61–70 of 321 posts
This is why CRO requires 24 hours whitelist before you can transact withdrawals...
Understandable yet totally absurd. Can you imagine if your bank had the same requirement?
> 2FA tokens for all users worldwide were subsequently revoked to ensure the new infrastructure was in effect. We have mandatory 2FA policies on both the frontend and backend to protect users during this revocation phase, as outflows such as withdrawals have a requirement to setup and use 2FA in order to withdraw. How is this supposed to work? They revoked all of their 2FA for all accounts? Doesn't this just open the…
I'm wondering if it's a badly-worded way of saying "anyone in the system gets kicked out and has to re-2FA". If they literally removed 2FA from everyone, that's insane.
Earlier quoted context omitted.
It's funny how many comments are about Matt Damon. That must be a pretty sticky ad campaign. It's also bizarre that I never heard of them before this marketing blitz although they seemingly have enough cash to hire Matt Damon and buy naming rights to an NFL stadium. I guess all their budget went to marketing instead of hardening their platform.
The ad campaign is notable because, much like most Perfume ads, it's downright bizarre. The ad sells a concept extremely well and then makes the leap of a lifetime for the subject that is a crazy let down. Edit: the funny thing for me is that if the ad ended with the SpaceX (or Boeing, or Northrop, or USAF) logo and gave the SpaceX employment site at the end, I'm sure it would be seen as one of the best ads of the la…
how do you think it was done. said 2fa was bypassed for some accounts. maybe some sort of client side exploit.
Seems really unlikely, but maybe someone guessed or discovered the keys? Would likely only happen if Crypto.com somehow was generating them insecurely or if someone had inside access to their systems or something. Maybe a leak? Since it is across multiple currencies, I think it is unlikely it has to do with generation. Maybe could still be a leak or something.
They'd just pop it in any wallet and sign withdrawal transactions.
There's no 2FA or whitelisted withdrawal addresses (for most tokens) or emails on-chain.
Earlier quoted context omitted.
I'm wondering if it's a badly-worded way of saying "anyone in the system gets kicked out and has to re-2FA". If they literally removed 2FA from everyone, that's insane.
yes, they literally logged everyone out, removed 2FA, and on the new login, users had to re-add 2FA
Can someone setup, test and rollout a _completely new_ authentication system in 3 days?
Earlier quoted context omitted.
> For context, this is the startup that has been using Matt Damon as it’s face. They're also notable lately for getting the naming rights to the (former) Staples Center. > https://en.wikipedia.org/wiki/Crypto.com_Arena
I wouldn't call it a startup, it paid 700mil$ to rename an arena!
Since about 2018, VC game changed - now it's about brazenly placing massive bets on a small set of startups of increasingly questionable utility, using the funds and clout to ram their way through into monopoly positions. Not a speck of morality involved anymore - and nobody is even trying to pretend otherwise
Public image hasn't yet caught up with this reality
> 2FA tokens for all users worldwide were subsequently revoked to ensure the new infrastructure was in effect. We have mandatory 2FA policies on both the frontend and backend to protect users during this revocation phase, as outflows such as withdrawals have a requirement to setup and use 2FA in order to withdraw. How is this supposed to work? They revoked all of their 2FA for all accounts? Doesn't this just open the…
Time to play the classic crypto exchange game: hack or exit scam? Disabling 2FA in this scenario is dumb enough to raise the question of malfeasance of the part of this theft.
https://www.latimes.com/business/story/2021-11-16/crypto-sta...
Thank goodness it's decentralized and there are no single points of failure.
I'm guessing this is sarcasm? crypto.com is very very far from a single point of failure.