)
  • Ability to create triggers for any accounts Nxt. Let me explain with an example: For example, you wrote a book and want to sell it using Nxt, it will need a profile on NxtTips specify the address (NXT-...) which will come to pay for the book, the minimum value (ie, any transaction with the amount more said falls under the right trigger) and action - such as sending the AM to the sender of the transaction. Thus, if the monitored address receives an amount equal to or greater than the cost of the book, he sent her a link to download as AM.
  • Maybe someday reach the hands to reddit
The order of development position is not fixed
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #76 on: December 13, 2014, 05:40:25 pm »

NxtTips plugin on SMF forum has been updated to version 1.0!

Lighter code, and you can now attach a message in every NXT tip you send
Logged

allwelder

  • Hero Member
  • *****
  • Karma: +196/-13
  • Offline Offline
  • Posts: 1867
  • NxtChina.org
    • View Profile
    • NxtChina.org
Re: Micro-payment service NxtTips
« Reply #77 on: December 13, 2014, 11:52:39 pm »

Chinese tutorial Shared on NxtChina and Nxtforum.
« Last Edit: December 13, 2014, 11:56:50 pm by allwelder »
Logged
NxtChina |Weibo |Twitter Donation welcomed:NXT-APL9-66GU-K8LY-B3JJJ

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #78 on: December 14, 2014, 08:23:56 am »

NxtTips plugin on SMF forum has been updated to version 1.0!

Lighter code, and you can now attach a message in every NXT tip you send

I've attached a message to my tip and it worked! Thanks a lot, that's a good feature!
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #79 on: December 14, 2014, 01:34:22 pm »

NxtTips plugin on SMF forum has been updated to version 1.0!
Lighter code, and you can now attach a message in every NXT tip you send
I've attached a message to my tip and it worked! Thanks a lot, that's a good feature!
Please. Very pleased to hear that the service useful.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #80 on: December 17, 2014, 01:55:44 pm »

In the next few days will open a new futures - sending tips using Twitter!
Logged

marek3ball

  • Sr. Member
  • ****
  • Karma: +31/-2
  • Offline Offline
  • Posts: 305
    • View Profile
Re: Micro-payment service NxtTips
« Reply #81 on: December 17, 2014, 02:34:29 pm »

 :o
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #82 on: December 19, 2014, 02:33:01 pm »

It happened! Now possible to send tips via twitter! To do this:
If all goes well, then after a while you will be able to send tips via twitter:

Code: [Select]
@nxt_tips NXT-FRNZ-PDJF-2CQT-DQ4WQ Thanks you for NxtTips, scor2k
send me a tips in the amount of NXT specified in your profile.



Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #83 on: December 22, 2014, 03:11:15 am »

The first 10 users who have added twitter account in the profile and make at least 1 tweet with tips -  receive 20 Nht as a gift.
Logged

TheCryptoWoman

  • Administrator
  • Hero Member
  • *****
  • Karma: +163/-26
  • Offline Offline
  • Posts: 622
    • View Profile
    • Twitter
Re: Micro-payment service NxtTips
« Reply #84 on: December 22, 2014, 12:00:50 pm »

I'm looking forward to trying this! But, one question: could we substitute an account alias to make composing the tweet easier?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #85 on: December 22, 2014, 03:13:28 pm »

I'm looking forward to trying this! But, one question: could we substitute an account alias to make composing the tweet easier?


I was thinking of making the ability to send tips using twitter alias, but has not yet come up with a twitter alias, and how to relate NXT address.


Use the internal NXT address - many people may not like it.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #86 on: March 03, 2015, 03:15:27 am »

Hi all!

