#web3isgoinggreat — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #web3isgoinggreat, aggregated by home.social.
-
This might be the best video that @TechConnectify has ever done, and he's done some great ones. Take the time to watch this. It's worth a half-hour.
-
This might be the best video that @TechConnectify has ever done, and he's done some great ones. Take the time to watch this. It's worth a half-hour.
-
Now that #Web3 is thankfully not going so great, maybe it's time to reclaim the word for all the projects and individual endeavors that are working on bringing back the fun to the web, beyond the walled gardens of big tech.
#web3isgoinggreat -
Now that #Web3 is thankfully not going so great, maybe it's time to reclaim the word for all the projects and individual endeavors that are working on bringing back the fun to the web, beyond the walled gardens of big tech.
#web3isgoinggreat -
Looks like the original client ID is taken care of, but the phishers just cycle through clients -- still with the same display name, mind you:
19fdc124-ddf3-4c5f-bdaf-4d5a079b9c2b
Third Party: Support
#Coinbase, maybe you shouldn't be allowed to spin up OAuth apps without human approval in the loop. Or at least, disallow display names like "Third Party: Support".
The underlying infrastructure these scammers are using is still the same. Coinbase could make a point of automatically monitoring it and auto-banning any client ID they use.
Maybe I'll do that myself, just to prove a point.
-
Looks like the original client ID is taken care of, but the phishers just cycle through clients -- still with the same display name, mind you:
19fdc124-ddf3-4c5f-bdaf-4d5a079b9c2b
Third Party: Support
#Coinbase, maybe you shouldn't be allowed to spin up OAuth apps without human approval in the loop. Or at least, disallow display names like "Third Party: Support".
The underlying infrastructure these scammers are using is still the same. Coinbase could make a point of automatically monitoring it and auto-banning any client ID they use.
Maybe I'll do that myself, just to prove a point.
-
Whelp, six hours later and the OAuth client is still active :( Odds are good that, at this point, most of the victims have been successfully phished. You really need fast response times to get ahead of these campaigns. #web3isgoinggreat
-
Whelp, six hours later and the OAuth client is still active :( Odds are good that, at this point, most of the victims have been successfully phished. You really need fast response times to get ahead of these campaigns. #web3isgoinggreat
-
Chat told me to email [email protected] with the full phishing email. Sent them an .eml file along with a link to this thread.
There. I did my good deed for the day. I despise what #cryptocurrency has become, but I also despise scammers that seek to steal from those they can fool.
-
Chat told me to email [email protected] with the full phishing email. Sent them an .eml file along with a link to this thread.
There. I did my good deed for the day. I despise what #cryptocurrency has become, but I also despise scammers that seek to steal from those they can fool.
-
What's this? A phishing email that doesn't get any spelling or grammar wrong? Impressive.
The URL included in the email has a redirect to:
https://newkste66f02.s3.amazonaws.com/44b5cfb3.html
Which just has this in the HTML:
```
window.location.assign("https://jademountains.net/s2");
```Which redirs with an appended slash:
Which redirs to
https://coinbase-v3teamapp.com/signin/consent_challenge=ca1ccf26-a61b-4133-952d-aba54aa249a9
Which isn't a legit coinbase domain -- URL registered today. Which resolves to a blank page with a single javascript payload:
https://coinbase-v3teamapp.com//static/js/main.401607d2.js
Which appears to be a React app, which then ultimately triggers a load of this URL, which includes a list of desired OAuth scopes:
https://login.coinbase.com/oauth2/auth?response_type=code&client_id=${e.data.data.clientId}&redirect_uri=${e.data.data.redirectURI}&account=all&scope=wallet:accounts:read,wallet:accounts:update,wallet:accounts:create,wallet:accounts:delete,wallet:addresses:read,wallet:addresses:create,wallet:buys:read,wallet:buys:create,wallet:deposits:read,wallet:deposits:create,wallet:notifications:read,wallet:payment-methods:read,wallet:payment-methods:delete,wallet:payment-methods:limits,wallet:sells:read,wallet:sells:create,wallet:transactions:read,wallet:transactions:send,wallet:transactions:request,wallet:transactions:transfer,wallet:user:read,wallet:user:update,wallet:user:email,wallet:withdrawals:read,wallet:withdrawals:create,offline_access
