With the proper authorizations many people can perform a penetration test of the web site. It should be fairly easy to run one, or contract to do it, and publish the results. It would certainly be worthwhile to have some evidence of security in place.
Some people can do the pen testing without authorization but not legally from the USA.
Topic: TradeHill - Who we are - page 9. (Read 42352 times)
No offense but your security is a joke right, i understand you dont have the resources/money but it needs to be looked at seriously as the #1 priority.
Do you have any specific security complaints about TradeHill? You shouldn't go saying that a financial website's security is a "joke" unless you have some evidence. 
We can accept international wires. If you want to buy Bitcoin with any currency.
Go to your bank, buy USD and then wire it in.
SEPA is coming ASAP, we are growing as fast as possible.
We don't want to over extend ourselves and fail. We would much rather provide a reliable service.
In regards to the servers we're on it. It's one thing to grow quickly and another to have the entire Bitcoin world try to log in at once.
Go to your bank, buy USD and then wire it in.
SEPA is coming ASAP, we are growing as fast as possible.
We don't want to over extend ourselves and fail. We would much rather provide a reliable service.
In regards to the servers we're on it. It's one thing to grow quickly and another to have the entire Bitcoin world try to log in at once.
When is TradeHill going to pay for, and publish results from, a professional security audit?
If you want to be a real online broker, you need to invest in Wells-Fargo levels of vulnerability analysis.
Start with NTOSpider On-Demand, http://www.ntobjectives.com/ntoondemand, to get an idea of where you stand.
Next, hire an experienced consultant to make sure everything is absolutely bulletproof.
I HIGHLY recommend Strategic Data Command of Oakland, CA. Larry Suto is among the best at what he does.
It might cost you a small fortune, but if you want results you need to call in world-class experts.
I posted this same bit of advice to our MtGox rep. as well.
Hi ICEBREAKER,
ABSOLUTELY - and we will publish the results for the community to view!
Thank you for the recommendation. We will definitely reach out to your colleague. Understand that we will likely seek several opinions.
This is a major priority that is both important and urgent; however, we cannot drop everything at this moment – we hope you understand – we have already frozen withdrawals and deposits and told customers to change their passwords. We also have confidence in our current system; although, we will definitely be seeking advancements going forward.
We are promising the community that this issue will be addressed PUBLICY – via third party AUDIT - with brevity and transparency.
Regarding costs, we are thinking that perhaps some of the Task Force’s budget could be included for third party security checks; that way, each exchange will be put to the same tests on a level playing field. Again, for anyone who wants to participate in organizing the Task Force for Exchange Security please send an email to [email protected] with “Task Force” in the title.
Regards,
Adam Stradling
Can you please suspend whoever's account this is for their blatant spamming?
tradehill.com/?r=TH-R15683
I'm sure you've heard, but they emailed every Mt. Gox customer with their referral code.
tradehill.com/?r=TH-R15683
I'm sure you've heard, but they emailed every Mt. Gox customer with their referral code.
Jered, see this:
http://forum.bitcoin.org/index.php?topic=19711.0
I've received it as well.
I hope you out and suspend the account.
http://forum.bitcoin.org/index.php?topic=19711.0
I've received it as well.
I hope you out and suspend the account.
http://forum.bitcoin.org/index.php?topic=19707.0
Different thread, same idea. This one has the full email headers in it.
I want to ask a few questions about your company.
What's the number of the owners' equity on the Blance Sheet of your comapny, say, how much money have you founders invested?
Frankly, that is private – There is a distinct difference between being ‘untruthful’ or ‘inaccurate’ as opposed to choosing wisely about what information should be disclosed publicly. Either way, we will be preparing a public statement covering multiple dimensions of our business and will consider your request.
What's the number of the owners' equity on the Blance Sheet of your comapny, say, how much money have you founders invested?
Frankly, that is private – There is a distinct difference between being ‘untruthful’ or ‘inaccurate’ as opposed to choosing wisely about what information should be disclosed publicly. Either way, we will be preparing a public statement covering multiple dimensions of our business and will consider your request.
How many fulltime stuff are there in you company?
All four founders are working on this fulltime except ME. I have a consulting business and must deliver on my promises to past clients. However, as soon as that happens, I intend to dedicate all my time to this. I will not comment on the number of staffers we have.
[/quote]
Is there any founders are not fulltime?
Answered above!
[/quote]
Are you going to raise larger venture capital soon?
We have developed an innovative way to raise capital. Additionally, some of our family members are equipped to provide us significant funds. We do have an open mind to VCs or other investors so please send us a note.
[/quote]
How many years have you founders know each other, have you guys teamed up before?
Answered above – Me and Jered have known each other for ten years – I used to email him while his base was getting mortar attacked in Afghanistan: Me and Jered have known Francisco for 3 years.
[/quote]
Jered, see this:
http://forum.bitcoin.org/index.php?topic=19711.0
I've received it as well.
I hope you out and suspend the account.
http://forum.bitcoin.org/index.php?topic=19711.0
I've received it as well.
I hope you out and suspend the account.
I'm interested in signing up with you guys but you don't transfer to Liberty Reserve which is the only place I can use being that I live in New Zealand.
Hope you guys can do something for us Kiwi's sometime soon.
Hope you guys can do something for us Kiwi's sometime soon.
We do use Liberty Reserve and we're treating it as it's own currency so that we can be used as an LR exchange in addition to a BTC exchange.
More answers to the rest of the questions coming. We are getting flooded with emails and concentrating on user security.
I'm interested in signing up with you guys but you don't transfer to Liberty Reserve which is the only place I can use being that I live in New Zealand.
Hope you guys can do something for us Kiwi's sometime soon.
