全 44 件のコメント

[–]kvhnuke 6ポイント7ポイント  (7子コメント)

This is exactly why nobody should trust centralized systems such as ethereumwallet.org. Guys, there is a reason why ethereum is called "decentralized" and why do you want to insert a centralized system in the middle and break the whole system. Please stick to fully client side solutions similar to www.myetherwallet.com where the coder (me) cant steal your ether even if he/she wants to

[–]centralbankerblood 5ポイント6ポイント  (0子コメント)

yes and nobody wanted to audit your nice wallet, instead 1700 usds went to scammer. it's a shame

[–]DanDarden 3ポイント4ポイント  (5子コメント)

Not saying you would, but couldn't you or an intruder just change your code at any time to leak a copy of the generated keys? Running the code locally is better, but I think even the github code could be updated to leak keys to an external server. Wouldn't we need audited milestones with crc checks to be secure?

[–]tjade273 3ポイント4ポイント  (0子コメント)

The hash of each GitHub commit is unique, so if someone audits it at a checkpoint and people just use that version until the next version is audited, it should be secure.

[–]SundoshiNakatoto 2ポイント3ポイント  (1子コメント)

Yeah that's a SERIOUS concern. Exactly the same problem as above. The coder is saying to trust him. The ONLY sure way is to use the wallet offline (and generate transaction) and send the transaction online (sorta like using offline as a trezor)

[–]kvhnuke 0ポイント1ポイント  (0子コメント)

you can download the github code and run it locally, all functions except send transaction will work. Obviously you have to be connected to broadcast the transaction.

[–]kvhnuke 1ポイント2ポイント  (1子コメント)

code is hosted on github and transmitted via https, which will guarantee you are running the exact same code as the last commit in github. Yea I agree someone has to audit the code, we asked couple of times in reddit but no luck. Its time for community to decide!

[–]DanDarden 0ポイント1ポイント  (0子コメント)

That's pretty slick, never heard of that before. There are still attack vectors but nothing an audit and a local copy wouldn't solve. I have you bookmarked in my ethereum folder so will be following this project. Any chance we can get paper wallets with custom background image?

[–]portabello75 4ポイント5ポイント  (0子コメント)

Wait. So someone purchased etherwallet.org (a premium domain name worth a not trivial amount of money most likely), put the work into creating an actual functional wallet with a pretty decent design, spent weeks promoting it, and for what? $1400? What is this? Kindergarten?

[–]NewToETH 1ポイント2ポイント  (0子コメント)

Here's one of the addresses with a tiny amount of dust he stole from me. The majority of the funds stolen are associated with a separate address with only 1 tx. https://etherchain.org/account/0xa744989a3116beb348be2a3c8e8539a2306bd42f#txreceived

[–]NewToETH 2ポイント3ポイント  (1子コメント)

FYI this was talked about a few days ago: https://bitcointalk.org/index.php?topic=1161845.new;topicseen#new

All that "work" for $1700. Just doesn't seem like it's worth it.

[–]luddist 1ポイント2ポイント  (0子コメント)

If you want to secure crypto tokens/currencies, you have to run it yourself and own the keys.

[–]avsaEthereum - Alex van de Sande 3ポイント4ポイント  (0子コメント)

Meanwhile we are hard at work releasing a local wallet that doesn't rely on a third party trust: https://blog.ethereum.org/2015/09/16/ethereum-wallet-developer-preview/

I hope this is a big misunderstanding and the site comes back online: we built ethereum so you could trust contracts, not sites, and you should never trust a site that doesn't publish its contracts source code.

[–]centralbankerblood 3ポイント4ポイント  (9子コメント)

Part of the scam credits go to the mods of this sub, they were warned early on of the scam and ignored it, this scam wallet was posted here so many times (that alone would be giveway), so all the people who lost some eth please don't forget to thank the mods of the sub who made it possible. And let's not forget to thank the devs who failed to provide a crossplatform GUI wallet from day 1 of the launch.

27 days ago

the next post like this will come from someone using this scammer's

wallet

alandunkley

ethereum wallet . org

https://www.reddit.com/r/ethereum/comments/3ird55/holy_shit_my_eth_accounts_been_hacked/cujib1t

this scam artist was called out many times

Let's play this out. After all you want people trust you with their Ether

Is Alan Dunkley your real name? If not why use a fake name?

Where do you live?

What are your other projects that you contributed in the past?

Have you scammed in the past?

