WTF @ Mt.Gox?!

[Chick]

So the advanced security measures are part of a subscription? So I'll be paying you guys to prevent my account from getting hacked? LMAOROFLZOMBOCOMOMGWTFBBQ

[1714053525]

1714053525

[1714053525]

1714053525

[1714053525]

1714053525

[1714053525]

1714053525

[1714053525]

1714053525

[mjsbuddha]

I pointed that out on the other tread. that, my friends, is called extortion. you cant say your product is less secure unless the users pay more money. this isn't the fucking mafia. these clowns really are clueless. shit got real way to fast for these kids. but they have been thrown into the pool now. they will either learn to swim or sink.

[Clipse]

You do know that is just if you want it.

The initial security default upgrade which afaik should be plenty for normal people wont cost you money of course.

[geek-trader]

well, it looks like I'll be getting it for free, so, yay!

"Users who's trades were effectively cancelled during the the sell-off will be able to trade for free for 1 month following the reopening, and will also receive a free subscription to our upcoming 2-Step security authentication feature for as long as they hold their account."

[dust]

If it costs money and is "two factor authentication" it could be one of those RSA tokens.  The hardware costs money per unit, they aren't just going to give them out to free to every account.  Poker sites charge for them, but offer them free/discounted to high-volume players.  I suspect mtgox will do something similar.

[Bit_Happy]

Paypal has a little thing you can pay $5 to make your account much more secure, but that is not like a monthly payment.

[wolftaur]

Two factor authentication is based on something you know (your password) and something you have (usually a dongle that spits out one-time passwords you have to type in) and the dongles cost money. It's almost universal to have to pay extra for them.

This isn't extortion. This is, "Ok, we're improving our password encryption, and we won't give out the database, passwords and all, to some accountant again. But if you STILL want more..."

Now, if they start charging a monthly fee for the dongle, or a higher trade rate, or something... I'll consider them to be extremely dishonest and greedy.

As to extortion -- Well, a company I used to work for -- a finance company -- had the brilliant idea of actually charging an extra $29.95 a month to let you have a password more than 8 characters long. I managed to talk them out of it but it took me almost a month to convince them it was a really shitty thing to do and might actually be illegal.

[Rodyland]

Wouldn't it be more likely to be an SMS 2-factor like Google does?

[Tasty Champa]

has anyone gotten the email yet?

[wolftaur]

Wouldn't it be more likely to be an SMS 2-factor like Google does?

That's certainly possible, in which case a fee is still reasonable -- it generally costs money to send SMS, especially if you need to send a large number a month.

[Bit_Happy]

has anyone gotten the email yet?

Between now and tomorrow at 3:00 GMT you should receive an email with instructions on how to access your account, provided you have successfully completed the reclaim process at claim.mtgox.com.

https://support.mtgox.com/entries/20208066-huge-bitcoin-sell-off-due-to-a-compromised-account-rollback

[Tasty Champa]

has anyone gotten the email yet?

Between now and tomorrow at 3:00 GMT you should receive an email with instructions on how to access your account, provided you have successfully completed the reclaim process at claim.mtgox.com.

https://support.mtgox.com/entries/20208066-huge-bitcoin-sell-off-due-to-a-compromised-account-rollback

Thanks a bunch!

[d.james]

This just in: Kevin Day is a partner of mtGox, this whole Flash Crash / Rollback Stunt is just to sell more security subscriptions!

[relative]

there seem to be no details yet, but if they plan on using a physical security device like brokers do this is a huge improvement and charging for it is entirely reasonable.

[sebdude420]

 LMAOROFLZOMBOCOMOMGWTFBBQ

[hamdi]

i hope they find back in the market and prove to be better than before

meanwhile i stay with http://tradehill.com

[Archatos]

I pointed that out on the other tread. that, my friends, is called extortion. you cant say your product is less secure unless the users pay more money. this isn't the fucking mafia. these clowns really are clueless. shit got real way to fast for these kids. but they have been thrown into the pool now. they will either learn to swim or sink.

Of course you can say that your product is more secure for those who pay. Why shouldn't you be able to say so in a free market? This is completely normal in the grown-up world.

[MtGox_Adam]

Hi Everyone,

We are evaluating 2 methods at this time. SMS, and Yubikey.

The "free subscription" we're referring to is SMS verification. Unfortunately we're a prime target for SMS flooding if we make this a free service, as you can probably understand.

As for the Yubikey, you will pay for a key and the service itself would of course be offered free of charge, making it effectively a one time fee.

[relative]

you also might want to evaluate a security card like the ones interactivebrokers.com uses, which you could generate on signup for the user to print.

this would be pretty effective security at no cost.
the hacker would have to eavesdrop on hundreds of logins until he can successfully login once himself.

[Piper67]

and while you're here... email confirmation of things like BTC address change for withdrawals, transactions beyond certain limits, etc... simple, but very effective