After long time without domain ( we lost nxtex.net ) NxtTips resurrected with new address: https://tips.nxtex.info !
Also I send PM to forum moderator (VanBreuk) to update our plugin on NxtForum. I'll think that is happend in short time :)

Thanks for your waiting and patience ;)
Logged

kwilliams

  • Full Member
  • ***
  • Karma: +28/-3
  • Offline Offline
  • Posts: 226
  • NXT-FG7F-2W46-M7DE-EHPV5
    • View Profile
Re: Micro-payment service NxtTips
« Reply #87 on: June 15, 2015, 07:32:13 am »

How do I withdraw funds from my NXTTip account?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #88 on: June 15, 2015, 07:53:10 am »

How do I withdraw funds from my NXTTip account?
Hi.
Withdraw isn't allowed, but you can tip yourself :) You'll get all NXT except 2.
« Last Edit: June 15, 2015, 08:07:28 am by scor2k »
Logged

Zahlen

  • Full Member
  • ***
  • Karma: +26/-4
  • Offline Offline
  • Posts: 228
    • View Profile
Re: Micro-payment service NxtTips
« Reply #89 on: June 26, 2015, 11:46:52 am »

Hi scor2k, thanks for setting up a tipping service. I have an old tip offer bounty for it, just sent both you and NxtHaus (for his TipTap service) tips.

(Sorry it took me so long to get around to this! Heard about NxtTips last year, but then there were security issues, and I haven't been on nxtforum much since.)

Some feedback:
- PIN is great, but the TIPS-cookie is unintuitive. Would be nice if you can remove that step.
- [Bug?] After tipping you, I tried to 'make' a second tip, but got a blank pop-up window after clicking [Tip Me]. I put 'make' in quotes, because my account balance is now 0 (just wanted to test something), could it be due to that?
Logged

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: Micro-payment service NxtTips
« Reply #90 on: June 26, 2015, 12:07:05 pm »

...
- [Bug?] After tipping you, I tried to 'make' a second tip, but got a blank pop-up window after clicking [Tip Me]. I put 'make' in quotes, because my account balance is now 0 (just wanted to test something), could it be due to that?
- I can confirm this bug. It happens exactly when my tipping account went to zero. And it disappears after that account's refilling.
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #91 on: June 26, 2015, 01:35:07 pm »

Hi scor2k, thanks for setting up a tipping service. I have an old tip offer bounty for it, just sent both you and NxtHaus (for his TipTap service) tips.

(Sorry it took me so long to get around to this! Heard about NxtTips last year, but then there were security issues, and I haven't been on nxtforum much since.)

Some feedback:
- PIN is great, but the TIPS-cookie is unintuitive. Would be nice if you can remove that step.
- [Bug?] After tipping you, I tried to 'make' a second tip, but got a blank pop-up window after clicking [Tip Me]. I put 'make' in quotes, because my account balance is now 0 (just wanted to test something), could it be due to that?


Hi, Zahlen =)


Thanks for your tips to me.


PIN w/o any unique ID - it's easy way to lose your money...
I don't know about this bug with 'blank pop-up window', I'll try to fix it :)
Logged

Zahlen

  • Full Member
  • ***
  • Karma: +26/-4
  • Offline Offline
  • Posts: 228
    • View Profile
Re: Micro-payment service NxtTips
« Reply #92 on: June 26, 2015, 04:10:23 pm »

PIN w/o any unique ID - it's easy way to lose your money...

To me, security should be proportional to what's being protected. Anyone logged in to nxtforum has already gone through one layer of security: forum login. That's appropriate for protecting the ability to post under your forum name, and access to PMs. Anyone trying to tip (i.e. send $ out from a tipping account's balance) has gone through two layers: forum login + PIN, which IMO is appropriate to protect the (likely small) amount of $ in a tipping account. There shouldn't have to be more inconvenience to access it.

Are there more intuitive ways to link a user's site account to NxtTips? e.g. specifying your site account name in your NxtTips profile. Copypasting an authentication code is faster and fine for people like us who are used to this kind of thing and appreciate why it's important, but it's technical and unnatural for regular users. Remember all the problems people had with the public key requirement for new accounts.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #93 on: June 26, 2015, 06:22:05 pm »

PIN w/o any unique ID - it's easy way to lose your money...

