Bitmit - Bitcoin shopping mall - Bitcoin market place - Bitcoin auction house - page 29.

favdesu

legendary

Activity: 1764

Merit: 1000

Quote from: tosaki on September 02, 2013, 06:55:20 AM

Update: Two factor auth. for your Bitmit wallet
From now on all outgoing transactions from your wallet need to be confirmed by clicking a link we send to your email address!

how do you change your email address? through support?

Global BTC

hero member

Activity: 529

Merit: 500

Quote from: tosaki on September 02, 2013, 06:55:20 AM

Update: Two factor auth. for your Bitmit wallet
From now on all outgoing transactions from your wallet need to be confirmed by clicking a link we send to your email address!

Excellent!

tosaki

sr. member

Activity: 401

Merit: 252

Update: Two factor auth. for your Bitmit wallet
From now on all outgoing transactions from your wallet need to be confirmed by clicking a link we send to your email address!

Welsh

staff

Activity: 3304

Merit: 4115

Quote from: tosaki on August 30, 2013, 02:08:24 AM

Quote from: Welsh on August 29, 2013, 08:03:21 AM

Seems that my account was broken into. I have lost a total of 1,24 BTC. I have contacted the owner to see if there were any Ip's which were different to mine. I'm not very pleased that my password was a newly created password, which was very strong. I suggest from now on, you require a email notification which you have to actually allow for it to send the money to another address.

This is the address which my Bitcoins got sent too:1FrZM3b6izvZq2qZckRkQe2vfMK8gaxG3Z

This might be because of the recent xss attack we were facing. The attacker managed it to deactivate notifications emails before. Bug has already been fixed and we refunded customers . We are very sorry about this.. Please tell us your username and we will care about this.

Thank you. I sent a email and it was resolved in a few hours. Very professional.

deepceleron

legendary

Activity: 1512

Merit: 1036

Users can prevent such XSS attacks themselves with the RequestPolicy Firefox addin. This addon prevents any requests to off-domain sites for content retrieval unless you explicitly allow them on that domain.

This can make some sites that use CDNs broken until you find out which sub-domain is serving the site content or style, but it is a nice feeling to see it blocking 20+ tracking webbugs on common sites like gawker etc. Google, facebook, multiple ad companies, etc don't need to know every site you are visiting on the web, this goes beyond blocking cookies from third parties, it blocks all third-party content.

https://www.requestpolicy.com/security.html

tosaki

sr. member

Activity: 401

Merit: 252

Quote from: Welsh on August 29, 2013, 08:03:21 AM

Seems that my account was broken into. I have lost a total of 1,24 BTC. I have contacted the owner to see if there were any Ip's which were different to mine. I'm not very pleased that my password was a newly created password, which was very strong. I suggest from now on, you require a email notification which you have to actually allow for it to send the money to another address.

This is the address which my Bitcoins got sent too:1FrZM3b6izvZq2qZckRkQe2vfMK8gaxG3Z

This might be because of the recent xss attack we were facing. The attacker managed it to deactivate notifications emails before. Bug has already been fixed and we refunded customers . We are very sorry about this.. Please tell us your username and we will care about this.

Welsh

staff

Activity: 3304

Merit: 4115

Quote from: Baitty on August 29, 2013, 08:06:50 AM

Quote from: Welsh on August 29, 2013, 08:03:21 AM

Seems that my account was broken into. I have lost a total of 1,24 BTC. I have contacted the owner to see if there were any Ip's which were different to mine. I'm not very pleased that my password was a newly created password, which was very strong. I suggest from now on, you require a email notification which you have to actually allow for it to send the money to another address.

This is the address which my Bitcoins got sent too:1FrZM3b6izvZq2qZckRkQe2vfMK8gaxG3Z

This has happened before to many using this site. This is one of the reasons I no longer use bitmit.

