i don't even have 1/20th of that right now. |
|
|
|
|
yep. just a warning though, read the terms very carefully when buying cards. some of them are in store only, and you have to print them out and take it with you to the store.
i've bought amazon, staples, and one other card i don't remember. as the member above me mentioned they do give you "Points" per purchase, and these points are like 100 points/ 1$ and you can redeem them on your next purchase
|
|
|
|
I got most of my skeincoins back, thanks. And tbh you could double your account deposits of skeincoin by force checking and entering TXID-000...
I guess surfer is the one who should get credits, this is days old from this thread yep |
|
|
|
Alright, i went back and saw it. feature has been disabled and i've started a bug/vuln bounty. thanks
so i should get a bounty for pointing out this bug? please direct it to the address below and i'll gladly tell you about a few more bugs i see. sorry to swear at you, i usually dont get nasty with people on the internet, but i had a weak moment considering the circumstances. 1PFo41TnkogkD1DJWxFwMWc5ShMn1tJxhN funny how quickly your attitude changes. you can submit a pull request. then you get paid. |
|
|
|
Bump, any updates on this altcoin?
trying to find addnodes myself |
|
|
|
i heard from a reliable source that the txid-000 bug still exists. how the fuck did u relaunch the site without fixing known bugs?
Because he doesn't know what he's doing, and is in a rush to get more people to naively trust him with their money so that he can pat himself on the back and tell himself "i'm good enough, smart enough, and doggonit, people like me". When he gets hacked again, which is only a matter of time, he will once again lash out at everyone who tells him he's in over his head, and tell himself it would have happened to anyone else, and his 6 months of experience gives him all the info he needs to be able to say that. Time to get back to trying to re-invent the wheel, since the thousands of developers before him with massive amounts of experience clearly had no idea what they were doing. Oh stop it, you're gonna make me cry! Sorry to tell you this, but CatCoin is right. The txid-000 bug was also mentioned in this thread. Alright, i went back and saw it. feature has been disabled and i've started a bug/vuln bounty. thanks |
|
|
|
openex.pw website is not a liar. Please return the coins belong to me
User 760833119
Recharge 2 times 42 coins
Recharge date January 13, 2014
Recharge the account shows no history exists inside
I wish to withdraw my request to resolve coins
All History for 760833119
YOUR TRADE HISTORY
Coin Type Price Quantity Total (BTC)
YOUR DEPOSIT HISTORY
Coin Quantity Tx ID
42 0.000016150 60a1ca500017e435451905715114b401b431c9571fd6c66d933fe0f98bb66def
42 0.000159990 f68ce2429aa60f1feb4016f7d93c50d68a6a1c8a1cc7011a45273ff3629a499b
YOUR PENDING WITHDRAWALS
Coin Quantity Address
should be resolved now. to be clear we didn't take your coins. we had to change the addmoney function so it would stop duplicating so many balances and in hindsight it probably wasnt' smart to do it on a live site. there shouldn't be any further problems of this type, but if you have another one please post a support ticket so that the mods can alert me via skype. |
|
|
|
|
now offering bounties for vulnerability disclosures and proposed fixes. see op
|
|
|
|
i heard from a reliable source that the txid-000 bug still exists. how the fuck did u relaunch the site without fixing known bugs?
Because he doesn't know what he's doing, and is in a rush to get more people to naively trust him with their money so that he can pat himself on the back and tell himself "i'm good enough, smart enough, and doggonit, people like me". When he gets hacked again, which is only a matter of time, he will once again lash out at everyone who tells him he's in over his head, and tell himself it would have happened to anyone else, and his 6 months of experience gives him all the info he needs to be able to say that. Time to get back to trying to re-invent the wheel, since the thousands of developers before him with massive amounts of experience clearly had no idea what they were doing. Oh stop it, you're gonna make me cry! |
|
|
|
There is nothing stable or secure about this or anything else you've done. Stop pretending to be something you're not before more people get screwed over. You've basically admitted yourself that you don't test anything, and that fact is pretty obvious after you got hacked and had your exchange back up in less than a week, ready to accept more money you don't know how to deal with properly.
