smickles: ug, mircea_popescu, what am i missing here. Is there a way to see that a deposit has made it into an mpex accout other than seeing that the account balance is higher?

smickles: i'm just going to have to do a bunch of addition and subtraction to verify actualization of deposits in order to have mpex sub-accounts, arn't i

smickles: mircea_popescu: i would need to know when the funds became available in the account. is that not done manually?

smickles: or is it 6 confirms?

smickles: Diablo-D3: for funds to be available for use in an mpex account?

smickles: thanks for the attempt, but that really didn't help my quest :)

smickles: mircea_popescu: then a user could take advantage of me

smickles: darn, i was hoping to avoid making the deposit process longer

smickles: mircea_popescu: if i had some confirmation of funds being available in a STAT, i could safely have the user send a deposit directly

smickles: mircea_popescu: but say my mpex acout has 10 btc in it, the user deposits 100 btc (to my wallet), i have to confirm that, forward it to mpex and wait for the funds to show up in the CxBTC before they can do anything over 10BTC

smickles: and that's assuming only one user

smickles: and if I just wait for that specific amout to show up in my mpex account, i'm sure a clever scammer could engineer a way to fool my system and basically get a duplicate deposit

smickles: user was told to deposit 1.0023232 btc; user sell something to receive exactly that

smickles: i just want to figure out an 'ironclad' way of doing this

smickles: which doesn't require me to hold lots of btc to float users

smickles: hmm, if i wait to credit their account until I see the tx on the mpex addy, plus wait to see that amount hit my mpex funds, would that be enought to thwart a malicious user?

smickles: is there no better way?

smickles: I'm working on it :P

smickles: mircea_popescu: but what about when the sum of the users requests exceeds the amount of btc which is in the mpex account?

smickles: user deposits 100 btc with me, user wants to spend that 100 asap

smickles: oh, i forgot you offered that

smickles: I would only be charged for use of the margin if i exceeded the amount of btc which I had in the mpex account, right?

smickles: mircea_popescu: are you so unwilling/unable to have a line in the STAT similar to the Dividend receipts section which shows recent deposits?

smickles: like 2012-8-14 03:34 +10 BTC

smickles: or, i suppose the format would be more like :On Sat, 26 May 12 00:30:47 from 1BtCaddY~~ the sum of 0.34524457 BTC

smickles: alright, after some thought, I think watching the mpex address and my mpex accout balance (while accounting for debits and credits from purchases, sales, surety, and outstanding orders) would work

smickles: add dividends to that list

smickles: it would be a lot less complicated if there were some kind of deposit section

smickles: and i'm pretty sure, less complicated correlates with less exploitable

smickles: and less error prone

smickles: yeah, but the speed of you proposal come at a cost

smickles: heh, so your saying i'll need to update some regexes?

smickles: i expect nothing less

smickles: meanwhile, i'll continue to occasionally bitch and moan about various things

smickles: yeah, (if i have teh btc in the mpex account as well)

smickles: my issue is that programatically verifying that it's there (without an indication from mpex that it's there) may open up unkown exploits in my operation

smickles: yes, i can prevent the exploit which I originally brought up thru careful monitoring, but who's to say there's one I have't thought of

smickles: k, so maybe that's too broad of a statement, but,

smickles: i believe I'm doing everything else more than reasonably securely, but the deposit method, i'm unsure of

smickles: I was planning on haveing that be a manual process

smickles: as well as having a system to point out 'out of the ordinary' withdrawal request to me

smickles: heh, i thought of situations like that :)

smickles: malicious users be crafty mother fuckers

smickles: heh

smickles: mircea_popescu: the more i think about it. the 'watching mpex addy and keeping track of stuff internally' method isn't as complicated as i made it out to be

smickles: we're talking about a program here. all i'd have to do is a line that summs what I expect user accounts balances to be and compares it to the stat

smickles: but, as you said, it's not a perfect solution to have my users wait on your manual deposit confirmation

smickles: if only I had enough btc in my pocket to not care about floating users a few k coin here and there when I know there's 6 confirms on the tx

smickles: mircea_popescu: well, i was exaggerating about 'k's, i would, of course, cater to large clients

smickles: yeah, then I just need to keep track of how much of the float funds are being earmarked at any given moment

smickles: maybe shoot myself an email when all the float is used so that i can check in on 'the goings on'

smickles: how's bitfloor looking these days?

smickles: "Free ACH withdraw"

smickles: "Avoid third party services and credit your US bank account directly using our free ACH withdraw option."

smickles: heh, looks like there's ~1000btc arb op bitfloor <-> mtgox

smickles: https://bitcointalk.org/index.php?topic=90192.msg1097789#msg1097789

smickles: i'm not sure what that means tho

smickles: Chaaaang-Noi: did that tangible cryptography site work out for you?

smickles: is that who tangible cryptography is?

smickles: i suspected, but knever knew

smickles: mircea_popescu: https://bitcointalk.org/index.php?topic=67535.msg1099694#msg1099694

smickles: it's the MPOE ETF financial report

smickles: i know you like to see 'em :)

smickles: !pl dmc

smickles: !pl dmc 1

smickles: does that account for dividends?

smickles: i should've figured

smickles: !pl MPOE.ETF 100@.1 2012-03-08

smickles: !pl ss 10@1 2012-04-01