[Full-disclosure] Live mtgox.com trade matching bug.

2011-06-28 Thread Doug Huff
Step 1: Have USD available for spending on mtgox.com. Step 2: Put in a buy order large enough to drain your account. Low enough under the current trading price that it will not execute immediately. Step 3: Withdraw all USD funds. Step 4: Wait for market to fall enough to meet your order. Step 5:

Re: [Full-disclosure] Live mtgox.com trade matching bug.

2011-06-28 Thread coderman
On Mon, Jun 27, 2011 at 7:54 PM, Doug Huff dh...@jrbobdobbs.org wrote: Step 1: Have blind faith in infosec capabilities of third parties.. it is not advised to mount gay oxen of any type. this site is an abomination... use at your own risk! (the Sony of the BTC world!)

[Full-disclosure] Live mtgox.com trade matching bug.

2011-06-27 Thread Doug Huff
Step 1: Have USD available for spending on mtgox.com. Step 2: Put in a buy order large enough to drain your account. Low enough under the current trading price that it will not execute immediately. Step 3: Withdraw all USD funds. Step 4: Wait for market to fall enough to meet your order. Step 5: