|
Title: How safe todays Polkadot.network precedence to ask JSON file Post by: anotherbit on October 16, 2017, 03:47:15 AM Todays Polkadot.Network ICO sale was started.
On that website during ICO peoples asked their JSON files and passwords. Are this website can guarantee 100% security? Are users are ok to do that even behind this ICO is Parity but not some SchriwlEvil Limited?? I need an advice is this was save done? I am not shilling. Maybe to move my coins to other adress is good idea? But the fact that I can miss privkeys from adress that not used for 2 years is big enough. Thats why if polkadot had Parity dapp integrirted in website could be safe enough option? Title: Re: How safe todays Polkadot.network precedence to ask JSON file Post by: DigitalObelix on October 17, 2017, 07:24:32 PM My thoughts exactly. Although these guys are very known in the industry this is strange, as it breaches rule no. 1: never share a private key with anyone!
Title: Re: How safe todays Polkadot.network precedence to ask JSON file Post by: HonestSurfer on October 17, 2017, 07:46:44 PM Well one way to tackle this is to make a new wallet and transfer only the amount you want to invest in their ICO on the new wallet. That way in theory there should not be anything to steal with your private key. But I guess that in practice they will transfer their DOT tokens back to the wallet and have your private key.
I agree with the remark regarding authority status this guys have, but still once your private key is out there you never know in whose hands it can wonder. Especially if there is another partnering company (PICOPS) cooperating on some parts of the deal. Title: Re: How safe todays Polkadot.network precedence to ask JSON file Post by: HonestSurfer on October 17, 2017, 07:55:22 PM This is what the 2nd step of their ICO investment process says:
LOAD / GENERATE YOUR WALLET In order to be able to claim your DOTs, it is necessary to have access to the private key corresponding to the contribution address. Hardware wallets, exchanges and multisig wallets are not supported in this process. Your private key will be used only to send a fee for the KYC service, to sign terms and conditions, and to sign your contribution transaction. All signing is done in-browser. Your private key is not uploaded to any server or handled by any third party. Your private key will be necessary to access your DOTs upon the launch of Polkadot's genesis block. |