bitscalper anyone use this ? [PASSWORDS LEAKED]

[Zoiner]

Judging by today's withdrawals it will be interesting to see if it can survive.

Have to say I have been cursing the site and just discovered I needed to have yahooapis scripts enabled to most of it.

Since I am near the end of the list I don't hold out much hope

[joulesbeef]

Great, I feel like I have to wait a YEAR of operation now before I can trust a new BTC business again.

it's quite the problem. WE dont have traditional corps doing bitcoin for the most part.
and the people who do bitcoin like to remain anonymous.

and due to the nature of things, we are a temping target.


I'm not quite sure the best way to fix this.

we could have "trusted" long timers  who know things like security and can read code to vet a site, of course I can see why some sites might not want to share code. But sites need to be as open as possible to the processes involved. And live wallet data is nice.

It is even hard to trust pools until they get a lot of uses and have been established.

This actually highlights one of the problems with the pure free markets, you need brave souls willing to put their lives or money on the line to test the waters and even then, you cant be assured that things will always remain the same. A popular scam is to build up trust, before you skip town.

I dont know but I think we need a trustworthy BTC service vetting service. something with well known names behind it. It wont be fool proof but it would help.

[Zoiner]

We are guilty of believing the myth that the "free market" is a magic wand that guarantees success and inefficiency when in fact the object of every trader is to give as little as possible (nothing if they can get away with it) and take as much as possible.  That's why regulation and law is required to protect against scams.  In real life we can see the crooks, their names get about, and their is a disincentive.  On the internet we cannot do that and web of trust models or vetting by those with a reputation is a good idea.  PGP/GPG signatures may be worth considering to enable verification that an identity is constant (and consistent) over forums and web sites.

[waspoza]

We are guilty of believing the myth that the "free market" is a magic wand that guarantees success and inefficiency when in fact the object of every trader is to give as little as possible (nothing if they can get away with it) and take as much as possible.  That's why regulation and law is required to protect against scams.  In real life we can see the crooks, their names get about, and their is a disincentive.  On the internet we cannot do that and web of trust models or vetting by those with a reputation is a good idea.  PGP/GPG signatures may be worth considering to enable verification that an identity is constant (and consistent) over forums and web sites.

If you lack of common sense and risking investing in shady businesses, no law will save you.

[Bro]

lol, we saw it coming

[RandyMarsh]

lol, we saw it coming

I certainly did 

I hope this goes without saying... but don't use passwords the same as or in anyway similar to any passwords you use anywhere else, if you already have, then change the passwords you have elsewhere.

you know, just in case.

I don't mean to toot my own horn but...

[ineededausername]

lol, we saw it coming

I certainly did  

I hope this goes without saying... but don't use passwords the same as or in anyway similar to any passwords you use anywhere else, if you already have, then change the passwords you have elsewhere.

you know, just in case.

I don't mean to toot my own horn but...

Some of you idiots had it coming.  This obvious scammer managed to take 1900 BTC... I find that HILARIOUS.

Of course, I've been an idiot too on a different matter... (fortunately, I did not risk a few hundred BTC)

[bb113]

Yes, there is no excuse for losing money to this. The only way investing here made any sense is if you recognized the scam but thought you could get out first. These posts about "free market failures", etc are stupid.

[RandyMarsh]

This obvious scammer managed to take 1900 BTC

Where's that figure coming from?

[SkRRJyTC]

I may have missed this somewhere... but is there a list of user names that were leaked?  I cant remember if I even signed up an account for this site and I would like to double check.

[BTC-engineer]

No doubt, the current information situation about bitscalper.com looks disastrous.
However, I would be a little bit more carefully to call it already the end.

My impression of his website was that he runs it without help from others and he try to fix it. His support was, especially in the first weeks, quite good. Then he had to argue more and more how he can guarantee 5% a day (which btw he never did). Not every single discussion was fair, I think he gets frustrated to argue over and over again. Then he run into more and more technical problems, including the unavailability of the VPS service over 3 days. The last weeks the website was very often unavailable (login problems etc.). This morning the breaking news about password leaks. If he is giving a one man show and maybe also has to work, all of this could grow over his head, especially with the responsibility of the transferred bitcoins.  I can remember how he get angry and complained about a user who was able to payout a small sum of bitcoins he didn't own, because of a mistake on the bitscalper website.

For me the strongest indicator that his service is probably scam is that knowing about all or most of this issue and the escalating situation, he finds the time to look inside the forum but could not give ANY short information about the current situation (on his website, or via email, or as a forum post).

