[Work in progess] Burnins Avalon Chip to mining board service

[coinbird]

For the record. Everyone is getting 401, right? I've been trying for a while now.

yes

[Roy Badami]

The 401 is because burnin has stuck in a basic auth to disable the site until he fixes it.  Based on his previous comment, he's gone to sleep, and we shoudldn't expect it to be fixed tonight...

Of course, it's always possible he's an insomniac

[SebastianJu]

But how do you know which orders are correct?  What if someone claims their order is correct when it actually includes someone else's chips?

To answer my own question: I think any existing orders that you keep - you should insist on a signed confirmation that the order is valid - that must be signed by every chip payment address in the order....

@burnin: To follow up on my own post yet again, you absolutely have to do that anyway, for all orders past and future...  (Of course, maybe your website does request such verification - and I just didn't get that far.)

At least in SebastianJu's group buy, purchase was allowed by PM or public post.  So in many cases the forum nick and chip payment address are both public anyway... Therefore you will need to get people to prove their identity when ordering to prevent them stealing other people's chips...  Either by signing something with their bitcoin address, or by PMing you from their forum account

roy

A verification was planned but then it was thrown away again. Now the way is to order, burnin asks me if the user really owns the chips and i should say yes.
So you say what if someone writes in the username of a different user, puts in his sending address and pays for the assembly. I would see the username and address and would say hes real. Sounds like a problem. On the other hand... its a bit risky to pay for another persons chip. I mean when it comes out he might lose his btc.
I think its late... cant think anymore.

[Roy Badami]

A verification was planned but then it was thrown away again. Now the way is to order, burnin asks me if the user really owns the chips and i should say yes.
So you say what if someone writes in the username of a different user, puts in his sending address and pays for the assembly. I would see the username and address and would say hes real. Sounds like a problem. On the other hand... its a bit risky to pay for another persons chip. I mean when it comes out he might lose his btc.
I think its late... cant think anymore.

Except, due to the cart problems I worry that people may have ordered boards with other people's chips by accident...

But even ignoring the cart problems, the chips are valuable and have already been paid for.  One way or another, I don't think boards containing those chips should be sent to someone just because they are willing to pay for the boards and assembly - surely they need to prove they own the chips, too?

Perhaps some kind of public list would help, which we can cross-check against - although I can't quite see how that would work...

roy

[EDITED: Minor editorial changes only]

[tarmi]

But how do you know which orders are correct?  What if someone claims their order is correct when it actually includes someone else's chips?

To answer my own question: I think any existing orders that you keep - you should insist on a signed confirmation that the order is valid - that must be signed by every chip payment address in the order....

@burnin: To follow up on my own post yet again, you absolutely have to do that anyway, for all orders past and future...  (Of course, maybe your website does request such verification - and I just didn't get that far.)

At least in SebastianJu's group buy, purchase was allowed by PM or public post.  So in many cases the forum nick and chip payment address are both public anyway... Therefore you will need to get people to prove their identity when ordering to prevent them stealing other people's chips...  Either by signing something with their bitcoin address, or by PMing you from their forum account

roy

this.

no signed confirmation = I move my order from batch 4 to batch 1

[SebastianJu]

I fear this will lead to the point where i have to pm everyone to ask if its really his order. Since the claim at burnin's shop can be from everyone. The only risk involved is the paid money. But then... burnin allowed paypal. Now this sounds like an invitation for scam. *sigh*
Maybe if burnin sends me the shipping address too i could check if it matches with the billing address in my calc.

[Roy Badami]

The only risk involved is the paid money.

I don't understand what you mean by that... The risk (to me) is that burnin might send my chips (which I've already paid you for) in a board to someone else...

roy

[EDITED SLIGHTLY]

[Roy Badami]

Maybe if burnin sends me the shipping address too i could check if it matches with the billing address in my calc.

Some of us might want to use different shipping and billing addreses.  (I gave you my home address as billing address - but will probably request shipping to my work address, to avoid wasted days of a missed delivery and having to collect from the depot.)

But that check will probably match in many cases, which will cut down on the work.

roy

[ecliptic]

What?  I thought orders were stopped/cancelled because of site troubles, URL is down,  and yet people have gotten in?!!

[SebastianJu]

Maybe if burnin sends me the shipping address too i could check if it matches with the billing address in my calc.

Some of us might want to use different shipping and billing addreses.  (I gave you my home address as billing address - but will probably request shipping to my work address, to avoid wasted days of a missed delivery and having to collect from the depot.)

But that check will probably match in many cases, which will cut down on the work.

roy

I thought so too.

Regarding the risk... a scammer who pays for assembly of chips that arent his would have to pay for assembly. Thats the risk he invests. But then... burnin allows paypal.

[Roy Badami]

What?  I thought orders were stopped/cancelled because of site troubles, URL is down,  and yet people have gotten in?!!

The site is down for now.  No word on what will happen to order places during the two short periods it was up.

[glungnahund]

orders were stopped but placed (and correct) orders stay.

[Roy Badami]

orders were stopped but placed (and correct) orders stay.

Who is the arbiter of 'correct'?  The person who placed an order while my chips were in their cart - do they get to keep my chips?

[glungnahund]

You need to ask burnin, I am just quoting him: "Any order that is correct will stay in the system. "

[arij]

Why does it say Authorization Required when I try to go to the website? Is this happening to anyone else?

[aopa38]

Why does it say Authorization Required when I try to go to the website? Is this happening to anyone else?

Burnin has taken the website down while the issues found earlier are rectified.

[iikun]

orders were stopped but placed (and correct) orders stay.

Who is the arbiter of 'correct'?  The person who placed an order while my chips were in their cart - do they get to keep my chips?

I don't think you have to worry about this. Burnin has clearly shown to date he is on top on things and so anyone stupid enough to have tried to steal chips by putting a different ID might find themselves out of pocket by a few thousand Euro. I'm sure he will advise his plan for confirming orders after he has the site fixed shortly.

[gateway]

Btw zefir announced that the fist batch has been shipped (on its way to him) I have a few chips in that batch and want to make sure burnin gets them.

 Need any help on the website I'm an experienced web developer

[mastahofdesastah]

Sorry for the late post..

My order worked, get also the Order receipt and paid already.

Nr. 33x

[ummas]

I cant do anythink. Web still asks for user/pass.

@burnin
Is it possible to pay by wire from german bank?
My friend has account, but he does not live in germany ATM.
So shipping addres would be different than that of the account owner. Is it ok for You?