Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: Chuck on June 08, 2013, 07:44:17 AM



Title: dumpprivkey scam / feature request
Post by: Chuck on June 08, 2013, 07:44:17 AM

Here is someone trying to scam people by asking them to run dumpprivkey :

https://bitcointalk.org/index.php?topic=228772.msg2409058#msg2409058


A feature suggestion I have:

The first time you run dumpprivkey from the GUI, have it fail with a message "Do not share this key with anyone - they can take your bitcoins with this information. If you're Ok with this, type the command again". If someone really wants to use dumpprivkey, they can run the command a second time.


Title: Re: dumpprivkey scam / feature request
Post by: wumpus on June 08, 2013, 11:20:44 AM
Indeed, importprivkey and dumpprivkey should really be behind a child safety lock. Maybe the whole RPC console.


Title: Re: dumpprivkey scam / feature request
Post by: CIYAM on June 08, 2013, 11:26:04 AM
Indeed, importprivkey and dumpprivkey should really be behind a child safety lock. Maybe the whole RPC console.

I think the RPC console is already not so easy for non-techies to find (although I guess an *advanced* option could be used to hide/display the Debug Window menu item in the Help menu).

I do agree that the dumpprivkey suggestion is not a bad one (although if you displayed a similar warning when allowing the *advanced* option to even *get* to the Debug Window then you wouldn't need it just for that command).


Title: Re: dumpprivkey scam / feature request
Post by: jackjack on June 08, 2013, 11:40:12 AM
I agree, but not with a popup and not if it make the first command fail: write whatever warning you want in the return we get from the command
Something like
Quote
#Warning: Do not share this key with anyone - they can take your bitcoins with this information.
5y1s5f4z3a2z1

I don't want to lose my time because of random people that use things they don't know how to use
It's like making cars to stop and to display a warning "You can't drive without a licence" each time you start them


Title: Re: dumpprivkey scam / feature request
Post by: Hazard on June 08, 2013, 01:55:33 PM
If it display the message alongside running the command, I think that would be good


Title: Re: dumpprivkey scam / feature request
Post by: runam0k on June 08, 2013, 02:08:10 PM
Great idea.


Title: Re: dumpprivkey scam / feature request
Post by: grue on June 08, 2013, 02:27:09 PM
I think the RPC console is already not so easy for non-techies to find (although I guess an *advanced* option could be used to hide/display the Debug Window menu item in the Help menu).
It doesn't really matter, because newbies can always be social engineered into unlocking it.


Title: Re: dumpprivkey scam / feature request
Post by: CIYAM on June 09, 2013, 07:43:52 AM
It doesn't really matter, because newbies can always be social engineered into unlocking it.

Probably correct although if a big "popup" did appear warning you that if you don't understand exactly what you are doing that you could well be being scammed might at least help (although I also agree it shouldn't be something that appears every time as that would be annoying for people that do know what they are doing).