Bitcoin Forum
December 05, 2016, 09:01:39 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: To all exchanges: Please do this...  (Read 2548 times)
proudhon
Legendary
*
Offline Offline

Activity: 1148



View Profile
June 21, 2011, 07:04:28 PM
 #1

I think every bitcoin exchange needs to require a bitcoin address at registration.  Then, something like what deepbit does needs to be implemented where that address cannot be changed except by email verification to the email associated with the account.  That way if something crazy happens the exchange can return what's ours more easily without everybody needing to go through some crazy verification process.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480971699
Hero Member
*
Offline Offline

Posts: 1480971699

View Profile Personal Message (Offline)

Ignore
1480971699
Reply with quote  #2

1480971699
Report to moderator
1480971699
Hero Member
*
Offline Offline

Posts: 1480971699

View Profile Personal Message (Offline)

Ignore
1480971699
Reply with quote  #2

1480971699
Report to moderator
Desu
Newbie
*
Offline Offline

Activity: 28



View Profile
June 21, 2011, 07:06:11 PM
 #2

E-mail verifcation on all transactions.
JS.

Tip me?
1KBuL4At3kKEsBbDwAqKa16CG4nbyjosdD
That's right, I'm a girl on the Interwebz
http://flipforbits.com/?id=1570
Spend cheaply, Win More. : ]
Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
June 21, 2011, 07:21:50 PM
 #3

We're considering all options.
The downside to a fixed address is when someone wants to cash out to someone else, which happens all the time.

We're looking at the best way to authenticate and will implement something soon.

-Jered

moneyandtech.com
@moneyandtech @jeredkenna
GeniuSxBoY
Hero Member
*****
Offline Offline

Activity: 546



View Profile
June 21, 2011, 07:23:00 PM
 #4

E-mail verifcation on all transactions.
JS.


didn't hackers go in and change email addresses?
TonyHoyle
Jr. Member
*
Offline Offline

Activity: 59


View Profile
June 21, 2011, 07:24:45 PM
 #5

didn't hackers go in and change email addresses?

So have email address verification to change the email :p

Lots of sites do this and it works well.

Of course if you used the same password for your email and your exchange, you're hosed.. but there's only so much you can protect against.
joan
Jr. Member
*
Offline Offline

Activity: 56



View Profile
June 21, 2011, 07:29:20 PM
 #6

E-mail verifcation on all transactions.
The idea of the address is that even if your E-mail gets compromised, the hacker cannot send the coins to himself.

I also think sites related to Bitcoin should try to think more in terms of addresses rather than users.
In this regards, I wish I could select the address to send coins from. This way it could serve to prove my identity (And that's why reusing addresses like in MyBitcoin is a bad idea IMHO).
Signing stuff with the private key of an address would open some perspectives too.

Cashing out to someone else would just need to cash out to himself first and then transfer (less privacy though).
Desu
Newbie
*
Offline Offline

Activity: 28



View Profile
June 21, 2011, 07:47:05 PM
 #7

E-mail verifcation on all transactions.
The idea of the address is that even if your E-mail gets compromised, the hacker cannot send the coins to himself.

I also think sites related to Bitcoin should try to think more in terms of addresses rather than users.
In this regards, I wish I could select the address to send coins from. This way it could serve to prove my identity (And that's why reusing addresses like in MyBitcoin is a bad idea IMHO).
Signing stuff with the private key of an address would open some perspectives too.

Cashing out to someone else would just need to cash out to himself first and then transfer (less privacy though).
Protection should be number one, The value of the BTC is to high even after all this commotion to worry about a little less privacy versus the loss of BTC.

Tip me?
1KBuL4At3kKEsBbDwAqKa16CG4nbyjosdD
That's right, I'm a girl on the Interwebz
http://flipforbits.com/?id=1570
Spend cheaply, Win More. : ]
khal
Hero Member
*****
Offline Offline

Activity: 538


NamecoinID: id/khal


View Profile WWW
June 21, 2011, 08:07:47 PM
 #8

We're considering all options.
The downside to a fixed address is when someone wants to cash out to someone else, which happens all the time.

We're looking at the best way to authenticate and will implement something soon.

