[ANN]{OpenEx} New and Improved! Open Source Exchange!

[coinmaker33]

Please add Sherlock Coin (+1)

[r3wt]

ADMIN COINEX! WHERE IS "pages/fchk.php" FILE NOT FOUND IN ARCHIV O_O PLEASE UPLOAD ALL FILES! THX!

that page is a security vulnerability and as such has been removed.

[hasar]

Please add sherlock.

[ThickAsThieves]

If you add sherlock coin after getting socked in the face 20 times, a dozen kittens will die.

[r3wt]

If you add sherlock coin after getting socked in the face 20 times, a dozen kittens will die.

LOL

[chetalk]

please add Sherlockcoin (SHC)!

[unknowk]

Please add Sherlockcoin (SHC)!!!

[r3wt]

Please add Sherlockcoin (SHC)!!!

please give me .5 btc!

[pdotgreen]

Would u like to consider adding SherlockCoin

[coinmaker33]

Its Elementary.. please add Sherlock Coin!

[Dosmas]

Keep up the good work!:)

[DevGod]

I'm an advanced PHP Developer and I've review the github for this project(https://github.com/r3wt/openex). I tried to bring my concerns to the own of this project through 3 or 4 different contact points. He simply erased my messages and blocked my IP from his domain,(if I was a troll I would just change IP and re-register hehe) this is probably because he and his friend have been working on the project since Decemeber and don't realize that they haven't the least bit of experience or understanding of security(Already hacked once) and don't want to have to throw out the codebase.

Since the code is open source anyone can look at the github and see entire revision history. All PHP Web 2.0 applications that are developed today use a PHP Framework, this is almost universal. Now I'm not here to educate you on programming or web design so lets get into it. The main reason a framework is used is because there are many things that websites have in common that developers do not want to write over and over again for each project. Here is an article from 2009(http://www.phpandstuff.com/articles/top-10-reasons-why-you-should-use-a-php-framework) explaining more indepth why frameworks are important and if I was going to trust 1BTC with someone they sure as shit better be using industry standard security and not some little script cooked up in their basement by 2 kids.

Tl;dr: Don't use this exchange unless it is rewritten from scratching using one of these http://www.phpframeworks.com/
 

XSS Vulns
https://github.com/r3wt/openex/search?q=post&ref=cmdform

[tigerfree]

@DevGod hack it 

[TheD0ct0r]

I went to login Openex.pw today and found this Disturbing conversation in chat. I am still Loz.. OOops looks like some one forgot to clear logs...

1: R3wt openly admits to working with former NSA on the new exchange.. WTF if he beleives this hes a moron. Worse yet he would work with a FED!


2: R3wt  Begs Justin to build him a trade engine because he doesn't know how to.... It looks like R3wt is trying to hide Justin under the name mBlanchard.

Please refresh my memory isn't Justin the same (Cat) R3wt tried to pin the bad code and hack on ?  Yes it is, WTFF !


3: R3wt  Openly admits hes going to build another half ass trade engine Using python he knows nothing about.

Doing more searching  haha https://twitter.com/_LuaPod_ Rewt wants Justins code. Looks like a internal dispute going on.
You know its bad when Justin doesn't even want anything to do with R3wt.
Theres some real f%CKED uped stuff going on here maybe one of you guys can figure it out.....

Make sure you guys spread this on other forums so no one else get screwed on this new pos he cooking up.

Ohhh wait there is more I copied the full conversation to a .txt file just encase they try to wipe the log.   http://snk.to/f-cdhfbilj

here are links to the full screen caps  http://imgur.com/iDV9jHL /  http://imgur.com/WLTeWzz / http://imgur.com/l7oHqxQ


https://i.imgur.com/kNKxGXE.jpg
https://i.imgur.com/mtYwgFv.jpg
https://i.imgur.com/mbbea02.jpg

[milly6]

I went to login Openex.pw today and found this Disturbing conversation in chat. I am still Loz.. OOops looks like some one forgot to clear logs...

1: R3wt openly admits to working with former NSA on the new exchange.. WTF if he beleives this hes a moron. Worse yet he would work with a FED!


