Bitcoin Forum

Other => Beginners & Help => Topic started by: joeyjoe on August 16, 2011, 10:09:56 AM



Title: How are we protected from XSS?
Post by: joeyjoe on August 16, 2011, 10:09:56 AM
Just a thought as I had done alot of research on this subject before. How easy would it be for a hacker to obtain your login details or even steal your cookie file from a bitcoin trade site and use it to steal your coins?

Every couple of months someone will find a vulnerability in a system. Bit coins only just starting to take off so should we see an increase of stolen passwords?


Title: Re: How are we protected from XSS?
Post by: newminerr on August 16, 2011, 10:20:18 AM
Protecting as a site owner -> use htmlentities before you print a variable.
Protecting as a user -> use noscript :]

But when it comes to web security XSS is not the worst.
XSS [if exists] won't give the hacker your password, only the cookies, if you logout and logged in again the hacker can't do anything.

Unlike XSS, RCE or SQL injection can do serious damage to both the site and users...


Title: Re: How are we protected from XSS?
Post by: joeyjoe on August 16, 2011, 11:03:34 AM
Only known about bitcoin a day and as intriguing as it is, theres wayyyy too many storys about hacked accounts and stolen bitcoins.


Title: Re: How are we protected from XSS?
Post by: newminerr on August 16, 2011, 11:30:27 AM
Most of the time the negligence of the user is the problem.


Title: Re: How are we protected from XSS?
Post by: vv01f on August 16, 2011, 01:06:58 PM
the more important question would be "how can Bitcoin prosper when they can get lost forever?" ;)
if the available amount is decreasing by time.. what would be a critical mass that is needed for a currency worldwide?


Title: Re: How are we protected from XSS?
Post by: Gabi on August 16, 2011, 01:17:45 PM
the more important question would be "how can Bitcoin prosper when they can get lost forever?" ;)
if the available amount is decreasing by time.. what would be a critical mass that is needed for a currency worldwide?
Since you can move the decimal as you need, any amount of BTC is enough for the world. You would then use like 0.000000000000000000001 btc, we will make a client that wil say that it is 1mini-BTC and you are fine



After all, "how can gold prosper when it can get lost forever?" What about all the gold in the ships that sunk? For thousands of years it was lost!


Title: Re: How are we protected from XSS?
Post by: SomeoneWeird on August 16, 2011, 01:18:00 PM
the more important question would be "how can Bitcoin prosper when they can get lost forever?" ;)
if the available amount is decreasing by time.. what would be a critical mass that is needed for a currency worldwide?

bitcoins are divisible by 8, so we can just move the decimal value if theres ever a need to.