Bitcoin Forum

Economy => Marketplace => Topic started by: BitcoinPorn on August 31, 2011, 09:44:56 AM



Title: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 09:44:56 AM
This is up on reddit
http://www.reddit.com/r/Bitcoin/comments/jzv8a/mtgox_kk_tibanne_now_verified_by_verisign/

Which actually links to another reddit post
http://www.reddit.com/r/MtGox/comments/jzv75/mtgox_kk_tibanne_now_verified_by_verisign/

Which brings you to this Mt Gox post

Quote
Dear Mt.Gox users,

We've been working hard on improving security since the hacking incident in June, and today we're proud to announce that Mt.Gox is the first Bitcoin exchange to be certified by VeriSign with the VeriSign Trust Seal.

The VeriSign Trust Seal is a certification that Mt.Gox’s user information security practices are in-line with internationally recognised standards. Anyone using browsers that can read Internet security certificates may note that their address bar changes colour the next time they visit Mt.Gox. This shows that your are accessing a certified secure website.

There were many stringent requirements Mt.Gox (Tibanne Co. Ltd.) had to meet in order to be certified, one of which being that VeriSign had to independently verify nearly all aspects of our business before approving us. Through this audit process we've proven that Mt.Gox is a safe, secure and transparent service whose security measures meet the highest standards of the Information Communications Technology industry.

We realize that this is a small step towards restoring the trust of our loyal users, and we look forward to delivering further substantial and meaningful improvements to our security in the coming weeks to ensure we continue to protect and support our users.

You can also find us listed on the Tokyo Chamber of Commerce website.

Safe trading,
-The Mt.Gox Team

Having never heard of this "Very sign" company before, I checked Wikipedia to find this shocking tidbit

In 2002, Verisign was sued for domain slamming – transferring domains from other registrars to themselves by making the registrants believe they were merely renewing their domain name. Although they were found not to have broken the law, they were barred from suggesting that a domain was about to expire or claim that a transfer was actually a renewal.

and

In September 2003, Verisign introduced a service called Site Finder, which redirected Web browsers to a search service when users attempted to go to nonexistent .com or .net domain names. ICANN asserted that Verisign had overstepped the terms of its contract with the U.S. Department of Commerce, which in essence grants Verisign the right to operate the DNS for .com and .net, and Verisign shut down the service

I was just kidding about never hearing of Verisign before, though the little blurbs are new information to me.   I think this obviously means everyone should be buying up Bitcoin right now, at $8.56, it is a steal.   


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 09:58:44 AM
I was just kidding about never hearing of Verisign before

What was your point with posting a stupid thread?



Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 10:01:17 AM
I was just kidding about never hearing of Verisign before
What was your point with posting a stupid thread?

The internet has a system in place to adjust the average frequency of a really stupid post. If there isn't an average total of 100 really stupid posts per second added to the chain of content on the web, the difficulty of the internet decreases.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 10:01:52 AM
What was your point with posting a stupid thread?
My opinion on this thread differs from yours, lets start with that.  What is the stupid part about it, what can I do to fix this for you?

I find it interesting is all.  I still trust Mt Gox personally :)   Also, I did not see a thread about Gox signing with VeriSign, and I do find the information to be pretty important to users, and not everyone read every Bitcoin news source so may not have seen this information before.  I'm sorry.   Oh wait, no I'm not.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 10:15:20 AM
what can I do to fix this for you?

I'm quite sure there's nothing you can do. Others might be interested in how well Symantec runs the verification business though.





Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 10:20:00 AM
I'm quite sure there's nothing you can do.
:(
Quote
Others might be interested in how well Symantec runs the verification business though.
Thread redeemed!


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 10:39:45 AM
Thread redeemed!

Not really. The title and the completely irrelevant wikipedia quotes just put you in the troll category. I can't really figure out why you wanted that.

Anyway, I guess one of the things people would like to know about Verisign Trust Seal (which is different from just the SSL certs that provide no assurances more than that you exist) would be:

Quote
The VeriSign Trust Seal comes with a daily site malware scan, providing assurance that a visited site is free of harmful malware attacks.

http://www.symantec.com/connect/blogs/introducing-verisign-trust-seal

But I don't really understand why MagicalTux would claim that their whole business has been audited just to get the Trust Seal. Sure, there's SOME auditing going on, but it's almost just a play on words.

