|
aleksey
|
 |
June 25, 2011, 03:53:47 PM |
|
кто нибудь смог залогинится?
|
|
|
|
|
|
|
|
|
|
|
|
Make sure you back up your wallet regularly! Unlike a bank account, nobody can help you if you lose access to your BTC.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
Dale
Newbie
 Offline
Activity: 31
Merit: 0
|
|
June 25, 2011, 03:54:40 PM |
|
кто нибудь смог залогинится?
Да. Ждать надо пару минут. |
|
|
|
|
Pahom
Sr. Member
Offline
Activity: 356
Merit: 252
FRX: Ferocious Alpha
|
|
June 25, 2011, 03:54:51 PM |
|
По какому адресу можно зайти с логином, а не с емэйлом?
|
|
|
|
Dale
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 25, 2011, 03:57:04 PM |
|
По какому адресу можно зайти с логином, а не с емэйлом?
https://mtgox.com |
|
|
|
|
mich
Legendary
Offline
Activity: 3108
Merit: 1032
#1 VIP Crypto Casino
|
|
June 25, 2011, 05:45:44 PM |
|
Trade is closed right now, until June 26th 15:00 GMT
еще сутки нервно курим
|
|
|
|
Troll Station
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 25, 2011, 07:46:33 PM |
|
Так ведь сайт уже работает и вполне себе не тормозит.
Баланс всем же показали? С отрицательными значениями решилось?
|
|
|
|
|
LZ
Legendary
Offline
Activity: 1722
Merit: 1072
P2P Cryptocurrency
|
|
June 25, 2011, 07:50:51 PM |
|
Да, баланс теперь в порядке.  |
My OpenPGP fingerprint: 5099EB8C0F2E68C63B4ECBB9A9D0993E04143362
|
|
|
|
aleksey
|
|
June 25, 2011, 08:36:18 PM |
|
у меня через хром не логинится почему то, а через ie без проблем залогинился
|
|
|
|
|
Troll Station
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 25, 2011, 11:09:30 PM |
|
у меня через хром не логинится почему то, а через ie без проблем залогинился
Дело может быть в старых куках(хотя особой привязки к кукам я не видел на mtgox). |
|
|
|
|
ktotom7
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 26, 2011, 04:54:27 AM |
|
странно.. не логинится.. не под ie не под хромом... пробовал ретрайв сделать тоже ничего не приходит  |
|
|
|
|
Alda Gordaya
Member
Offline
Activity: 61
Merit: 10
|
|
June 26, 2011, 12:43:35 PM |
|
Так ведь сайт уже работает и вполне себе не тормозит.
насчет "работает" есть сомненияI'm a programmer and from what I've heard and seen it looks like software behind MtGox is piece of shit not suitable for production.
It is one thing when security vulnerabilities are caused by rare bugs in code, and completely another thing when they are caused by negligence and disrespect to common practices.
CSRF: Every form in every web application is by default vulnerable. Thus any professional web developer should be aware of CSRF problems (otherwsie EVERY application he works on will be vulnerable) and should take corrective measures. Which are simple, by the way: just check goddamn referrer! So if you see CSRF somewhere then either this is a sloppy coding or sheer lack of professionalism.
SQL injections. They are not officially confirmed by MtGox, but people on irc claim that there were SQL injection problems (SQLi). This, again, shows that developers are lame because SQLi is a very serious issue but it is easily preventable: if you use parametrized queries/prepared statements and never modify queries themselves then SQL injections are simply not possible at all.
Same thing XSS: if you use a templating engine like Smarty in PHP then XSS is not possible because it will 'escape' everything automatically. Naked PHP is very vulnerable, but people should know they are not supposed to build sites like they were 10 years ago.
