ASICMINER: Entering the Future of ASIC Mining by Inventing It - page 1310.

friedcat

donator

Activity: 848

Merit: 1005

Daily Update

Till now we have collected the claims from 45 shareholders. We are still in waiting of the replies from GLBSE.

Shareholders who see this reply but haven't claimed, please contact us via this e-mail address: ([email protected]) and send us
your number of shares and your Bitcoin address for receiving dividends. Please annotate that they are ASICMINER shares to avoid confusion with MU or MOORE shares. You could accompany them with any evidence you think is OK to provide. It is highly recommended that you use an address that you have its private key. By that, you may enjoy more facilities provided by our future automatic migrating platform.

Quote from: SebastianJu on October 14, 2012, 07:44:21 AM

friedcat... so now 22, one half, of the good non-optimal estimation of 45 days until you have the asics are over. Did you contact the supplier and have some new info about the status in the meanwhile? I mean if you were rights its only 23 days now until it maybe could start.

According to nearest update of foundry, we have past the mask-set process and are in queue of wafer process. We will keep the shareholders updated whenever we reach any new milestones.

Quote from: novusordo on October 13, 2012, 04:12:47 PM

Friedcat, perhaps it is time to remove "[GLBSE]" from the topic.

[GLBSE] is removed from the title. Also are other two assets of my responsibility. Thanks.

novusordo

sr. member

Activity: 800

Merit: 250

Quote from: DutchBrat on October 14, 2012, 02:35:55 PM

Quote

Your GLBSE account has been processed for bitcoin. The next step will be to send you information about your assets, and to provide this information to issuers (if you agreed) allowing you to continue your relationship with your issuers.

Received this email couple of hours ago.

Strangely enough I did not have any BTC associated with this account

I did receive my BTC for the other account I had d011471253c62b762bcf3e70a3ff12d249804ccaf202173cdb65c9c7edfe8c70 Date: 13/10/2012 23:50 but have not yet received an email

I just hope I did not screw up my email on that one when I entered it....

I received my BTC for my account, but did not get an email either.

DutchBrat

hero member

Activity: 868

Merit: 1000

Quote

Your GLBSE account has been processed for bitcoin. The next step will be to send you information about your assets, and to provide this information to issuers (if you agreed) allowing you to continue your relationship with your issuers.

Received this email couple of hours ago.

Strangely enough I did not have any BTC associated with this account

I did receive my BTC for the other account I had d011471253c62b762bcf3e70a3ff12d249804ccaf202173cdb65c9c7edfe8c70 Date: 13/10/2012 23:50 but have not yet received an email

I just hope I did not screw up my email on that one when I entered it....

SebastianJu

legendary

Activity: 2674

Merit: 1083

Legendary Escrow Service - Tip Jar in Profile

friedcat... so now 22, one half, of the good non-optimal estimation of 45 days until you have the asics are over. Did you contact the supplier and have some new info about the status in the meanwhile? I mean if you were rights its only 23 days now until it maybe could start.

friedcat

donator

Activity: 848

Merit: 1005

Daily Update

We haven't got contacted from GLBSE yet.

Before we receive the shareholders information, we will continue collecting them.

SebastianJu

legendary

Activity: 2674

Merit: 1083

Legendary Escrow Service - Tip Jar in Profile

I got the money i had in my glbse-account sent to the address i specified now. Not exactly but the most. 0.6BTC to be exact while i had some more digits at the end.

So friedcat did you get any infos about my shares yet too maybe?

DiabloD3

legendary

Activity: 1162

Merit: 1000

DiabloMiner author

Quote from: SebastianJu on October 13, 2012, 05:15:07 PM

I thought till now that the api-keys are sent encrypted with ssl. But i didnt use the api of glbse till now. I planned to do but now im happy that i didnt spend the time to creat a bot yet. It would be lost time.

MtGox has an interesting approch for api-keys. From the start there is now api key. But you can create more than one and you can give each keys right. So you can create on only for trading but it cant withdraw. So you are save against your api used to steal your money.

If the connections to an https-server through curl isnt encrypted then maybe setup the bot at a website that has ssl themself. Then use the ssl with curl to gain security.