To me, security should be proportional to what's being protected. Anyone logged in to nxtforum has already gone through one layer of security: forum login. That's appropriate for protecting the ability to post under your forum name, and access to PMs. Anyone trying to tip (i.e. send $ out from a tipping account's balance) has gone through two layers: forum login + PIN, which IMO is appropriate to protect the (likely small) amount of $ in a tipping account. There shouldn't have to be more inconvenience to access it.

Are there more intuitive ways to link a user's site account to NxtTips? e.g. specifying your site account name in your NxtTips profile. Copypasting an authentication code is faster and fine for people like us who are used to this kind of thing and appreciate why it's important, but it's technical and unnatural for regular users. Remember all the problems people had with the public key requirement for new accounts.


Thanks for your advice but NxtTips isn't only 4 nxtforum :) But your words give me some interesting (imho) ideas. I'll thinks about and may be change security system on the NxtTips service :)


Thank you.
Logged

xivba

  • Full Member
  • ***
  • Karma: +14/-2
  • Offline Offline
  • Posts: 127
    • View Profile
Re: Micro-payment service NxtTips
« Reply #94 on: November 24, 2015, 05:44:43 pm »

Hey!
Just tried out your tipping service.
It works pretty well. Only thing I could mention
is the dead nxtblocks.info service. Maybe you could
point tx info links to mynxt.info instead.
Thanks for good job!
« Last Edit: November 24, 2015, 05:47:58 pm by xivba »
Logged
NXT-33DU-8Q49-R2LY-FQRTG

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #95 on: November 24, 2015, 06:51:27 pm »

Hey!
Just tried out your tipping service.
It works pretty well. Only thing I could mention
is the dead nxtblocks.info service. Maybe you could
point tx info links to mynxt.info instead.
Thanks for good job!
Hi =)
Yes, I'll do this =)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #96 on: November 24, 2015, 07:30:03 pm »

Complited
Logged

crimi

  • Hero Member
  • *****
  • Karma: +122/-11
  • Offline Offline
  • Posts: 863
    • View Profile
Re: Micro-payment service NxtTips
« Reply #97 on: December 13, 2015, 10:49:46 am »

How do I withdraw funds from my NXTTip account?
Hi.
Withdraw isn't allowed, but you can tip yourself :) You'll get all NXT except 2.

I was looking to hard for a withdraw button. Got all my nxt now, just put to much tips in the tampermonkey script.  :D

Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #98 on: December 13, 2015, 07:05:48 pm »



I was looking to hard for a withdraw button. Got all my nxt now, just put to much tips in the tampermonkey script.  :D



Haha =) You hacked your account =) Very well ))) I cry about tips statistics... total balance less than zero :-D



Logged

crimi

  • Hero Member
  • *****
  • Karma: +122/-11
  • Offline Offline
  • Posts: 863
    • View Profile
Re: Micro-payment service NxtTips
« Reply #99 on: December 13, 2015, 07:19:56 pm »



I was looking to hard for a withdraw button. Got all my nxt now, just put to much tips in the tampermonkey script.  :D



Haha =) You hacked your account =) Very well ))) I cry about tips statistics... total balance less than zero :-D

I still got 19 Nxt on that account, tipping also doesnt work anymore for me on the forum, im just getting a blank window. Whats going on?   ::)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #100 on: December 13, 2015, 07:23:44 pm »



I was looking to hard for a withdraw button. Got all my nxt now, just put to much tips in the tampermonkey script.  :D



Haha =) You hacked your account =) Very well ))) I cry about tips statistics... total balance less than zero :-D

I still got 19 Nxt on that account, tipping also doesnt work anymore for me on the forum, im just getting a blank window. Whats going on?   ::)


19 NXT on tips account - it's service fee. If you need this tips-account, I can fix it 4 you.
Logged

crimi

  • Hero Member
  • *****
  • Karma: +122/-11
  • Offline Offline
  • Posts: 863
    • View Profile
Re: Micro-payment service NxtTips
« Reply #101 on: December 13, 2015, 07:30:48 pm »



I was looking to hard for a withdraw button. Got all my nxt now, just put to much tips in the tampermonkey script.  :D



