|
Title: do I need walletpassphrase in web script? Post by: vinboy on April 11, 2014, 11:59:40 AM hi
I'm running a bitcoin website. I have a security concern here. Whenever someone withdraw bitcoin. My script will auto execute the withdrawal request. Hence I use the function walletpassphrase in my script. Is there any better and more secure way to execute the withdrawal task? If hacker can hack the script, he will get my password and all the BTC in the wallet. What are other proven secure way of doing this? thank you Title: Re: do I need walletpassphrase in web script? Post by: hardshot on April 11, 2014, 12:11:02 PM Wallet on another server, with RPC Connection only allowed from your websites' address.
And: Do not store 100% in your hot wallet. Title: Re: do I need walletpassphrase in web script? Post by: vinboy on April 11, 2014, 01:32:50 PM ok that's a way.. thanks
Title: Re: do I need walletpassphrase in web script? Post by: BitCoinDream on April 11, 2014, 02:11:35 PM How about using blockchain.info api ?
Title: Re: do I need walletpassphrase in web script? Post by: hardshot on April 11, 2014, 03:10:46 PM How about using blockchain.info api ? Has been unreliable in the past.. All those downtimes ;)Title: Re: do I need walletpassphrase in web script? Post by: vinboy on April 12, 2014, 01:14:12 AM even if use blockchain.info, the password still needs to go into the script somewhere. That's where i find it high risk.
Title: Re: do I need walletpassphrase in web script? Post by: byt411 on April 12, 2014, 01:15:55 AM hi I'm running a bitcoin website. I have a security concern here. Whenever someone withdraw bitcoin. My script will auto execute the withdrawal request. Hence I use the function walletpassphrase in my script. Is there any better and more secure way to execute the withdrawal task? If hacker can hack the script, he will get my password and all the BTC in the wallet. What are other proven secure way of doing this? thank you LOL, so you want to repeat gox? Even with the transaction malleability fixes, you can get bombarded by fake txes and you will be doomed. Title: Re: do I need walletpassphrase in web script? Post by: vinboy on April 12, 2014, 02:56:52 AM hi I'm running a bitcoin website. I have a security concern here. Whenever someone withdraw bitcoin. My script will auto execute the withdrawal request. Hence I use the function walletpassphrase in my script. Is there any better and more secure way to execute the withdrawal task? If hacker can hack the script, he will get my password and all the BTC in the wallet. What are other proven secure way of doing this? thank you I would be glad to help you work on using my api and a cold storage wallet. Then you could do withdraws on your own computer without it being linked to your server. thanks... does your api work with blockchain.info or bitcoind? |