closed

[Kumala]

thread closed

[1713924998]

1713924998

[1713924998]

1713924998

[Kumala]

The exchange just released the trading of geistgeld and de
vcoins.

[shtylman]

Do you guys plan to get a 3rd party SSL certificate? Or continue using a self signed cert?

What are you security practices?

[Kumala]

I'm getting the 3rd party SSL, ordered it last week, but it seems to take my provider ages to get process my purchase and install it. I hope it's all done by end of this week (I should have ordered it directly form the SSL provider rather than going through my hosting provider).

In regards to security, I made some comments on the post below, that sheds some light into the practices:
https://bitcointalk.org/index.php?topic=34586.120

Obviously we also have measures in place to address:
Session Fixation
Brute Force Account attacks
Session Hijacking
CSRF (Cross Site Request Forgery)
Cross Site Scripting (XSS)
SQL, CSS, Ajax injection

We are taking the security issues very serious and constantly update our countermeasures but obviuosly we dont want to discuss them in every detail here in public.

[Kumala]

SSL:  A third party SSL certificate has been installed and configured for https://vircurex.com

New feature released:  Option trading.  Issue or buy options, we support sell-options (the issuer commits to buy from the buyer at a given price) as well as buy-options (the issuer commits to buy coins at a given price).

[420]

Is this the official thread? If not where is it

[Kumala]

Good point. It somehow wondered off to the Alt-Chain Threads. I'll consolidate them back to this thread and update the first posting to reflect current status.

[420]

Good point. It somehow wondered off to the Alt-Chain Threads. I'll consolidate them back to this thread and update the first posting to reflect current status.

if you run it please confirm me what the volume is daily for NMC/btc trades

[creativex]

I've a question. Why the LIFO order filling rather than a common sense FIFO model? If for instance I place an order to buy or sell and someone else piles on at the same price, why aren't older orders filled first? It's frustrating to set a price point and wait for an order to fill only to have someone else "piggy-back" your price point and have their newer orders filled ahead of yours. 

[Kumala]

It is intended to be FIFO. I'll review the code and double check.

[creativex]

Sorry, didn't mean to be rude, I should've cooled out a little before posting. I just assumed it was FIFO, then today I waited patiently for hours for the orders to move my direction only to have people pile on at my chosen price at the last second. I didn't think anything of it, till their orders executed and my older order at the same price just sat there. Felt like I'd be fleabay sniped.

[Kumala]

I can confirm, the order matching is based on FIFO principle.

For those who are a familiar with coding, here the actual code to get the buy order:
          o00 = Order.where("status=0 and currency1_id=? and currency2_id=? and otype=0",cid1,cid2).order("unitprice desc").order("updated_at asc").first

As you can see, first we sort by unitprice (desc because we are looking for the buy orders) and then (in case there are multiple ones with the same unit price) we sort via updated_at (which is the timestamp when your released the order).   Same logic applies for sell orders except we go "unitprice asc" instead.

But how to explain your observation?  This article describes this in detail:
  https://bitcointalk.org/index.php?topic=88901.0

[creativex]

When you guys suspend trading on a currency without warning as you did today with LQC you are stealing from those that have long term option contracts purchased on your exchange. Did anyone at Vircurex even consider this? Are you offering refunds to those that purchased contracts that you've now made worthless? I fail to see how anyone can purchase contracts on your exchange with the expectation that they'll be worth anything in the future if you guys keep swapping currencies in and out of your exchange the way you have been with I0, PPC, and now LQC.

Sincerely,
Not happy.

[MPOE-PR]

When you guys suspend trading on a currency without warning as you did today with LQC you are stealing from those that have long term option contracts purchased on your exchange. Did anyone at Vircurex even consider this? Are you offering refunds to those that purchased contracts that you've now made worthless? I fail to see how anyone can purchase contracts on your exchange with the expectation that they'll be worth anything in the future if you guys keep swapping currencies in and out of your exchange the way you have been with I0, PPC, and now LQC.

Sincerely,
Not happy.

Ouch.

Were the options you bought actually underwritten by Vircurex tho? I didn't even know they did that.

[creativex]

No, they were written by another customer, but through no fault of that other customer my options involving LQC are now worthless. If Vircurex had issued a warning that they were going to discontinue LQC trading in xx days and suspended all new option contracts that'd have sucked, but I would've dealt. Instead I have a contract that expires in February that's a total loss now. You could buy contracts involving LQCs as late as this morning which would now have zero value. This is completely unprofessional.

[Kumala]

We will come up with a proposal for the options and contact the options holders directly.

[creativex]

Excellent, I'll look forward to a response to the email I sent support earlier today then.

[creativex]

Vircurex resolved this situation to my satisfaction.

[MPOE-PR]

Vircurex resolved this situation to my satisfaction.

Ah that's good then.

[Kumala]

We activated USD/EUR trading.