Could you elaborate on this. My impression was that connections between data centres (e.g. in the case of using an EC2 instance with Cloudflare) were already very secure and therefore do not require SSL.
Whats to stop Telegram tampering with the messages and just displaying random bytes in the 'output'? This would make it impossible to crack. You cant test the security of a system without 1 - full access to the system or 2 - complete trust in the people controlling the system (which we dont have)
What happens when they want to return the item? Pretty sure you have to offer a 30 day return policy, I could take the 'free' litecoin, then return the USB stick and ask for a refund.
I also think this is a fantastic idea but further to your comment, its also impossible to determine if you are talking to an employee in a position you may apply for, or someone on the HR department who is trying to attract talent and so may give you a biased view.
I assume they are using a bitpay or similar which allows merchants to instantly convert bitcoin to USD (or equiv) funds at the time of purchase. Using this system, the merchant always receives the correct fiat amount, while still benefiting from the other advantages that bitcoin brings (low fees, no chargebacks).
This is also the big killer for me. Its nice that they are open about their security http://www.jackdb.com/legal/security.html , but this wont help one bit if a production server gets compromised.
Its truly amazing to see such a large bounty for an open source project. Even though this bug poses no security threat, the reward offered is akin to those offered by the big power houses (FB, Microsoft, Google) for providing fixes to critical security issues.
Although I agree with the point you are making, saying "you might be able to buy some crap on the internet with bitcoin" is slightly short of the truth. While you might not be able to live off 100% bitcoin purchases (although some people are doing it), acceptance is growing every day.
A lot of people who are claiming that you will need to pay a large % in fees in order to spend your coins are missing the point.... as bitcoin gains traction, you wont need to convert it to USD first.
Reviews are a tough spot. On the one hand, reviews can be very damaging to businesses, so it is important that some measures are in place to ensure that the review is honest and genuine, and on the other hand its important that consumers can openly review a product/company without being scared of reprisals.
Clearly, in this case, KlearGear are in the wrong, but I also think that there are cases where legitimate businesses have been seriously damaged by competitors, or just difficult customers writing unfair bad reviews.
Unfortunately the only solution to this I can think of would be a review of reviewers, which would just confound the problem.