2: R3wt  Begs Justin to build him a trade engine because he doesn't know how to.... It looks like R3wt is trying to hide Justin under the name mBlanchard.

Please refresh my memory isn't Justin the same (Cat) R3wt tried to pin the bad code and hack on ?  Yes it is, WTFF !


3: R3wt  Openly admits hes going to build another half ass trade engine Using python he knows nothing about.

Doing more searching  haha https://twitter.com/_LuaPod_ Rewt wants Justins code. Looks like a internal dispute going on.
You know its bad when Justin doesn't even want anything to do with R3wt.
Theres some real f%CKED uped stuff going on here maybe one of you guys can figure it out.....

Make sure you guys spread this on other forums so no one else get screwed on this new pos he cooking up.

Ohhh wait there is more I copied the full conversation to a .txt file just encase they try to wipe the log.   http://snk.to/f-cdhfbilj

here are links to the full screen caps  http://imgur.com/iDV9jHL /  http://imgur.com/WLTeWzz / http://imgur.com/l7oHqxQ

Looks like brainstorming devs convo taken out of context. Great job.

[milly6]

I'm an advanced PHP Developer and I've review the github for this project(https://github.com/r3wt/openex). I tried to bring my concerns to the own of this project through 3 or 4 different contact points. He simply erased my messages and blocked my IP from his domain,(if I was a troll I would just change IP and re-register hehe) this is probably because he and his friend have been working on the project since Decemeber and don't realize that they haven't the least bit of experience or understanding of security(Already hacked once) and don't want to have to throw out the codebase.

Since the code is open source anyone can look at the github and see entire revision history. All PHP Web 2.0 applications that are developed today use a PHP Framework, this is almost universal. Now I'm not here to educate you on programming or web design so lets get into it. The main reason a framework is used is because there are many things that websites have in common that developers do not want to write over and over again for each project. Here is an article from 2009(http://www.phpandstuff.com/articles/top-10-reasons-why-you-should-use-a-php-framework) explaining more indepth why frameworks are important and if I was going to trust 1BTC with someone they sure as shit better be using industry standard security and not some little script cooked up in their basement by 2 kids.

Tl;dr: Don't use this exchange unless it is rewritten from scratching using one of these http://www.phpframeworks.com/
 

XSS Vulns
https://github.com/r3wt/openex/search?q=post&ref=cmdform

Your comments will be taken into consideration.

[TheD0ct0r]

Conversation taken out of context ? I am not even going to go into the many screwed up thing like suicide and I want to die type things said in the full conversation here - http://snk.to/f-cdhfbilj . Tell me please how do you explain all this Mr. OpenEx employee ? Here is your chance, its a open forum you have the floor sir.

I went to login Openex.pw today and found this Disturbing conversation in chat. I am still Loz.. OOops looks like some one forgot to clear logs...

1: R3wt openly admits to working with former NSA on the new exchange.. WTF if he beleives this hes a moron. Worse yet he would work with a FED!


2: R3wt  Begs Justin to build him a trade engine because he doesn't know how to.... It looks like R3wt is trying to hide Justin under the name mBlanchard.

Please refresh my memory isn't Justin the same (Cat) R3wt tried to pin the bad code and hack on ?  Yes it is, WTFF !


3: R3wt  Openly admits hes going to build another half ass trade engine Using python he knows nothing about.

Doing more searching  haha https://twitter.com/_LuaPod_ Rewt wants Justins code. Looks like a internal dispute going on.
You know its bad when Justin doesn't even want anything to do with R3wt.
Theres some real f%CKED uped stuff going on here maybe one of you guys can figure it out.....

Make sure you guys spread this on other forums so no one else get screwed on this new pos he cooking up.

Ohhh wait there is more I copied the full conversation to a .txt file just encase they try to wipe the log.   http://snk.to/f-cdhfbilj

here are links to the full screen caps  http://imgur.com/iDV9jHL /  http://imgur.com/WLTeWzz / http://imgur.com/l7oHqxQ


https://i.imgur.com/kNKxGXE.jpg
https://i.imgur.com/mtYwgFv.jpg
https://i.imgur.com/mbbea02.jpg

Looks like brainstorming devs convo taken out of context. Great job.