| Pages: 1 [2] 3 4 5 6 7 8 9 10 11 12 13 14 .. 14 :: one page |
| Author |
Thread Statistics | Show CCP posts - 1 post(s) |

Iknota
Dynasty Banking
|
Posted - 2009.06.15 14:57:00 -
[31]
Originally by: Thrymren i really don't wanna stress you guys or force anyone to realease information unconfirmed.... but could we get a (really) rough timeline when this will be fixed? are we talking hours, days or weeks? =)
best regards and thanks hawk for the securing of that data :)
Probably a day or two. I have other sites in the priority list before dBank. Sorry.
|

HawkBlade
Minmatar The Higher Standard Virtue of Selfishness
|
Posted - 2009.06.15 15:23:00 -
[32]
Originally by: Iknota Stuff
Um... wow.
|

Kouryusei
Caldari The Bitter Sea Trading Company
|
Posted - 2009.06.15 15:45:00 -
[33]
Originally by: Iknota Preface: I am by no means coming back to the EVE sector or reporting in any official manner for Dynasty Bank.
I apologize for the downtime (and major security flaw) as it was my fault. While working on another site hosted on the same server, I ran into a problem with PHP short_open_tag (<? vs <?php) on the other site. I decided to change the master php.ini file to ignore short tags. Little did I know that my sloppy coding of the dBank website was only done with short tags. So PHP, while working just fine, was ignoring all of the dBank code. I have fixed that for the dBank website at Manalapan's request. All passwords will be diversified and random. I hope no one used their EVE account name as the login for dBank (there is a warning about that).
Also to note: While I appreciate Shar stepping in to help, he did so in a manner that will cause a lot of delay in getting the database functional again. Next time you notice someone's site that has exposed passwords, simply change the password, do not delete ****.
I hope to God that you don't work on any mission-critical real world sites, an attitude like that will only lead to disaster.
Hell, if any of the systems administrators that work for me had that attitude; they'd be looking for a new job the next day.
Shar did not do anything which caused a delay, your inability to properly maintain or secure a system led to a major security flaw which could have had far worse results then what Shar did (leaked MD5 hashes, followed on with rainbow collisions - unless you store in plain text, which if you do; YOU'RE A MORON). If anything, you should be thanking him. -----
eveHOSTED - Hosting you can afford. eveTALK - Ventrilo / Teamspeak at affordable prices. intraPAY - A market tool of some kind... >_>. |

Maximus Nicodemus
|
Posted - 2009.06.15 16:01:00 -
[34]
Originally by: Kouryusei I hope to God that you don't work on any mission-critical real world sites, an attitude like that will only lead to disaster.
Hell, if any of the systems administrators that work for me had that attitude; they'd be looking for a new job the next day.
Shar did not do anything which caused a delay, your inability to properly maintain or secure a system led to a major security flaw which could have had far worse results then what Shar did (leaked MD5 hashes, followed on with rainbow collisions - unless you store in plain text, which if you do; YOU'RE A MORON). If anything, you should be thanking him.
The above...
And also worryingly, this **** up seems to have been caused by someone who has lost interest in playing and CBA to fix the problems that he caused in the first place.
Can someone from DBANK clarify who looks after their systems? At least HawkBlade seems to care.
|

eVaLF
Delivery Luck
|
Posted - 2009.06.15 16:15:00 -
[35]
My biggest concern here is shar/hawk is the only one that seems to inform people on whats going on, and at its current state and with the information he knows, has put everything out that he best could.
When will DBANK come forward with more answers to the questions that have been asked. |

HawkBlade
Minmatar The Higher Standard Virtue of Selfishness
|
Posted - 2009.06.15 16:34:00 -
[36]
Originally by: eVaLF My biggest concern here is shar/hawk is the only one that seems to inform people on whats going on, and at its current state and with the information he knows, has put everything out that he best could.
Thanks for the vote of confidence but your statement paints a slightly inaccurate picture. I do know more about what is going on then what I've said however I don't know how far the rabbit hole goes. You all know that I don't feed the "rabble rabble" machine. I'd prefer to wait for more accurate information to be garnered before coming out to these forums. I only answered to avert a public relations crisis spawning at the same time as a technical one reared its ugly head. I limited myself to what is "responsible and wise" to disclose and avoided "what is irresponsible" and overly inflammatory/subjective without additional information. It is also a matter of respect and teamwork that I try to provide Manalapan as much time as he needs to delve into the matter and provide a report. So again thanks for the vote of confidence. I also hope that this post explains why there isn't a report as of yet or why dBank people are not hovering over this thread. (Also hovering is not dBank's style either.)
|

