BitcoinTalk

Bitcoin Faucet changes

BitcoinTalk
#1
From:
Gavin Andresen
Subject:
Bitcoin Faucet changes
Date:
So I've been watching the IP addresses of people getting 5 free bitcoins from the Bitcoin Faucet ( https://freebitcoins.appspot.com/ ).

And I see some... uh, interesting patterns.  Like these successful requests for coins:

Code:
79.117.152.158 - - [21/Jun/2010:12:17:02 -0700] "POST / HTTP/1.1" 200 1234
79.117.159.197 - - [21/Jun/2010:12:16:24 -0700] "POST / HTTP/1.1" 200 1234
79.117.135.236 - - [21/Jun/2010:12:10:23 -0700] "POST / HTTP/1.1" 200 1234
79.117.163.238 - - [21/Jun/2010:12:08:50 -0700] "POST / HTTP/1.1" 200 1234
79.117.155.23 - - [21/Jun/2010:12:08:07 -0700] "POST / HTTP/1.1" 200 1234

My apologies if there actually are a bunch of new bitcoin users using IP addresses in the 79.117 range...  but I'm guessing somebody there is getting more than their fair share of free bitcoins.

There are several suspicious requests from the 192.38.95.* address block, too.

So I've made some changes to the Faucet.  You won't notice them unless you try to cheat; if you do try to cheat, you'll have to solve a CAPTCHA to get coins.

If that doesn't discourage cheating, I'll modify the code so that if it think you're trying to cheat it requires a CAPTCHA and only gives out a bitcoin nickel (0.05 bitcoins)...
BitcoinTalk
#2
From:
Xunie
Subject:
Re: Bitcoin Faucet changes
Date:
Lol, bitnickel!

Anyhow, I was expecting this.
And what about those using proxies?
I don't wanna be an #@!%!#% here, but ehh... I think the "5 BTC for FREE!" thing, is kinda... flawed...
BitcoinTalk
#3
From:
Gavin Andresen
Subject:
Re: Bitcoin Faucet changes
Date:
I don't wanna be an #@!%!#% here, but ehh... I think the "5 BTC for FREE!" thing, is kinda... flawed...
"flawed" ??

I've been telling people it is a half-baked, I've-lost-my-friggin-mind idea!

So far, I count it as a big success-- I've learned a lot that will help me with my next Bitcoin-related project, I've made a bunch of people a teeny-tiny bit happier, and I've personally invested just under $1.00 worth of bitcoins over the last two weeks.

I did throw in the towel today and turned on reCAPTCHA for everybody getting bitcoins (it looks like somebody DID bother to write a robot to harvest coins through proxies).  It was fun trying to come up with new, creative ways of detecting cheating, but I have more important things to work on.
BitcoinTalk
#4
From:
sirius
Subject:
Re: Bitcoin Faucet changes
Date:
http://www.decaptcher.com/


It costs someone $2 per 1000 captchas. So, they could suck out 5000 bitcoins for $2. lol. Smiley

But, that should help stop most people Smiley

I guess that's why the forum still gets those annoying spam user registrations despite the captcha.
BitcoinTalk
#5
From:
virtualcoin
Subject:
Re: Bitcoin Faucet changes
Date:
Gavin, why don't you just block all served Bitcoin addresses?
Would it be easy to generate them automatically?
BitcoinTalk
#6
From:
Gavin Andresen
Subject:
Re: Bitcoin Faucet changes
Date:
Gavin, why don't you just block all served Bitcoin addresses?
Would it be easy to generate them automatically?
It is easy to generate them automatically (it is easy to write code that asks the Bitcoin program to generate and return a new address).
BitcoinTalk
#7
From:
llama
Subject:
Re: Bitcoin Faucet changes
Date:
Funny how on this forum the same people play both sides of the table--on the one hand, trying to come up with ways to preserve absolute anonymity (e.g. the heroin store thread), and then coming here and trying to do sort of the opposite to protect BTC Faucet. 

I love it  Grin
BitcoinTalk
#8
From:
satoshi
Subject:
Re: Bitcoin Faucet changes
Date:
Many big ISPs give you a new IP every time you connect, usually in the same class B (a.b.?.?).  Maybe you should have a minimum time between payments per class-B.

If you can't solve the problem, you can always keep lowering the amount of bitcoins given until it's manageable, and always require captcha.