When Bitcoin Segwit2x Happen: Date Prediction

Segwit2x Happens on block 494,784 of the BTC blockchain.
As of the time of this post, we are at block 491,747. Leaving 3,037 blocks to go before activation.

At the current block-rate of 7.23 blocks/hour (average over the last 7 days), the fork will happen approximately 420 hours from now (or 17 1/2 days from now).

The Current Estimated Date of Segwit2x Is: 12 November 2017 around 5 A.M.

The block rate is always changing so a more accurate time would be between 14 to 20 days from now or:

Between 8 November 2017 and 14 November 2017

The blockrate varies with the difficulty of the BTC chain and the BCH chain because they share hash-power. Additional forks will add more variability to the blockrate of BTC. I’ll be updating this post as we get closer to block 494,784.

Bad Rabbit – caforssztxqzf2nm.onion

Bad Rabbit is another ransomware site affecting many Ukranian and Russian computers.

After your computer is infected, a ransom will be requested at the tor site: caforssztxqzf2nm.onion (preview below)

Bad Rabbit Ransom Site

Text of the page:

Bad Rabbit

If you access this page your computer has been encrypted. Enter the appeared personal key in the field below. If succeed, you’ll be provided witha bitcoin account to transfer payment. The current price is on the right.

Once we recieve your payment you’ll get a password to decrypt your data. To verify your payment and check the given password enter your assigned bitcoin address or your personal key.



Recover deleted pictures from a Thumbs.db or thumbcache file

It is possible to recover images deleted out of a folder by extracting them from a thumbs.db or “Thumbs” file. By recovering this way, you may be able to get the file back, but it will be a much lower quality.

Windows Thumbs.db file

To recover images from the Thumbs.db file, navigate to thumbsdb.tools and upload your Thumbs file. You will then be presented with a list of recovered files.

A similar, but better way to recover files from the system “db” files is with the “thumbcache” file.

Windows Thumbcache_ Files

These files will be listed in the same folder as the Thumbs.db file and will be named as thumbcache_*.db or just thumbcache_*** (where the stars may be different based on your system and the file.

For each of these files, upload them to the a href=”http://thumbsdb.tools/thumbcache-viewer.php”>thumbcache< viewer and it will reveal the images contained in the file. Files ending with higher numbers (such as 1024) will have better quality images than the 96 and 32 thumbcache files.

Extracting iconcache / thumbcache db files

iconcache and thumbcache db files are small database files created by Windows in order for users to quickly preview files and folders stored on their computer.

These files are essentially filled with tiny preview-versions of all the files in the folder.

It may be impossible to delete these files because windows will automatically recreate them.

In order to view or extract data from thumbcache / iconcache db files, you can use the tool at https://thumbsdb.tools/thumbcache-viewer.php

This tool is compatible with extracting the following db files:


Thumbs.db Viewer

The website thumbsdb.tools is a completely online / cross-platform thumbs.db file viewer. This online works in any browser (Windows, OSX, Linux or other). It allows you to upload a Thumbs.db file to view the image contents.

How to view images and extract contents of Thumbs.db files:

  1. Visit Thumbsdb.tools
  2. Upload your Thumbs.db file by clicking the “upload” button
  3. View the contents of the Thumbs.db file

The thumbs.db file will contain the following elements which are extracted for each image:

  • Image – The Image Thumbnail
  • Filename – An Image name used in the thumbs.db database (not the original file name)
  • Size – The size of the image, usually a few thousand bytes
  • Disk Sector Index – The location of the original image on the disk
  • Date Modified – When the image was created or modified
  • Filetime
  • System – The operating system that added this entry

Mysterious cloudflare.works and eager.works domains

While checking on my site report for google adsense, I came upon this mysterious “cloudflare.works” domain coming up in the referral traffic.

cloudflare.works in AdSense Site Report

The site was only showing up as a couple hits a month. Upon attempting to visit any of the displayed subdomains, I’m presented with a message:

This may not be the page you're expecting (request failed security checks).

The site seems to host a variety of content including some miscellaneous javascript code, apparent court case documents and a cloudflare developer tos page.

    The eager.works domain is used to help users of <a href="https://eager.io">Eager</a> test apps.  Contact       <a href="mailto:help@eager.io">help@eager.io</a> with any questions or concerns.
eager.works domain reference found on cloudflare.works/files/

My guess is these referrals are being generated from automated or manual reviews of websites by developers using cloudflare’s new app platform.