Haha =) You hacked your account =) Very well ))) I cry about tips statistics... total balance less than zero :-D

I still got 19 Nxt on that account, tipping also doesnt work anymore for me on the forum, im just getting a blank window. Whats going on?   ::)


19 NXT on tips account - it's service fee. If you need this tips-account, I can fix it 4 you.

Fix the data please. :)
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #102 on: December 13, 2015, 07:48:35 pm »

Fix the data please. :)


Ok. I clear yours "hacking attempt" and now you have account with "-1 NXT" balance. You can deposit some Nxt and use service again.
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #103 on: April 26, 2016, 03:53:09 am »

Ladies and Gentlemen.

Thank you for that use (or attempted to) my services last two years. Now I have no way to keep them at the proper level, so I decided to close them.

Do not worry about your money on trading accounts - I'll give them all in the next few days. A report posted on the forum.

Best regards, Administrator of nxtex.info & tips.nxtex.info services.
Logged

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: Micro-payment service NxtTips
« Reply #104 on: April 26, 2016, 06:11:07 am »

Ladies and Gentlemen.

Thank you for that use (or attempted to) my services last two years. Now I have no way to keep them at the proper level, so I decided to close them.

Do not worry about your money on trading accounts - I'll give them all in the next few days. A report posted on the forum.

Best regards, Administrator of nxtex.info & tips.nxtex.info services.

I'm sorry that you leave!  :'(
I've used your tipping service several times and with pleasure. I'm sad that another great service of Nxt is closing down! Best wishes to you!
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #105 on: April 26, 2016, 06:38:08 am »

Ladies and Gentlemen.

Thank you for that use (or attempted to) my services last two years. Now I have no way to keep them at the proper level, so I decided to close them.

Do not worry about your money on trading accounts - I'll give them all in the next few days. A report posted on the forum.

Best regards, Administrator of nxtex.info & tips.nxtex.info services.

I'm sorry that you leave!  :'(
I've used your tipping service several times and with pleasure. I'm sad that another great service of Nxt is closing down! Best wishes to you!


Thank you for the kind words :)
Logged

apenzl

  • Hero Member
  • *****
  • Karma: +247/-10
  • Offline Offline
  • Posts: 2496
    • View Profile
    • Nxter.org
Re: Micro-payment service NxtTips
« Reply #106 on: April 26, 2016, 11:24:15 pm »

Hi scor2k,
I'm also sad that you're closing down the service. Please consider my PM.

farl4bit

  • Global Moderator
  • Hero Member
  • *****
  • Karma: +210/-45
  • Offline Offline
  • Posts: 3463
    • View Profile
    • Blockchain Twitter
Re: Micro-payment service NxtTips
« Reply #107 on: May 12, 2016, 01:40:55 pm »

Ladies and Gentlemen.

Thank you for that use (or attempted to) my services last two years. Now I have no way to keep them at the proper level, so I decided to close them.

Do not worry about your money on trading accounts - I'll give them all in the next few days. A report posted on the forum.

Best regards, Administrator of nxtex.info & tips.nxtex.info services.

Sad that you quit. And thanks for the service. How can I get my funds back btw?
Logged

scor2k

  • Full Member
  • ***
  • Karma: +23/-0
  • Offline Offline
  • Posts: 170
    • View Profile
Re: Micro-payment service NxtTips
« Reply #108 on: May 12, 2016, 01:45:59 pm »

Ladies and Gentlemen.

Thank you for that use (or attempted to) my services last two years. Now I have no way to keep them at the proper level, so I decided to close them.

Do not worry about your money on trading accounts - I'll give them all in the next few days. A report posted on the forum.

Best regards, Administrator of nxtex.info & tips.nxtex.info services.

Sad that you quit. And thanks for the service. How can I get my funds back btw?


Hi. Write me PM with your email and Nxt acc to send your Nxt.
Logged
Pages: 1 2 3 ... 6 [All]
 

elective-stereophonic
elective-stereophonic
assembly
assembly