Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: lexxus on May 09, 2013, 10:42:01 AM



Title: Blockchain.info wallet bug allows to change the first password without secondary
Post by: lexxus on May 09, 2013, 10:42:01 AM
Maybe this has been already found and discussed, but...

I think I found a bug in Blockchain.info wallet. I reported this several days ago using their customer support system but got no reply (even confirmation that my request was accepted).

If you enable a second password in your wallet, you can still change the main password without entering the second one. When you try to change your main password you are asked for a secondary but you can just click "Cancel" and continue: you will see a standard "Confirm Password Change" and if you confirm the main password will be changed. As simple as that.

Edit: It's even worse, you can put anything as a secondary password, you can still proceed with changing the main password. I don't get it. Maybe it is as planned?


Title: Re: Blockchain.info wallet bug allows to change the first password without secondary
Post by: lexxus on May 09, 2013, 12:56:13 PM
So can anyone confirm this? Is it a bug or a feature? Is there anyway to get it fixed as it's critical if you want to use it as  "monitoring only" wallet for several users?


Title: Re: Blockchain.info wallet bug allows to change the first password without secondary
Post by: bowen151 on May 09, 2013, 12:57:50 PM
Im concerned with the fact that the 2FA by way of text only kicks in half of the time. Allowing me 1FA access sometimes.


Title: Re: Blockchain.info wallet bug allows to change the first password without secondary
Post by: lexxus on May 09, 2013, 01:22:31 PM
Im concerned with the fact that the 2FA by way of text only kicks in half of the time. Allowing me 1FA access sometimes.

At what point?