Vaerah Vahrokha
Minmatar Dark-Rising
|
Posted - 2009.06.15 16:55:00 -
[37]
Quote:
I only answered to avert a public relations crisis spawning at the same time as a technical one reared its ugly head. I limited myself to what is "responsible and wise" to disclose and avoided "what is irresponsible" and overly inflammatory/subjective without additional information
You did right. Even if you "overdid" with the emergency security action and made someone else to work more to restore it, you did RIGHT, you can't overdo security in a bank. Yeah it might **** the programmer off but hey, next time pay more attention. Moreover changing a master PHP.ini is a pi_ss poor practice. The "I have more important to do attitude" is also a red flag on the commitment at providing quality and timely service for those who don't see EvE as just the part-time hobby but spent months of real life labor accruing the funds they deposited.
|

northwesten
Amarr Trinity Corporate Services Novus Ordo Mundi
|
Posted - 2009.06.15 17:05:00 -
[38]
mm I wanted to withdraw the isk but of course i cant so how can i withdraw my isk? I need the isk for my monthly payments |

Kazzac Elentria
|
Posted - 2009.06.15 17:11:00 -
[39]
Originally by: Vaerah Vahrokha
Quote:
I only answered to avert a public relations crisis spawning at the same time as a technical one reared its ugly head. I limited myself to what is "responsible and wise" to disclose and avoided "what is irresponsible" and overly inflammatory/subjective without additional information
You did right. Even if you "overdid" with the emergency security action and made someone else to work more to restore it, you did RIGHT, you can't overdo security in a bank. Yeah it might **** the programmer off but hey, next time pay more attention. Moreover changing a master PHP.ini is a pi_ss poor practice. The "I have more important to do attitude" is also a red flag on the commitment at providing quality and timely service for those who don't see EvE as just the part-time hobby but spent months of real life labor accruing the funds they deposited.
Some of us do have a real life with real life job commitments. For all we know he might have actual paying clients ahead in the work schedule.
|

LaVista Vista
Conservative Shenanigans Party
|
Posted - 2009.06.15 17:26:00 -
[40]
Originally by: Vaerah Vahrokha made someone else to work more to restore it
Just a note:
Restoring a database takes less than 5 minutes.
|

HawkBlade
Minmatar The Higher Standard Virtue of Selfishness
|
Posted - 2009.06.15 17:27:00 -
[41]
Originally by: Kazzac Elentria Some of us do have a real life with real life job commitments. For all we know he might have actual paying clients ahead in the work schedule.
I'm retired from IT work so I totally can relate to Iknota's frustration (at me) and any distractions he may have that prevent him from immediately handling dBank's current technical matters. Again, let me reiterate: Access to the dBanking system is shutdown only temporarily. As part of my job as an independent auditor dBank's APIs (corporate, deposit characters, and tellers) are still being monitored. PS: Besides I don't mind if Iknota is slightly hostile with me. Given what he knows, at that time, he is justified and ... well if I can't take what he dished out perhaps I should keep my own mouth shut yes? |

Kouryusei
Caldari The Bitter Sea Trading Company
|
Posted - 2009.06.15 17:31:00 -
[42]
Originally by: HawkBlade
Originally by: Kazzac Elentria Some of us do have a real life with real life job commitments. For all we know he might have actual paying clients ahead in the work schedule.
I'm retired from IT work so I totally can relate to Iknota's frustration (at me) and any distractions he may have that prevent him from immediately handling dBank's current technical matters. Again, let me reiterate: Access to the dBanking system is shutdown only temporarily. As part of my job as an independent auditor dBank's APIs (corporate, deposit characters, and tellers) are still being monitored. PS: Besides I don't mind if Iknota is slightly hostile with me. Given what he knows, at that time, he is justified and ... well if I can't take what he dished out perhaps I should keep my own mouth shut yes?
From a technical standpoint, you were entirely justified in what you did. :) |

Vaerah Vahrokha
Minmatar Dark-Rising
|
Posted - 2009.06.15 17:35:00 -
[43]
Quote:
Some of us do have a real life with real life job commitments. For all we know he might have actual paying clients ahead in the work schedule
Who doesn't? Those too busy simply step down the lower priority tasks and dedicate to the fundamental ones. Trying to do all may be commendable but it brings lower quality.
Moreover, explicitly stating you are not going to do something because you have more important things to do may sound honest but imho it should be announced in a different way.
|

