Quote from: Atruk on May 20, 2013, 11:03:48 PM

Quote from: webr3 on May 20, 2013, 08:47:46 PM

Quote from: dexX7 on May 20, 2013, 06:40:38 PM

Didn't he say, he'll send you 10.15 BTC to your Bitcoin address? And after you declined that, he sent you IOUs?

I'm not taking a side here, but that's what I remember from the other thread.

Yes, he took it from me once, sent it back, then took it again.

You... Probably should have offered that bitcoin address and taken payment to an actual bitcoin client rather than accepted more crap Ripple IOUs.

Whether TradeFortress is honest or not his shennanigans reveal Ripple is a tremendous security vulnerability for anyone who uses it, unless you use an utterly paranoid set of precautions that have yet to be worked out.

The key issue here is that if you have TradeFortress IOUs and BitStamp IOUs, other people with TradeFortress IOUs might be able to redeem their TradeFortress IOUs for your BitStamp IOUs with no action from TradeFortress required other than spreading IOUs around and building a web of people who trust him.

Until you divorce from the TradeFortress Ripple BTC trust network, any actual value BTC vouchers you might have are vulnerable. If he offers to send back again, take actual BTC and then lockdown your Ripple trust before you try to put anything of value back into the Ripple system.

Of course, this is exactly what would happen, and was the goal of TradeFortress all along. I allowed it to happen, it's how the system works, I allowed him to incur debt for bitstamp-backed btc, as he asked. He then gave that BTC to a random unknown user that popped up immediately after (suspicious!)

It is no security vulnerability in Ripple though, it's just an abuse of trust by TradeFortress, plain and simple.

I use ripple daily, have done for ages, never had any problem, and I only trust gateways that have my BTC and other currencies anyway, or people I know very well.