Pages:
Author

Topic: [CLOSED] CoinLenders - page 37. (Read 226445 times)

hero member
Activity: 602
Merit: 500
R.I.P Silk Road 1.0
May 25, 2013, 12:35:22 AM
SSL is coming.

Nice! This will surely increase the trust future users will give you.
vip
Activity: 1316
Merit: 1043
👻
May 24, 2013, 08:12:25 PM
I'm pretty sure your set-up requires manual processing of withdrawals or someone could take out all the btc in store. No worries. I am sure it will be fixed soon.
Withdrawals are mostly automated but we do have tripwires.
Hey, TF, can we have an option to INCLUDE or NOT INCLUDE TX Fees, please?

or if you prefer TX Fees to be mandatory to have a box to say "I agree 0.001 TX Fee" will be included. I keep sending people money and forgetting about TX Fees!
Bitcoind has few controls over transaction fees..
hero member
Activity: 672
Merit: 501
May 24, 2013, 07:44:58 PM
I'm pretty sure your set-up requires manual processing of withdrawals or someone could take out all the btc in store. No worries. I am sure it will be fixed soon.
Withdrawals are mostly automated but we do have tripwires.
Hey, TF, can we have an option to INCLUDE or NOT INCLUDE TX Fees, please?

or if you prefer TX Fees to be mandatory to have a box to say "I agree 0.001 TX Fee" will be included. I keep sending people money and forgetting about TX Fees!
vip
Activity: 1316
Merit: 1043
👻
May 24, 2013, 07:43:45 PM
I'm pretty sure your set-up requires manual processing of withdrawals or someone could take out all the btc in store. No worries. I am sure it will be fixed soon.
Withdrawals are mostly automated but we do have tripwires.
vip
Activity: 1316
Merit: 1043
👻
May 24, 2013, 07:05:03 PM
My CD's are wacked, or I'm a trillionaire?

Quote
Your CDs
81,276,934,810,368,907,154,936,125,233,180,775,526,540,566,118,166,571,736,299,339,413,679,243,264.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
162,553,869,620,737,814,309,872,250,466,361,551,053,081,132,236,333,143,472,598,678,827,358,486,528.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
They are whacked on purpose - I will change the dates to the original ones after your loan is repaid Smiley

If you're wondering why your number is insanely high even through the start date has not changed, it is because of compounding. The script gets the yield (compound), and then divides it by the progress of the CD.
newbie
Activity: 53
Merit: 0
May 24, 2013, 03:14:39 PM
I'm pretty sure your set-up requires manual processing of withdrawals or someone could take out all the btc in store. No worries. I am sure it will be fixed soon.
sr. member
Activity: 364
Merit: 250
May 24, 2013, 11:40:13 AM
My CD's are wacked, or I'm a trillionaire?

Quote
Your CDs
81,276,934,810,368,907,154,936,125,233,180,775,526,540,566,118,166,571,736,299,339,413,679,243,264.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
162,553,869,620,737,814,309,872,250,466,361,551,053,081,132,236,333,143,472,598,678,827,358,486,528.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
Yes you are, but only if you manage to be still alive in the year 3000 :/
Guess there is a script error.
legendary
Activity: 1050
Merit: 1000
May 24, 2013, 11:38:58 AM
My CD's are wacked, or I'm a trillionaire?

Quote
Your CDs
81,276,934,810,368,907,154,936,125,233,180,775,526,540,566,118,166,571,736,299,339,413,679,243,264.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
162,553,869,620,737,814,309,872,250,466,361,551,053,081,132,236,333,143,472,598,678,827,358,486,528.00000000 BTC - 20.000% APR. Starts 2013-05-07, ends 3000-08-05.
full member
Activity: 167
Merit: 100
May 24, 2013, 08:14:55 AM
Like I already said, we do quite a few very short term (week or two) loans where it's 62% APR (assuming full usage).

