Topic: [ANN][EFL] Electronic Gulden - NEWS! - ANDROID WALLET AVAILABLE! - page 21. (Read 106061 times)

Main thing of dutch culture is: "Shit on everything, but to lazy to do something about it"

There's a lot of little things that can be done, but I'm assuming this is a small team like most crypto.  If I wasn't lazy I'd consider doing one with the people I know.  Some basic things that literally require no effort, just a bit of knowledge:

I was just about to post that they should add forums and noticed that they just did.  Those that are passionate about the coin should sign up, and show some activity.  Helps settle worries/doubts.

SSL (https) is easy to implement as well, someone mentioned their concern of it here.  Most don't know how it works, but people have been conditioned to understand that its important.  The entire process takes <30 min to configure (though about 2-days for the CA to go through) and it's cheap.

The little things matter of course, awareness being one of the most important.  I don't know much about the dutch culture but I'm learning.

Man that must have really sucked! Sorry for that mate!

Also this was quite constructive I think:

https://bitcointalksearch.org/topic/m.5821356

Agreed,

Also i could try to make a script which deletes the database, however i have not yet found a bug in Joomla:
Which allows SQL Injection, i can look for a zero-day by rebooting into linux, but i'd rather prefer watching the walking dead.

Also what you can do, is try to find out how the input fields upload the documents by installing your own joomla with roksprocket, its not so hard to duplicate.
With that, you can find out the default upload folder and guess document names, i think you can find some if they dont use GUID's for example.

Hell, it might even be possible to just dump the entire DB and send it with FTP to your own if the uploaded files get executed.

For me, its:
1. not secure enough
2. not transparent enough.

I would reccomend no-one send their ID's there, ID Fraud is a bitch!
And i dont have the time and dont feel like to do any of the above, i've had enough troubles in the past.
But someone else might, so even if the DEV is not feeling scammy, someone else might find it very useful

And now i'm off, the walking dead season finale is on.
Ps, i dont hate Crypto's or EFL, i just dont like the way he confirms your residence.

Im kinda bummed as a dutchie. Mined like 6k from the start, put them on poloniex to not look too much, just so I could sell them when the time was right. Logged back in last week to see my account was hacked (didnt have 2FA here, i know, stupid).

Long story short: Lost 6k coins and another few btc of coins i had on there.

Value is another issue.  The coin is moving up nicely, but the guy who bought all those coins early jumped the gun on a huge sell order thus hindering it's growth for the time being trying to turn short term profit.

If the value of it increases, awareness will, thus more people claiming their coins, yadda yadda.  So whoever the short sighted whale is, we're going to be stagnate for now.  He should have offloaded slowly as to not hinder growth but it is what it is.

And again, I understand that this thread is in English. And maybe even the website is English too. But WTH is the confirmation to a Dutch claimer also NOT DUTCH???

I know the DEV is Dutch, so it's not like they are nigerians trying to scam it, but is there any sensible explanation to this question?

Thanks for being constructive Perls,

I will always try to remain positive, that's my nature   And I also will try to remain constructive as well. This is exactly what I have done when I read about this coin in the first place:

https://bitcointalksearch.org/topic/m.5819680

I will be more than glad to pick it up from there. The current approach however is really not good!

Also, it is possible to upload batch files (.bat) so have fun as they dont check for file extentions!

FYI:
http://money.howstuffworks.com/identity-theft.htm

Most important:

To open a bank account you need an ID, and he's got one now, able to register to your name.
After that, create some sort of scam website and ask people to pay some money for transfer cost or something, it goes to your bank account, he transfers it out of it, and you get the blame.

Hell, few years ago, lots of teenagers would be willing to open a bank account for a cell phone.
For me? no way, i'm not giving away my personal information, i know how it works and i dont feel like getting the blame or it.

I thought it was already posted here that you can submit most of the info and leave out certain fields and still receive the coin.  The Dev has to find a healthy balance so people aren't scamming the system and only the Dutch are receiving coins.  

The current method is the down and dirty method, which yes, is causing a slight uproar.  Though it's not as if this can't be changed, I still haven't seen any solid recommendations to how they should proceed that protects your identities AND wards of identity spoofing to receive coins.  

There's 2 worst case scenarios that I see regarding the distribution.

1)  Site gets hacked/database gets compromised and that information is leaked (bad).  This is easily remedied if he purges the database to offline storage every 24 hours and encrypted.  Ensuring the information of the individual is not kept online and easily accessible.  Since it's just for verification purposes anyway, after the coin is handed out, there's no need for it to be accessible online anymore.

2)  The system is changed with less strict information.  Spoofers find a loophole and get coins that were supposed go to the Dutch citizens, pre-mine doesn't have enough to cover all Citizens.  Thus the whole trust factor is gone, and the system fails.

1 is the easiest workaround for now.

2 I don't see as feasible, too risky.

I'd recommend almost going through a third party verification system.  I don't know if your country has one (short of government levels of course), but that would be the happy medium.  Bottom line, there's always a risk.  Sony's been hacked, Yahoo's been hacked, Target's been hacked, the list goes on.  Millions of user information and CC and such distributed (and those are just in the last two years).  The internet is a "risky" place, you jeopardize your privacy for the freedom of it by going on it daily.  I'd assume your country has safeguards in place for identity theft, I know we do.  I've never, in over a decade of IT experience had someone get identity theft and the CC/Bank not cover them for losses completely.  

I suspect if the dev is passionate about this project, safeguards will be put in place over time, and things will be improved to quell concerns.

IDK if you guys follow world news, but consider my country (USA) healthcare.gov site.  First few days into it all information was no more secure than this dev's site, and that's my government with enormous spending, social security #'s, etc all non-encrypted across the front end.  Let's face it, in terms of security on the net, most dev's tend to be reactive, not proactive unfortunately.

I recommend you guys just keep positive, send in some ideas that are functional rather than offering no solutions and just complaining.  If realistic ideas come up, and the dev's don't follow it, then you can pounce on them.

Sorry for the novel, just trying to keep things constructive.

[

I know his identity too, including cellphone number (Google does magic).

I won't release it as long as he doesn't scam us.

Well, theres no shame in some "wise" speculation  . I hope for the miners and speculators it will have a roller coaster like Auroracoin did. But I fear for the Dutchmen that might be hassled out of their Identities! And even more the negative news this will get on crypto in general!

Well, actually I do know his Identity, he forgot to make his registration of e-gulden.com anonymous is the first couple of days and in my first couple of PM's he confirmed his Identity. Therefor I also think he is probably meaning well, but hasn't overlooked the big picture and started this initiative a bit naive.

But that is not the issue, I think the problem is that the data collected through this coin is so sensitive, it will be for sure a big security breach to say the least. That's also why I think this won't be a success. Most Dutchman are not that eager to give away this info for some unknown coin worth nothing much. And dutch authorities are most certainly going to address this!

I'm afraid it will be and I'm missing out on this one like I totally ignored AuroraCoin when it was launched; much fail.

I'll scoop up another 1000 EFL and hold, it's not such a big risk to take. Worst case scenario: I lose 0.3 BTC.

Due to this, price of E-Gulden could be more than 0.1 BTC! It will be huge!

Beside all my other objections against the way the distribution is done: The website is not secure!!! No https, only http.... So anyone willing to steal all the information that is entered there, it must be a piece of cake!
Mmm, and why the form is not in Dutch?