Quote
Authentication is an established and proven process used by VeriSign that shows the world that VeriSign has verified your identity and that you are the rightful owner or operator of your Web site.

http://www.verisign.com/trust-seal/features-benefits/

Quote
They reassure webusers by telling them the website has been audited and authenticated.

http://www.tbs-certificates.co.uk/trust_seals.html.en



Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: Piper67 on August 31, 2011, 10:41:22 AM
I was just kidding about never hearing of Verisign before
What was your point with posting a stupid thread?

The internet has a system in place to adjust the average frequency of a really stupid post. If there isn't an average total of 100 really stupid posts per second added to the chain of content on the web, the difficulty of the internet decreases.

L-O-L


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 10:42:18 AM
But I don't really understand why MagicalTux would claim that their whole business has been audited just to get the Trust Seal. Sure, there's SOME auditing going on, but it's almost just a play on words.

Well, MagicalTux did give the last auditor a full copy of the database, including everyone's e-mail and passwords, so it's not as if we can assume he was accurate about what he was doing or what Symantec did.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 10:50:01 AM
Not really. The title and the completely irrelevant wikipedia quotes just put you in the troll category. I can't really figure out why you wanted that.
There seems to be a stick up your ass :)   Thread keeps on delivering with information regarding Verisign.  Let's go back to the title talk you bring up, jokingly made, but is it inaccurate?    The shit that Verisign has tried to pull as a company thinking it is okay to do despite being obvious was to take advantage of unknowing users.   I am just saying, if they were on the forums, Very Sign would have the "XXXXX" red things under their user name, and now we have Mt Gox working directly with them with a press release.

Just saying though, I do not believe there is some big conspiracy theory, but I think it is probable.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 10:56:22 AM
Thread keeps on delivering with information

Not thanks to you.

Quote
is it inaccurate?

Yes.

Hint: Symantec owns and runs the trust business. It's still named VeriSign Trust Seal but has nothing to do with VeriSign-the-domain company.

http://www.symantec.com/business/theme.jsp?themeid=verisign-authentication-products
http://www.verisigninc.com/en_US/index.xhtml

You know what? This is documented on the Wikipedia entry you pulled those crappy quotes from. At the very top. Not possible to miss.

Quote
I do not believe there is some big conspiracy theory, but I think it is probable.

Thanks, I wasn't sure until now but now I'm sure you're just trolling.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 11:02:32 AM
Thanks, I wasn't sure until now but now I'm sure you're just trolling.
You have to define trolling then, I brought to the table that I did not see on the forums yet, was kind of big news, something that asked questions, has brought answers, and you have helped make better.  Discussing things on a forum.  Sorry my opinion was not as fully backed up as yours, please allow people to change and learn, but hating or calling a troll, dear lord that term is being used/abused more than the term 'scammer' around these parts :(

https://i.imgur.com/D5zQ0.jpg


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 11:08:34 AM
You have to define trolling then

Knowingly posting crap just to stir up a mess.

  • VeriSign are not "known scammers" by any measure
  • Wikipedia is in itself never a source
  • The Trust Seal acquired by MtGox has nothing to do with VeriSign-the-domain-company

If you want to discuss a news piece, then do that instead of posting stupid thread content with an even more stupid thread title. Let's just say I don't think this forum needs more of that.

(And .. wtf is up with your "I think it's probable this is a conspiracy")


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 11:09:43 AM
Dude, have you really never heard of Verisign before this? They've been giving very basic certs for SSH and such for years. Any argument against them is an argument against ANY 'authority' giving certs.
I have of course heard of verisign lol.  However, I can say that if I had a gun to my head I could not accurately describe what it is exactly Verisign did or does.  That is why I just did a quick search to get a general answer, a gist of things if you will, ie Wikipedia.

I know why Gox is using them, and it is a good step in the right direction imo, those banners are nearly necessary for successful e-commerce now in days.


  • VeriSign are not "known scammers" by any measure
  • Wikipedia is in itself never a source
  • The Trust Seal acquired by MtGox has nothing to do with VeriSign-the-domain-company
- Your opinion.  I would very much say at this moment I am now in question of Verisign as a company when I was not before.
- It shouldn't be, but you are in denial if you don't think it is.
- Okay, thank you for contributing, now if you didn't say it in such a troll form it would be easier to take the information you are trying to spread, which I am finding useful btw, if you didn't to do it in such douche manner, but honestly I could care less, I am here for hard facts


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 11:13:58 AM
They provide some sort of minimal levels of verifications but in the end, a company's trust should never be provided by some seal.png

http://goodnature.nathab.com/wp-content/uploads/2010/04/baby_harp_seal_682_458143a-715344.jpg

How can you possibly see this and not trust me implicitly?


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 11:16:07 AM
I am here for hard facts

You should start by asking yourself if that's what you're posting, then.

(PS: Thread title is still just plain wrong)


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 11:25:52 AM
They provide some sort of minimal levels of verifications but in the end, a company's trust should never be provided by some seal.png

http://goodnature.nathab.com/wp-content/uploads/2010/04/baby_harp_seal_682_458143a-715344.jpg

How can you possibly see this and not trust me implicitly?

Who do I write my check out to?

Aww. Seal no want check. Lookit dat face. Seal want bitcoins. :)


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BitcoinPorn on August 31, 2011, 11:31:18 AM
You should start by asking yourself if that's what you're posting, then.

(PS: Thread title is still just plain wrong)
I now have other shit to do, I do appreciate you coming in with links and information, I am sorry that not all threads on all forums are created with full case histories, but are sometimes filled with questions and confusion.  You will one day gain appreciation and knowledge of parody, ignorance, and perception.  I feel I have grown a little since this thread.  So it's pants off time (http://www.youtipit.org/en/t/J3470-3) and I have to go take care of that.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: Vladimir on August 31, 2011, 11:45:05 AM
Mt Gox, would you like to impress us with your security related efforts? Than do ISO 27001 audit certification and maintain it in a good standing. Or something similar to that.

Slapping some image on the website and getting a port scan once or twice a day at a cost of 100$ a year is really nothing more than a marketing ploy to woo unwashed masses.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 11:49:10 AM
They provide some sort of minimal levels of verifications but in the end, a company's trust should never be provided by some seal.png

http://goodnature.nathab.com/wp-content/uploads/2010/04/baby_harp_seal_682_458143a-715344.jpg

How can you possibly see this and not trust me implicitly?

Who do I write my check out to?

Aww. Seal no want check. Lookit dat face. Seal want bitcoins. :)

I'm a little slow today. I just realized the 'seal' signifance of that image. I blame 4chan and lolcats for posting animal responses to everything in a covert effort to desensatize me.

Gah. I hate that lolcats shit. I only post animal responses when it's genuinely funny.

Seal wants more bitcoins as penance for you missing the joke!


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: xxxcoin on August 31, 2011, 12:16:20 PM
Mt Gox, would you like to impress us with your security related efforts? Than do ISO 27001 audit certification and maintain it in a good standing. Or something similar to that.

Slapping some image on the website and getting a port scan once or twice a day at a cost of 100$ a year is really nothing more than a marketing ploy to woo unwashed masses.

+1


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 01:30:30 PM
I now have other shit to do

I'm sure of that - why would someone who's here for the "hard facts" want a fact based thread title :)

Sorry for spoiling your trolling effort.





Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: The_Duke on August 31, 2011, 01:34:13 PM
I now have other shit to do

I'm sure of that - why would someone who's here for the "hard facts" want a fact based thread title :)

Sorry for spoiling your trolling effort.





Looky! It's our troll-hunting, Pattaya-endorsing fact-checking machine DEFXOR!

Glad to hear you feel a verisign logo has made MtGox a lot safer now. I will shortly be sending my coins back into my MtGox account now that it is fully defxor endorsed! :D


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: defxor on August 31, 2011, 01:37:48 PM
Glad to hear you feel a verisign logo has made MtGox a lot safer now

Do I? Feel free to point out wherever you got that idea from. Myself I'm quite sure I questioned why MagicalTux claimed this had anything to do with MtGox being audited.



Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: MagicalTux on August 31, 2011, 01:41:44 PM
Mt Gox, would you like to impress us with your security related efforts? Than do ISO 27001 audit certification and maintain it in a good standing. Or something similar to that.

Slapping some image on the website and getting a port scan once or twice a day at a cost of 100$ a year is really nothing more than a marketing ploy to woo unwashed masses.

The announce wasn't written by me, and is a bit misleading. The important part is not the seal (it's just a picture on a site, that's nothing I can care about). The important part is the EV certificate and all that means.

We'll get that reworded a bit tomorrow.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 01:42:06 PM
Looky! It's our troll-hunting, Pattaya-endorsing fact-checking machine DEFXOR!