What is the typical default rate on these short term loans ? (10, 20 % ?)
vip
Activity: 1316
Merit: 1043
👻
May 24, 2013, 03:30:33 AM
what's MITM
If your internet is not secure (public wifi hotspot, stealing neighbors, etc), an attacker could change the contents of the web page you are browsing - they could replace the deposit address on coinlenders with their own address. This attack is pretty impractical (due to the low amount of users, srsly, how many do you expect to catch using CL), but now with address signing you can be sure that the address hasn't being tampered with (if it passes verification).
vip
Activity: 1316
Merit: 1043
👻
May 24, 2013, 03:27:58 AM
SSL is coming.
legendary
Activity: 2128
Merit: 1002
May 24, 2013, 03:11:04 AM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

Damn, TradeFortress, you are good - fixing everything in no time!

However, I am still surprised that you don't just do the HTTPS thing. It is easy and cheap, is it not?

some SSL certs are cheap, like this site for USD 4.99 a year
https://www.cheapssls.com/comodo-ssl-certificates/positivessl.html?years=5
member
Activity: 71
Merit: 10
May 24, 2013, 03:01:50 AM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

Damn, TradeFortress, you are good - fixing everything in no time!

However, I am still surprised that you don't just do the HTTPS thing. It is easy and cheap, is it not?
member
Activity: 118
Merit: 10
May 24, 2013, 02:24:12 AM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

You can verify that your deposit address has not being tampered with by verifying the signed message.

Please quote this post.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The Bitcoin signing address for CoinLenders is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM - it is exposed on server 1.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREIAAYFAlGetscACgkQx0EjQi5nw9+3IAD8Dbb5RduIWQtP8oA3120T1h09
kLhAwYD+AoDCZZkpomoA/1JyERMjWVtjsbB3aqEa/ilqExQ5PSocAwyJfk6ZawFf
=K4QJ
-----END PGP SIGNATURE-----

Quoted.
420
hero member
Activity: 756
Merit: 500
May 24, 2013, 02:18:49 AM
what's MITM
full member
Activity: 172
Merit: 100
TradeFortress has to pay his debitors
May 24, 2013, 01:52:43 AM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

You can verify that your deposit address has not being tampered with by verifying the signed message.

Please quote this post.


OK, understood and successfully executed.

Perfect!

This is my new funding address to coinlenders, 1EmaZR4Po3Pj6bPWrGZ761yhKx6QBc4GKi

Just in case somebody wants to fund my projects,  lol
sr. member
Activity: 364
Merit: 250
May 23, 2013, 07:35:28 PM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

You can verify that your deposit address has not being tampered with by verifying the signed message.

Please quote this post.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The Bitcoin signing address for CoinLenders is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM - it is exposed on server 1.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREIAAYFAlGetscACgkQx0EjQi5nw9+3IAD8Dbb5RduIWQtP8oA3120T1h09
kLhAwYD+AoDCZZkpomoA/1JyERMjWVtjsbB3aqEa/ilqExQ5PSocAwyJfk6ZawFf
=K4QJ
-----END PGP SIGNATURE-----

Quoted.
vip
Activity: 1316
Merit: 1043
👻
May 23, 2013, 07:05:58 PM
To prevent MITM attacks against deposit addresses, we now sign a message containing a user's deposit address and their username. The bitcoin address used for signing is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM

You can verify that your deposit address has not being tampered with by verifying the signed message.

Please quote this post.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The Bitcoin signing address for CoinLenders is 1PVmqfC7GcpPVg5jTTGHuv49EwAB8tEqwM - it is exposed on server 1.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREIAAYFAlGetscACgkQx0EjQi5nw9+3IAD8Dbb5RduIWQtP8oA3120T1h09
kLhAwYD+AoDCZZkpomoA/1JyERMjWVtjsbB3aqEa/ilqExQ5PSocAwyJfk6ZawFf
=K4QJ
-----END PGP SIGNATURE-----
member
Activity: 71
Merit: 10
May 23, 2013, 12:57:04 PM
When it comes to discussing the website, I would like to (annoyingly) point out, that HTTPS should be the first priority Smiley
Why?

If I remember rightly it uses a client side Java environment which populates / fuels the pages so the likelyhood of HTTPS representing any additional value to security are................................
Well, some man-in-the-middle can still be done. The attacker cannot get your password, but they can change the site ever so slightly, e.g. the deposit address, and then it is already unpleasant. Disclamer: I am not using coinlender services, so it could be that some sort of MIM protection is already in place.
newbie
Activity: 41
Merit: 0
May 23, 2013, 10:17:48 AM
Agreed with collegues about transparency.
Pages:
Jump to: