China biggest bitcoin portal www.hxtop.com was hacked! - page 2.

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: CIYAM on September 23, 2012, 10:37:51 AM

Quote from: URSAY on September 23, 2012, 10:36:08 AM

Could this have anything to do with the recent sell off? Huh

I very much doubt that - the volume on btcchina has been well under 1000 btc per day for quite a while.

By comparing last year's transaction data (btcchina.com) 1000 btc per day has been great progress.
That means the Chinese market gradually bigger .
dod't you think?

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: CIYAM on September 23, 2012, 10:35:59 AM

Quote from: BCB on September 23, 2012, 10:32:09 AM

I'm certain you could have public facing and searchable pages and use your encryption starting a log in. Why would google need to index your protected pages as long as the public urls say where it is and what it does.

Yes - this is under development (just not a big priority yet).

That a good idea if got any progress please note me.

CIYAM

legendary

Activity: 1890

Merit: 1086

Ian Knowles - CIYAM Lead Developer

Quote from: URSAY on September 23, 2012, 10:36:08 AM

Could this have anything to do with the recent sell off? Huh

I very much doubt that - the volume on btcchina has been well under 1000 btc per day for quite a while.

URSAY

legendary

Activity: 1974

Merit: 1010

Could this have anything to do with the recent sell off? Huh

CIYAM

legendary

Activity: 1890

Merit: 1086

Ian Knowles - CIYAM Lead Developer

Quote from: BCB on September 23, 2012, 10:32:09 AM

I'm certain you could have public facing and searchable pages and use your encryption starting a log in. Why would google need to index your protected pages as long as the public urls say where it is and what it does.

Yes - this is under development (just not a big priority yet).

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: Severian on September 23, 2012, 10:24:13 AM

Quote from: hxtop on September 23, 2012, 10:21:32 AM

bitcoin has arrived in China long time just you never know it or less know it.

"Arrived" is also an American idiom that means, "has come of age" or "has come into its own".

It's a good thing.

China is a big market, any product can find business opportunities in China. BITCOIN precisely

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: CIYAM on September 23, 2012, 10:30:22 AM

Quote from: Desolator on September 23, 2012, 10:27:46 AM

There's a way I learned in programming class that's much better and leaves your site google index-able.ably missing all service packs, lol.

Actually I am building CMS extensions that will generate real pages that can be indexed by Google, etc. (has just not been my priority).

My website is the use of CMS
base PHP and ASP

BCB

vip

Activity: 1078

Merit: 1002

BCJ

I'm certain you could have public facing and searchable pages and use your encryption starting a log in. Why would google need to index your protected pages as long as the public urls say where it is and what it does.

CIYAM

legendary

Activity: 1890

Merit: 1086

Ian Knowles - CIYAM Lead Developer

Quote from: Desolator on September 23, 2012, 10:27:46 AM

There's a way I learned in programming class that's much better and leaves your site google index-able.ably missing all service packs, lol.

Actually I am building CMS extensions that will generate real pages that can be indexed by Google, etc. (has just not been my priority).

Desolator

sr. member

Activity: 392

Merit: 250

There's a way I learned in programming class that's much better and leaves your site google index-able. It's called don't code it like a dumbass and don't leave it open to SQL injections. Handle all characters related to SQL statement strings and they'll never hit the database!

Also, don't use server 03 lol. Since this was china, I guarantee it was an illegal copy too so it was probably missing all service packs, lol.

CIYAM

legendary

Activity: 1890

Merit: 1086

Ian Knowles - CIYAM Lead Developer

Quote from: hxtop on September 23, 2012, 10:19:03 AM

did you have any detail for me.thank you much

Sure - when you provide a password to "log in" then this is hashed along with a UUID to then encrypt an AJAX type request.

Your request will just look like rubbish to any MITM watcher and all content returned via the AJAX request (which is all the content and why Google can't see anything) is encrypted not with the same key but with another hash (determined client side from the original).

Due to the use of a UUID it is not possible to use a "replay" attack from watching the original login post (hope this makes sense).

Severian

sr. member

Activity: 476

Merit: 250

Quote from: hxtop on September 23, 2012, 10:21:32 AM

bitcoin has arrived in China long time just you never know it or less know it.

"Arrived" is also an American idiom that means, "has come of age" or "has come into its own".

It's a good thing.

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: Severian on September 23, 2012, 10:07:18 AM

I'm sorry to hear it but to take a positive view, this means that bitcoin has arrived in China. Wink

bitcoin has arrived in China long time just you never know it or less know it.

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: CIYAM on September 23, 2012, 10:11:55 AM

Quote from: Raoul Duke on September 23, 2012, 10:08:20 AM

That's not a weakness. It's a deal breaker. Wink

For the website in question I'd guess so.

Am actually hoping to go up against the likes of Diaspora by having private content securely encrypted over plain HTTP (a feature recently developed).

(a feature recently developed)?

did you have any detail for me.thank you much

goodlord666

sr. member

Activity: 434

Merit: 250

100%

Quote from: cedivad on September 23, 2012, 10:15:17 AM

Quote from: CIYAM on September 23, 2012, 10:03:08 AM

If you are interested in having a website that is SQL injection proof and cannot have source code stolen then you might be interested in the technology that I've developed (all back end code is compiled C++, all queries are via an abstraction layer that ensures SQL injection is impossible and all URLs cannot be tampered with due to checksum protection).

The one weakness at this stage with the technology is that Google can't even search your site (all queries are through the main website URL).

Don't lose your (worthy) time.

Care to explain?

hxtop

hero member

Activity: 1071

Merit: 500

Quote from: cedivad on September 23, 2012, 10:15:17 AM

Quote from: CIYAM on September 23, 2012, 10:03:08 AM

If you are interested in having a website that is SQL injection proof and cannot have source code stolen then you might be interested in the technology that I've developed (all back end code is compiled C++, all queries are via an abstraction layer that ensures SQL injection is impossible and all URLs cannot be tampered with due to checksum protection).

The one weakness at this stage with the technology is that Google can't even search your site (all queries are through the main website URL).

Don't lose your (worthy) time.

Thank you for reminding me

hxtop

hero member

Activity: 1071

Merit: 500

SQL injection get the db rights and then got the admin password of the host?
In china more and more website gus like to use the same Virtual host runing the website.
so the problem is each website code Not safe enough.

cedivad

legendary

Activity: 1176

Merit: 1001

Quote from: CIYAM on September 23, 2012, 10:03:08 AM

If you are interested in having a website that is SQL injection proof and cannot have source code stolen then you might be interested in the technology that I've developed (all back end code is compiled C++, all queries are via an abstraction layer that ensures SQL injection is impossible and all URLs cannot be tampered with due to checksum protection).

The one weakness at this stage with the technology is that Google can't even search your site (all queries are through the main website URL).

Don't lose your (worthy) time.

CIYAM

legendary

Activity: 1890

Merit: 1086

Ian Knowles - CIYAM Lead Developer

Quote from: Raoul Duke on September 23, 2012, 10:08:20 AM

That's not a weakness. It's a deal breaker. Wink

For the website in question I'd guess so.

Am actually hoping to go up against the likes of Diaspora by having private content securely encrypted over plain HTTP (a feature recently developed).

Raoul Duke

legendary

Activity: 1358

Merit: 1002

Quote from: CIYAM on September 23, 2012, 10:03:08 AM

The one weakness at this stage with the technology is that Google can't even search your site (all queries are through the main website URL).

That's not a weakness. It's a deal breaker. Wink

Topic: China biggest bitcoin portal www.hxtop.com was hacked! - page 2. (Read 62095 times)