I have installed and uninstalled several apps, reporting some as not functioning properly.  Have you had traffic from similar subdomains on your site?

cpuminer help – Usage, Flags and Command Examples

Example Command for Monero Mining (XMR):

./cpuminer -a cryptonight -o stratum+tcp://pool.usxmrpool.com:3333 -u 48JvicghZt266rgdFvMAAc4yBmRF4FwZecztBKJwQXLJdFkHnD3hetiDwcXGRyScGWgh3D8YoTTwoSx4HCKAoFQf3iQbXd6 -p x

cpuminer –help


./cpuminer --help
** cpuminer-multi 1.3.3 by [email protected] **
BTC donation address: 1FhDPLPpw18X4srecguG3MxJYe4a1JsZnd (tpruvot)
Usage: cpuminer-multi [OPTIONS]
  -a, --algo=ALGO       specify the algorithm to use
                          axiom        Shabal-256 MemoHash
                          bitcore      Timetravel with 10 algos
                          blake        Blake-256 14-rounds (SFR)
                          blakecoin    Blake-256 single sha256 merkle
                          blake2s      Blake2-S (256)
                          bmw          BMW 256
                          c11/flax     C11
                          cryptolight  Cryptonight-light
                          cryptonight  Monero
                          decred       Blake-256 14-rounds 180 bytes
                          dmd-gr       Diamond-Groestl
                          drop         Dropcoin
                          fresh        Fresh
                          groestl      GroestlCoin
                          heavy        Heavy
                          jha          JHA
                          keccak       Keccak
                          luffa        Luffa
                          lyra2re      Lyra2RE
                          lyra2rev2    Lyra2REv2 (Vertcoin)
                          myr-gr       Myriad-Groestl
                          neoscrypt    NeoScrypt(128, 2, 1)
                          nist5        Nist5
                          pluck        Pluck:128 (Supcoin)
                          pentablake   Pentablake
                          quark        Quark
                          qubit        Qubit
                          scrypt       scrypt(1024, 1, 1) (default)
                          scrypt:N     scrypt(N, 1, 1)
                          scrypt-jane:N (with N factor from 4 to 30)
      --cert=FILE       certificate for mining server using SSL
                          shavite3     Shavite3
                          sha256d      SHA-256d
                          sia          Blake2-B
                          sib          X11 + gost (SibCoin)
                          skein        Skein+Sha (Skeincoin)
                          skein2       Double Skein (Woodcoin)
                          s3           S3
                          timetravel   Timetravel (Machinecoin)
                          vanilla      Blake-256 8-rounds
                          x11evo       Permuted x11
                          x11          X11
                          x13          X13
                          x14          X14
                          x15          X15
                          x17          X17
                          xevan        Xevan (BitSend)
                          yescrypt     Yescrypt
                          zr5          ZR5
  -o, --url=URL         URL of mining server
  -O, --userpass=U:P    username:password pair for mining server
  -u, --user=USERNAME   username for mining server
  -p, --pass=PASSWORD   password for mining server
      --cert=FILE       certificate for mining server using SSL
  -x, --proxy=[PROTOCOL://]HOST[:PORT]  connect through a proxy
  -t, --threads=N       number of miner threads (default: number of processors)
  -r, --retries=N       number of times to retry if a network call fails
                          (default: retry indefinitely)
  -R, --retry-pause=N   time to pause between retries, in seconds (default: 30)
      --time-limit=N    maximum time [s] to mine before exiting the program.
  -T, --timeout=N       timeout for long poll and stratum (default: 300 seconds)
  -s, --scantime=N      upper bound on time spent scanning current work when
                          long polling is unavailable, in seconds (default: 5)
      --randomize       Randomize scan range start to reduce duplicates
  -f, --diff-factor     Divide req. difficulty by this factor (std is 1.0)
  -m, --diff-multiplier Multiply difficulty by this factor (std is 1.0)
  -n, --nfactor         neoscrypt N-Factor
      --coinbase-addr=ADDR  payout address for solo mining
      --coinbase-sig=TEXT  data to insert in the coinbase when possible
      --max-log-rate    limit per-core hashrate logs (default: 5s)
      --no-longpoll     disable long polling support
      --no-getwork      disable getwork support
      --no-gbt          disable getblocktemplate support
      --no-stratum      disable X-Stratum support
      --no-extranonce   disable Stratum extranonce support
      --no-redirect     ignore requests to change the URL of the mining server
  -q, --quiet           disable per-thread hashmeter output
      --no-color        disable colored output
  -D, --debug           enable debug output
  -P, --protocol-dump   verbose dump of protocol-level activities
      --hide-diff       Hide submitted block and net difficulty
  -S, --syslog          use system log for output messages
  -B, --background      run the miner in the background
      --benchmark       run in offline benchmark mode
      --cputest         debug hashes from cpu algorithms
      --cpu-affinity    set process affinity to cpu core(s), mask 0x3 for cores 0 and 1
      --cpu-priority    set process priority (default: 0 idle, 2 normal to 5 highest)
  -b, --api-bind        IP/Port for the miner API (default:
      --api-remote      Allow remote control
      --max-temp=N      Only mine if cpu temp is less than specified value (linux)
      --max-rate=N[KMG] Only mine if net hashrate is less than specified value
      --max-diff=N      Only mine if net difficulty is less than specified value
  -c, --config=FILE     load a JSON-format configuration file
  -V, --version         display version information and exit
  -h, --help            display this help text and exit


California CARB Compliance Search Tool

ARB.parts is a new catalytic converter search tool for CARB / ARB compliant parts. This tool provides an easy and mobile-friendly way of searching for CARB compliant parts. All executive orders are listed as well as notices for rescinded executive orders. Users are able to search by Engine Family/ Test Group, Executive Order, as well as  Year – Make – Model.

CARB Catalytic Converter Search Tool

No longer will you be presented with the error-prone CARB site:

Error-Prone, Not Mobile Friendly arb.ca.gov Site