The API key is in the URL. The URL in SSL _is_ encrypted, but SSL is not 100% secure and there are known attacks against it (although, implementation specific ones). The problem is, if you're using the API keys non-locally (such as on a vps or a dedi), you have a gaping security hole. I'm not comfortable with how GLBSE implemented API keys.

SebastianJu

legendary

Activity: 2674

Merit: 1083

Legendary Escrow Service - Tip Jar in Profile

I thought till now that the api-keys are sent encrypted with ssl. But i didnt use the api of glbse till now. I planned to do but now im happy that i didnt spend the time to creat a bot yet. It would be lost time.

MtGox has an interesting approch for api-keys. From the start there is now api key. But you can create more than one and you can give each keys right. So you can create on only for trading but it cant withdraw. So you are save against your api used to steal your money.

If the connections to an https-server through curl isnt encrypted then maybe setup the bot at a website that has ssl themself. Then use the ssl with curl to gain security.

novusordo

sr. member

Activity: 800

Merit: 250

Friedcat, perhaps it is time to remove "[GLBSE]" from the topic.

DiabloD3

legendary

Activity: 1162

Merit: 1000

DiabloMiner author

Quote from: SebastianJu on October 13, 2012, 07:55:35 AM

You mean the api worked with username and password? No api-key? But even when... who should the attacker get the logindetails? I mean most users probably hadnt used 2fa so attacker could simply login and claim the shares. But first he need the logindetails. Where should he get this?

Or does he mean that nefario could use user-pass to claim the shares for himself?

API keys are not secure.

markm

legendary

Activity: 2940

Merit: 1090

Quote from: SebastianJu on October 13, 2012, 07:55:35 AM

Or does he mean that nefario could use user-pass to claim the shares for himself?

If user's balances are not signed with the user's private key and the server's private key to bear witness that both agreed as to the balance, and to prevent either from changing it without the approval of the other, they yes, of course, it is totally just an ephemeral value maybe in a database or something and totally vulnerable to all kinds of nefariousness.

That is why you should always sign your balances and not accept any you have not signed as binding until you have signed them.

-MarkM-

DutchBrat

hero member

Activity: 868

Merit: 1000

Quote from: SebastianJu on October 13, 2012, 07:55:35 AM

You mean the api worked with username and password? No api-key? But even when... who should the attacker get the logindetails? I mean most users probably hadnt used 2fa so attacker could simply login and claim the shares. But first he need the logindetails. Where should he get this?

Or does he mean that nefario could use user-pass to claim the shares for himself?

If API is being send as plain-text... then 'nefarious'-characters (couldn't help myself here lol) can intercept it at many points.... If they know what they are looking for....

SebastianJu

legendary

Activity: 2674

Merit: 1083

Legendary Escrow Service - Tip Jar in Profile

You mean the api worked with username and password? No api-key? But even when... who should the attacker get the logindetails? I mean most users probably hadnt used 2fa so attacker could simply login and claim the shares. But first he need the logindetails. Where should he get this?

Or does he mean that nefario could use user-pass to claim the shares for himself?

DiabloD3

legendary

Activity: 1162

Merit: 1000

DiabloMiner author

Quote from: SebastianJu on October 12, 2012, 08:05:07 PM

Quote from: SmiGueL on October 12, 2012, 07:17:58 PM

Just filled in the form on GLBSE for my 3 accounts and I hope you'll receive the asset information from Nefario

(I have splitted to 3 cause I had API enabled... and so anyone with the API URL can steal your funds even with 2FA enabled)

I have about 300+ shares so I would be really pissed off if they've all 'dissapeared'...

Do I need to email to the specified email address or do we wait until GLBSE gives more info?
(It 'll take a while to figure out when I bought what, probably not gonna work cause I don't have any transaction files)

Hope the ASIC's will come soon!

Why do you think someone with the api url can steal your funds? I dont see what you mean.

Guess username and password, 2fa cannot be done over the API, and there is no read only API.

SebastianJu

legendary

Activity: 2674

Merit: 1083

Legendary Escrow Service - Tip Jar in Profile

Quote from: SmiGueL on October 12, 2012, 07:17:58 PM

Just filled in the form on GLBSE for my 3 accounts and I hope you'll receive the asset information from Nefario

(I have splitted to 3 cause I had API enabled... and so anyone with the API URL can steal your funds even with 2FA enabled)

I have about 300+ shares so I would be really pissed off if they've all 'dissapeared'...

