Deleted

[NotLambchop]

I admire your spunk and "can-do" attitude.  That, combined with good personal grooming (did you buy a new pair of socks like I've suggested?), is sure to propel you and your fine currencies exchange to dizzying heights!

[1715057583]

1715057583

[1715057583]

1715057583

[1715057583]

1715057583

[1715057583]

1715057583

[1715057583]

1715057583

[theMiracle]

...
Installation was not quite that simple...

Computers are hard...

[rethink-your-strategy]

Protip:  When coding a currencies exchange, it is important to pay attention to security from the gitgo.

You know how to change permissions on Apache, right?

I guess you could say this exchange

(•_•)

( •_•)>⌐■-■

(⌐■_■)

is hacked together.

YEEEEEAAAAAAAAAAH

[MrWDunne]

Equally, you could say it is unfinished.

[mikaeldice]

I only spent a couple of minutes looking at the code here..  I don't know much about PHP or db_update function, so I could be wrong, but this seems a bit suspect to me.

Can you verify whether this is accepting a POST request from a user and then directly including the user input in a database update with the only validation performed being a check for whether or not it begins with a number?

https://github.com/wlox/wlox-api/blob/master/htdocs/api.php#L9

https://github.com/wlox/wlox-api/blob/master/htdocs/api.php#L28

This seems dangerous, like a potential SQL injection.

While open source software is great for large projects that get lots of eyeballs on them, utilizing a smaller project like this exposes you to a lot of risk.  There are what, 2-3 contributors to safeguard how many users in your target market?  Once there is any amount of financial incentive behind inspecting the code base, such as this code going live somewhere, malicious users will spend countless hours peering through the code for the most miniscule errors that could lead to a compromise.  They'll setup testing environments locally so that their actions aren't detectable until the deed is done.

You should really investigate how the project is managed a bit more, as well.  There appears to be no testing methodology in place..  zero code coverage.   The repository is setup with only the single master branch, which means that any work on new features or changes aren't separated out until they can be confirmed as valid/secure/non-breaking before getting merged...

Just be careful here.. You're working with people's money.

[MrWDunne]

Mikael,

I totally agree with you. We are not launching using this code, the majority of it will be our own. Also we are having security audits done prior to launch.

I've not had much of a look like at the API yet, but it most definitely will be coming under heavy scrutiny. Please may you post that on their git?

[instant-bitcoin]

Sounds technically difficult and probably a scam.
Also looking at the member other 'dice' website - looks like a child has produced it and is still not working.

Will avoid.

[MrWDunne]

Sounds technically difficult and probably a scam.
Also looking at the member other 'dice' website - looks like a child has produced it and is still not working.

Will avoid.

For reference, he is upset because I questioned the fee levels of his service. (see here: https://bitcointalk.org/index.php?topic=624924 )

Disregard-able comment

[WoopDeBoop]

There's plenty of ways to purchase bitcoins in the UK without LBC. I can think of at least three where you can buy them for bank transfer instantly.

Admittedly it's all one way and there is no true "exchange"

but to keep repeating that there is no way to buy them in the UK is just a lie to promote your own business.

https://bitbargain.co.uk/

https://quickbitcoin.co.uk/

https://speedybitcoin.co.uk/

https://bittylicious.com/

[MrWDunne]

There's plenty of ways to purchase bitcoins in the UK without LBC. I can think of at least three where you can buy them for bank transfer instantly.

Admittedly it's all one way and there is no true "exchange"

but to keep repeating that there is no way to buy them in the UK is just a lie to promote your own business.

https://bitbargain.co.uk/

https://quickbitcoin.co.uk/

https://speedybitcoin.co.uk/

https://bittylicious.com/

I somewhat understand your point, but the markup is still huge and they are not exchanges. We will be the first exchange with access to the UK banking network. Compare our highest fee tier of 0.4% to 5%+ markup and you will understand what I mean.

If bitcoin is to be used as a currency, these fees are far to high. Losing 5%+ purchasing power instantly in unacceptable.

[MrWDunne]

Second set of drafts coming through tomorrow.

Seen a little preview, already looking very sharp.

After that, we refine and then program. Looking good for the one month ETA

[MrWDunne]

http://imgur.com/a/jw2qk

Second set of designs just came in, still refining them but I think it is looking incredibly sharp.

Progress is advancing rapidly. 1 month ETA

EDIT: Designers for some reason added adverts, of course there will be no adverts.

[MrWDunne]

We have all of the needed funds to finish development of the platform. We will be needing more in the not too distant future but that will be for security/colocation.

Once the platform is ~90% complete we'll go through the next push for funding.

[grandpa_seth]

We have all of the needed funds to finish development of the platform. We will be needing more in the not too distant future but that will be for security/colocation.

Once the platform is ~90% complete we'll go through the next push for funding.

Thanks for the update. That is great news.

[MrWDunne]

We have all of the needed funds to finish development of the platform. We will be needing more in the not too distant future but that will be for security/colocation.

Once the platform is ~90% complete we'll go through the next push for funding.

Thanks for the update. That is great news.

I think so. We're currently working on the backend more than anything, in order to make day to day management of the exchange easier for myself. Design implementation begins on Monday.

[Dogedigital]

2FA?

[MrWDunne]

2FA?

2FA by authy. Also among other things PGP for email (optional).

[MrWDunne]

http://Mimex.uk secured.

[railzand]

http://Mimex.uk secured.

Ooh that's great. And your own site?

[MrWDunne]

http://Mimex.uk secured.

Ooh that's great. And your own site?

What do you mean? By secured I mean we own it.