|
May 18, 2013, 01:57:20 PM |
|
Case 1: A thieve tries to steal fiat money online 1. He develops a widespread malware that tampers with lots of money processors and bank webpages, directly on the browser of the user's machine 2. Steals logins/passwords 3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws money 4. Issue: can't transmit the money to him directly or he will get caught 5. Even if he succeed to launders the money, the honest customer gets his money back from the bank and the money processors
Case 2: A thieve tries to steal bitcoins online 1. He develops a widespread malware that tampers with all the exchanges webpages, directly on the browser of the user's machine 2. Steals logins/passwords 3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws bitcoins 4. Profit 5. Honest user is screwed, must file a police alone
Only fix for the Bitcoin user is to secure its computer. No other choice. This is my security problem, how do we solve this for lambda users?
|