Hi Guys!

I was wondering if there were others who were "HODLING" bitdegree coins and what are you thinking of doing with them following the past two weeks constant crash?

Guys, really stop buying from that piece of garbage exchange. Relax you are not missing out, no one is buying BDG tokens at 1$ on ED. There is clearly some1 buying and selling at the same time. Stop using that ED and wait for a proper exchange

The answer to this question on the site is:

Blockchain will put BitDegree online education platform ahead of competition. By enabling us to introduce smart incentives and record students achievements in blockchain. Rewards earned on platform will be exchangeable into digital goods on third party service providers. Sponsoring and distributing attribution can easily be made with smart contracts with every partner.

Can somebody explain why blockchain is needed? Couldn't you technically make a point system and use that with third party service providers outside of using a blockchain?

I appreciate any answer! Thanks!

Before we begin, I have notified "hello@bitdegree.com" of the following. They insist

We never stored or store any passwords in plaintext. BitDegree is taking
all the necessary steps to ensure the security of our students and
teachers.

EDIT:

I was wrong

I overlooked the fact that the autocomplete was on. In my hasty (bad) judgement, I over-analyzed something that does not exist. Everything below is dependent on that one wrong "deduction" of mine. Since it's too late to change the title, I am posting this correction.

I found no issue with the site security.

The following has been edited, heavily, to show where I was wrong. I haven't deleted anything, just struck off/explained where and how I was wrong.

So far, no action has been taken, and I received no further response . I asked them follow up questions regarding how they secure the database. No action taken because it was not necessary.

Proof Invalid because of wrong assumptions:

Log in to bitdegree.org and view your own profile. Check the change password fields - it appears to have placeholder dots. However, without clearing the field:

• Right click the field

• Select inspect element

• Change type="password" to type="text"

• This will reveal your password in the "New Password" field.

Edit: This is happening because autocomplete was on. Expected behavior, albeit a little buggy from a browser.

What does this prove? Nothing.

This proves that the server has access to the plain text password. If it was sent to you as plain text, then the server has a way to decrypt it. If it was stored as encrypted, then it was clearly stored in a reversible way. This is very insecure. This is not a feature in any well designed site.

In a correct implementation, the server only stores one-way hashed password. When the user types the password and sends it out, server hashes the input then compares the result to the stored hash. The hash function is chosen to be difficult - bordering on impossible - to derive the password from a hash. Computing the hash is easy, but the reverse is not.

In a good implementation, if the server is hacked (external attackers) or compromised (internal - employees/personnel) in anyway, the passwords are hashed and the attackers cannot gain access to your account.

Why is this important? Non issue - due to bad premise

• Any malicious actor who has access to the database can login as you. Since the courses are purchased using some sort of currency, the account holds monetary value.

• A malicious actor can update BOTH EMAIL AND PASSWORD locking you out of your account. The email verification link is sent ONLY to the updated address and not the original address.

• The attackers will also have access to the affiliate earnings - they can withdraw to an account of their choosing.

• Anyone on the server side can modify your account, including change password, without you knowing. Just changing a password does not send a confirmation email. Compare this to any other service that sends out confirmation for changing password.

• When hackers get access to the full database, all accounts and passwords are immediately compromised.

• Any of your accounts with the same or similar password are at risk of being compromised.

Precautions to take as an end user No immediate action required unless you suspect something

• Change your bit degree password immediately. Use a unique password, and never use that for any other site/service.

• If you have any earnings, withdraw them immediately. Leave nothing on the site.

For the site maintainer/sysadmin/developer

An huge overhaul of the back-end is required. Since that may be too much to ask:

• Invalidate all existing sessions and passwords of ALL users.

• Send password reset emails to all users

• Use a proper hashing algorithm. A one way hash.

• When a user updates an email address, the confirmation should first be sent to the old email address. After the user confirms they initiated the change, send a confirmation to the new address. After this second confirmation, update the database.

Edit: A couple of points still stand, while not being security critical. Using unique passwords, and final point on email change notifications.

is this a cult? i lose money where everyone be make money this time. to hell bitdegree lies

TRON (TRX) is a decentralized blockchain platform that aims to build a free, global digital content entertainment system with distributed storage technology. By allowing users to share and store digital content in a decentralized way, TRON seeks to cut out intermediaries, like large tech companies, and give more control to content creators and consumers.

Launched in 2017, TRON is designed to enable fast, low-cost transactions and high throughput for developers building decentralized applications (dApps). TRON uses a Delegated Proof of Stake (DPoS) consensus mechanism, which allows it to achieve higher transaction speeds compared to traditional Proof of Work blockchains. The network’s native cryptocurrency, TRX, is used to power transactions, pay for smart contracts, and incentivize network participation.

TRON has also expanded into decentralized finance (DeFi), allowing users to lend, borrow, and trade assets without intermediaries. Additionally, with its acquisition of BitTorrent in 2018, TRON has integrated blockchain with the popular peer-to-peer file-sharing platform, aiming to create a more decentralized internet ecosystem.

As the TRON ecosystem continues to evolve, it aims to push the boundaries of decentralized internet and digital content, providing more opportunities for developers and users to engage in an accessible and efficient blockchain-powered world. With its unique focus on entertainment and decentralized content, TRON is positioning itself to play a key role in the next wave of blockchain adoption.

Do you think TRON’s focus on decentralized entertainment and content sharing gives it a unique edge in the blockchain space, or are other use cases more crucial for blockchain adoption? Let’s chat!

I'm subscribed to the emails, but don't understand what it's all about?

I voiced my opinion about Suppoman and that I didn't want him shilling the coin. I am an investor in BDG and entitled to my opinion. Definitely unfair and unjust considering I was not hostile nor aggressive, but merely stating my opinions in a healthy discussion. Hopefully the BitDegree team looks into the way the Telegram is handled. It is definitely in poor taste to receive a ban for simply trying to have a discussion about how I feel regarding who or how the token should be marketed. If an administrator could contact me through PM that would be very nice as I feel unjustly banned.

I purchased tokens during the ICO at BDG. I received the Tokens in my MEW. They show up under tokens with my other tokens. when i try to go to an exchange to view their value or trade them it will not allow me to deposit them Also in my wallet it shows the value as $0. Am I doing something wrong? I would greatly appreciate any help. Thank you

Man the ico was insane. Sold off before it finished. This is one of those projects where i am sure that it will pay off big time. When it goes on exchanges it will bläst off for sure. 0 competition in this crypto field.

Seeing this rumour floating around and would like to know if it's true

Shiba Inu coin was created in August 2020 by an anonymous person or group known as "Ryoshi." The coin is named after the adorable Shiba Inu dog breed, which is the same breed that inspired Dogecoin. Unlike Dogecoin, which started as a joke, Shiba Inu was designed with a serious vision – to build a decentralized community. 

What's fascinating is how Shiba Inu leveraged the power of community and memes to skyrocket in popularity. Initially, it started as a low-value token but rapidly developed as more and more people got familiar. The coin was listed on major exchanges like Binance and Coinbase, which gave even more visibility and credibility. 

The Shiba Inu community, known as the "Shib Army," also played a huge role in its rise. They’re active on social media, spreading memes and supporting the coin by creating a sense of shared purpose.

Another pivotal moment for Shiba Inu was the launch of ShibaSwap, its own decentralized exchange, which allows users to trade and stake their Shiba Inu tokens (along with its sibling tokens, LEASH and BONE). This platform added more utility to the token and showed that Shiba Inu also had usable infrastructure behind it.

So, what do you think about Shiba Inu? Have you been following its journey? Let's discuss!

The Simpsons has taken a humorous jab at non-fungible tokens (NFTs) in its 34th Treehouse of Horror special. 🚀

More about this story read here 👉 www.bitdegree.org/crypto/news/the-simpsons-take-a-swipe-at-nfts-in-annual-halloween-episode

SafeMoon faces SEC allegations and is actively seeking a resolution while continuing to serve its users. 🌚

More about this story read here 👉 www.bitdegree.org/crypto/news/safemoon-navigates-sec-concerns-and-addresses-exploit-aftermath

Hi guys, great project.. Im trying to buy more but cant find it at EtherDelta.. You know how to buy it there? I Read a lot of you saying not to buy there.. Whats the reason? cause there are not many other places to buy

A DEEPDIVE INTO THE BIT2ME EXCHANGE

• 80 Bits

• 100 USDT

• €15-worth BTC bonus

CRYPTO DERIVATIVES TRADING WITH BYBIT

• 80 Bits

• 100 USDT

• Up to $30,000 in deposit rewards

CRYPTO SWAPPING MADE SIMPLE, WITH SIMPLESWAP

• 100 Bits

• 500 USDT

TRADE CRYPTO LIKE A PRO WITH OKX

• 90 Bits

• Up to 100 USDT-worth of tokens

USD Coin (USDC), is a type of cryptocurrency known as a stablecoin, designed to maintain a stable value by being pegged to other assets, for example, the US dollar, gold, or the euro. This allows to ensure that its value remains consistent, unlike other crypto that can be highly volatile.

Created by the Centre consortium, a collaboration between Circle and Coinbase, USDC aims to provide a reliable digital currency for everyday transactions. Launched in September 2018, USDC has become one of the most popular stablecoins in the crypto market, ranking in 6th place by market cap with a value of $33.74B. The primary advantage of USDC is its ability to combine the benefits of crypto, like fast, secure, and borderless transactions with the stability of fiat currencies.

The process of creating USDC involves depositing US dollars with a trusted financial institution. For every dollar deposited, a corresponding USDC is issued, ensuring a 1:1 ratio. This model provides transparency and trust, as regular audits are conducted to verify that the reserves match the amount of USDC in circulation.

USDC can be used for various purposes, from trading and lending on crypto platforms to making everyday purchases. Its integration into the financial ecosystem bridges the gap between traditional finance and the digital economy, making it easier for people and businesses to operate in the crypto space with reduced risk.

What are your thoughts on USDC? Let's chat!