Bitcoin Forum
October 09, 2024, 04:15:10 PM
Welcome,
Guest
. Please
login
or
register
.
News
: Latest Bitcoin Core release:
28.0
[
Torrent
]
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
媒体
>
[20140730]Blockchain钱包保存明文密码有错吗
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: [20140730]Blockchain钱包保存明文密码有错吗 (Read 865 times)
btcshop
(OP)
Hero Member
Offline
Activity: 644
Merit: 500
[20140730]Blockchain钱包保存明文密码有错吗
July 30, 2014, 11:27:11 AM
#1
因为自己从事软件开发,也涉及到用户的密码保存问题,在这方面可以从自己的经验谈一下。
举个众所周知的问题,腾讯会保存你的明文qq密码吗?也许很早以前会,至少现在是绝对不会,它的密码是加密储存在某个地方的。这样既方便用户,不用每次重新输入密码,又能杜绝偷窥者。
Blockchain为什么不学腾讯?把密码加密存储起来,到用的时候再解密,因为腾讯是闭源的,加密解密方法不容易被外界获悉。
而Blockchain是开源的,即使你加密了,别人看看源代码,写个小工具一样可以解密出来。
如此说来,Blockchain是不是就没有错?用句老古话回答就是:防君子不防小人。
由于钱包密码是很隐私,以及可能会跟其他场合密码相通的东西,如果是用普通工具,甚至不用任何工具随便偷窥一下,就能看到明文的话,有好奇心的人很可能就会禁不住诱惑而贸然行动。就像一个虚掩的门,大家很可能就会推开进去看看,而如果是锁了一把小锁,尽管随便拿个钳子就能夹断,绝大多数的人也会放弃尝试,因为那把锁强烈的暗示了里面的私密性。人都有犯罪的天性,但大部分人一旦意识到自己的行为是犯罪的时候,都会改变主意。用一个非针对性的普通文件管理软件也能看到钱包密码,会鼓励大家的去罪化心态:我只是随便看看,瞅瞅而已。但如果要下载一个专门解密钱包密码,所有人都知道是用来偷窥别人钱包密码的工具,就会激起他的良知或者畏惧(因为他会害怕别人知道他下载和使用了这类工具,判定他是小偷)。别看这种细微的心理差别,这种小小的貌似无力的多一层保护,有可能阻挡90%的偷窥行为。
Blockchain为什么不那样做,嫌麻烦呗,我以前做过一些qq的小工具,也涉及保存用户的qq密码,之前一个软件是会简单的加密一下,这样别人直接打开那个记事本只会看到一串乱码,后面的另外一个软件,我就明文保存了,主要是为了方便自己用记事本直接打开查看(因为那些不重要的qq,我也不记得每个密码各自是什么)。其实我如果要考虑周全一些,也应该继续用第一个软件的方案,加密保存,但那样我就需要再为自己专门做一个解密的工具来查看了,因为嫌费事,加上认为其他用户(也包括我自己)的qq密码也没多大重要性(因此泄密的可能性不大,后果也不严重),所以就偷懒将就了。
我的用户对其他方面的功能着眼比较多,安全性方面没放在心上(也有可能他们从来不知道我的软件保存了他们的qq密码,当然,同样是本地保存,我没办法也没兴趣进行千里偷窥),相比之下,比特币钱包的安全性是第一位的,把密码改成密文,也许不能从根本上杜绝密码泄露的问题,但至少能防范住很多无意的或非专业的偷窥行为。
Halley
Member
Offline
Activity: 98
Merit: 10
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 30, 2014, 11:34:22 PM
#2
关注一下。
Bwincoin. B7DFc26zcsDKz8ZmNZ6ZWCC6oiZCpPfZqq
fwzd
Hero Member
Offline
Activity: 714
Merit: 500
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 12:33:59 AM
#3
首先不能混淆,明文密码出现在苹果app中,但blockchain钱包的服务器是不掌握的;其次必须承认在本地保存明文密码相对而言还是不够安全,出现这种情况恐怕还是程序员懒惰疏忽造成;最后无论明文密文,使用手机钱包都应注意安全,一旦手机丢失或被木马掌控,啥密码都靠不住。
cloudvps
Sr. Member
Offline
Activity: 350
Merit: 250
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 12:36:07 AM
#4
类似chrome吧?别人用你的chrome浏览器打开密码管理器全部都可以明文看到,但是google一直坚持没改,因为觉得多余,你电脑被他控制了就等于什么都不安全了。
▓▓▓ BITMIXER.IO ▓▓▓
▓▓▓ High Volume Bitcoin MIXER ▓▓▓
Keyhotee
Sr. Member
Offline
Activity: 336
Merit: 250
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 12:44:11 AM
#5
希望看到圈内有公开透明的探讨,毕竟大家是因为同一个信念走到一起的。不容易,且行且珍惜!
bitba.org
Sr. Member
Offline
Activity: 338
Merit: 250
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 12:55:12 AM
#6
树大招风,BlockChain钱包数量最多,自然成为黑客攻击的靶子。安全无绝对哦!
sellfpga
Hero Member
Offline
Activity: 630
Merit: 500
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 12:59:48 AM
#7
想在不安全的世界找一块净土,很难!
btcshop
(OP)
Hero Member
Offline
Activity: 644
Merit: 500
Re: [20140730]Blockchain钱包保存明文密码有错吗
July 31, 2014, 04:18:10 AM
#8
明文保存密码这一所谓“漏洞“可能带来的隐患被片面放大了, 而其实钱包的安全性仍然是客观的,原因是:
[20140731]Blockchain就明文保存用户密码问题作出回应
Pages: [
1
]
Print
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
媒体
>
[20140730]Blockchain钱包保存明文密码有错吗
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...