Bitcoin Forum
December 05, 2016, 04:34:18 AM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 [4] 5 6 7 8 9 10 11 12 »  All
  Print  
Author Topic: TradeHill - Who we are  (Read 39836 times)
JTaBitCoinKing
Newbie
*
Offline Offline

Activity: 28


View Profile
June 19, 2011, 11:18:28 PM
 #61

I think the chances of TradHill being behind the attacks is as likely as it being MJ12. More likely it was Lulzsec, a psychopath, someone protecting Silk Road, or just some thief.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
CharlieContent
Full Member
***
Offline Offline

Activity: 210


View Profile
June 19, 2011, 11:19:47 PM
 #62

Finally, an exchange run by competent people instead of some Magic the Gathering idiot. BitCoin has come of age. Smiley

As long as Tradehill wasn't formerly "TradeMagicTheGatheringCardsHill" then I'm in  Wink
zombo
Newbie
*
Offline Offline

Activity: 19


View Profile
June 19, 2011, 11:20:42 PM
 #63

I'm interested in signing up with you guys but you don't transfer to Liberty Reserve which is the only place I can use being that I live in New Zealand.

Hope you guys can do something for us Kiwi's sometime soon.
Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 19, 2011, 11:27:07 PM
 #64

I'm interested in signing up with you guys but you don't transfer to Liberty Reserve which is the only place I can use being that I live in New Zealand.

Hope you guys can do something for us Kiwi's sometime soon.

We do use Liberty Reserve and we're treating it as it's own currency so that we can be used as an LR exchange in addition to a BTC exchange.


More answers to the rest of the questions coming. We are getting flooded with emails and concentrating on user security.

moneyandtech.com
@moneyandtech @jeredkenna
just_someguy
Full Member
***
Offline Offline

Activity: 125


View Profile
June 19, 2011, 11:31:00 PM
 #65

Jered, see this:
http://forum.bitcoin.org/index.php?topic=19711.0

I've received it as well.

I hope you out and suspend the account.

Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 19, 2011, 11:31:53 PM
 #66

I want to ask a few questions about your company.

What's the number of the owners' equity on the Blance Sheet of your comapny, say, how much money have you founders invested?


Frankly, that is private – There is a distinct difference between being ‘untruthful’ or ‘inaccurate’ as opposed to choosing wisely about what information should be disclosed publicly. Either way, we will be preparing a public statement covering multiple dimensions of our business and will consider your request.


How many fulltime stuff are there in you company?

All four founders are working on this fulltime except ME. I have a consulting business and must deliver on my promises to past clients. However, as soon as that happens, I intend to dedicate all my time to this. I will not comment on the number of staffers we have.

[/quote]

Is there any founders are not fulltime?

Answered above!

[/quote]

Are you going to raise larger venture capital soon?

We have developed an innovative way to raise capital. Additionally, some of our family members are equipped to provide us significant funds.  We do have an open mind to VCs or other investors so please send us a note.

[/quote]

How many years have you founders know each other, have you guys teamed up before?

Answered above – Me and Jered have known each other for ten years – I used to email him while his base was getting mortar attacked in Afghanistan: Me and Jered have known Francisco for 3 years.

[/quote]


moneyandtech.com
@moneyandtech @jeredkenna
tysat
Legendary
*
Offline Offline

Activity: 952


Keep it real


View Profile
June 19, 2011, 11:33:01 PM
 #67

Jered, see this:
http://forum.bitcoin.org/index.php?topic=19711.0

I've received it as well.

I hope you out and suspend the account.

http://forum.bitcoin.org/index.php?topic=19707.0

Different thread, same idea.  This one has the full email headers in it.
jibjabz
Jr. Member
*
Offline Offline

Activity: 59


View Profile
June 20, 2011, 12:13:04 AM
 #68

Can you please suspend whoever's account this is for their blatant spamming?

tradehill.com/?r=TH-R15683

I'm sure you've heard, but they emailed every Mt. Gox customer with their referral code.

Don't go broke while you're out having fun. Check out Coin Watcher.

Free trial until 6/14. Just add yourself to this group to start receiving e-mail alerts.
Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 20, 2011, 12:13:32 AM
 #69

We can accept international wires. If you want to buy Bitcoin with any currency.
Go to your bank, buy USD and then wire it in.
SEPA is coming ASAP, we are growing as fast as possible.
We don't want to over extend ourselves and fail. We would much rather provide a reliable service.

In regards to the servers we're on it. It's one thing to grow quickly and another to have the entire Bitcoin world try to log in at once.




