Author

Topic: Which Bitcoin Exchange Can You Trust? (Read 2051 times)

hero member
Activity: 826
Merit: 500
June 21, 2011, 04:17:37 AM
#19
i trust none.
i cash out as often as possible.

using tradehill at the moment and like it.
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
June 21, 2011, 04:10:34 AM
#18
MY EYES!!!
full member
Activity: 196
Merit: 100
June 21, 2011, 02:10:57 AM
#17
I personally like Britcoin, it's not very big but you know someone takes things seriously when they refuse to store any passwords at all on-site and put the source code for the exchange on github.

I only bank with the British from now on.



WHOA!  That's a BIG PHOTO!
legendary
Activity: 1218
Merit: 1000
June 20, 2011, 06:01:04 PM
#16
Sorry, "Open Source all the way" is simply foolish!
You would get thought code? Maybe, but not quite. Main frame projects do, sidelined projects are normally half-baked with more bugs than you can count.
It also diminishes security (not increases), making it a lottery. By knowing the table structure an attacker by founding an exploitable hole would have quite a fine aim instead of shoot fish from the barrel by attempting to guess which table is which (is it users? accounts? members? the guy is Arab and calls it Al-Accounts? who knows?).
Over Open Source it all relies on the intentions of the one who found the exploitable hole, if is a good fellow will warn about it, otherwise will spread havoc.

Actually the breach @ MtGox was all about letting more people than desirable to have a look in his code, ending up with his db spread over the web.
newbie
Activity: 59
Merit: 0
June 20, 2011, 05:53:49 PM
#15
Really it depends where you are...you can go on bitcoincharts and see an exchange based on your particular currency and then do research.  There are a few per country

With tradehill not being an option for me (doesn't take or send EUR or GBP), britcoin is looking like the best contender, despite saying "this site is strictly in alpha state" on the front page - which previously meant I discounted it out of hand.
full member
Activity: 324
Merit: 100
hero member
Activity: 742
Merit: 500
June 20, 2011, 03:45:14 PM
#13
I personally like Britcoin, it's not very big but you know someone takes things seriously when they refuse to store any passwords at all on-site and put the source code for the exchange on github.

Hmm well this is totally cool, now the hackers know exactly what sorts of attacks will work by analysing the source code for vulnerabilities. I don't recall any wall street banks leaving the schematics for their security systems lying about on the roadside for any gutter trash to read, do I?

It's secure because anyone can view it.

This is PHP code, not something flying the space shuttle, you can know it's safe by having everyone have a look.

I believe we're talking about Linus' Law (http://en.wikipedia.org/wiki/Linus'_Law) - "Given enough eyeballs, all bugs are shallow"
sr. member
Activity: 321
Merit: 250
Firstbits: 1gyzhw
June 20, 2011, 03:44:52 PM
#12
Hmm well this is totally cool, now the hackers know exactly what sorts of attacks will work by analysing the source code for vulnerabilities. I don't recall any wall street banks leaving the schematics for their security systems lying about on the roadside for any gutter trash to read, do I?
Before you sink your half a million into Britcoin you can pay a mere few thousand dollars for an independent security audit of the entire site. If you're a skilled developer then you can conduct your own independent audit.

If you're putting the source code to your exchange online then you get instant respect from developers like myself, it shows that:

1) Britcoin doesn't believe in "security by obscurity", instead they opt for real, actual security along with transparency.
2) Britcoin's code is well written enough for them to state their reputation on it, which they have.
3) Britcoin is giving back to the community, they're not someone in this thing to make a quick buck, but actually proving they will invest in the entire community by starting new exchanges.

Having seen hundreds of proprietary, bespoke applications and hundreds of open source ones, I can say with some confidence that the code quality of open source is usually much higher.
legendary
Activity: 2408
Merit: 1121
June 20, 2011, 03:39:10 PM
#11
rofl...

Please refrain from commenting about things you clearly know nothing about.

If only lardycake could learn from his own 'wisdom'.
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
June 20, 2011, 03:33:24 PM
#10
I personally like Britcoin, it's not very big but you know someone takes things seriously when they refuse to store any passwords at all on-site and put the source code for the exchange on github.

Hmm well this is totally cool, now the hackers know exactly what sorts of attacks will work by analysing the source code for vulnerabilities. I don't recall any wall street banks leaving the schematics for their security systems lying about on the roadside for any gutter trash to read, do I?