Hope you guys can do something for us Kiwi's sometime soon.
Finally, an exchange run by competent people instead of some Magic the Gathering idiot. BitCoin has come of age. 
As long as Tradehill wasn't formerly "TradeMagicTheGatheringCardsHill" then I'm in
As long as Tradehill wasn't formerly "TradeMagicTheGatheringCardsHill" then I'm in
I think the chances of TradHill being behind the attacks is as likely as it being MJ12. More likely it was Lulzsec, a psychopath, someone protecting Silk Road, or just some thief.
We can accept international wires. If you want to buy Bitcoin with any currency.
Go to your bank, buy USD and then wire it in.
SEPA is coming ASAP, we are growing as fast as possible.
We don't want to over extend ourselves and fail. We would much rather provide a reliable service.
In regards to the servers we're on it. It's one thing to grow quickly and another to have the entire Bitcoin world try to log in at once.
Go to your bank, buy USD and then wire it in.
SEPA is coming ASAP, we are growing as fast as possible.
We don't want to over extend ourselves and fail. We would much rather provide a reliable service.
In regards to the servers we're on it. It's one thing to grow quickly and another to have the entire Bitcoin world try to log in at once.
When is TradeHill going to pay for, and publish results from, a professional security audit?
If you want to be a real online broker, you need to invest in Wells-Fargo levels of vulnerability analysis.
Start with NTOSpider On-Demand, http://www.ntobjectives.com/ntoondemand, to get an idea of where you stand.
Next, hire an experienced consultant to make sure everything is absolutely bulletproof.
I HIGHLY recommend Strategic Data Command of Oakland, CA. Larry Suto is among the best at what he does.
It might cost you a small fortune, but if you want results you need to call in world-class experts.
I posted this same bit of advice to our MtGox rep. as well.
Hey Tradehill:
Here's an idea to help those of us trying to fund our accounts from Canada. For some reason, Canadian banks won't allow me to make an international transfer to your account in the US. But they would allow one to Chile.
If you opened a local account with a Chilean bank, it would be reasonably easy to fund it. Then again, if you could open an account with a Canadian bank, we'd be able to transfer money to and from it in a matter of minutes!
Keep up the good work.
Here's an idea to help those of us trying to fund our accounts from Canada. For some reason, Canadian banks won't allow me to make an international transfer to your account in the US. But they would allow one to Chile.
If you opened a local account with a Chilean bank, it would be reasonably easy to fund it. Then again, if you could open an account with a Canadian bank, we'd be able to transfer money to and from it in a matter of minutes!
Keep up the good work.
*Whisles*
Looks like I cashed out some of my GPU fund to Dwolla just in time - looks like they're halting them for now. Probably for the best.
Looks like I cashed out some of my GPU fund to Dwolla just in time - looks like they're halting them for now. Probably for the best.
Why post your names and info, but previously buy a domain via "domains by proxy"?
Where is "TradeHill Co. Ltd" registered?
I notice your hosting with a "cloud" company in Sweden, give them a kick as you don't have enough resources and if your on "the cloud" how can that be simply throttle up.
I wish you all the best, their needs to be a solid alternate to MtGox, but I would not count MtGox down and out yet.
Where is "TradeHill Co. Ltd" registered?
I notice your hosting with a "cloud" company in Sweden, give them a kick as you don't have enough resources and if your on "the cloud" how can that be simply throttle up.
I wish you all the best, their needs to be a solid alternate to MtGox, but I would not count MtGox down and out yet.
TradeHill - thank you for producing an alternative exchange. May the marketplace bless you with profits =)
It's inspiring to see new business rising every day in wild this new economy. Cheers!
It's inspiring to see new business rising every day in wild this new economy. Cheers!
I want to ask a few questions about your company.
What's the number of the owners' equity on the Blance Sheet of your comapny, say, how much money have you founders invested?
How many fulltime stuff are there in you company?
Is there any founders are not fulltime?
Are you going to raise larger venture capital soon?
How many years have you founders know each other, have you guys teamed up before?
What's the number of the owners' equity on the Blance Sheet of your comapny, say, how much money have you founders invested?
How many fulltime stuff are there in you company?
Is there any founders are not fulltime?
Are you going to raise larger venture capital soon?
How many years have you founders know each other, have you guys teamed up before?
the classy thing to do would be to just ease up while Mtgox is being attacked, instead of jumping in like sharks smelling blood in the water. "This PR spree" reflects poorly on your company.
I don't see how this looks "poorly" on TradeHill at all. This looks good to me. Not many people were even aware of MtGox alternatives, and TradeHill is simply letting people know that they have options.
MtGox is fucking DOWN right now. Do you think it reflects positively for the development of BitCoin in general if there WASN'T another trade site that can keep this market alive? For fuck's sake people.
hey jared, you have a huge number of posts here.
how long have you been working on tradehill? how long have you been involved in bitcoin?
how long have you been working on tradehill? how long have you been involved in bitcoin?
putting my tinfoil hat on, this all seems very strange.
Mtgox is hacked/crashed - goes offline
Mass of threads/posts about how Mtgox was hacked, unsafe etc.
Mass of threads/posts about how we should all switch to Tradehill
Introduction thread about who tradehill is, within several hours of Mtgox going offline.
The chance of this all being coincidence doesn't seem very high, this definitely looks like a duck to me.
Mtgox is hacked/crashed - goes offline
Mass of threads/posts about how Mtgox was hacked, unsafe etc.
Mass of threads/posts about how we should all switch to Tradehill
Introduction thread about who tradehill is, within several hours of Mtgox going offline.
The chance of this all being coincidence doesn't seem very high, this definitely looks like a duck to me.
Its called marketing, Jesus Christ.
Jump to: