[BTC-TC] Virtual Community Exchange [CLOSED]

[burnside]

Hello,

I registered an account on your site and did not receive an email confirmation.
Of course I checked my email spam folder ;-)
I did work at an Internet service Provider in the past.
I know what I am doing.

I changed the email address to another one. Same problem.

I had to use a third email address with a very relaxed spam filter configuration to receive an email
from your site.

But - it would be very easy for you to fix this problem. Let me explain what happens:

Your system sends out email from a server with the IP address "71.6.131.81" and this server
identifies itself as "cari.aspadmin.net".

The problem is that there is no reverse-mapping (IP-Adresse -> hostname) for that IP address.

$ host 71.6.131.81
Host 81.131.6.71.in-addr.arpa. not found: 3(NXDOMAIN)

You really should setup a reverse mapping (let your internet service provider do this)
that points 71.6.131.81 to cari.aspadmin.net.

Without this reverse mapping there is a very high chance that most email servers (where you try to send mails to)
will reject the incoming TCP connection before even listening to any SMTP traffic.
A wrong reverse mapping (for example server-xx.cari.aspadmin.net) will work for most email servers as well.
But it's better to setup the correct reverse mapping of course.

Please fell free to contact me if you have any questions about this.

Update:
You can not find anything about this problem in a SPAM folder.
The email servers reject the incoming TCP session without a reverse mapping.
The server does not even see the start of the SMTP session and so does not know which
email address is (should be) used.

Ralf

Good call.  We just changed to using this server last week for sending our email.  Previously it was sent directly from the site servers and the DDoS attackers were using the mail headers to find the IP. 

I'll file a ticket with the host.  Thanks!

[1715076380]

1715076380

[davecoin]

burnside, can you please respond to my pm and email?  Sorry to get my panties in a bunch, but I'd like to get the ASICMINER share transfer completed in a timely manner and get the dividend situation resolved.

Thanks,
Dave

edit: Resolved. Thanks, burnside.

[burnside]

burnside, can you please respond to my pm and email?  Sorry to get my panties in a bunch, but I'd like to get the ASICMINER share transfer completed in a timely manner and get the dividend situation resolved.

Thanks,
Dave

edit: Resolved. Thanks, burnside.

No problem. Things are hard to keep up with sometimes. 

Let's keep the ASICMINER stuff in the PT thread next go round.

Cheers

[davecoin]

Roger that.

[murfshake]

Burnside, I am having a hard time finding my TOTAL value analysis.  As of now I am doing spread sheets but I feel you should include that, and I hope I am just missing it.  As it stands, I have a Value Analysis of each issued company, but not total profile analysis.

Please point me in the right direction, I feel I am missing something that should obviously be there.

[CanadianGuy]

burnside, there is a html problem with your main page right now.  crypto-trades announcement isn't breaking soon enough before the trades list.  It's all messed up!

[kokojie]

burnside, there is a html problem with your main page right now.  crypto-trades announcement isn't breaking soon enough before the trades list.  It's all fucked up, basically..

yep, neotrix broke btct's front page, with his new announcement. lolol 

[burnside]

burnside, there is a html problem with your main page right now.  crypto-trades announcement isn't breaking soon enough before the trades list.  It's all fucked up, basically..

yep, neotrix broke btct's front page, with his new announcement. lolol 

Bah.  "pre" tags... he must have cut and pasted it from something. 

[burnside]

Did have a question though.  In My Value Analysis, total paid column does that include btctc fees?

I had to dig into the code to find out. 

Turns out that no, it does not.

Cheers.

[burnside]

Your system sends out email from a server with the IP address "71.6.131.81" and this server
identifies itself as "cari.aspadmin.net".

The problem is that there is no reverse-mapping (IP-Adresse -> hostname) for that IP address.

$ host 71.6.131.81
Host 81.131.6.71.in-addr.arpa. not found: 3(NXDOMAIN)

Good call.  We just changed to using this server last week for sending our email.  Previously it was sent directly from the site servers and the DDoS attackers were using the mail headers to find the IP. 

I'll file a ticket with the host.  Thanks!

This has been fixed. 

Cheers.

[burnside]

email received from the system today:

To: burnside
Subject: BTC-TC ERROR /security/Graet-Loan
Date: Fri, 31 May 2013 20:47:14 +0000 (UTC)
From: xxx


Error: Invalid ticker name.  Capitals, numbers, periods, and dashes only please.

LOL  

Who's doing that?  stoppit.

[blurden]

what will happen in case of domain seizure? are you on multiple servers?

[burnside]

what will happen in case of domain seizure? are you on multiple servers?

It's not a .com, so in theory the US shouldn't seize it.

The site's spread across multiple servers, but not multiple geographic locations.