It's secure because anyone can view it.

This is PHP code, not something flying the space shuttle, you can know it's safe by having everyone have a look.
sr. member
Activity: 420
Merit: 250
June 20, 2011, 03:31:43 PM
#9
Honestly, after all of this, I would trust mt gox the most. Nothing encourages you to invest a lot in security more than being thoroughly pwnd.
Yes, and IMHO the situation has been handled very well.  A lot of FUD is spread here, unfortunately, and I get spam promoting TradeHill and Bitcoin7.  Spammers can not be taken seriously, and neither can the exchanges if the spammers are still allowed to trade there.  This alone strenghtens my confidence in Mt. Gox, which has never spammed me or spread FUD about other exchanges.  So far the official information has been perfectly aligned with the facts which have been shown both before and after the public explanations.

My trust is with Mt. Gox and bitcoin-central.  I do not trust TradeHill, and have complete distrust in Bitcoin7 (mostly due to cluelessness).


We have been and continue to collect referral codes of spammers for removal in our system.
We don't condone using stolen information for personal gain and hate spam as much as you do.

We can ban the spammers but if an email list this size is released it's a fact that it will be spammed.
hero member
Activity: 756
Merit: 500
June 20, 2011, 03:27:13 PM
#8
I personally like Britcoin, it's not very big but you know someone takes things seriously when they refuse to store any passwords at all on-site and put the source code for the exchange on github.

Hmm well this is totally cool, now the hackers know exactly what sorts of attacks will work by analysing the source code for vulnerabilities. I don't recall any wall street banks leaving the schematics for their security systems lying about on the roadside for any gutter trash to read, do I?
legendary
Activity: 1437
Merit: 1002
https://bitmynt.no
June 20, 2011, 03:20:54 PM
#7
Honestly, after all of this, I would trust mt gox the most. Nothing encourages you to invest a lot in security more than being thoroughly pwnd.
Yes, and IMHO the situation has been handled very well.  A lot of FUD is spread here, unfortunately, and I get spam promoting TradeHill and Bitcoin7.  Spammers can not be taken seriously, and neither can the exchanges if the spammers are still allowed to trade there.  This alone strenghtens my confidence in Mt. Gox, which has never spammed me or spread FUD about other exchanges.  So far the official information has been perfectly aligned with the facts which have been shown both before and after the public explanations.

My trust is with Mt. Gox and bitcoin-central.  I do not trust TradeHill, and have complete distrust in Bitcoin7 (mostly due to cluelessness).
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
June 20, 2011, 02:58:06 PM
#6
GLBSE.com of course, we don't actually use passwords.

We are not however a bitcoin exchange (we're an asset exchange)

And it's down until I have security beefed up.

Nefario.
full member
Activity: 196
Merit: 101
June 20, 2011, 02:50:27 PM
#5
Honestly, after all of this, I would trust mt gox the most. Nothing encourages you to invest a lot in security more than being thoroughly pwnd.
It's funny and it's true.

Except Sony.
hero member
Activity: 630
Merit: 500
Posts: 69
June 20, 2011, 02:38:06 PM
#4
Honestly, after all of this, I would trust mt gox the most. Nothing encourages you to invest a lot in security more than being thoroughly pwnd.
It's funny and it's true.
sr. member
Activity: 321
Merit: 250
Firstbits: 1gyzhw
June 20, 2011, 02:21:45 PM
#3
I personally like Britcoin, it's not very big but you know someone takes things seriously when they refuse to store any passwords at all on-site and put the source code for the exchange on github.
jr. member
Activity: 56
Merit: 1
June 20, 2011, 02:18:01 PM
#2
Honestly, after all of this, I would trust mt gox the most. Nothing encourages you to invest a lot in security more than being thoroughly pwnd.
full member
Activity: 168
Merit: 100
God creats math and math creats bitcoin.
June 20, 2011, 02:03:33 PM
#1
This is what I've been expecting for a long time, and once I wished mtgox would achieve.


"It's important now to go forward with legalization even if you don't agree with laws,"
Taaki said legitimizing exchanges would give Bitcoin the confidence needed to transcend from a niche currency embraced by libertarians and hackers to a legitimate monetary system.



http://www.pcmag.com/article2/0,2817,2387279,00.asp
Jump to: