|
Full Disclosure: With the additional downtime yesterday and the continued lack of transparency, I just cashed out of bitfloor.
I think the questions asked in this thread are important ones. If only service providers would provide some of this info and if only the community would ask these kinds of questions before we trust our bitcoins and fiat with the likes of Bitcoinica, Pirate, PPT's, (Intersango).
Here a second question:
Who in the community would service providers trust enough and who does the community trust enough to reasonably vet these service providers? I certainly don't mean regulation but a "web of trust" or "stamp of approval" that:
1. The operators of the services are legitimate and traceable in the event that is necessary.
2. The system we are entrusting our wealth to has as least some agreed upon level of "best practices" for redundancy, data security, reserve funding, cold storage etc.
|
|
|
|
|
Sorry shtylman. With the downtime yesterday and the lack of transparency I just cashed out. It was a good run while it lasted.
|
|
|
|
|
Please update the subject to [CLOSED]
|
|
|
|
|
How are you polling bitcoind?
|
|
|
|
|
ING DIRECT
also available.
+1%
|
|
|
|
|
purchase MT GOX USD CODE from me for (+1.5%).
That's the quickest I know.
I take
ChaseQuickPay
ING Direct p2p
Wells Fargo p2p
Dwolla
Paypal.
PM me if you are interested.
Or just post on the DWOLLA <--> MTGOX THREAD and wait for a trade.
|
|
|
|
|
both gox and dwolla available (+1.5%)
|
|
|
|
Short version? The only people who got anything back were a very few close personal friends of the insiders who destroyed this "company". It has now been sent into receivership by the latest candidate for owner, although nothing has been forthcoming about what the receiver will be doing in the past 5 weeks.
Quick resolution? Write it off. You will never see a damn thing from these criminals. They stole it all, and have created a master work of lies, deception, delays and obfuscation to cover their tracks. And avoid any dealings with the intersango gang, as they are the criminals behind this disaster.
LoupGaroux, Your so dramatic. I certainly wouldn't call their incompetence a "master work." |
|
|
|
The secret key is used to check your message signature and as such we must use it to calculate the signature and check it for validity. The signature ensures that your message was not tampered with by a MITM.
Neither the secret key nor the passphrase nor the signature are actually needed to ensure the security and authenticity of customers' API requests. The API key is already sufficiently large (128 bits) to avoid a brute force attack, and it's never transmitted except over an encrypted (SSL) connection, and the client won't send it if the server's certificate doesn't validate, so neither a MITM nor an eavesdrop are possible. Also, SSL does already include nonces, so a replay attack is not possible, and thus the nonce field is unneeded, too. Of course, there is still the possibility of a database dump, which would reveal all API keys to the attacker. Really, you should be requiring client-certificate authentication on the SSL connections to the API server, and your database should contain certificates for all of your API users. Then it wouldn't matter if an attacker obtained a dump of your database; they still couldn't pretend to be any of your users because they wouldn't have the private keys associated with those certificates. Basically, all of these extra HTTP header fields are clumsy attempts to solve a problem that is already solved in SSL. And by the way, you're supposed to prefix non-standard header field names with "X-" so they don't conflict with any future standards. The mint chip challenge used a client cert to authenticate with its test servers. It was trivial to install a browser cert and then only that browser could access the server or your account. You were also required to authentic the mint chip server cert before you could make any transactions. Seemed to me a very secure means of authentication for a financial service. And as certificate authentication have been around years I'm surprised that it still has not been more widely implemented for financial web services. |
|
|
|
|
I'm certain you could have public facing and searchable pages and use your encryption starting a log in. Why would google need to index your protected pages as long as the public urls say where it is and what it does.
|
|
|
|
|
My rate is Mt. Gox Last plus 5% at the time of purchase.
Current rate is 12.58
10 BTC would be 125.80 right now.
PM if interested.
|
|
|
|
|
In the best interests of the bitcoin economy and my support bitcoin in general and Bitfloor specifically, I'd be willing to invest 1K for the repayment/recovery of Bitfloor if :
1. Other members also contribute 1k ( or a pro rata share) to equal the total loss.
2. Bitfloor provides verified proof of loss.
2. Bitfloor Provides a realistic repayment schedule with interest payments on the loan(s)
4. Bitfloor provides a third party audit/verification of its new security features.
3. TangibleCryptology agrees to handle repayments (with an agreed upon commission for his service).
I have no interest in TangibleCryptology or Bitfloor others then I use both of their services and consider them as individuals and their business as adding valuable services to the bitcoin economy.
I'm also curious to see if a decentralized, p2p community can come together in support of everyone's best interests to continue creating a robust economy and community.
Thanks.
BCB
|
|
|
|
|
Are these edits being added/incorporated to the source. I haven't downloaded an update recently. Waiting for further development.
Thanks.
|
|
|
|
|
+1 for TangibleCryptography dept repayment input.
While the TheBitman debt was a fraction of the current Bitfloor debt, TC's input and effort in arranging and handling payment for all the creditors equitably was instrumental in creating a successful result for all involved.
shtylman, while I'm not suggesting TC handl your dept, it would be wise to at lease consider TC's input. I think it also bodes well for us all when the community can work together to solve these problems.
|
|
|
|
|
Show Posts
