Quote from: d8as on February 25, 2018, 12:01:30 PM

Quote from: ETP_mining_pool on February 25, 2018, 09:31:33 AM

Just my own thought. Only Stupid idiots use same passwords everywhere. If you think that using on few exchanges same password is a good idea - your are really dumb ass.
1. use 2fa everywhere
2. use different password and save them inside special encrypted program like password agent or 1click password for mac.
3. use email on protonmail.com

Plain text - bad idea. Developers should fix that.
Messages from newbies and novices unprofessional move from Masari . If you found something for fix ask bounty for this. This is just my own thought.

Stop fight. Start work, kids.

The developers have already answered, that the website with sign up has nothing in common with their exchange development. It was created only for preliminary sign up to give people chance to promote their coin to listing of future exchange. As far as I understand this preliminary website will be closed as soon as exchange is ready. The sole purpose of that website is to accept requests to add new coin and vote for it. That's all, nothing more. Keeping the passwords without hash was done for ease of transfer them to exchange, where you'll have number of protection layers, including hash, salt, etc. Anyway, I don't think, that absence of 2fa on the website, where only voting is accessible, should be counted as security issue, as a lot of people shout.
These children were cought by hand for cheating, voting with same ip, network, user-agent and other parameters. That is the reason, they are excluded from voting, not because of their "clever" words about pseudo security. They should note, that continuous creating of new accounts to talk about security again and again will not help them to be returned to above mentioned listing.

You are missing the point here.

It doesn't matter what was the website made for, it still requires you to create an account. Once you create an account, they send an unhashed password to your e-mail. Now, regardless of the website's "preliminary" concept, it's still a major security issue as I pointed out in my first post. How can you say it shouldn't be counted as a security issue? Your main argument is that it's a "temporary" website. How is that even relevant? Someone can still jeopardize your account regardless, especially if you use same or similar passwords across several platforms.

Saying things like "Only stupid idiots use same passwords on multiple platforms" doesn't justify anything. Does that mean that people who do use same passwords deserve to be breached and have all of their money stolen? Of course it doesn't. It's of utmost importance for a website to devote as much attention as possible to security, I don't know how to simplify it more.

The cheating story is nothing more but a story. As I said in my first post, it would be great to see a log (or any evidence) of the alleged attack, double-voting, or whatever. Until then, it's nothing more but a lousy argument made by the incompetent developers.

You are also very wrong about "these children" being salty because MSR wasn't listed. First of all, referring to other posters as "children" is something a child(ish) [individual] would do. I, for one, am far away from being a child, although I would like to go back to that era in a heartbeat because I wouldn't have the problems I have as an adult. But, that's not important. Why would anyone be salty about not being listed on an exchange that doesn't even exist? Therefore, the total volume of this imaginary platform is absolute zero. If you had a grain of logic in your mind, you would realize that no one here is missing out anything for not being listed, because the platform doesn't even exist yet, it's being "coded" by the same incompetent individuals who created a website which issues passwords in plain text. I mean, it doesn't even matter if I am a part of MSR community or not, seeing the level of amateurism here would raise a massive red flag in my mind regardless.

The problem you're overseeing here is the fact that other people who trade and mess with other coins that are going to be listed on this soon-to-be-released exchange are at risk due to subpar security on the website. So, take a moment and think for a minute. It's about warning other people who potentially want to use this platform in the future about the security flaws, instead of being salty about the whole Masari shitshow.