Quote from: mmitech on March 05, 2014, 04:04:38 PM

Quote from: oda.krell on March 05, 2014, 03:37:04 PM

Quote from: equipoise on March 05, 2014, 03:32:51 PM

Quote from: Blitz on March 05, 2014, 03:27:31 PM

Perhaps I am being a little harsh with the exchanges; clearly they are the first attempts by hobbyists and we needed them in the very beginning. But now, we have moved on to a stage where we cannot afford to have experimental exchanges perhaps even having such exchanges out there with the highest volume is detrimental nowadays. What is sorely needed is professionals who already have experience building financial infrastructure. Wall Street, not basement geek.

Quote from: equipoise on March 05, 2014, 03:20:43 PM

Quote from: dreamspark on March 05, 2014, 03:14:56 PM

Quote from: Blitz on March 05, 2014, 03:01:53 PM

Bitstamp leaked their customer email addresses by the way, that's why all the new phishing attempts. Reminiscent of Emptygox 2011. Fuck all the operating major Bitcoin exchanges.

This is just getting stupid. After Im confident of the reversal and fairly sure its choo choo time Im getting all of my funds off exchanges and not trading until im confident in a competent exchange.

I have Bitstamp verified account and I never received the gox scam mail neither the btcguild scam mail or any other bitcoin related scam or spam. I don't think those are connected.

Same here regarding the Bitstamp account, plus my email was not leaked before all this and I only got those mails fairly recently, so I am near certain of eleuthria's conclusion. Have you checked your spam folder? Gmail for example has excellent spam filtering.

I checked the spam folder just before writing the message. There are no such emails from mtgox or btcguild in any of my email folders including the spam folder.

Same here. Doesn't rule out email leak, but I'm not convinced.

"In another email they admitted to it"... My ass

ok I will share this with you, I do trust the guys who run Bitstamp, I can vouch for their trustworthy, I met some of them, but some of you may remember when I was investigating the issue, I was getting tons of phishing attempts and I am still getting them almost everyday, first I thought it was my fault maybe installing some infected android app, but then I asked effected users who got the same emails and they confirmed they do not use the same e-mail address for their android devices for bitstamp, then I thought maybe it was the mtgox security breach, and other users confirmed that they didn't use the same address as well, so this eliminated gox as well.

the other note is that bitstamp blocked BTC withdrawal from only effected accounts, how they knew about who was effected ? this raised my concerns, I didn't want to talk about this for 3 reasons, the first one is people would shoot about me trying to spread FUD, the second is I have no evidence while everything point out to this scenario I didn't have any prove to talk about it, the third is that I know the CEO personally, he is from my town, I know his mother she works with me, and know what kind of people they are, and I also know some of bitstamp's employees, they are all reputable and I have no second thoughts about that.

Disclaimer, I even have a job application sent to work at bitstamp, nevertheless being in IT administration and architecture for so long I can tell about some of the bad practices Bitstamp is using, well at least what I can think it is and concerns me, their design for the help desk system (support) is not the best secure practice, you can submit support tickets with attachments on the same platform (server) where you have your trading engine database and also the bitcoin daemon.

I am not worried about the phishing attempts but what worries me is the core site, big companies of this size use a different domain and/or different servers for help desk, where users can submit their tickets with attachments to a whole different server, so even if that server is compromised with an injection/upload or simply being infected by viruses it wont effect the customers funds and the database also it wont effect the trading.

and I really hope that I am being wrong...

Right, I remember you being one of the affected account some weeks ago.

Thanks a lot for that little bit of insight. You're right about the part where, from the looks of it, they blocked withdrawal for only those account who had received the mails. How they would know this, is either if they knew which accounts were affected because they were the source of the leak, or because of irregularities with the account itself (like multiple failed logins, IP address suddenly changing to a vastly different geolocation).

I admit, there's at least a real chance that Bitstamp was the source of the leaks.

In essence, I trust them too. My biggest gripe with them is not how they run their exchange, but their "only say the bare minimum" approach to PR. That's what I would like to see changed before anything else.