When is TradeHill going to pay for, and publish results from, a professional security audit?


If you want to be a real online broker, you need to invest in Wells-Fargo levels of vulnerability analysis.

Start with NTOSpider On-Demand, http://www.ntobjectives.com/ntoondemand, to get an idea of where you stand.

Next, hire an experienced consultant to make sure everything is absolutely bulletproof.

I HIGHLY recommend Strategic Data Command of Oakland, CA.  Larry Suto is among the best at what he does.

It might cost you a small fortune, but if you want results you need to call in world-class experts.

I posted this same bit of advice to our MtGox rep. as well.


Hi ICEBREAKER,

ABSOLUTELY - and we will publish the results for the community to view!

Thank you for the recommendation. We will definitely reach out to your colleague. Understand that we will likely seek several opinions.
 
This is a major priority that is both important and urgent; however, we cannot drop everything at this moment – we hope you understand – we have already frozen withdrawals and deposits and told customers to change their passwords.  We also have confidence in our current system; although, we will definitely be seeking advancements going forward.

We are promising the community that this issue will be addressed PUBLICY – via third party AUDIT - with brevity and transparency.

Regarding costs, we are thinking that perhaps some of the Task Force’s budget could be included for third party security checks; that way, each exchange will be put to the same tests on a level playing field. Again, for anyone who wants to participate in organizing the Task Force for Exchange Security please send an email to info@tradehill.com with “Task Force” in the title.

Regards,
Adam Stradling

moneyandtech.com
@moneyandtech @jeredkenna
mgiuca
Newbie
*
Offline Offline

Activity: 25


View Profile
June 20, 2011, 01:25:43 AM
 #70

No offense but your security is a joke right, i understand you dont have the resources/money but it needs to be looked at seriously as the #1 priority.
Do you have any specific security complaints about TradeHill? You shouldn't go saying that a financial website's security is a "joke" unless you have some evidence.
ivank2139
Newbie
*
Offline Offline

Activity: 27


View Profile
June 20, 2011, 03:48:38 AM
 #71

With the proper authorizations many people can perform a penetration test of the web site.  It should be fairly easy to run one, or contract to do it, and publish the results.  It would certainly be worthwhile to have some evidence of security in place. 

Some people can do the pen testing without authorization but not legally from the USA.
finack
Jr. Member
*
Offline Offline

Activity: 56


View Profile
June 20, 2011, 04:09:07 AM
 #72

When are you going to be able to provide a timeline for things like a full security audit and features like two factor auth that you mentioned on onlyonetv?  I understand that you won't be able to commit to specific time for features or a consultant you haven't hired, but a date when you will be able to would be nice.
SgtSpike
Legendary
*
Offline Offline

Activity: 1344



View Profile
June 20, 2011, 04:49:29 AM
 #73

When will tradehill open back up for trading?  It says a few hours on the website, but it's been 6...  I'd just like to know if it'll be 1 hour or 10 before we can start trading again?
iCEBREAKER
Legendary
*
Offline Offline

Activity: 1498


Crypto is the separation of Power and State.


View Profile WWW
June 20, 2011, 04:59:17 AM
 #74

With the proper authorizations many people can perform a penetration test of the web site.  It should be fairly easy to run one, or contract to do it, and publish the results.  It would certainly be worthwhile to have some evidence of security in place. 

Some people can do the pen testing without authorization but not legally from the USA.

That's right Ivan. 

If a site won't publish the results from one or more of the readily-available penetration testing services, you should assume that their code is ready to be opened up by hackers like a tin can of sardines with a pull-tab.

The difference between bad and well-developed digital cash will determine whether we have a dictatorship or a real democracy.  David Chaum 1996
Fungibility provides privacy as a side effect.  Adam Back 2014
"Monero" : { Private - Auditable - 100% Fungible - Flexible Blocksize - Wild & Free® - Intro - Wallets - Podcats - Roadmap - Dice - Blackjack - Github - Android }


Bitcoin is intentionally designed to be ungovernable and governance-free.  luke-jr 2016
Blocks must necessarily be full for the Bitcoin network to be able to pay for its own security.  davout 2015
Blocksize is an intentionally limited resource, like the 21e6 BTC limit.  Changing it degrades the surrounding economics, creating negative incentives.  Jeff Garzik 2013


"I believed @Dashpay instamine was a bug & not a feature but then read: https://bitcointalk.org/index.php?topic=421615.msg13017231#msg13017231
I'm not against people making money, but can't support questionable origins."
https://twitter.com/Tone_LLT/status/717822927908024320