There is no "openex team", it's just you and possibly some other clueless, overconfident kid.
is your face blue yet? |
|
|
|
OK solved thanks
you're welcome |
|
|
|
R3wt, I'm glad that you have learned a lot from this, and I hope your exchange is successful in the future. Its unfortunate that you had to learn at such great expense, but those are the lessons most taken to heart. Some people may be bashing you harder than u deserve, but its true you were not ready to launch a site which handles money. I was not referring to that 6min hack though, but the order cancel, txid-000, and other bugs that where alledgedly there prior to the hack. Did u not test for such scenarios as what would happen if a person tried to sell to them self? Or if copy/paste txid from wallet which includes the -000. All I'm saying is that it was not necessary to try to find these bugs, they occurred from using the site as a normal customer would. Perhaps next time you should have a more thorough testing period.
this is the first i'm hearing of the tx-id bug. i'll check it out now. |
|
|
|
i heard from a reliable source that the txid-000 bug still exists. how the fuck did u relaunch the site without fixing known bugs?
in general, you kinda have to know about the bug to fix it. no one told me about it. i fix all bugs as soon as i know. |
|
|
|
hello please check my deposit not done
Status: 795 confirmations
Date: 12.1.2014 г. 22:48
To: FA14icqUBYa1KtQCsc8GW7u9qhyzeD5rWA
Debit: -600.00 RAD
Transaction fee: -0.00001 RAD
Net amount: -600.00001 RAD
Transaction ID: e08e27a423a9900ccb4da46c1373824dcba1fc132a14fd71260a0d4286f28925
same username? ps: we have support https://openex.pw/index.php?page=supportYour deposit is now confirmed and credited to your account, barring some bug in the sofware for future references, you can use this form in the account page to confirm your deposits:  |
|
|
|
|
smdh, what the fuck man? you're better than this dude.
|
|
|
|
The point of crypto is to not be recognized...
We're all people, not machines. Awards increase our self-confidence, as well as showcases the biggest achievements. And surrenders our anonymity. You act as though all Bitcoin traders, investors, and enthusiasts are meak little neckbeards. I for one don't need to increase my self-confidence with some self-serving taint-licking award. This whole thread is asinine. the loudest person in the room.... It isn't my fault I can express myself with strong, direct, concise language. This is a forum. People will express opinions and quite possibly shit on yours in the process. I am giving you my honesty - what more do you want from me?  I'll take obscure-wannabe-crypto-hipster for 200 please alex. |
|
|
|
|
well i broke down and googled but...
jsonencode when echoing the market id into js seems to work. i talked to Vern and he said it "should" work but a crafty attacker would figure that out too.
|
|
|
|
The point of crypto is to not be recognized...
We're all people, not machines. Awards increase our self-confidence, as well as showcases the biggest achievements. And surrenders our anonymity. You act as though all Bitcoin traders, investors, and enthusiasts are meak little neckbeards. I for one don't need to increase my self-confidence with some self-serving taint-licking award. This whole thread is asinine. the loudest person in the room.... |
|
|
|
defeated the vulnerability. came from someoneelses code which often happens on projects like this. fixed with javascript: var MarketId = $(this).val(<?php echo($_GET['market']); ?>)
if (! MarketId.match(/^[^A-Za-z0-9+#\-\.]+$/)){
//remove the inline js
$(this).val(txt.replace(char, ''));
}
if you find any more vuln's let me know hiksuhn. i'll patch them all  you claim to care so much about these people and their money, surely you must take it upon yourself to depart your superior knowledge on me? ROFL edit: nevermind it, doesn't work. it stops the input but interferes with a normal request too. |
|
|
|
|
Show Posts