The servers are backed up offsite frequently.  But honestly, if they're seized by the gov't wherever they're located, we have bigger problems than getting back online and at that point issuers are most likely going to need to use their regularly issued asset holder lists to transition to another site.

Let's hope it never comes to that, and we'll do everything we can to avoid it, but you never know.

Cheers.

[burnside]

Burnside, I am having a hard time finding my TOTAL value analysis.  As of now I am doing spread sheets but I feel you should include that, and I hope I am just missing it.  As it stands, I have a Value Analysis of each issued company, but not total profile analysis.

Please point me in the right direction, I feel I am missing something that should obviously be there.

Check again?  

[nycgoat]

Hey man, one quick suggestion.  I know it isn't a priority at all, so when you get to it you get to it.

On Havelock they have it display the USD value of whatever BTC value you are looking at when you mouse over and hold it there for a second. 

While I do track everything in BTC, it eliminates one step when trying to determine the value relative to USD.

Thanks for everything on the exchange, I love it!

[burnside]

Hey man, one quick suggestion.  I know it isn't a priority at all, so when you get to it you get to it.

On Havelock they have it display the USD value of whatever BTC value you are looking at when you mouse over and hold it there for a second. 

While I do track everything in BTC, it eliminates one step when trying to determine the value relative to USD.

Thanks for everything on the exchange, I love it!

I've actually thought about doing that.

It'd be easy to make every BTC value display with a hover popup that'd show LTC and USD.  Unfortunately doing anything with USD would conflict with the "everything is virtual" verbiage everywhere.

Cheers.

[dance4x]

what will happen in case of domain seizure? are you on multiple servers?

It's not a .com, so in theory the US shouldn't seize it.

The site's spread across multiple servers, but not multiple geographic locations.

The servers are backed up offsite frequently.  But honestly, if they're seized by the gov't wherever they're located, we have bigger problems than getting back online and at that point issuers are most likely going to need to use their regularly issued asset holder lists to transition to another site.

Let's hope it never comes to that, and we'll do everything we can to avoid it, but you never know.

Cheers.

How would I go about proving ownership of certain stocks if the site was taken down? Is there something in my account that I should be downloading on a regular basis?

[burnside]

what will happen in case of domain seizure? are you on multiple servers?

It's not a .com, so in theory the US shouldn't seize it.

The site's spread across multiple servers, but not multiple geographic locations.

The servers are backed up offsite frequently.  But honestly, if they're seized by the gov't wherever they're located, we have bigger problems than getting back online and at that point issuers are most likely going to need to use their regularly issued asset holder lists to transition to another site.

Let's hope it never comes to that, and we'll do everything we can to avoid it, but you never know.

Cheers.

How would I go about proving ownership of certain stocks if the site was taken down? Is there something in my account that I should be downloading on a regular basis?

No, the asset issuers get lists sent to them every 12 hours, so if you're in the list, you're good to go.  This does suck somewhat if you made a trade in the meantime so I have been exploring other options for users to be able to prove trades using the emails that get sent out.  Basically will require the site to gpg sign trade emails I suspect.

What I haven't figured out yet is how to give you a gpg signed copy of your trade that the issuer could use as a diff against their copy of the asset holders.  For them to be able to use it, the copy of your trade would need to have both your account and the other user's account in the trade data.  I can't really send out info about the other user, so that's kind of where I'm stuck right now.

Cheers.

[dance4x]

No, the asset issuers get lists sent to them every 12 hours, so if you're in the list, you're good to go.  This does suck somewhat if you made a trade in the meantime so I have been exploring other options for users to be able to prove trades using the emails that get sent out.  Basically will require the site to gpg sign trade emails I suspect.

What I haven't figured out yet is how to give you a gpg signed copy of your trade that the issuer could use as a diff against their copy of the asset holders.  For them to be able to use it, the copy of your trade would need to have both your account and the other user's account in the trade data.  I can't really send out info about the other user, so that's kind of where I'm stuck right now.

Cheers.

Ah. Thanks for the clarification. What would be the problem with sending an updated list to an asset holder after every trade involving his or her asset?

[burnside]

No, the asset issuers get lists sent to them every 12 hours, so if you're in the list, you're good to go.  This does suck somewhat if you made a trade in the meantime so I have been exploring other options for users to be able to prove trades using the emails that get sent out.  Basically will require the site to gpg sign trade emails I suspect.

What I haven't figured out yet is how to give you a gpg signed copy of your trade that the issuer could use as a diff against their copy of the asset holders.  For them to be able to use it, the copy of your trade would need to have both your account and the other user's account in the trade data.  I can't really send out info about the other user, so that's kind of where I'm stuck right now.

Cheers.

Ah. Thanks for the clarification. What would be the problem with sending an updated list to an asset holder after every trade involving his or her asset?

That'd be a lot of emails.    Way too many on most assets.