[NOTICE] mcxNOW had a 3rd party leaked database run against the login system - page 2.

smoothie

legendary

Activity: 2492

Merit: 1473

LEALANA Bitcoin Grim Reaper

Quote from: ?? on ??

Now we have Realsolid over on his site claiming Coinbase was the source of the leaked passwords LOL

I guess this has nothing to do with his former dislike of LTC and Coblee who works there now.

~BCX~

What I find odd is how he was such a huge hater of LTC and Coblee and now his exchange supports LTC trading. Volume on LTC as opposed to SC is huge disparity.

smoothie

legendary

Activity: 2492

Merit: 1473

LEALANA Bitcoin Grim Reaper

Quote from: drummerjdb666 on September 16, 2013, 04:16:22 AM

All Fear, Uncertainty, and Doubt aside. I still feel safer with my coins on mcxNOW than a couple of other exchanges.

Let me ask you this: Do you know the true identity of RS? In case he decides to close up shop and run with your coins?

BTC-e operates the same way....with anonymity.

Perhaps RS can prove me wrong and reveal his personal identity to instill trust that he could be held responsible if he ever decided to close his exchange and run with user deposits?

smoothie

legendary

Activity: 2492

Merit: 1473

LEALANA Bitcoin Grim Reaper

Quote from: markm on September 16, 2013, 04:03:29 AM

Can't you just make up nice long totally random passwords to people and tell them their password instead of asking them to make one up?

I guess then though they'll just go use that same one on phishingsite.com ?

-MarkM-

I was thinking the same thing. But of course RS knows everything so I failed to mention it for that reason.

Armchair Miner

sr. member

Activity: 296

Merit: 250

Would you believe that in New York City there are actual jobs (job title "Media Relations") some of which specialize on "character assassination". Here, a character can be a person, an event, a website, or a more abstract term.

The job of these people is to twist words, and spew party line propaganda. Their job is done when sufficient number of media outlets republish their twisted words, making it "the truth".

I used to see a lot of that on Twitter, and now this thread and others are full of similar attempts.

jdebunt

legendary

Activity: 1596

Merit: 1010

well my account is safe, but i'm adding google 2FA this evening just i case, meant to do it over the weekend but got caught up in things

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: FrigidWinter on September 16, 2013, 04:22:58 AM

Quote from: TheRealSolid on September 16, 2013, 04:19:28 AM

Quote from: FrigidWinter on September 16, 2013, 04:13:34 AM

One simple thing could have prevented it that many other exchanges have already implemented.

Withdrawals only through email verification

Or 2FA. The problem is these people who use the same user/pass at every site typically don't care about enabling extra security features either.

But why do you unlike other exchanges not require email verification?

Its a major security step the "most secure" exchange should probably have

I believe emails are an invasion of privacy of my users. I've removed them from the site and now will only support offline second authentication methods such as google auth.

FrigidWinter

newbie

Activity: 53

Merit: 0

Quote from: TheRealSolid on September 16, 2013, 04:19:28 AM

Quote from: FrigidWinter on September 16, 2013, 04:13:34 AM

One simple thing could have prevented it that many other exchanges have already implemented.

Withdrawals only through email verification

Or 2FA. The problem is these people who use the same user/pass at every site typically don't care about enabling extra security features either.

But why do you unlike other exchanges not require email verification?

Its a major security step the "most secure" exchange should probably have

iGotSpots

legendary

Activity: 2548

Merit: 1054

CPU Web Mining 🕸️ on webmining.io

Quote from: ?? on ??

Quote from: iGotSpots on September 16, 2013, 04:09:55 AM

Some of you are stupid as fuck. mcxNOW wasn't hacked. Someone got a username/password list from somewhere else and tried to log in with the list they had

Blaming RS for people being stupid and using the same name/pass for everything is even more retarded than those people are

RS shut down trading and looked into it, even though it wasn't his site that was compromised. Holy shit people stop being so stupid

Who said it was hacked?

I agree it isn't an RS issue if people were stupid enough to reuse passwords.

I just happen to like Hydrponica more than I do Realsolid/Coinhunter/Notyep/rlh

~BCX~

LOL - Yea, I know. Just responding to the people saying mcx sucks. I've been buying shares like a madman

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: ?? on ??

I admit I'm a retard but this would of at least saved me.

2FA has been there since the update too. mcxNOW doesn't store or use emails for verification but does give users the choice of Google Authenticator as a second auth device.

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: FrigidWinter on September 16, 2013, 04:13:34 AM

One simple thing could have prevented it that many other exchanges have already implemented.

Withdrawals only through email verification

Or 2FA. The problem is these people who use the same user/pass at every site typically don't care about enabling extra security features either.

drummerjdb666

full member

Activity: 244

Merit: 101

All Fear, Uncertainty, and Doubt aside. I still feel safer with my coins on mcxNOW than a couple of other exchanges.

FrigidWinter

newbie

Activity: 53

Merit: 0

Quote from: TheRealSolid on September 16, 2013, 03:44:06 AM

Quote from: smoothie on September 16, 2013, 03:32:30 AM

@RS,

How many threads on this topic do we need? Roll Eyes

Edit: Wasn't this the "most secure" online exchange ever? Grin

Unfortunately there isn't much one can do to force users to use a unique username and password at mcxNOW. It is security 101 but some users fail to do it.

One simple thing could have prevented it that many other exchanges have already implemented.