I normally don't store any money in Bitmit for a long period of time. I was sending it to address because I was thinking of ordering a item. But, then I decided not too. I totally forgot about it and didn't send it back to my original address. Then I find out today that it's actually been transferred. Have you got a link to this forum post? I would like to know what the owner did to resolve these issues. Although, before I have had no problem with Bitmit and any of the users on there. I normally have a great experience dealing with others etc.

EDIT: I normally have emails saying I have requested a certain amount to be withdrawn. However, I did not get any email. I would like to know exactly what is going on.

Baitty

hero member

Activity: 532

Merit: 500

Currently held as collateral by monbux

Quote from: Welsh on August 29, 2013, 08:03:21 AM

Seems that my account was broken into. I have lost a total of 1,24 BTC. I have contacted the owner to see if there were any Ip's which were different to mine. I'm not very pleased that my password was a newly created password, which was very strong. I suggest from now on, you require a email notification which you have to actually allow for it to send the money to another address.

This is the address which my Bitcoins got sent too:1FrZM3b6izvZq2qZckRkQe2vfMK8gaxG3Z

This has happened before to many using this site. This is one of the reasons I no longer use bitmit.

Welsh

staff

Activity: 3304

Merit: 4115

Seems that my account was broken into. I have lost a total of 1,24 BTC. I have contacted the owner to see if there were any Ip's which were different to mine. I'm not very pleased that my password was a newly created password, which was very strong. I suggest from now on, you require a email notification which you have to actually allow for it to send the money to another address.

This is the address which my Bitcoins got sent too:1FrZM3b6izvZq2qZckRkQe2vfMK8gaxG3Z

bernard75

legendary

Activity: 1316

Merit: 1003

For gods sake please make some IQ test before people can buy!
I am tired of people asking:
"Why u no offer PayPal?"

They just stray in without the most basic understanding of BTC.

mackstuart

sr. member

Activity: 938

Merit: 250

Quote from: bitmit_samar20 on August 25, 2013, 12:00:44 AM

First, why seller refused signature confirmation with shipping if you already mentioned before shipping with order confirmation?

Also have you tried to check with courier company with details ?

I hope tosaki may sort out this issue.

======
email confirmation is also good option for transaction. (approve/disapprove)

Quote from: mackstuart on August 24, 2013, 10:18:18 PM

I have an issue guys and I just wanted to speak about it on the forum to ask others what they think. I purchased an item for almost a thousand dollars on bitmit. I asked the seller to ship the item with signature confirmation because of my location. The seller shipped the item without signature and the item was stolen. I filed a police report and did all other things required by bitmit, but they released the funds to the seller anyway. The seller showed no proof of address that the item was shipped to other than a tracking number. Also the seller obviously lives in the same area as where I had to ship the item, because of the location that the tracking information shows. How do you all feel that this should be handled?

Quote from: bernard75 on August 24, 2013, 05:18:12 PM

Quote from: bitmit_samar20 on August 24, 2013, 01:24:33 PM

For regular buyers-sellers, if there is mobile verification system and minimum fees for extra protection, there will not be any problem - just suggestion.

Email confirmation would be a huge step towards security with virtually 0 effort.

That is what I am saying. I dont understand how they could side with him and I mentioned that I must have signature confirmation before item was shipped. I responded to the situation several times and there were no responses from the moderator or seller, until the day that the funds were released. It was strange because the seller responded right before the funds were released, as if he had been talking to bitmit outside of the bitmit forum. I know I am in the right on this issue. I already PM tosaki a couple of weeks ago when the issue first arised, but I have gotten no responses.

bitmit_samar20

full member

Activity: 208

Merit: 100

Learn and Enjoy.

First, why seller refused signature confirmation with shipping if you already mentioned before shipping with order confirmation?

Also have you tried to check with courier company with details ?

I hope tosaki may sort out this issue.

======
email confirmation is also good option for transaction. (approve/disapprove)

Quote from: mackstuart on August 24, 2013, 10:18:18 PM

I have an issue guys and I just wanted to speak about it on the forum to ask others what they think. I purchased an item for almost a thousand dollars on bitmit. I asked the seller to ship the item with signature confirmation because of my location. The seller shipped the item without signature and the item was stolen. I filed a police report and did all other things required by bitmit, but they released the funds to the seller anyway. The seller showed no proof of address that the item was shipped to other than a tracking number. Also the seller obviously lives in the same area as where I had to ship the item, because of the location that the tracking information shows. How do you all feel that this should be handled?

Quote from: bernard75 on August 24, 2013, 05:18:12 PM

Quote from: bitmit_samar20 on August 24, 2013, 01:24:33 PM

For regular buyers-sellers, if there is mobile verification system and minimum fees for extra protection, there will not be any problem - just suggestion.

Email confirmation would be a huge step towards security with virtually 0 effort.

mackstuart

sr. member

Activity: 938

Merit: 250

I have an issue guys and I just wanted to speak about it on the forum to ask others what they think. I purchased an item for almost a thousand dollars on bitmit. I asked the seller to ship the item with signature confirmation because of my location. The seller shipped the item without signature and the item was stolen. I filed a police report and did all other things required by bitmit, but they released the funds to the seller anyway. The seller showed no proof of address that the item was shipped to other than a tracking number. Also the seller obviously lives in the same area as where I had to ship the item, because of the location that the tracking information shows. How do you all feel that this should be handled?

bernard75

legendary

Activity: 1316

Merit: 1003

Quote from: bitmit_samar20 on August 24, 2013, 01:24:33 PM

For regular buyers-sellers, if there is mobile verification system and minimum fees for extra protection, there will not be any problem - just suggestion.

Email confirmation would be a huge step towards security with virtually 0 effort.

bitmit_samar20

full member

Activity: 208

Merit: 100

Learn and Enjoy.

I got refund. Customer care told me that there was xss attack and they found it & solved it.

I ask every legit hackers and security professionals to make bitmit very stronger. For regular buyers-sellers, if there is mobile verification system and minimum fees for extra protection, there will not be any problem - just suggestion.

thanks a lot for your valuable service.

peonminer

hero member

Activity: 798

Merit: 531

Crypto is King.

Hi everyone!

I just dropped by to tell bitmit.net THANK YOU!!!! I had a mishap with an order from a new seller. The seller claimed instant delivery in the ad but when I purchased I only got a message saying to PM the seller. I thought this was an EPIC FAIL! So... I contacted bitmit.net for a refund this morning because I didn't want my BTC in limbo for a week. I have to say, THIS IS THE FASTEST SUPPORT TICKET RESPONSE TIME I HAVE EVER EXPERIENCED ON THE INTERNET. PERIOD!!!!! YOU GUYS ROCK!!! KEEP UP THE AMAZING WORK!!!

~ Very happy and satisfied customer, I hope to do a lot of future business with you guys.

escrow.ms

legendary

Activity: 1274

Merit: 1004

Quote from: tosaki on August 24, 2013, 12:02:48 PM

It was already gone when I discovered it.

Ah ok, I didn't tried to open that php page on my pc,looks like someone else reported it.

Kluge

donator

Activity: 1218

Merit: 1015

Not high-priority, but do you know wallet/withdrawal fees have been weird for a few months?

They're still .001BTC, but for some reason it's made up of a separate .0009 and .0001 transaction, now. (cropped out most irrelevant transactions from log in case you notice it's been tampered with)

ETA: Ohhhh... I see, now. The 0.0001BTC is the fee sent to miners. The .0009 appears to be pocketed. I guess that's better than earlier -- this one had no fees sent to miners (but still charged) : https://blockchain.info/tx/b480bcfdaeaa2fcb6175452808ccc14a586f91eaaffb1950244b4c35a0372aa5 - same here: https://blockchain.info/tx/532d14b7b5c3c61af1bdcae826993c36f0d8e69e1a31ec8825ff3515f937e859 ETA2: I guess that was fine back then, though, since it wasn't difficult to have pretty much everything and anything included in the next block.

tosaki

sr. member

Activity: 401

Merit: 252