Cryptostocks - LTC Support

[Cryptostocks]

https://cryptostocks.com is a stock exchange using virtual currencies. We will be expanding the current support for Bitcoins to Litecoins and Devcoins on 16th August 2012.  List securities (stocks, bonds) based on Litecoin, trade and pay/receive dividends.

Please address any feedback on our service or recommendations on how to further improve our service to customerservice@cryptostocks.com

[1715029933]

1715029933

[1715029933]

1715029933

[1715029933]

1715029933

[vendor]

I am happy to see. BTC really need a good competitor. It will benefit both cryptocurrencies. GLBSE also need competition. Good luck!

[eb3full]

This looks really nice, congrats. Could you post more about the security involved in this service?

Also make your homepage news items list newest first.

edit: probably a good idea to add two-factor authentication settings

edit2: make your API on its own subdomain, just for forward compatibility considerations.

[Cryptostocks]

News:
 Homepage:  You are right, we'll redesign this in the coming week.
 Trading news: We just released a RSS feed that shows all activities on the exchange.

Security: With security I believe you are referring to the system security, and not to the securities listed. 
 Passwords:  We do not store your passwords in clear text, not even in any log files. They are saved salted and multiple times hashed in the database.
 Other security features prevent :
   - Replay Attacks for CookieStore Sessions
   - Session Fixation / Session Hijacking
   - CSRF
   - Brute force attacks:   fail2ban, mod_evasive, and some application specific checks against URL manipulations and possible malicious activites
   - recaptchas
to name just a few.  I'll contact you via PM about your concern on the API CSRF.

Two factor authentication: We are reviewing the options here, Yubikey, openID, etc. Let us know what your preferred solution is.

Thanks for the feedback. Help to make Cryptostocks.com your stock exchange of choice, by telling us what additional features are that you want us to implement.

[vendor]

Can you do a twitter feed for the activities apart from rss please?

I prefer google authenticator personaly