Tormail issues, Coinapult and BitInstant deposits

[bearbones]

BitInstant and Coinapult have been getting emails from Tormail users all day expressing that they have not received retrieval links to their funds. We got suspicious, so I sent an email to my own tormail account. The email did not go through, leading me to believe Tormail is experiencing issues receiving mail. Sending mail seems to work fine.

If you are waiting on a Coinapult email to your @tormail.org address, please use the contact form and let us know an alternative email address.

[1713998845]

1713998845

[1713998845]

1713998845

[1713998845]

1713998845

[1713998845]

1713998845

[Raoul Duke]

Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious

[bearbones]

Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious

No, the funds are still sitting there. All of the transactions in question are pin protected, anyway.

On another note, one of my two emails (I sent from two other accounts for posterity) to my @tormail address finally went through. Hopefully this means they resolved the issue, but I'm not holding my breath until I see the other email.

[Yankee (BitInstant)]

Did any of the coins sent to tormail addresses been withdrawn even without the mails reaching the inbox?
Just curious

Non, whatsoever.

Every customer has to create a PIN when creating an transfer, and required to enter that PIN to withdraw. That PIN is securely and using encryption passed form our server to coinapults.

This solves two things:
1- Stops email sniffing / man-in-the-middle attacks
2- Preventing a customer to claim they never withdrew the coins, but the coins are missing.

-Charlie

[Raoul Duke]

Good to know you guys take security so seriously.
Just asked because tormail is an anonymous service provided by anonymous individuals.
Who knows what those guys are up to.

[bearbones]

Good to know you guys take security so seriously.
Just asked because tormail is an anonymous service provided by anonymous individuals.
Who knows what those guys are up to.

I applaud your caution. Hushmail has proven more than once the error inherent in trusting a third party with your private keys.