Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: bearbones on May 13, 2012, 12:54:46 AM



Title: Tormail issues, Coinapult and BitInstant deposits
Post by: bearbones on May 13, 2012, 12:54:46 AM
BitInstant and Coinapult have been getting emails from Tormail users all day expressing that they have not received retrieval links to their funds. We got suspicious, so I sent an email to my own tormail account. The email did not go through, leading me to believe Tormail is experiencing issues receiving mail. Sending mail seems to work fine.

If you are waiting on a Coinapult email to your @tormail.org address, please  use the contact form (https://coinapult.com/contact) and let us know an alternative email address.


Title: Re: Tormail issues, Coinapult and BitInstant deposits
Post by: Raoul Duke on May 13, 2012, 01:40:30 AM
Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious :)


Title: Re: Tormail issues, Coinapult and BitInstant deposits
Post by: bearbones on May 13, 2012, 01:43:57 AM
Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious :)

No, the funds are still sitting there. All of the transactions in question are pin protected, anyway.

On another note, one of my two emails (I sent from two other accounts for posterity) to my @tormail address finally went through. Hopefully this means they resolved the issue, but I'm not holding my breath until I see the other email.


Title: Re: Tormail issues, Coinapult and BitInstant deposits
Post by: Yankee (BitInstant) on May 13, 2012, 01:44:16 AM
Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious :)

Non, whatsoever.

Every customer has to create a PIN when creating an transfer, and required to enter that PIN to withdraw. That PIN is securely and using encryption passed form our server to coinapults.

This solves two things:
1- Stops email sniffing / man-in-the-middle attacks
2- Preventing a customer to claim they never withdrew the coins, but the coins are missing.

-Charlie


Title: Re: Tormail issues, Coinapult and BitInstant deposits
Post by: Raoul Duke on May 13, 2012, 01:58:22 AM
Good to know you guys take security so seriously.
Just asked because tormail is an anonymous service provided by anonymous individuals.
Who knows what those guys are up to. ;)


Title: Re: Tormail issues, Coinapult and BitInstant deposits
Post by: bearbones on May 13, 2012, 02:13:44 AM
Good to know you guys take security so seriously.
Just asked because tormail is an anonymous service provided by anonymous individuals.
Who knows what those guys are up to. ;)

I applaud your caution. Hushmail has proven more than once the error inherent in trusting a third party with your private keys.