|
BuyBitcoin.US (OP)
|
 |
July 30, 2013, 03:03:22 PM
Last edit: July 30, 2013, 03:16:26 PM by BuyBitcoin.US |
|
You could have done this without abusing the website. Anyway, lets break it down for you. You're making the situation seem more dangerous than it really is. This post is completely over-sensationalized. The only financial information stored on the server are the account and routing numbers. Even if the server were compromised, BTC could NOT be withdrawn from the escrow accounts. All escrow accounts are stored in cold wallets, private key is not on the server. You were right on your first example, all error reporting should be disabled. That has been modified accordingly. Still, nothing sensitive is displayed below. Before thinking it's a good idea to build your own platform, I suggest learning web security basics. And turning off debug logging on prod.  This error has been fixed. Unless you get extremely intricate, you cannot place a buy on an order if the buy amount is less than the minimum sell amount. Once again, nothing sensitive or dangerous happening below. Just someone abusing the script making a small mess to clean up in the database. Only you (the person placing the fake sell order) would ever receive that email. That is not a security vulnerability. Even if you got full access to the server, you would not be able to make ANY financial gain from it. BTC cannot be withdrawn. You have also been banned from accessing the website due to a blatant disregard of the terms of service. And I did like the "security consult" you sort of ran on us for free. Check your PM inbox, would be interested in your services perhaps. |
|
|
|
|
|
|
|
|
|
|
|
|
The trust scores you see are subjective; they will change depending on who you have in your trust list. |
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
July 30, 2013, 05:40:40 PM |
|
How would you all feel about the implementation of cash in mail and/or money orders?
Only problem with cash in mail is receipts. Also, when would the price be determined?
|
|
|
|
|
Aseras
|
|
July 30, 2013, 08:32:54 PM |
|
You could have done this without abusing the website. Anyway, lets break it down for you. You're making the situation seem more dangerous than it really is. This post is completely over-sensationalized. The only financial information stored on the server are the account and routing numbers. Even if the server were compromised, BTC could NOT be withdrawn from the escrow accounts. All escrow accounts are stored in cold wallets, private key is not on the server.
You do realize that's all someone needs to go and make up a check and rip everyone off... qchex.com a couple years back was a hot bed for fake checks/demand drafts. http://www.nbcnews.com/id/7914159/ns/technology_and_science-security/t/easy-check-fraud-technique-draws-scrutiny/Anything that deals even remotely with money or bitcoin in any way needs to be encrypted out the ass. |
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
July 30, 2013, 09:05:01 PM |
|
You could have done this without abusing the website. Anyway, lets break it down for you. You're making the situation seem more dangerous than it really is. This post is completely over-sensationalized. The only financial information stored on the server are the account and routing numbers. Even if the server were compromised, BTC could NOT be withdrawn from the escrow accounts. All escrow accounts are stored in cold wallets, private key is not on the server.
You do realize that's all someone needs to go and make up a check and rip everyone off... qchex.com a couple years back was a hot bed for fake checks/demand drafts. http://www.nbcnews.com/id/7914159/ns/technology_and_science-security/t/easy-check-fraud-technique-draws-scrutiny/Anything that deals even remotely with money or bitcoin in any way needs to be encrypted out the ass. Yes but the same risk is taken each time your write a check. How do you believe the current system could be improved Aseras? I am considering adding support for cash in mail and money orders. Dynamic pricing would also be added then and the price of the BTC would be determined at the time of receiving the cash based on the Mt. Gox Average at the time. Then sellers don't have to give up too much information. Ideas on the implementation of this feature are appreciated. |
|
|
|
|
BuyBitcoin.US (OP)
|
|
July 31, 2013, 04:21:37 PM |
|
500 BTC now available for sale in USA at 4% above Mt. Gox rate! Cash deposit at BMO Harris USA.
|
|
|
|
Mondian
Newbie
 Offline
Activity: 5
Merit: 0
|
|
July 31, 2013, 04:59:49 PM |
|
Figured I'd give you a shot and tried to take one of the Chase orders. Got this error instead:
Fatal error: Call to undefined function error_report() in /home/champbux/public_html/buybitcoin.us/goBuy.php on line 43
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
July 31, 2013, 05:03:55 PM |
|
Figured I'd give you a shot and tried to take one of the Chase orders. Got this error instead:
Fatal error: Call to undefined function error_report() in /home/champbux/public_html/buybitcoin.us/goBuy.php on line 43
Error has been fixed. Sorry about that. Was doing some troubleshooting earlier and forgot the "ing" in the error_reporting function. |
|
|
|
Mondian
Newbie
Offline
Activity: 5
Merit: 0
|
|
July 31, 2013, 05:08:33 PM |
|
Great, except now there's a new problem.