-Jered

When this patch will be accepted in bitcoin (it allows to sign a message with a bitcoin address), you could require a bitcoin address at the registration time and if people wan't to withdraw to another address, they just have to sign the new address with the default address. This allow you to :
- prove you own the original address (you can only sign messages with this address if it is in your wallet and you own the private key)
- give your trust to other addresses

Signing a message :
1L5zqFahc8Ahu9wtgJqCeJMendvD174xsG is the address given at registration time.
Code:
./bitcoind signmessage 1L5zqFahc8Ahu9wtgJqCeJMendvD174xsG "New address : xxxxxxxxxxxxxxxxxxxxxxxx"

Then, you need to give the output of the command to the website which will verify it (another "simple" command line). And it's done :
- identity verified
- the new address is provided by the verified identity in a secured way


NMC: N1KHAL5C1CRzy58NdJwp1tbLze3XrkFxx9 | NamecoinID: id/khal | Register .bit domain
BTC: 1KHAL8bUjnkMRMg9yd2dNrYnJgZGH8Nj6T | My bitcoin Identity: send messages to bitcoin users
Free bitcoins: Surf4Bitcoin.com | Charity Ad: Make a good deed without paying a cent
MaGNeT
Legendary
*
Offline Offline

Activity: 1050


Founder of Orlycoin | O RLY? YA RLY!


View Profile WWW
June 21, 2011, 08:12:09 PM
 #9

We're considering all options.
The downside to a fixed address is when someone wants to cash out to someone else, which happens all the time.

We're looking at the best way to authenticate and will implement something soon.

-Jered

It's not a downside.
I can send the BTC to my own wallet and then transfer them to the wallet of another person.
So there is no need to have the option to send it to another person...
dinker
Member
**
Offline Offline

Activity: 102



View Profile
June 21, 2011, 08:45:09 PM
 #10

Thanks for the info, mtgox is down right now is there a backup address I can send my file? I have many coins I need to secure them ASAP. thx!

Help Me Help You Donations:
14kP6tNtrz3woESs9nEE5aDB81QTybGyyZ
TonyHoyle
Jr. Member
*
Offline Offline

Activity: 59


View Profile
June 21, 2011, 08:48:09 PM
 #11

Thanks for the info, mtgox is down right now is there a backup address I can send my file? I have many coins I need to secure them ASAP. thx!

 Shocked Shocked Shocked

 Grin
Desu
Newbie
*
Offline Offline

Activity: 28



View Profile
June 21, 2011, 08:51:23 PM
 #12

News just in:

Mt.Gox creates an innovative new security measure. Users must upload their wallet.dat file to the server when they want to log-in for authentication. This cutting edge technology will ensure that all the users information is kept safe and secure.
Uh, Fail? How is that more secure?

Tip me?
1KBuL4At3kKEsBbDwAqKa16CG4nbyjosdD
That's right, I'm a girl on the Interwebz
http://flipforbits.com/?id=1570
Spend cheaply, Win More. : ]
drknark
Newbie
*
Offline Offline

Activity: 28


View Profile
June 21, 2011, 08:58:23 PM
 #13

News just in:

Mt.Gox creates an innovative new security measure. Users must upload their wallet.dat file to the server when they want to log-in for authentication. This cutting edge technology will ensure that all the users information is kept safe and secure.
Uh, Fail? How is that more secure?

"Whooosh" (sound of the joke flying over your head)  Wink
andrepcg
Member
**
Offline Offline

Activity: 113



View Profile WWW
June 21, 2011, 09:00:04 PM
 #14

News just in:

Mt.Gox creates an innovative new security measure. Users must upload their wallet.dat file to the server when they want to log-in for authentication. This cutting edge technology will ensure that all the users information is kept safe and secure.
Uh, Fail? How is that more secure?

someone does not understand sarcasm...

█  Bitcoin-Portugal  █ • Carrega Telemóvel com Bitcoins • Blog
1FjknJQA2EigBrDov8dXFgiXqdzZBopNnb
MaGNeT
Legendary
*
Offline Offline

Activity: 1050


Founder of Orlycoin | O RLY? YA RLY!


View Profile WWW
June 21, 2011, 09:39:32 PM
 #15

News just in:

Mt.Gox creates an innovative new security measure. Users must upload their wallet.dat file to the server when they want to log-in for authentication. This cutting edge technology will ensure that all the users information is kept safe and secure.
Uh, Fail? How is that more secure?

someone does not understand sarcasm...

Everyone understands sarcasm....
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!