Which, cleaned up, is this:
wallet:accounts:read
wallet:accounts:update
wallet:accounts:create
wallet:accounts:delete
wallet:addresses:read
wallet:addresses:create
wallet:buys:read
wallet:buys:create
wallet:deposits:read
wallet:deposits:create
wallet:notifications:read
wallet:payment-methods:read
wallet:payment-methods:delete
wallet:payment-methods:limits
wallet:sells:read
wallet:sells:create
wallet:transactions:read
wallet:transactions:send
wallet:transactions:request
wallet:transactions:transfer
wallet:user:read
wallet:user:update
wallet:user:email
wallet:withdrawals:read
wallet:withdrawals:create
offline_accessWhich is, I'd assume, basically everything, including the ability to withdraw:
wallet:withdrawals:read
wallet:withdrawals:createBefore ultimately ending up at what appears to be a coinbase-owned domain:
```
$ dig -t A coinbase.com +short
104.18.35.15
172.64.152.241
$ dig -t A login.coinbase.com +short
172.64.152.241
104.18.35.15
```The OAuth bits of the URL tell me that this must be a third-party Coinbase app. Can't find an easy way to map that client ID of
c300bb46-07f8-4257-9760-a892c704a8b6
back to an app page though to report it.
What the hell. I'll bite. I don't have anything in Coinbase anymore. Let's see if I can't get the actual app and report it.
Logging in... SMS 2-factor, Email 3rd factor.
Aaaaaand BINGO. The third-party app is named
"Third Party: Support"
However, searching for that in Coinbase's app search yields... nothing. Great job, Coinbase.
Okay, how do I go about reporting this to them? Looks like there's a chat option. Fine. Gonna use this post as my description of what's going on.
-
What's this? A phishing email that doesn't get any spelling or grammar wrong? Impressive.
The URL included in the email has a redirect to:
https://newkste66f02.s3.amazonaws.com/44b5cfb3.html
Which just has this in the HTML:
```
window.location.assign("https://jademountains.net/s2");
```Which redirs with an appended slash:
Which redirs to
https://coinbase-v3teamapp.com/signin/consent_challenge=ca1ccf26-a61b-4133-952d-aba54aa249a9
Which isn't a legit coinbase domain -- URL registered today. Which resolves to a blank page with a single javascript payload:
https://coinbase-v3teamapp.com//static/js/main.401607d2.js
Which appears to be a React app, which then ultimately triggers a load of this URL, which includes a list of desired OAuth scopes:
https://login.coinbase.com/oauth2/auth?response_type=code&client_id=${e.data.data.clientId}&redirect_uri=${e.data.data.redirectURI}&account=all&scope=wallet:accounts:read,wallet:accounts:update,wallet:accounts:create,wallet:accounts:delete,wallet:addresses:read,wallet:addresses:create,wallet:buys:read,wallet:buys:create,wallet:deposits:read,wallet:deposits:create,wallet:notifications:read,wallet:payment-methods:read,wallet:payment-methods:delete,wallet:payment-methods:limits,wallet:sells:read,wallet:sells:create,wallet:transactions:read,wallet:transactions:send,wallet:transactions:request,wallet:transactions:transfer,wallet:user:read,wallet:user:update,wallet:user:email,wallet:withdrawals:read,wallet:withdrawals:create,offline_access
Which, cleaned up, is this:
wallet:accounts:read
wallet:accounts:update
wallet:accounts:create
wallet:accounts:delete
wallet:addresses:read
wallet:addresses:create
wallet:buys:read
wallet:buys:create
wallet:deposits:read
wallet:deposits:create
wallet:notifications:read
wallet:payment-methods:read
wallet:payment-methods:delete
wallet:payment-methods:limits
wallet:sells:read
wallet:sells:create
wallet:transactions:read
wallet:transactions:send
wallet:transactions:request
wallet:transactions:transfer
wallet:user:read
wallet:user:update
wallet:user:email
wallet:withdrawals:read
wallet:withdrawals:create
offline_accessWhich is, I'd assume, basically everything, including the ability to withdraw:
wallet:withdrawals:read
wallet:withdrawals:createBefore ultimately ending up at what appears to be a coinbase-owned domain:
```
$ dig -t A coinbase.com +short
104.18.35.15
172.64.152.241
$ dig -t A login.coinbase.com +short
172.64.152.241
104.18.35.15
```The OAuth bits of the URL tell me that this must be a third-party Coinbase app. Can't find an easy way to map that client ID of
c300bb46-07f8-4257-9760-a892c704a8b6
back to an app page though to report it.