Withdrawals only through email verification

iGotSpots

legendary

Activity: 2548

Merit: 1054

CPU Web Mining 🕸️ on webmining.io

Some of you are stupid as fuck. mcxNOW wasn't hacked. Someone got a username/password list from somewhere else and tried to log in with the list they had

Blaming RS for people being stupid and using the same name/pass for everything is even more retarded than those people are

RS shut down trading and looked into it, even though it wasn't his site that was compromised. Holy shit people stop being so stupid

markm

legendary

Activity: 2940

Merit: 1090

Can't you just make up nice long totally random passwords to people and tell them their password instead of asking them to make one up?

I guess then though they'll just go use that same one on phishingsite.com ?

-MarkM-

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: smoothie on September 16, 2013, 03:58:13 AM

You didn't even address the part about actually comparing security tests between yours and other exchanges. Now if you had done that and a 3rd party (neutral) claimed your site as "the most secure" then fine. But until then, it is just YOUR opinion as opposed to facts that you are advertising to users.

Typical salesman tactics...

Many companies/sites make claims about themselves which are very hard to verify. It is called marketing.

In this case many people who read about the security at mcxNOW and know the system do believe it is the most secure out of the systems *they know*. I am not the only one, and you can consider it an untested marketing claim / salesman tactic if you want, no one will fault you for that.

smoothie

legendary

Activity: 2492

Merit: 1473

LEALANA Bitcoin Grim Reaper

Quote from: TheRealSolid on September 16, 2013, 03:55:27 AM

Quote from: smoothie on September 16, 2013, 03:50:25 AM

I merely think you've overstated the security of your site as "the most secure". Hard to make that statement without actual proof of 3rd party testing against/compared to other exchanges right?

I coded the whole thing from scratch, including the exchange http server and had 3rd parties test it already, combined with numerous hackers testing it for the 5 months operational. It's never going to be "enough testing" in some people's minds, and it comes back to you simply not liking me boasting about something I personally think is impressive. You are free to have any opinion you want about my security and my claims, I don't judge you on it. And if you don't want to use the exchange due to it then that is your right.

You didn't even address the part about actually comparing security tests between yours and other exchanges. Now if you had done that and a 3rd party (neutral) claimed your site as "the most secure" then fine. But until then, it is just YOUR opinion as opposed to facts that you are advertising to users.

Typical salesman tactics...

MarpleTrading

full member

Activity: 191

Merit: 100

Quote from: drummerjdb666 on September 16, 2013, 03:52:34 AM

All fud aside I think the other exchange owners should keep up with this shit!!! This is the third event I have seen in two weeks now!

Btx as much of an asshole as you are sir I wouldn't doubt if it was somebody like you doing this bullshit!

It's fucking bad enough our world leaders can barely get along..

Why can't people in crypto get along either? Why so much hate?

It is called envy

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: gramma on September 16, 2013, 03:54:40 AM

Quote from: smoothie on September 16, 2013, 03:47:44 AM

Quote from: TheRealSolid on September 16, 2013, 03:44:06 AM

Quote from: smoothie on September 16, 2013, 03:32:30 AM

@RS,

How many threads on this topic do we need? Roll Eyes

Edit: Wasn't this the "most secure" online exchange ever? Grin

Unfortunately there isn't much one can do to force users to use a unique username and password at mcxNOW. It is security 101 but some users fail to do it.

And we come back to the point that your exchange isn't the most secure given that simple fact.

Without offering any kind of position on how scam/trustworthy TheRealSolid is, I fail to see how, if my password is "password" across all of my services, and for that matter my username is "gramma", how that is MCX's failing when someone figures it out and uses it to get into it, and B of A, and Mt Gox, and and and...

Indeed and thanks to my security system at mcxNOW the people who have the same username but a different password at mcxNOW can help identify the origin of the 3rd party service which has been leaked. Hopefully we can find out soon and warn users of that site(s).

smoothie

legendary

Activity: 2492

Merit: 1473

LEALANA Bitcoin Grim Reaper

Quote from: gramma on September 16, 2013, 03:54:40 AM

Quote from: smoothie on September 16, 2013, 03:47:44 AM

Quote from: TheRealSolid on September 16, 2013, 03:44:06 AM

Quote from: smoothie on September 16, 2013, 03:32:30 AM

@RS,

How many threads on this topic do we need? Roll Eyes

Edit: Wasn't this the "most secure" online exchange ever? Grin

Unfortunately there isn't much one can do to force users to use a unique username and password at mcxNOW. It is security 101 but some users fail to do it.

And we come back to the point that your exchange isn't the most secure given that simple fact.

Without offering any kind of position on how scam/trustworthy TheRealSolid is, I fail to see how, if my password is "password" across all of my services, and for that matter my username is "gramma", how that is MCX's failing when someone figures it out and uses it to get into it, and B of A, and Mt Gox, and and and...

it's not. I was merely pointing out how RS and his sockpuppets claiming mcxNOW is the "most secure" exchange ever is an OVERSTATEMENT.

TheRealSolid

member

Activity: 94

Merit: 10

Operator of mcxNOW | Programmer of MicroCash

Quote from: smoothie on September 16, 2013, 03:50:25 AM

I merely think you've overstated the security of your site as "the most secure". Hard to make that statement without actual proof of 3rd party testing against/compared to other exchanges right?

I coded the whole thing from scratch, including the exchange http server and had 3rd parties test it already, combined with numerous hackers testing it for the 5 months operational. It's never going to be "enough testing" in some people's minds, and it comes back to you simply not liking me boasting about something I personally think is impressive. You are free to have any opinion you want about my security and my claims, I don't judge you on it. And if you don't want to use the exchange due to it then that is your right.

Topic: [NOTICE] mcxNOW had a 3rd party leaked database run against the login system - page 2. (Read 3100 times)