The raison d'être of bitcoin is trustlessness. - Eric Lombrozo 2015
It is an Engineering Requirement that Bitcoin be “Above the Law”  Paul Sztorc 2015
Resiliency, not efficiency, is the paramount goal of decentralized, non-state sanctioned currency -Jon Matonis 2015

Bitcoin is intentionally designed to be ungovernable and governance-free.  luke-jr 2016

Technology tends to move in the direction of making surveillance easier, and the ability of computers to track us doubles every eighteen months. - Phil Zimmerman 2013

The only way to make software secure, reliable, and fast is to make it small. Fight Features. - Andy Tanenbaum 2004

"Hard forks cannot be co
1.21gigawatts
Member
**
Offline Offline

Activity: 98


View Profile
June 20, 2011, 05:13:57 AM
 #75

When will tradehill open back up for trading?  It says a few hours on the website, but it's been 6...  I'd just like to know if it'll be 1 hour or 10 before we can start trading again?

They just updated their website:
We expect to resume normal operations 06/20/11 10 AM Eastern.
Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 20, 2011, 05:15:04 AM
 #76

When are you going to be able to provide a timeline for things like a full security audit and features like two factor auth that you mentioned on onlyonetv?  I understand that you won't be able to commit to specific time for features or a consultant you haven't hired, but a date when you will be able to would be nice.

We have 3 people (internally) looking in to our security as I post this. We're not going to release the two factor authentication without extensive testing but I am going to say we will release an ETA as soon as we have it and this is a top priority.

moneyandtech.com
@moneyandtech @jeredkenna
Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 20, 2011, 05:16:11 AM
 #77

When will tradehill open back up for trading?  It says a few hours on the website, but it's been 6...  I'd just like to know if it'll be 1 hour or 10 before we can start trading again?

They just updated their website:
We expect to resume normal operations 06/20/11 10 AM Eastern.

Thanks, beat me to it.

moneyandtech.com
@moneyandtech @jeredkenna
JTaBitCoinKing
Newbie
*
Offline Offline

Activity: 28


View Profile
June 20, 2011, 06:17:10 AM
 #78

Come on guys! This conspiracy theory that Tradehill did the attack is just a little too wiled, don't you think? The U.S. Government, probably not but maybe. Lulzsec, much more likely. Tradehill, not very likely.

It's just an opportunity, that spammer who sent you all referrals knows that.
sang
Sr. Member
****
Offline Offline

Activity: 274


View Profile
June 20, 2011, 06:41:01 AM
 #79

I recommend a function to allow us to change our email associated with our account as well.
ivank2139
Newbie
*
Offline Offline

Activity: 27


View Profile
June 20, 2011, 01:59:27 PM
 #80

I have a few questions.

Did you hire a Security Professional?  A real one?  What are his qualifications?  What kind of testing, tools and monitoring has been put in place?

Have you implemetned a realistic Security Strategy, like "Defense in Depth".  Is each layer of the IT infrastructure down to the database is protected with ACL's and the minimum privileges possible.

Do you require users to have good pwd,  at least 16 characters long, digits, letters and special characters along with digital certificates. 

do you run your operations on a real Unix system?  Solaris or OpenSolaris are secure by default.  They are also "special " enough that not many hackers have expertise to penetrate it and it has very good support and Security features built in. 

Is your system hosted in the cloud? 

Are you using a well designed and professionally managed database?  Is this database being operated in the most secure manner possible?  Can you prove it and show evidence of an audit?

Everything should be logged and the logs monitored for attacks. 

Do you offer all users a digital certificate with your exchange being the CA. 

Is your entire operation behind a commercial firewall appliance and do you use a secure DNS?

What SEIM monitoring tools are in place?  You should have an SEIM monitoring solution from a reputable company.  I used AlienVault to gain experience but something even better might be a commercial offering.  Trustwave comes to mind that will audit your system and provide some certifications as to your compliance with all provisions of the NSA recommendations, and any other applicable authorities like the big exchanges. 

I think if you put this in place and let it be known upfront what is going on then you could easily attract as much business as you could handle.  With the best security in the bitcoin exchange arena you could charge more for trades and still get more customers.  With as much security as mentioned here it should be no problem for a big insurance agency like Loyds or whomever to insure each account and each trade to at least 250K bitcoins at a time or better.

You are going to be the number one target if you are successful.  Plan on it and plan on getting hit and have a plan to recover.

This is going to be a huge business with any luck and being the most secure will get you all the business you handle.
Pages: « 1 2 3 [4] 5 6 7 8 9 10 11 12 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!