What the hell. I'll bite. I don't have anything in Coinbase anymore. Let's see if I can't get the actual app and report it.
Logging in... SMS 2-factor, Email 3rd factor.
Aaaaaand BINGO. The third-party app is named
"Third Party: Support"
However, searching for that in Coinbase's app search yields... nothing. Great job, Coinbase.
Okay, how do I go about reporting this to them? Looks like there's a chat option. Fine. Gonna use this post as my description of what's going on.
-
Just found this fascinating article over at the always wonderful Smart Bitches Trashy Books about a really interesting deep dive into AI narrators and library books:
smartbitchestrashybooks.com/2024/10/ai-audiobook-narrators-in-overdrive-and-the-issue-of-library-ai-circulation-policy/
Thanks to divergentrays.com/blog/posts/2024-10-27-Weekly-Wrap-Up-30 for the link!
I can't say I'm surprised, but I think it's always helpful to see the way these things work behind the scenes and to know what to look for. I read a lot of genre fiction myself, and have been digging through the self published books for years now. A good number of them do have that smell of "for the algorithm" about them, and are always found at the bottom of the stacks, or in the free sections. Before LLMs, I believe most of these were being written by content mills for the express purpose of making money and getting clicks, so it's only logical that they would move on to AI generation instead. But with content mills, at least a real person was getting paid at some point in the process, right?
#web3isgoinggreat #AI #AIart #LLM #noAIcontent #selfpublishing #books #amazon -
Please, spread the news to everyone you know that uses bluesky.
Bluesky has added Blockchain Capital, who gave them 15 million dollars, as a board member, meaning theyre selling seats on the board for money.
They may say they dont want anything to do with web3, but adding a web3 representative to the board of directors says otherwise.
They also announced subscriptions for things like avatar frames or profile colors, something similar to what Discord does with Nitro.
https://bsky.social/about/blog/10-24-2024-series-a
https://www.blockchaincapital.com/blog/bluesky-13m-users-and-growing-our-investment-in-blueskys-re-imagined-social-network#bluesky #twittermigration #web3isgoinggreat #mastodonmigration #blueskymigration
-
Please, spread the news to everyone you know that uses bluesky.
Bluesky has added Blockchain Capital, who gave them 15 million dollars, as a board member, meaning theyre selling seats on the board for money.
They may say they dont want anything to do with web3, but adding a web3 representative to the board of directors says otherwise.
They also announced subscriptions for things like avatar frames or profile colors, something similar to what Discord does with Nitro.
https://bsky.social/about/blog/10-24-2024-series-a
https://www.blockchaincapital.com/blog/bluesky-13m-users-and-growing-our-investment-in-blueskys-re-imagined-social-network#bluesky #twittermigration #web3isgoinggreat #mastodonmigration #blueskymigration
-
@paninid lol - these #Web3IsGoingGreat dudebros are quite the clowns! 😂
-
@paninid lol - these #Web3IsGoingGreat dudebros are quite the clowns! 😂
-
@web3isgreat #FCSchaffhausen Ex-sponsor #Berformance: 6 persons, including chairman Christian Lux #arrested for scamming 109 millions from investors. They promised huge profits with #crypto machines.
History:
1.) https://www.shaz.ch/2023/09/28/das-system-berformance-undercover/
2.) https://www.shaz.ch/2024/01/20/berformance-vor-dem-aus/ -
@web3isgreat #FCSchaffhausen Ex-sponsor #Berformance: 6 persons, including chairman Christian Lux #arrested for scamming 109 millions from investors. They promised huge profits with #crypto machines.