Do I need to email to the specified email address or do we wait until GLBSE gives more info?
(It 'll take a while to figure out when I bought what, probably not gonna work cause I don't have any transaction files)

Hope the ASIC's will come soon!

Why do you think someone with the api url can steal your funds? I dont see what you mean.

SmiGueL

sr. member

Activity: 322

Merit: 252

Just filled in the form on GLBSE for my 3 accounts and I hope you'll receive the asset information from Nefario

(I have splitted to 3 cause I had API enabled... and so anyone with the API URL can steal your funds even with 2FA enabled)

I have about 300+ shares so I would be really pissed off if they've all 'dissapeared'...

Do I need to email to the specified email address or do we wait until GLBSE gives more info?
(It 'll take a while to figure out when I bought what, probably not gonna work cause I don't have any transaction files)

Hope the ASIC's will come soon!

matauc12

hero member

Activity: 658

Merit: 500

Quote from: markm on October 12, 2012, 05:50:36 AM

Quote from: ?? on ??

Quote from: DutchBrat on October 12, 2012, 03:10:22 AM

...
That being said.... most startup companies do not IPO on an exchange but get funding from angel investors and seeding capital

Those shares are privately held until the valuation of the company is big enough to go onto an exchange

For some companies the most ROI is made during the private investor period, so when the shares can only change hands privately instead of publicly

Then they IPO the company at a high value and everyone of the first investors is happy

Yep, and they hold onto that extremely profitable and privileged position with an iron grip. Its a shame GLBSE is gone but it threatened that position and so was very vulnerable. I'm not sure if open transactions is stable enough for something like asicminer yet but would be interested to hear friedcat's thoughts on it.

That is a big reason why I do not like dividends. Forcing people to have to actually offer someone else a chance at a share in order to "cash out" avoids the price/value going up and down in sawtoothed waves as dividend day approaches and hits and helps create opportunities for later adopters to get in.

-MarkM-

and guess what happens then? Value likely increases. Making active trading even more valuable.

Digigami

sr. member

Activity: 462

Merit: 250

Quote from: data on October 12, 2012, 05:37:06 AM

Well regarding ease of trading vs. value: Who would buy my few shares for the 0.108-0.11 right now? I don't find a buyer, so they have basically no value to me atm. except for the possibility of earning dividends.

Also, the management overhead of friedcat organizing all trading can only impede the real goal of ASICMINER.

Not sure that we could do any trading of shares currently.. but if we could I would be interested at .105 depending how many shares you have for sale.. Probably going to have to wait until this all gets sorted out though. I really wanted to continue accumulating ASICMINER shares over these few weeks, I believe they had one of the highest potentials of all the assests which were on GLBSE.

markm

legendary

Activity: 2940

Merit: 1090

Quote from: ?? on ??

Quote from: DutchBrat on October 12, 2012, 03:10:22 AM

...
That being said.... most startup companies do not IPO on an exchange but get funding from angel investors and seeding capital

Those shares are privately held until the valuation of the company is big enough to go onto an exchange

For some companies the most ROI is made during the private investor period, so when the shares can only change hands privately instead of publicly

Then they IPO the company at a high value and everyone of the first investors is happy

Yep, and they hold onto that extremely profitable and privileged position with an iron grip. Its a shame GLBSE is gone but it threatened that position and so was very vulnerable. I'm not sure if open transactions is stable enough for something like asicminer yet but would be interested to hear friedcat's thoughts on it.

That is a big reason why I do not like dividends. Forcing people to have to actually offer someone else a chance at a share in order to "cash out" avoids the price/value going up and down in sawtoothed waves as dividend day approaches and hits and helps create opportunities for later adopters to get in.

-MarkM-

data

member

Activity: 84

Merit: 10

Well regarding ease of trading vs. value: Who would buy my few shares for the 0.108-0.11 right now? I don't find a buyer, so they have basically no value to me atm. except for the possibility of earning dividends.

Also, the management overhead of friedcat organizing all trading can only impede the real goal of ASICMINER.

Topic: ASICMINER: Entering the Future of ASIC Mining by Inventing It - page 1310. (Read 3917029 times)