Quote from: $username on January 12, 2015, 02:46:42 AM

Quote from: $username on January 12, 2015, 12:24:19 AM

Inputs had been penetration tested regularly, and on security-critical projects I regularly spend upwards of $5000 on a thorough pentest by professional security ~~forums~~ firms.

made a typo.

Quote from: BadBear on January 12, 2015, 12:30:21 AM

This is the sticking point with me. TF was smart enough to know that you can't fully secure anything, and even if you make it so hard it isn't worth it, there's always social engineering. Leaving that much sitting around was foolish, and I don't think he's a fool. Maybe I'm giving him too much credit, I don't know.

Yeah, I don't have any explanation other than (i) lazyness (the system wasn't set up to make sending to cold storage easy, and it had to be performed manually), (ii) wanting to keep sufficient amounts on the server so nobody worries/panics, and (iii) about 1500 BTC was deposited within 48 hrs of the hack.

The later systems I've built do make sending to cold storage easier, but for the most recent site it was still an manual process. I intend on doing automatic cold storage transfers (hourly cronjob) for my future projects.

Do you feel any responsibility or remorse for those people that got screwed because of you? Still feeling the pinch because part of my wedding budget was in coinlenders, as well as, my fiancée's tuition money, and as far as I knew you were going to reimburse people from your own personal stash if anything went wrong (those were the terms I agreed to and was never asked to agree to something different), so I felt like they were pretty safe and obviously wasn't my whole amount. Do you think its fair to sit on a couple hundred shares of AsicMiner, as well as other securities and bitcoin, and leave those you damaged as if nothing happened? Certainly if you think that all of that is OK, you will show yourself at some conference or give out your personal details so people can talk with you face to face, because you don't think you did anything wrong, why would others?