History:
1.) https://www.shaz.ch/2023/09/28/das-system-berformance-undercover/
2.) https://www.shaz.ch/2024/01/20/berformance-vor-dem-aus/ -
Because money
Summary :
The tea.xyz protocol plan to reward open source software contributors resulted in crypto enthusiasts with no intention of participating in OSS opening endless pull requests to claim ownership of prominent OSS projects. This spam was disruptive to said projects, whose (usually volunteer) maintainers had to figure out what was going on and then try to stop the spammy PRs.https://www.web3isgoinggreat.com/single/teaxyz-causes-open-source-software-spam-problems-again
-
Because money
Summary :
The tea.xyz protocol plan to reward open source software contributors resulted in crypto enthusiasts with no intention of participating in OSS opening endless pull requests to claim ownership of prominent OSS projects. This spam was disruptive to said projects, whose (usually volunteer) maintainers had to figure out what was going on and then try to stop the spammy PRs.https://www.web3isgoinggreat.com/single/teaxyz-causes-open-source-software-spam-problems-again
-
Cryptocurrency fraudster Bankman-Fried is now being sentenced, will soon find out how long he is in prison:
https://www.theguardian.com/business/live/2024/mar/28/sam-bankman-fried-ftx-sentencing-live-updates
To manage expectations, the prosecutors have asked for 40-50 years while the defence asked for 6 years. (The headlines about 100 years are only a theoretical maximum, no one is actually asking for that.)
-
Cryptocurrency fraudster Bankman-Fried is now being sentenced, will soon find out how long he is in prison:
https://www.theguardian.com/business/live/2024/mar/28/sam-bankman-fried-ftx-sentencing-live-updates
To manage expectations, the prosecutors have asked for 40-50 years while the defence asked for 6 years. (The headlines about 100 years are only a theoretical maximum, no one is actually asking for that.)
-
I've now received 3 separate emails asking me to sell my potential share of the upcoming Fluence Network cryptocurrency airdrop. This project aims at rewarding the "~110,000 developers who contributed into open source web3 repositories during last year" according to the project webpage. In order to do this "Public keys of selected Github accounts were added into a smart contract on Ethereum" which they stored in a single file hosted on AWS that their own "install" script fetches in order to generate proof of GitHub account ownership.
So you can check any GitHub account eligibility on the Fluence website, of course, but you can also obtain the conveniently complete list of 108,615 eligible GitHub accounts to spam with your stupid cryptocurrency acquisition request. I've pulled down my email address from my public profile in the hope that it will stem the tide, but that's yet another possibly well-meaning Web3 project that ends up abused within seconds of its inception because of poorly thought-out process.
Also I never contributed to any web3 repository, so I'm vaguely curious how they compiled this list of accounts but not that much either.
-
@lasagne @[email protected] @finkd
Ohh, I tried @elonmusk but they never did an avatar so probably a good bet, nah, no Elmo there on #web3isgoinggreat ... Yet.
-
@lasagne @[email protected] @finkd
Ohh, I tried @elonmusk but they never did an avatar so probably a good bet, nah, no Elmo there on #web3isgoinggreat ... Yet.
-
How many people in #infosec are worried that @elonmusk is just gonna date the #Telegram or #Signal or #Discord Chief Privacy Officer for repopulating his #MarsExpidition .....
or perhaps @finkd's
#CryptoBucks PM is getting an eye on them....Perhaps they are just helping his #GFY #Web3IsGoingGreat 'kitchen sink' #PrivateEquity devalue his loan to remix the alt-riechtZ 'help build back the Berlin wall of #BlueCheckMarks ' on #Xittler as a pivot? 🤔
-
How many people in #infosec are worried that @elonmusk is just gonna date the #Telegram or #Signal or #Discord Chief Privacy Officer for repopulating his #MarsExpidition .....
or perhaps @finkd's
#CryptoBucks PM is getting an eye on them....Perhaps they are just helping his #GFY #Web3IsGoingGreat 'kitchen sink' #PrivateEquity devalue his loan to remix the alt-riechtZ 'help build back the Berlin wall of #BlueCheckMarks ' on #Xittler as a pivot? 🤔
-
Kryptogeld: Millionenbeute nach sechs Sekunden - wegen eines Copy&Paste Rundungsfehlers! Alles sowas von vertrauenswürdig! #CryptoScam #Web3IsGoingGreat https://www.heise.de/news/Kryptogeld-Millionenbeute-nach-sechs-Sekunden-9586601.html?wt_mc=rss.red.ho.ho.rdf.beitrag.beitrag
-
I knew that Bitcoin was still going strong despite the collapse of many of its #cryptocurrency siblings -- there's a lot more established "infrastructure" and money propping it up -- but I hadn't realized just how nuts the cryptosystem is, particularly in Texas.
I suppose North America should be grateful Texas isolated its power grid.
-
#Bauhaus #Mannheim hat einen Datenreichtum:
Habe ihr schon mal mit der Bauhaus Plus-Card bestellt?
Kundendaten der Baumarktkette konnten durch einen Programmierfehler eingesehen werden – und entwickelten dann ein Eigenleben bei Bing Chat.
Mit Kenntnis einer Bestellnummer, die sich leicht über die Produktliste des Onlineshops ermitteln lässt, konnten vorliegende Bestelldaten, die die Rechnungs- und Lieferadresse des Bestellers sowie die Zahlungsart umfassten, für die jeweiligen Personen abgerufen werden. Eine stichprobenartige Überprüfung ergab Daten, die bis in das Jahr 2021 zurückreichten. Wie lange das Datenleck existierte und wie viele Plus-Card-Kunden betroffen waren, konnte nicht ermittelt werden.
Immerhin, schnell reagiert haben sie, sollte lobend erwähnt werden. Allerdings kommt hier der Bing Cache ins Spiel 🥳
Mit etwas Glück könnten eure Daten noch in Microsofts AI Lösung BIng Chat gelandet sein.
-
The newest scam on the crappy nightmare app called "Facebook" appears to be fake stores holding fake "going out of business sales."
Holding a fake "going out of business" sale is against the law in many states, including Pennsylvania. Does Facebook care? No. Facebook doesn't give a single fk. #Web3isGoingGreat #LateStageSocialMedia
-
Hmm... ah yes, let me just rotate my device.
I should try my SteamDeck next to see if it has any issues.
-
What better way to commemorate that day 13 years ago when someone bought fake pizza with fake money than with these “funny because they’re true” bingo cards?
#Bitcoin #pizza #BitcoinPizzaDay #scams #Buttcoin #crypto #cryptocurrency #web3 #bingo #Web3IsGoingJustGreat #Web3IsGoingGreat
https://www.globalnerdy.com/2023/05/22/enjoy-molly-whites-web3-bingo-cards-on-bitcoin-pizza-day/
-
Today in High-Quality Facebook Advertising:
-
I must have gotten 20 ads on Facebook over the last two days for this crap. This is the kind of advertiser who's now heavily using Facebook. Good job, Zuck
-
Really high quality advertisers on Facebook these days, good job, Zuck #web3isgoinggreat
-
ICYMI someone „bought“ a 1 sec #fart sound as #NFT for ~200 000 USD and I think this is the best metaphor for #web3.
https://web3isgoinggreat.com/?id=fart-noise-reportedly-sells-for-280000-in-bitcoins-own-nft-mania
#Blockchain #Bitcoin #web3isgoinggreat „#crypto“ #coins #cryptocoin #web3 #bullshittery
-
ICYMI someone „bought“ a 1 sec #fart sound as #NFT for ~200 000 USD and I think this is the best metaphor for #web3.
https://web3isgoinggreat.com/?id=fart-noise-reportedly-sells-for-280000-in-bitcoins-own-nft-mania
#Blockchain #Bitcoin #web3isgoinggreat „#crypto“ #coins #cryptocoin #web3 #bullshittery
-
Why is Sam Bankman-Fried (SBF) still not in jail yet? (Despite arguably violating parole, at least in spirit if not in letter-of-law?)
https://newsletter.mollywhite.net/p/i-asked-popehat-why-isnt-sbf-in-jail
#FTXscam #Cryptocurrency #Blockchain #MollyWhite #Web3IsGoingGreat #Newsletter / #fz_links -
@jack @molly0xfff
Regular old ridesharing app with even less privacy and even more dubiousness around problem resolution. #web3isgoinggreat -
WOW!!! This is "aged like milk" on a whole 'nuther level!!!