Joss Sparq
Caldari Deep Core Mining Inc.
|
Posted - 2009.06.15 17:46:00 -
[44]
Excellent! When I switch back to my old campus next semester I'll have another sloppy-coding/unforseen-consequences story for one of my lecturers.
And like the boot.ini incident it'll have an EVE theme 
|

Kitchie
Gallente Vikramaditya
|
Posted - 2009.06.15 18:06:00 -
[45]
Originally by: northwesten mm I wanted to withdraw the isk but of course i cant so how can i withdraw my isk? I need the isk for my monthly payments
Hopefully the system will be back online within the usual time frame for withdrawals.
However, any particular issues regarding your account are probably better served by posting in the DBANK Forum, which is still online, where it won't be buried amongst all the other MD goings on :)
|

Ji Sama
Caldari Tash-Murkon Prime Industries Sex Drugs And Rock'N'Roll
|
Posted - 2009.06.15 18:09:00 -
[46]
yep good job hawk :D you avoided a potential crisis imo!
TMPI |

Robacz
Essence Trade Essence Enterprises
|
Posted - 2009.06.15 18:24:00 -
[47]
A little advice for DBANK developers:
It is a good idea to have your database login details in separate file (and then include it to other scripts) which is not in webserver's root. That way, when PHP interpreter fails, an attacker is able to see your code, but can not gain an access to your database login details. Same for any FTP passwords if you use them in your code and perhaps for functions handling logins. Also, your database engine should not accept any connections from other servers, or if you need it, use a white list to allow these hosts.
|

Krathos Morpheus
Gallente Legion Infernal Wildly Inappropriate.
|
Posted - 2009.06.15 18:43:00 -
[48]
Originally by: Ji Sama yep good job hawk :D you avoided a potential crisis imo!
Yes indeed, that's the way to adress this things. Giving information quick and straight, limited info if neccesary. Seeing that you "designed" the EBank response to Ricdics issue I wonder if you didn't played two sides and counterintelligence there, making them fail and then DBank succeed :D (just joking, I'm glad you learned from the mistakes). Good job. |

eVaLF
Delivery Luck
|
Posted - 2009.06.15 18:44:00 -
[49]
Originally by: HawkBlade
Originally by: eVaLF My biggest concern here is shar/hawk is the only one that seems to inform people on whats going on, and at its current state and with the information he knows, has put everything out that he best could.
Thanks for the vote of confidence but your statement paints a slightly inaccurate picture. I do know more about what is going on then what I've said however I don't know how far the rabbit hole goes. You all know that I don't feed the "rabble rabble" machine. I'd prefer to wait for more accurate information to be garnered before coming out to these forums. I only answered to avert a public relations crisis spawning at the same time as a technical one reared its ugly head. I limited myself to what is "responsible and wise" to disclose and avoided "what is irresponsible" and overly inflammatory/subjective without additional information. It is also a matter of respect and teamwork that I try to provide Manalapan as much time as he needs to delve into the matter and provide a report. So again thanks for the vote of confidence. I also hope that this post explains why there isn't a report as of yet or why dBank people are not hovering over this thread. (Also hovering is not dBank's style either.)
Sounds good, hopefully it will all be fixed with minimal problems in a short period of time. Just bad timinig I guess with everything else that is going on.
Per the rest, I like to have it out to the public and then worry about the rest later, but that is were I am different than a good part of this playerbase in MD. |

Jadun
|
Posted - 2009.06.15 19:00:00 -
[50]
Originally by: eVaLF
Originally by: HawkBlade
Originally by: eVaLF My biggest concern here is shar/hawk is the only one that seems to inform people on whats going on, and at its current state and with the information he knows, has put everything out that he best could.
Thanks for the vote of confidence but your statement paints a slightly inaccurate picture. I do know more about what is going on then what I've said however I don't know how far the rabbit hole goes. You all know that I don't feed the "rabble rabble" machine. I'd prefer to wait for more accurate information to be garnered before coming out to these forums. I only answered to avert a public relations crisis spawning at the same time as a technical one reared its ugly head. I limited myself to what is "responsible and wise" to disclose and avoided "what is irresponsible" and overly inflammatory/subjective without additional information. It is also a matter of respect and teamwork that I try to provide Manalapan as much time as he needs to delve into the matter and provide a report. So again thanks for the vote of confidence. I also hope that this post explains why there isn't a report as of yet or why dBank people are not hovering over this thread. (Also hovering is not dBank's style either.)
Sounds good, hopefully it will all be fixed with minimal problems in a short period of time. Just bad timinig I guess with everything else that is going on.
Per the rest, I like to have it out to the public and then worry about the rest later, but that is were I am different than a good part of this playerbase in MD.
Yo ho all
eVaLF, me thinks you are not so different then the rest. I too would like it out now. This whole see a situation, then having to wait 24 or sometimes even longer seems just nuts. As Head of DBank or even as the PR guy i would post now and then update hourly.
even if i had no clue i would state that rather then let peoples worry.
At the moment i feel quite bad, am worrying and thinking about getting my isk out of the hands of D-Bank.
Me thinks D-Bank has a lot to learn about PR.
best wishes Jadun |

