Hello,
https://coinos.io/ is not loading anymore
seems even more serious than last time #1295122
this time it does not matter the internet browser used
is it cloudflare?
is it DNS?
@coinos please help
pull down to refresh
pull down to refresh
Hello,
https://coinos.io/ is not loading anymore
seems even more serious than last time #1295122
this time it does not matter the internet browser used
is it cloudflare?
is it DNS?
@coinos please help
fixed
updates from Adam:
An attacker gained access to a bunch of accounts. My best guess at this point is they brute forced the passwords over some period of time and were sitting on them waiting for an opportunity to drain them all at once. A small handful had been drained over the last month or two but last night about 130 accounts were hit. I've put in some measures to try to rate limit login attempts now and I may consider adding minimum password strength requirements.
updates from Adam (from latest to earliest):
It should be back now. Try hitting https://coinos.io/logout if it's coming up blank
The funds should all be restored but affected accounts may need a password reset — they can request one by emailing support@coinos.io
The website is down until I get a better handle on what happened and can be confident the attacker is not going to be able to steal more funds. I intend to fully compensate anyone whose account was compromised.
From Adam:
An attacker gained access to a bunch of accounts. My best guess at this point is they brute forced the passwords over some period of time and were sitting on them waiting for an opportunity to drain them all at once. A small handful had been drained over the last month or two but last night about 130 accounts were hit. I've put in some measures to try to rate limit login attempts now and I may consider adding minimum password strength requirements.
My screen just goes totally black, doesn't look like a connection issue. This happened the other day, but it took a few minutes to get back up and running.
It seems like they have lots of problems. What keeps everyone going back?
we wants them to do the work for us. it's hard giving up that sweet comforting embrace of a custodian.
it's a great wallet for onboarding beginners
How so?
I've realized that I have no idea what to recommend to people just starting out.
wallet is web based, browser is sufficient
no email address or phone required, coinos will generate a username and password
username@coinos.io is your lightning address
they can send and receive lightning and on-chain payments without understanding the difference
not great but excellent and fast tech support from the owner/founder Adam via email and Telegram
edit:
I have recommended it to so many beginners that I use it myself, "forever novice"
because they are based in Canada, you don't have to worry about KYC nonsense that shutdown Wallet of Satoshi and Phoenix
That's very nice
It's not really supposed to be for nostr and SN zaps. It is just so easy to set up and use that many lazy people like me love to use it. It was designed as an easy wallet for businesses to use to accept sats as payment.
Do many businesses use Coinos?
Yes, they set up POS for merchants, especially in Canada where they are based
Cool
https://coinos.io/map
especially Nostr
https://coinos.io/map
It’s perfect for what I need, basically just for using SN. It’s free, easy to use, and has some cool features. I just noticed that in Chrome's incognito mode and on Brave, the screen doesn't go black, but then it just crashes with an error.
shockwallet is easy, on android, or as i use it, on laptop with the pwa - use the bootstrap node so you don't need to open a channel - super easy to connect to SN too
https://github.com/shocknet/wallet2?tab=readme-ov-file#web-browserpwa--download-android-apk--apple-testflight
I have 5 different coinos accounts for 5 different browsers on 5 different devices
as long as you don't connect to Nostr, it's fine
My goodness.
@SwapMarket this screenshot you posted, of the "security incident" -- this is old, right? or it's a new screenshot?
It is from today in Coinos telegram channel. this is the latest from Adam:
Ah ok. Those of us that run NWC and Lightning services would obviously like to know the issue if it is an exploit that could impact other services. Then again if I ran coinos.io I doubt I would want to reveal the problem... just revealing an issue like this can be a security issue in itself!
@alashazam contact me if you have problems with Coinos or contact them on Telegram or email support@coinos.io
Adam and Cole do not check SN daily
thanks, it is working now
It's odd because the site is not loading but the backend seems to be working because my zaps are going through.
true. weird!
proper js error in the console on page load....