On the other side it looks like he has still paid out some of the outstanding payout request this morning. Does he really still think he can get more bitcoins in by paying out some smaller amounts in the current situation?

Maybe bitscalper surprises all of us (including myself) and is really processing the outstanding payout request during the next 24 hours.
The next hours will show.

BTW. After the password leak info, I haven't read about stolen bitcoins from bitscalper user accounts. Does anybody miss bitcoins or see payout requests he didn't made? Maybe the silent canceling of all outstanding payout requests this morning was his first reaction on the password leaks info?

The whole pictures is not soo clear for me to call it already and for 100% a scam.

@Bitscalper: If all of this was not fraud, you had now enough time to to the most important steps in advance. YOU HAVE TO GIVE A STATEMENT EXPLAINING THE SITUATION. On your website or somewhere else. Otherwise everyone can be sure that bitscalper.com is fraud.

[BTC-engineer]

This obvious scammer managed to take 1900 BTC

Where's that figure coming from?

A few hours before I did a short calculation of the outstanding payout requests on this website.
Now, a few hours later, the list has grown and without a recalculation I guess the open sum is now about 3000 BTC, still counting.

[theymos]

I may have missed this somewhere... but is there a list of user names that were leaked?  I cant remember if I even signed up an account for this site and I would like to double check.

If you send me the email addresses you may have used to sign up, I'll check whether you're on the list.

[phorensic]

Great, I feel like I have to wait a YEAR of operation now before I can trust a new BTC business again.

it's quite the problem. WE dont have traditional corps doing bitcoin for the most part.
and the people who do bitcoin like to remain anonymous.

and due to the nature of things, we are a temping target.


I'm not quite sure the best way to fix this.

we could have "trusted" long timers  who know things like security and can read code to vet a site, of course I can see why some sites might not want to share code. But sites need to be as open as possible to the processes involved. And live wallet data is nice.

It is even hard to trust pools until they get a lot of uses and have been established.

This actually highlights one of the problems with the pure free markets, you need brave souls willing to put their lives or money on the line to test the waters and even then, you cant be assured that things will always remain the same. A popular scam is to build up trust, before you skip town.

I dont know but I think we need a trustworthy BTC service vetting service. something with well known names behind it. It wont be fool proof but it would help.

I was thinking these problems could be solved two ways.  First is the way you described.  Use old trusted BTC members to audit code.  However, I think the better way is to use one of the few trusted 3rd party security auditing services that are out there.  Many large business rely on those security auditing services.

[Cluster2k]

BTW. After the password leak info, I haven't read about stolen bitcoins from bitscalper user accounts. Does anybody miss bitcoins or see payout requests he didn't made? Maybe the silent canceling of all outstanding payout requests this morning was his first reaction on the password leaks info?

The whole pictures is not soo clear for me to call it already and for 100% a scam.

@Bitscalper: If all of this was not fraud, you had now enough time to to the most important steps in advance. YOU HAVE TO GIVE A STATEMENT EXPLAINING THE SITUATION. On your website or somewhere else. Otherwise everyone can be sure that bitscalper.com is fraud.

I would like to hear at what point the site's creator thought it would be a good idea to store passwords as plain text.  There is no 'I'll get around to it later...' explanation.  It's a serious design flaw from day one.  It makes the whole effort look very amateurish at best and makes me wonder how many other serious flaws exist on the site, just waiting for be exploited.

[the joint]

To me, the interesting thing is that if someone made a legit version of BitScalper and actually capitalized on arbitrage opportunities, it could potentially do wonders for the market.  If I had the coding skills, I would do this in a heartbeat.  Any excellent coders want to consider teaming up and running with this? 

[M4v3R]

If only I had enough time...

[alan2here]

I had a small peice of 1BTC in there, it's still there, nobodys stolen it. It's still earning tiny returns, although hasn't been over the last couple of days. Never mind 5% I've never even seen a tenth of 1%.

Reguarding an earler comment, the whole effort probbably is very amateurish, it does work though, to a point.

I may be able to assist you Joint reguarding your coding project.

[phorensic]

To me, the interesting thing is that if someone made a legit version of BitScalper and actually capitalized on arbitrage opportunities, it could potentially do wonders for the market.  If I had the coding skills, I would do this in a heartbeat.  Any excellent coders want to consider teaming up and running with this? 

The owner should sell the arbitrage code only and let someone else build a robust, secure "shell" around it.

[chsados]

hmm perhaps www.buttscalper.com will soon be born?