HawkBlade
Minmatar The Higher Standard Virtue of Selfishness
|
Posted - 2009.06.15 19:29:00 -
[51]
Originally by: Jadun Me thinks D-Bank has a lot to learn about PR.
I tend to laugh, very hard, when I see this kind of statement. I mean of all the things you want dBank to know or learn I doubt PR is the number one thing. Seriously though, hiring someone for PR means more payroll. Taking time out to stop doing banking or financial activity to do PR is also more loss. And I'm not the PR guy simply because I find the expectations of the public to be quite irrational. Unfair, unsubstantiated, and quite unsustainable. Of course I also keep such customer service quips handy: - I don't know what your problem is but I'll bet it is hard to pronounce.
- I'm already visualizing the duct tape over you mouth.
- I see that you have set aside this special time to publicly humiliate yourself.
- I'm not being rude. You're just insignificant.
- What am I? Flypaper for freaks?
- Thank you. We're all refreshed and challenged by your unique point of view.
My favorite though is:
- I'll try being nicer if you try being smarter.
|

Ulecese
Ihatalo Research and Development Ihatalo Cartel
|
Posted - 2009.06.15 19:41:00 -
[52]
Quote: Of course I also keep such customer service quips handy: - I don't know what your problem is but I'll bet it is hard to pronounce.
- I'm already visualizing the duct tape over you mouth.
- I see that you have set aside this special time to publicly humiliate yourself.
- I'm not being rude. You're just insignificant.
- What am I? Flypaper for freaks?
- Thank you. We're all refreshed and challenged by your unique point of view.
My favorite though is: - I'll try being nicer if you try being smarter.
Epic  |

flakeys
Interstellar Brotherhood of Gravediggers Privateer Alliance
|
Posted - 2009.06.15 19:45:00 -
[53]
Ahh now there's the shar i know and love 
Been a long time since you where on a roll , had me worried there. 
|

Jadun
|
Posted - 2009.06.15 20:22:00 -
[54]
Originally by: HawkBlade
Originally by: Jadun Me thinks D-Bank has a lot to learn about PR.
I tend to laugh, very hard, when I see this kind of statement. I mean of all the things you want dBank to know or learn I doubt PR is the number one thing. Seriously though, hiring someone for PR means more payroll. Taking time out to stop doing banking or financial activity to do PR is also more loss. And I'm not the PR guy simply because I find the expectations of the public to be quite irrational. Unfair, unsubstantiated, and quite unsustainable. Of course I also keep such customer service quips handy: - I don't know what your problem is but I'll bet it is hard to pronounce.
- I'm already visualizing the duct tape over you mouth.
- I see that you have set aside this special time to publicly humiliate yourself.
- I'm not being rude. You're just insignificant.
- What am I? Flypaper for freaks?
- Thank you. We're all refreshed and challenged by your unique point of view.
My favorite though is:
- I'll try being nicer if you try being smarter.
"So it is in my opinion that the group effort for Dynasty Bank is to be publicly proactive. To formulate a message that defines what is Dynasty Bank, what Dynasty Bank offers, and how Dynasty Bank will satisfy those agreements. Meet service level agreements exactly as stated. Set the bar and meet it, always. When the drama starts, and this is the anonymous internet, the staff of Dynasty Bank should be quick to step in offering help where needed or stating what is not part of Dynasty Bank's service."
anyone able to name the author of this quote?
|

Jadun
|
Posted - 2009.06.15 20:35:00 -
[55]
Originally by: HawkBlade
Originally by: Jadun Me thinks D-Bank has a lot to learn about PR.
I tend to laugh, very hard, when I see this kind of statement. I mean of all the things you want dBank to know or learn I doubt PR is the number one thing. Seriously though, hiring someone for PR means more payroll. Taking time out to stop doing banking or financial activity to do PR is also more loss. And I'm not the PR guy simply because I find the expectations of the public to be quite irrational. Unfair, unsubstantiated, and quite unsustainable. Of course I also keep such customer service quips handy: - I don't know what your problem is but I'll bet it is hard to pronounce.
- I'm already visualizing the duct tape over you mouth.
- I see that you have set aside this special time to publicly humiliate yourself.
- I'm not being rude. You're just insignificant.
- What am I? Flypaper for freaks?
- Thank you. We're all refreshed and challenged by your unique point of view.
My favorite though is:
- I'll try being nicer if you try being smarter.
Leon Angeal PR Advisor Leon has spent his time as a reporter in EVE writing for EON and EVE-Mag. We have brought Leon on to help with PR and head up the public channel in game.
So you mean that Dbank should allways be sucky in the PR department, because making isk is more important.
People asking whats going on. When there is a problem is just a waste of time.
Dbank starting a thread on the forums when there is a problen also not important.
Changing the MoTD in your inGame Channel waste of your time.
|

northwesten
Amarr Trinity Corporate Services Novus Ordo Mundi
|
Posted - 2009.06.15 20:49:00 -
[56]
Originally by: Jadun
So you mean that Dbank should allways be sucky in the PR department, because making isk is more important.
People asking whats going on. When there is a problem is just a waste of time.
Dbank starting a thread on the forums when there is a problen also not important.
Changing the MoTD in your inGame Channel waste of your time.
I am getting that impression my self!
Trinity Corporate Services |

MailDeadDrop
Globaltech Industries
|
Posted - 2009.06.15 21:02:00 -
[57]
Originally by: HawkBlade Of course I also keep such customer service quips handy:
- I don't know what your problem is but I'll bet it is hard to pronounce.
- I'm already visualizing the duct tape over you mouth.
- I see that you have set aside this special time to publicly humiliate yourself.
- I'm not being rude. You're just insignificant.
- What am I? Flypaper for freaks?
- Thank you. We're all refreshed and challenged by your unique point of view.
My favorite though is:
- I'll try being nicer if you try being smarter.
And then there is 7b, the lowered-expectations version: 7b. I'll try being nicer if you try being less stupid. Just a little. Please. I'm begging.
MDD
|

Kwint Sommer
Caldari XERCORE Cult of War
|
Posted - 2009.06.15 22:39:00 -
[58]
Originally by: Jadun Me thinks D-Bank has a lot to learn about PR.
Actually, I think they're doing something very right by having Shar deal with the public. Sure, in the transitive case he'll step on a lot of toes but in the long-run his direct, no-nonsense approach actually inspires a lot of confidence. You might not like him but you respect him and when **** hits the fan you still trust his estimation of the damage and that can make the difference between a run on the bank and it living to see another day.
A smooth-tonged PR guy with a big, beaming smile might get a few extra deposits and that's great when everything is hunky-dory but when times get rough will your investors trust the PR man's spin or would they rather hear the straight facts from someone they respect? Personally, I'd rather get insulted by Shar in the course of a real discussion than patronized by some bimbo from the PR department.
|

Amarr Citizen 155
Alternative Methods Research Group
|
Posted - 2009.06.15 22:55:00 -
[59]
Originally by: Kwint Sommer
Originally by: Jadun Me thinks D-Bank has a lot to learn about PR.
Actually, I think they're doing something very right by having Shar deal with the public. Sure, in the transitive case he'll step on a lot of toes but in the long-run his direct, no-nonsense approach actually inspires a lot of confidence. You might not like him but you respect him and when **** hits the fan you still trust his estimation of the damage and that can make the difference between a run on the bank and it living to see another day.
A smooth-tonged PR guy with a big, beaming smile might get a few extra deposits and that's great when everything is hunky-dory but when times get rough will your investors trust the PR man's spin or would they rather hear the straight facts from someone they respect? Personally, I'd rather get insulted by Shar in the course of a real discussion than patronized by some bimbo from the PR department.
Damn kwint, we never talk anymore. I hope all is well, you should get in-game and chat with me. I'm online right now..... Sometimes people get disappointed. |

Unaki Oki
Gallente
|
Posted - 2009.06.16 07:23:00 -
[60]
any update on this yet?? |
| |
|
| Pages: 1 [2] 3 4 5 6 7 8 9 10 11 12 13 14 .. 14 :: one page |
| First page | Previous page | Next page | Last page |