If I'm wrong expect an explicit and sincere apology from me

https://www.reddit.com/r/ethereum/comments/3irhbr/secure_web_wallet_for_ethereum_client_side_crypto/cujkswr

his funding is your ether, very simple

https://www.reddit.com/r/ethereum/comments/3irhbr/secure_web_wallet_for_ethereum_client_side_crypto/cuji77n

Anybody wants to hunt "Alan Dunkley"? it's not difficult :)

[–]carloscarlson 0ポイント1ポイント  (7子コメント)

How do you know who he is?

[–]centralbankerblood 0ポイント1ポイント  (6子コメント)

did research

[–]NewToETH 0ポイント1ポイント  (5子コメント)

Care to elaborate?

[–]centralbankerblood 0ポイント1ポイント  (4子コメント)

you cant start with whois and follow the leads

[–]NewToETH 0ポイント1ポイント  (3子コメント)

Ah, the first link I went to didn't have any info...

[–]portabello75 0ポイント1ポイント  (0子コメント)

Caveat Emptor. I agree that it could have been moderated better, but what does GUI wallet access have to do with anything? The project is in Beta (alpha) and the damn website says 'secure' (crossed out!) and mods have warned 100 times about using centralized services.

[–]NewToETH 0ポイント1ポイント  (3子コメント)

paging /u/alandunkley - I too use it for a hot wallet so I'd like to know the status.

[–]centralbankerblood 0ポイント1ポイント  (2子コメント)

if you click on the link you will see how many times the mods of this sub didn't delete his spam despite repeated warning and request.

i count 6 times in this sub alone! at least some subs had the decency to delete after reasonable warning

[–]NewToETH 0ポイント1ポイント  (1子コメント)

Yup. I remember when he first showed up. It's a shame. I guess Ethereum has their own scammer named Mark. Who lives in Poland?

[–]NewToETH 1ポイント2ポイント  (0子コメント)

I mean the Czech Republic.

[–]TomTreeLeaf[S] 0ポイント1ポイント  (3子コメント)

and there is no way to recover funds..........

[–]NewToETH 1ポイント2ポイント  (2子コメント)

Nope. I should have seen this coming (there were people warning others) but I did value the convenience with the limited amount of ETH I stored there. Still sucks.

[–]TomTreeLeaf[S] 0ポイント1ポイント  (1子コメント)

I hope he spends it well....... anything less is even more annoying. good luck Alan Dunkley - who ever you are.

[–]centralbankerblood 0ポイント1ポイント  (0子コメント)

it will be invested in the next scam

[–]carloscarlson 0ポイント1ポイント  (0子コメント)

Wow.

I had an argument with that guy weeks ago. He has since deleted all of his comments?

Also explained why it felt fishy. But somehow in the back of my head, I still believed that it might be an honest guy who was just being dumb.

Fucking asshole. Good riddance. I'm sorry for anyone who's money was stolen.

[–]NewToETH 1ポイント2ポイント  (9子コメント)

Yup. All funds are stolen.

[–]randumfate1 1ポイント2ポイント  (2子コメント)

I check my address and all my funds are still there. Maybe he just hasn't gotten to them yet. Is there any way to move them from that address?

[–]NewToETH 1ポイント2ポイント  (1子コメント)

Well that's good. Wish I was as lucky. Maybe you can download the site from Github and run it locally using your recovery phrase? Not sure how you'd get your private key so you can send a tx out of that address though.

[–]randumfate1 0ポイント1ポイント  (0子コメント)

Thanks. That's better than any idea I've had so far. I'll give it a shot and see if I works. If I can't, not the end of the world.

I will definitely be less trusting in the future.

[–]TomTreeLeaf[S] 0ポイント1ポイント  (4子コメント)

how do you know for sure? whats the upshot.......

[–]NewToETH 1ポイント2ポイント  (3子コメント)

Check your address. He stole them 2 days ago.

[–]Sherlockcoin 0ポイント1ポイント  (2子コメント)

What? Are u sure?

[–]NewToETH 0ポイント1ポイント  (1子コメント)

Positive. I used the wallet 3 days ago to do a transaction for a ETH shirt and there are 2 other transactions, 1 to clear most of the value and another for the remaining bits. Funds haven't moved since though.

[–]IchNameleTonP -1ポイント0ポイント  (0子コメント)

My 100ETH~ are still in my ethereumwallet.org address at time of writing... i understand Ether Dev and community are very busy but it would be ideal to have this matter dealt with.

Thanks in advance

PS @randumfate1 hope you got you found a way to get the funds out for both our sakes! do share if you found a way :/ Thanks again.