|
Title: Solution to wallet security Post by: truthcracker on June 28, 2011, 12:28:37 PM 1) Bitcoin client encrypts wallet on startup
2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible How can that be hacked? Much simpler than getting a computer and running a geek os. Damn that was an actual attempt at being constructive..... Title: Re: Solution to wallet security Post by: Alex Beckenham on June 28, 2011, 12:38:50 PM As soon as you enter your password, the contents of the wallet are decrypted so your private keys could be read from RAM.
Title: Re: Solution to wallet security Post by: julz on June 28, 2011, 12:41:06 PM 2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible How can that be hacked? Much simpler than getting a computer and running a geek os. A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry. The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input. I don't doubt there are other ways too. Title: Re: Solution to wallet security Post by: mouse on June 28, 2011, 12:42:10 PM unless you only keep it there for a fraction of a nanosecond, and you use memory layout randomization, and, and, etc
Still possible, but progressivly more unlikely Title: Re: Solution to wallet security Post by: truthcracker on June 28, 2011, 12:42:49 PM As soon as you enter your password, the contents of the wallet are decrypted so your private keys could be read from RAM. XLNT point Title: Re: Solution to wallet security Post by: truthcracker on June 28, 2011, 12:44:24 PM 2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible How can that be hacked? Much simpler than getting a computer and running a geek os. A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry. The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input. I don't doubt there are other ways too. Hmmmm ok what about a keypad that you hover over that changes letters in a separate window like big [A B C] when you click THAT letter hits? Title: Re: Solution to wallet security Post by: compro01 on June 28, 2011, 02:54:26 PM 2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible How can that be hacked? Much simpler than getting a computer and running a geek os. A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry. The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input. I don't doubt there are other ways too. or just simply take a screenshot via triggering the print screen key every time the mouse is clicked and bitcoin.exe is running. |