*snaps into computer scientist mode* Ok, I will define XOR.

XOR is a logical operation where false combined with false is false, true combined with false is true, false combined with true is true, and truth combined with truth is false.

... HEY THAT SOUNDS LIKE TROLLS!


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: BCEmporium on August 31, 2011, 02:28:51 PM
For me is just a point on the side of Verisign; I don't trust them!
So comes strange to see "Verisign Trust" when Verisign isn't meant to be trusted. Not only by their dirty tricks in the past, as also they own Jamba, which is a scam all over.

For the MtGox... well... it's a certificate and does the same as others: Encrypts the connection. For some folks having a "seal" is important, so be it.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 02:31:17 PM
For some folks having a "seal" is important, so be it.

http://goodnature.nathab.com/wp-content/uploads/2010/04/baby_harp_seal_682_458143a-715344.jpg

How can you not want your very own seal just like this?


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: freequant on August 31, 2011, 02:38:42 PM
They provide some sort of minimal levels of verifications but in the end, a company's trust should never be provided by some seal.png

http://goodnature.nathab.com/wp-content/uploads/2010/04/baby_harp_seal_682_458143a-715344.jpg

How can you possibly see this and not trust me implicitly?

A future victim of Bitcoin mining?
Bitcoin, the first currency backed by baby seals...


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: freequant on August 31, 2011, 02:44:02 PM
XOR is a logical operation where false combined with false is false, true combined with false is true, false combined with true is true, and truth combined with truth is false.

Dont know why... this reminds me... a recent case...


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: wolftaur on August 31, 2011, 02:57:44 PM
XOR is a logical operation where false combined with false is false, true combined with false is true, false combined with true is true, and truth combined with truth is false.

Dont know why... this reminds me... a recent case...

S&P's rating of mortgage securities? Why AIG needed a bailout? Dominique Strauss-Khan? RAID-5?


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: freequant on August 31, 2011, 03:30:52 PM
XOR is a logical operation where false combined with false is false, true combined with false is true, false combined with true is true, and truth combined with truth is false.

Dont know why... this reminds me... a recent case...

S&P's rating of mortgage securities? Why AIG needed a bailout? Dominique Strauss-Khan? RAID-5?

Can't tell it. I don't want this thread to end up in Off-Topic.


Title: Re: Mt. Gox signs with Verisign, who are Known Scammers according to Wikipedia
Post by: twobits on August 31, 2011, 05:22:53 PM
Not really. The title and the completely irrelevant wikipedia quotes just put you in the troll category. I can't really figure out why you wanted that.
There seems to be a stick up your ass :)   Thread keeps on delivering with information regarding Verisign.  Let's go back to the title talk you bring up, jokingly made, but is it inaccurate?    The shit that Verisign has tried to pull as a company thinking it is okay to do despite being obvious was to take advantage of unknowing users.   I am just saying, if they were on the forums, Very Sign would have the "XXXXX" red things under their user name, and now we have Mt Gox working directly with them with a press release.

Just saying though, I do not believe there is some big conspiracy theory, but I think it is probable.

Dude, have you really never heard of Verisign before this? They've been giving very basic certs for SSH and such for years. Any argument against them is an argument against ANY 'authority' giving certs.

Ah, interesting typo/slip there.   SSH is actually designed to operate very differently then  ssl, and is the  counter example for showing that ssl got it wrong by combing two separate things, identity and secure transmissions.  People read way too much into ssl certificates and now even go so far as calling self made certificates worthless, yet when done right they can be more secure then the ones you pay for.   The whole industry has been a very profitable snake oil business with Verisign being one of the big winners, and of course Thawte also being in early to and making a lots of money getting bought out by Verisign.  It became a big lottery if you happened to be a ca that got into the early list of trusted certificates included into the popular browsers.  This snakeoil would probably have stopped being profitable if the browsers themselves did not also now start to want to charge money to include new roots and instead included places like cacert's root.  The prices charged for these is way out of line with the costs they take because of this artificial scarcity not because of any real security.

Quote
In my opinion, the only wrong doing is in Tux for making it sound like an inside job would have been avoided by an outside reviewer. He's probably just talking that way for the grandma and grandpa users though. Anyone with a brain would know that those seals are for common unsavvy people and don't mean anything to pros. They provide some sort of minimal levels of verifications but in the end, a company's trust should never be provided by some seal.png