Order #87712280 has a minimum buy of 2.4btc, except there is precisely 2.39999985695 BTC for sale, so I can't place a hold because it's impossible to meet the minimum. Might want to make sure things like this don't happen to orders in the future...
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
July 31, 2013, 07:38:18 PM |
|
Great, except now there's a new problem.
Order #87712280 has a minimum buy of 2.4btc, except there is precisely 2.39999985695 BTC for sale, so I can't place a hold because it's impossible to meet the minimum. Might want to make sure things like this don't happen to orders in the future...
Fixed that as well for now. Has something to do with the number being a float value. Will be exact soon. Appreciate your feedback greatly. |
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 01, 2013, 03:07:48 PM |
|
10 more BTC available from Citibank at $106!
|
|
|
|
danirosen80
Newbie
Offline
Activity: 4
Merit: 0
|
|
August 02, 2013, 03:54:24 PM |
|
a question, if im put a sell order and after a few days it is not sold, the seller may withdraw their bitcoins?
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 02, 2013, 03:55:23 PM |
|
a question, if im put a sell order and after a few days it is not sold, the seller may withdraw their bitcoins?
Yep, it's in the FAQ. You will be charged a flat 0.05 BTC withdrawal fee. We're going to be rolling out a lot more marketing strategies and promos this weekend. Next week should expect an even larger increase in visitors than there already is. We still have been increasing our daily visitors almost every day! ~400 UV per day today on the Buy page. |
|
|
|
cosmicboy
Member
Offline
Activity: 94
Merit: 10
|
|
August 02, 2013, 09:30:30 PM |
|
Interesting site...It could be really good once you have a lot of less restrictive sell orders. Right now if you go on there with a specific amount of bitcoins you want to buy at a certain bank there's only a chance it will happen. Keep going though!
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 03, 2013, 02:19:13 PM |
|
Interesting site...It could be really good once you have a lot of less restrictive sell orders. Right now if you go on there with a specific amount of bitcoins you want to buy at a certain bank there's only a chance it will happen. Keep going though!
We just got a new 40 BTC sell order from Wells Fargo at Mt. Gox price!
We are sure as interest picks up, so will bank availability. |
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 03, 2013, 08:09:43 PM |
|
37 BTC left for sale from Wells Fargo. Current order book:  |
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 05, 2013, 06:31:16 PM |
|
If you have Wells Fargo BTC, sell them now!
They're already gone!
Still BTC available at other US banks and RBC bank too now!
|
|
|
|
|
btc-mike
|
|
August 05, 2013, 06:52:27 PM |
|
I have Wells Fargo and would like to sell but I don't to create a sell order that lasts forever. If your site produces no buyers, I will be charged a fee to cancel. If i place a large sell order and the prices change rapidly, I could lose a lot.
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 05, 2013, 07:24:51 PM |
|
I have Wells Fargo and would like to sell but I don't to create a sell order that lasts forever. If your site produces no buyers, I will be charged a fee to cancel. If i place a large sell order and the prices change rapidly, I could lose a lot.
You can modify the sell price of your order at any time using your modification PIN. The fee is only 0.05 BTC to withdraw from escrow. You might lose SOME, but not a lot by any means. We had 34 BTC sell out from Wells Fargo today alone. |
|
|
|
|
ardana123
|
|
August 05, 2013, 11:51:38 PM |
|
can't you add support for european banks as well?
|
|
|
|
|
|
BuyBitcoin.US (OP)
|
|
August 06, 2013, 12:40:33 AM |
|
can't you add support for european banks as well?
Our system is already compatible with European banks (I believe) All we need is for you to tell us what your bank name is so we can add it to the list of banks at https://www.buybitcoin.us/sell. PM or email us. |
|
|
|
|
