Topic: YNAGS - Sports picking website - page 5. (Read 6563 times)

We have an NBA Playoff play tonight that has been posted to www.ynags.com

Registration is free and the picks are free.

During a code review we were told that our database was vulnerable to attacks. We were also informed that the hashing we were using for users passwords was outdated and also vulnerable if someone got access to the database. We immediately put off everything else we were working on to address this serious issue. We are proud to announce that we have now fixed the vulnerabilities that were pointed out to us. This of course comes with an inconvenience. We were presented with two choices:

1) Work on a reset password page and require all users to reset their password during their next login

2) Create a new database and destroy the old one forcing all users to create new accounts

We chose to go with the second option and here is why. With the first option it would have taken more time to create the password reset page and make sure it was working and then running through regression tests to make sure it did not cause problems anywhere else. We decided that because of the extra time that it would have taken it was better for our users if we created a new database and got rid of the old one. This is an inconvenience but we believe it was the correct decision. We apologize for the inconvenience that this has caused.

Users will have to create new accounts next time they want to access the daily picks page.

What questions would you like us to answer?  We already said we want people to register in case we move to a paid for model down the line.  Again, this would be way down the line.  We are setting up the infrastructure to support that if that is a decision we decide to make.  What you can not see from a users front end is everyone has a user level of "unpaid" as of now and there is another user level of "paid"  This is to set up the infrastructure to make changes in the future easy if we decide to move to a paid structure.  Again, if that ever happened it would be far in the future and because we did not receive enough donations.

Also, if you are concerned about your personal information being stolen or sold or used in some way you dont like and you think that is our plan then simply sign up under fake information.  It literally is that easy.  Open up a new gmail account, it takes literally 60 seconds and then use it for the email and use a fake first and last name as well as a username you dont use anywhere else and a password you dont use anywhere else.  That should in theory (but more like absolutely) alleviate you from all the concerns you are mentioning.

Please let me know if i am missing something.

You can report his post if you want.

Don't be angry, that casino usually trolls in other threads to gain traffic and attention, I saw many times. Sometimes they even post their ref link(must be marketing manager's ref link).

Their shareholder report said they lost 60BTC in last 6 months. That's why they post in other threads, because they have to find customers in other threads.  

Btw, your site is very cool, designation is awesome!!

 So you cant defend what you are doing? If you are not doing bad things what would prevent you from answering simple questions? You only want to steal your users info?

Why would the marketing/support account for a sportsbook enter into another thread and troll? On top of that why would they troll a thread that might drive traffic to them in the future?

Believe it or not we are going to be adding a sportsbook page soon with links to the different sports books we have found to be legitimate for both bitcoin and fiat.  I dont think its in your best interest to troll someone who might drive some traffic to your site seeing as you do have a sportsbook.

 Very odd way to be treating a marketing/support account.  I would suggest next time logging out and logging in with a personal account if youre going to troll./

You dont have to sign up.  That is an option.

What cost you are saying? their picks are free. Or maybe you are just spamming?

So how much does it cost?

if that reason is true, they can track the page viewd without needing accounts. It smells odd for me

Another playoff win.  Turning out to be a good ending to the nba betting season for us.

I asked the same that you ask and I quote the answer

And what more is the benefit for creating account on their site? I doubt he only wants our infos

Actually it is only to view the picks

What is the account for? is it only to view your picks? anything special for it? Why dont just post your picks and dont ask for account creation?

alright, I'll register but I thought it was unnecessary

The play was Houston -5.  We will try to update this thread as much as possible with our plays after they have started.

once again, who is telling you to use your "real" name?

When you sign up you have to tell the name and last name