\[SCAM\] Feathercoin Messenger

ghitzafunny

[quote name=“ChekaZ” post=“49310” timestamp=“1388702260”]
[quote author=ghitzafunny link=topic=6584.msg49309#msg49309 date=1388702095]
Thanks ! the wallet qt should have an onscreen keyboard to avoid stealing the pass phrase via a keylogger
[/quote]

Thats actually a nice idea!
[/quote]
I always use the stock on screen keyboard from windows os , but is a bit annoying to make 5-6 clicks to open that keyboard , just for a microtransaction , implementing one into the qt would be big security improvement

Kevlar

[quote name=“slavco” post=“49312” timestamp=“1388702831”]
[quote author=ChekaZ link=topic=6584.msg49310#msg49310 date=1388702260]
[quote author=ghitzafunny link=topic=6584.msg49309#msg49309 date=1388702095]
Thanks ! the wallet qt should have an onscreen keyboard to avoid stealing the pass phrase via a keylogger
[/quote]

Thats actually a nice idea!
[/quote]

+1 and we need functionality in a qt client ( a good tutorial ) how to create transactions offline via cold storage wallet without risk of loosing funds. :)
[/quote]

Can do!

Make a new address in your favorite wallet:

[quote]
[offline]$ xcoind getnewaddress
n1gqLjZbRH1biT5o4qiVMiNig8wcCPQeB9
[/quote]

Then, send it 50 coins:

[quote]
[online]$ xcoind sendtoaddress n1gqLjZbRH1biT5o4qiVMiNig8wcCPQeB9 50
a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c
[/quote]

Now, grab the transaction that was paying it. We’ll need the txid, and the scriptpubkey paying our offline wallet.

[quote]
[online]$ xcoind getrawtransaction a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c 1
{
“hex” : “0100000001344630cbff61fbc362f7e1ff2f11a344c29326e4ee96e787dc0d4e5cc02fd069000000004a493046022100ef89701f460e8660c80808a162bbf2d676f40a331a243592c36d6bd1f81d6bdf022100d29c072f1b18e59caba6e1f0b8cadeb373fd33a25feded746832ec179880c23901ffffffff0100f2052a010000001976a914dd40dedd8f7e37466624c4dacc6362d8e7be23dd88ac00000000”,
“txid” : “a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c”,
“version” : 1,
“locktime” : 0,
“vin” : [
{
“txid” : “69d02fc05c4e0ddc87e796eee42693c244a3112fffe1f762c3fb61ffcb304634”,
“vout” : 0,
“scriptSig” : {
“asm” : “3046022100ef89701f460e8660c80808a162bbf2d676f40a331a243592c36d6bd1f81d6bdf022100d29c072f1b18e59caba6e1f0b8cadeb373fd33a25feded746832ec179880c23901”,
“hex” : “493046022100ef89701f460e8660c80808a162bbf2d676f40a331a243592c36d6bd1f81d6bdf022100d29c072f1b18e59caba6e1f0b8cadeb373fd33a25feded746832ec179880c23901”
},
“sequence” : 4294967295
}
],
“vout” : [
{
“value” : 50.00000000,
“n” : 0,
“scriptPubKey” : {
“asm” : “OP_DUP OP_HASH160 dd40dedd8f7e37466624c4dacc6362d8e7be23dd OP_EQUALVERIFY OP_CHECKSIG”,
“hex” : “76a914dd40dedd8f7e37466624c4dacc6362d8e7be23dd88ac”,
“reqSigs” : 1,
“type” : “pubkeyhash”,
“addresses” : [
“n1gqLjZbRH1biT5o4qiVMiNig8wcCPQeB9”
]
}
}
]
}
[/quote]

And lets get an address to return those coins to:

[quote]
[online]$ xcoind getnewaddress
mkZBYBiq6DNoQEKakpMJegyDbw2YiNQnHT
[/quote]

Now, from our online node we’re going to draft the transaction to return the coin from the offline wallet to the online one:

[quote]
[online]$ xcoind createrawtransaction ‘[{“txid”:“a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c”,“vout”:0}]’ ‘{“mkZBYBiq6DNoQEKakpMJegyDbw2YiNQnHT”:50}’
01000000010c432f4fb3e871a8bda638350b3d5c698cf431db8d6031b53e3fb5159e59d4a90000000000ffffffff0100f2052a010000001976a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac00000000
[/quote]

One the offline wallet we decode the transaction to validate that its doing what we expect. Note: Since we don’t have the input transaction we don’t know the input value and this txn could be paying a ton of change out to fees.

[quote]
[offline]$ xcoind decoderawtransaction 01000000010c432f4fb3e871a8bda638350b3d5c698cf431db8d6031b53e3fb5159e59d4a90000000000ffffffff0100f2052a010000001976a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac00000000
{
“txid” : “d9f33ed2740eef77e40e72b692c4cf1feb6ab10d8adaaf27eb394fa5064b1160”,
“version” : 1,
“locktime” : 0,
“vin” : [
{
“txid” : “a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c”,
“vout” : 0,
“scriptSig” : {
“asm” : “”,
“hex” : “”
},
“sequence” : 4294967295
}
],
“vout” : [
{
“value” : 50.00000000,
“n” : 0,
“scriptPubKey” : {
“asm” : “OP_DUP OP_HASH160 3744841e13b90b4aca16fe793a7f88da3a23cc71 OP_EQUALVERIFY OP_CHECKSIG”,
“hex” : “76a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac”,
“reqSigs” : 1,
“type” : “pubkeyhash”,
“addresses” : [
“mkZBYBiq6DNoQEKakpMJegyDbw2YiNQnHT”
]
}
}
]
}
[/quote]

If we’re happy, we’ll sign. We need to provide the scriptpubkey of the inputs we’re signing so our offline wallet knows which of its keys to use.

[quote]
[offline]$ xcoind signrawtransaction 01000000010c432f4fb3e871a8bda638350b3d5c698cf431db8d6031b53e3fb5159e59d4a90000000000ffffffff0100f2052a010000001976a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac00000000 ‘[{“txid”:“a9d4599e15b53f3eb531608ddb31f48c695c3d0b3538a6bda871e8b34f2f430c”,“vout”:0,“scriptPubKey”:“76a914dd40dedd8f7e37466624c4dacc6362d8e7be23dd88ac”}]’
{
“hex” : “01000000010c432f4fb3e871a8bda638350b3d5c698cf431db8d6031b53e3fb5159e59d4a9000000006b48304502201123d735229382f75496e84ae5831871796ef78726805adc2c6edd36d23e7210022100faceab822a4943309c4b6b61240ae3a9e18ed90a75117c5dc4bfd8f7e17a21d301210367ce0a1c3b3e84cece6dad1a181d989d8e490b84f5431a1f778a88b284c935e6ffffffff0100f2052a010000001976a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac00000000”,
“complete” : true
}
[/quote]

Then we’ll carry the transaction over to the online wallet and announce it:

[quote]
[online]$ xcoind sendrawtransaction 01000000010c432f4fb3e871a8bda638350b3d5c698cf431db8d6031b53e3fb5159e59d4a9000000006b48304502201123d735229382f75496e84ae5831871796ef78726805adc2c6edd36d23e7210022100faceab822a4943309c4b6b61240ae3a9e18ed90a75117c5dc4bfd8f7e17a21d301210367ce0a1c3b3e84cece6dad1a181d989d8e490b84f5431a1f778a88b284c935e6ffffffff0100f2052a010000001976a9143744841e13b90b4aca16fe793a7f88da3a23cc7188ac00000000
7822dda72d9bf421d2f3eedc678bf58c6e4c10cdd047b9e137559ad384933ef5
[/quote]

And we can see the online wallet has been paid:

[quote]
[online]$ xcoind listtransactions “” 1
[
{
“account” : “”,
“address” : “mkZBYBiq6DNoQEKakpMJegyDbw2YiNQnHT”,
“category” : “receive”,
“amount” : 50.00000000,
“confirmations” : 0,
“txid” : “7822dda72d9bf421d2f3eedc678bf58c6e4c10cdd047b9e137559ad384933ef5”,
“time” : 1344221517
}
]
[/quote]

Cheers ChekaZ and Kevlar. +1 to the both of you.

It seemed pretty sus from square one. I don’t think anyone would of run it here. I would like to think were all pretty clued in.

I would like to make a suggestion.

A catagory listing all known scams, maybe even a thread in there listing known scammers…

A whole catagory that has confirmed stuff pinned and anything that needs looking into is obviously not pinned.

Also it would have a pinned article that gives new comers some general safety advice. Like the “do not click any links inside pm’s” thread but more thorough.

Or something along those lines. There will be more and more of this stuff in the future undoubtedly. The last thing we need is something like this messenger making it onto the board.

I think it would be a good to idea to have any new people joining up to getting linked there along with the whole, add yourself to the map, etcetcetc. Heck, just made me think, is there a way to have an automated welcome message or email sent to someone after there first post linking them to the page alongside with the forum rules page, general faqs page etc?

slavco

[quote name=“Kevlar” post=“49315” timestamp=“1388703365”]
[quote author=slavco link=topic=6584.msg49312#msg49312 date=1388702831]
[quote author=ChekaZ link=topic=6584.msg49310#msg49310 date=1388702260]
[quote author=ghitzafunny link=topic=6584.msg49309#msg49309 date=1388702095]
Thanks ! the wallet qt should have an onscreen keyboard to avoid stealing the pass phrase via a keylogger
[/quote]