It honestly makes me chuckle that the darkroad devs don't seem to have any experience in implementing the bitcoinrpc interface. We've all seen what happens when inexperienced bitcoin developers try and run illicit websites.
BINGO!!! DPR got what he deserved for being barely competent. Karpeles passed his ineptitude on to his customers...
I've played with the bitcoin rpc jut to use an http system as wallet software instead of something written by a programmer I don't know. It takes very little clue to write PHP and RPC calls that work. A little more clue to make the hardened...
Darkroad is learning, and admitting that they're learning instead of coming up "we are experts" like DPR. I admit I'd probably do it myself, but I know how NOT difficult it is to defeat TOR... Ain't putting my balls in that sling... It's great for client obfuscation, but hidden services are NOT hidden.
I completely understand the skepticism. I believe you will be pleasantly surprised with our services. To address security concerns I am bringing in more than one, very expensive and competent security consultant to pentest. Only the very best in security is acceptable and I assure you we will only present a platform with every bug kinked out. After all, I'm risking my own time, money and most importantly freedom to provide this service.