I was cleaning up some old emails at work and ran across this BEAUTY.
Guys, this is really breathaking!! lol
-
WOW!!! This is "aged like milk" on a whole 'nuther level!!!
I was cleaning up some old emails at work and ran across this BEAUTY.
Guys, this is really breathaking!! lol
-
It's mostly crime (both organized and not organized, but not easy to prove) and destroys the planet as a side effect. These companies make America worse, not better.
Cryptocurrency shouldn't be regulated, it should be banned
https://hachyderm.io/@molly0xfff/109863915694499617
--
#Congress #Web3IsGoingGreat -
It's mostly crime (both organized and not organized, but not easy to prove) and destroys the planet as a side effect. These companies make America worse, not better.
Cryptocurrency shouldn't be regulated, it should be banned
https://hachyderm.io/@molly0xfff/109863915694499617
--
#Congress #Web3IsGoingGreat -
@molly0xfff Did you see this #Web3isGoingGreat story? $4 million in cryptocurrency stolen by unknown mechanism. https://www.theregister.com/2023/02/08/webaverse_crypto_stolen/
-
@molly0xfff Did you see this #Web3isGoingGreat story? $4 million in cryptocurrency stolen by unknown mechanism. https://www.theregister.com/2023/02/08/webaverse_crypto_stolen/
-
I really want to ignore threat group activity on blockchains. That whole facet of the internet is a joke but the amount of money they're moving isn't which is why we have to keep tabs on them. At least there's web3isgoinggreat to reaffirm it's a constant downfall.
#CyberCrime #Web3IsGoingGreat -
I really want to ignore threat group activity on blockchains. That whole facet of the internet is a joke but the amount of money they're moving isn't which is why we have to keep tabs on them. At least there's web3isgoinggreat to reaffirm it's a constant downfall.
#CyberCrime #Web3IsGoingGreat -
Luke Dash, one of the core developers of #Bitcoin just got all his Bitcoins stolen.
Yeah #crypto is clearly the future, and everyone should trust it ... NOT!!! Don't do crypto, kids!
https://twitter.com/lukedashjr/status/1609613748364509184?s=46&t=klvkOOwbDoxl4nFCwUkUYA
-
Luke Dash, one of the core developers of #Bitcoin just got all his Bitcoins stolen.
Yeah #crypto is clearly the future, and everyone should trust it ... NOT!!! Don't do crypto, kids!
https://twitter.com/lukedashjr/status/1609613748364509184?s=46&t=klvkOOwbDoxl4nFCwUkUYA
-
did a little bit of analysis on the tax loss harvesting service for NFTs that i wrote up in @web3isgreat earlier today (https://indieweb.social/@web3isgreat/109598229124887467).
so far they've purchased almost 5,500 NFTs.
the most expensive NFT to have been sent to the service was one that sold for around $12,000 in January 2022. it's #78 from the "The Crypt (Army of the Dead)" collection. the project has had basically no volume since February.
-
did a little bit of analysis on the tax loss harvesting service for NFTs that i wrote up in @web3isgreat earlier today (https://indieweb.social/@web3isgreat/109598229124887467).
so far they've purchased almost 5,500 NFTs.
the most expensive NFT to have been sent to the service was one that sold for around $12,000 in January 2022. it's #78 from the "The Crypt (Army of the Dead)" collection. the project has had basically no volume since February.
-
The media feeding frenzy over SBFs incredibly inevitable downfall is a bit weird considering
a. The media spent years uncritically talking up crypto and lionising SBF
b. Essentially every other crypto enterprise is just as crooked as FTX was
-
The media feeding frenzy over SBFs incredibly inevitable downfall is a bit weird considering
a. The media spent years uncritically talking up crypto and lionising SBF
b. Essentially every other crypto enterprise is just as crooked as FTX was