|
Title: Security problem Post by: hahahafr on May 18, 2013, 01:57:20 PM Case 1: A thieve tries to steal fiat money online
1. He develops a widespread malware that tampers with lots of money processors and bank webpages, directly on the browser of the user's machine 2. Steals logins/passwords 3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws money 4. Issue: can't transmit the money to him directly or he will get caught 5. Even if he succeed to launders the money, the honest customer gets his money back from the bank and the money processors Case 2: A thieve tries to steal bitcoins online 1. He develops a widespread malware that tampers with all the exchanges webpages, directly on the browser of the user's machine 2. Steals logins/passwords 3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws bitcoins 4. Profit 5. Honest user is screwed, must file a police alone Only fix for the Bitcoin user is to secure its computer. No other choice. This is my security problem, how do we solve this for lambda users? Title: Re: Security problem Post by: Terk on May 18, 2013, 02:20:45 PM Well this is a general issue for any DIY activity. There's nobody to hold your back if you do things on your own and screw. If you outsource to 3rd party, there's a possibility that they will take responsibility for failures and/or will be insured and you won't get hurt. It's not bitcoin related really and affects any DIY activity.
If bitcoin becomes widespread, I'm sure there will be bitcoin banks and you could deposit your money there if you don't want to handle it yourself (with all the pros and cons of that). |