Bitcoin Forum

Economy => Service Discussion => Topic started by: Jailbreak on July 09, 2017, 03:54:31 PM



Title: How to verify legitimate project URLs and wallets?
Post by: Jailbreak on July 09, 2017, 03:54:31 PM
I am currently downloading and installing software wallets. Obviously, I want to make sure that the wallets I download are indeed from the official project site.

What I did was going to coinmarketcap.com and using the project links there. Then I downloaded the wallets I wanted.

Is there a trusted link list somewhere, maybe in this forum?

Of course, there are hashes that the wallets can be checked against. However, when I am on a fake site, the hashes don't help.

Thanks for any advice. :)


Title: Re: How to verify legitimate project URLs and wallets?
Post by: TryNinja on July 09, 2017, 04:37:08 PM
I don't think there is any list. But probably there isn't anything you could do besides researching a little bit before download files from any website.

e.g:
You want to download the Namecoin Core wallet. From coinmarketcap you can see that their official website is https://www.namecoin.org/
Now, if you want to be 100%, there is a lot of stuff you can search to make sure that's the official website.

- find their official thread on BitcoinTalk, and check if there is any indications that this their real website.
- find their official social medias - if any - (twitter, reddit, facebook...), and do your own check there.
- make a thread here asking for confirmation on the official url.

Besides, I don't think any fake website would do so much work to make sure someone falls for them. Most of the time, users only get scammed and fall for phising because they click on any link they find and download files/insert passwords without even doing a simple google search.


Title: Re: How to verify legitimate project URLs and wallets?
Post by: Jailbreak on July 09, 2017, 05:13:04 PM
Are all the wallets (or most) available on GitHub as well?



Title: Re: How to verify legitimate project URLs and wallets?
Post by: TryNinja on July 09, 2017, 05:15:24 PM
Are all the wallets (or most) available on GitHub as well?
Most of them are, and they should be. In the world of cryptocurrency, no one can trust a closed source software.
Especially if it's a new software from an unknown and recently created coin/team. Make sure to always be safe!


Title: Re: How to verify legitimate project URLs and wallets?
Post by: Xavofat on July 09, 2017, 05:40:26 PM
Are all the wallets (or most) available on GitHub as well?


Yes.

Your only options to judge whether something is safe:

-Check the code for malware yourself (if it's closed source, it's probably malware - almost all legitimate crypto projects are open source);
-Trust that the project is big enough and seen by enough people that it can't really be malware at this point;
-Check it with a service like Virustotal (https://virustotal.com/) (not always accurate).


Title: Re: How to verify legitimate project URLs and wallets?
Post by: Jailbreak on July 09, 2017, 06:13:07 PM
Thank you guys so far for the info and suggestions.


I got the Litecoin wallet from litecoin.org . There's also litecoin.com which got me whois-ing. That Whois data didn't mean anything to me.

Verge wallet https://vergecurrency.com  no hash as it seems

NavCoin wallet https://navcoin.org

Lisk wallet https://lisk.io

Ethereum wallet https://www.ethereum.org


Is myetherwallet.com the correct official address of myetherwallet?