It looks like their trading software sucks. I've looked through a websocket API log at time of that large sell-off. Oh my... Yes, there was one large order to sell 500k BTC. I would expect that it would instantly fill it with existing bids (>= 0.01) and show current price with 0.01. But, now, it was slowly filling that huge-ass order for 36 motherfucking minutes, and it was not showing that 0.01 is the current price, so people had no idea of what is going on. (But this information was available through websocket feed.)
Normally exchanges have automatic 'circuit breakers' -- if price goes too low trading automatically stops. If that was a case with MtGox we would have none of the mess if it would halt right after filling that huge-ass order: it would be easy to undo the damage and people would have no chance so withdraw.
It was reported that withdrawal limit (no more than $1000 worth of BTC per day) was not properly implemented: a) you could withdraw more if you would do it many times per day; b) it takes current market price to estimate threshold for bitcoin withdrawal. If there is no smoothing/averaging it is vulnerable to 'large sell-off' attacks.
Looking through websocket feed logs I've noticed that prices are sometimes represented as floats and sometimes as strings. E.g. 0.01 and "0.01". This means that there is some weak-typed fun going on inside and it can be a serious source of bugs. I think that weakly typed languages like PHP SHOULD NOT be used for financial software. Ideally it should be implemented in strongly and statically-typed language like Java.
In their official announcement they said that account balances were very wrong. This indicates serious bugs or SQLi at work.
So it was not an isolated incident, software is simply full of bugs and is written in a sloppy manner. Any half-competent team would not allow software of this quality to be used in production: they would stop site and bring it back only when it is fixed.
Thus it looks like team behind MtGox is either extremely incompetent, or greedy, or both.
|
|
|
|
|
Troll Station
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 26, 2011, 01:13:42 PM |
|
насчет "работает" есть сомнения
Сами проверяли? XSS, SQL Injecion и другие способы пролезть куда-то далее вебинтерфейса? |
|
|
|
|
|
MiF
|
|
June 26, 2011, 02:02:53 PM |
|
Вывод работает. 110$ на LR получены без проблем с обычной задержкой.
|
|
|
|
Troll Station
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 26, 2011, 02:28:50 PM |
|
И еще по поводу задержек.
Страшно тормозит вебинтерфейс, скрипты апишки через браузер выполняются, а торговый робот зависает на обновлении тикера.
С btcex и TH все в порядке. Странно.
|
|
|
|
|
|
MiF
|
|
June 26, 2011, 08:55:25 PM |
|
С btcex и TH все в порядке. Странно.
Действительно странно, что совершенно разные и не связанные между собой сайты ведут себя по разному. Очень, очень странно. |
|
|
|
Troll Station
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 26, 2011, 10:37:40 PM |
|
С btcex и TH все в порядке. Странно.
Действительно странно, что совершенно разные и не связанные между собой сайты ведут себя по разному. Очень, очень странно. странность с моей стороны в том, что прога зависает в конкретном месте, без видимой на то причины. |
|
|
|
|
aistto
Legendary
Offline
Activity: 1001
Merit: 1005
|
|
June 27, 2011, 06:31:35 AM |
|
уже дней 5 жду восстановления пароля.
ни отказа ни пожтверждения нет.
|
|
|
|
|
|
Aqualung
|
|
June 27, 2011, 06:33:12 AM |
|
видимо пора писать на мыло им...
|
used to be a miner
|
|
|
jacoder (OP)
Newbie
Offline
Activity: 45
Merit: 0
|
|
June 27, 2011, 06:38:55 AM |
|
уже дней 5 жду восстановления пароля.
ни отказа ни пожтверждения нет.
 Я ждал 6 дней..  видимо пора писать на мыло им...
 Написал вчера - ни ответа ни привета.  Сегодня ушел на TradeHill. |
|
|
|
|
|
Aqualung
|
|
June 27, 2011, 07:22:10 AM |
|
хм, с MtGox прислали мне письмо с кодом для восстановления пароля, типа я запрос на восстановление делал, хотя я ничего не делал... хм хм |
used to be a miner
|
|
|
|
