Quiz to Judge How Likely is Your Crypto Going to be Hacked

[rohanagarwal94]

Hello everyone! We just created a tool for users to judge how secure their Crypto is against Hackers and get a detailed analysis for the same. Would love to have the community feedback - https://quiz.cypherock.com

[o_e_l_e_o]

So you ask people which exchanges or web wallets they store their crypto on, you ask them if they use a password manager or have thought up their own password, you ask them if they have 2FA set up and if they SIM protection from their phone carrier, and then you ask them for their email address, knowing full well that most people who are naive enough to store their coins on an exchange are also naive enough to use the same email address for everything.

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

[joniboini]

I'm pretty sure I've seen this thread elsewhere. OP there is no need to post multiple threads of the same thing, just stick with one of them. Not to mention the responds to the quiz is basically the same thing, which is "this is not a good one".

[stomachgrowls]

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

Actually have the same perception on where asking out questions that do show-off on how a certain person on where and how he do store up his coins and asking out an email address on the end?

Its just okay if we do only answer those questions but tagging along with a request of email address then we do already have the idea on where this going. We arent that judgmental but

we do already saw the possibility or where this one goes.  

[rohanagarwal94]

So you ask people which exchanges or web wallets they store their crypto on, you ask them if they use a password manager or have thought up their own password, you ask them if they have 2FA set up and if they SIM protection from their phone carrier, and then you ask them for their email address, knowing full well that most people who are naive enough to store their coins on an exchange are also naive enough to use the same email address for everything.

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

If this was indeed a phishing attempt, why would we use a subdomain of our hardware wallet which is already a funded project? We respect everyone's privacy and hence never ask for any personally identifiable information. You can input any email you like (even creating a new one just for this) to receive the analysis.

[rohanagarwal94]

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

Actually have the same perception on where asking out questions that do show-off on how a certain person on where and how he do store up his coins and asking out an email address on the end?

Its just okay if we do only answer those questions but tagging along with a request of email address then we do already have the idea on where this going. We arent that judgmental but

we do already saw the possibility or where this one goes.  

I understand the concerns but that is never our intention. That is the reason why we never ask for any personally identifiable information. You are also free to choose any email to get the analysis even if that means creating a new one for this specifically.

[Mbitr]

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

Actually have the same perception on where asking out questions that do show-off on how a certain person on where and how he do store up his coins and asking out an email address on the end?

Its just okay if we do only answer those questions but tagging along with a request of email address then we do already have the idea on where this going. We arent that judgmental but

we do already saw the possibility or where this one goes.  

I understand the concerns but that is never our intention. That is the reason why we never ask for any personally identifiable information. You are also free to choose any email to get the analysis even if that means creating a new one for this specifically.

May I ask , why you ask for an email then ??

[Harlot]

Yeah asking for an email after answering all this kind of personal questions will increase their chances of being hacked due to what they have, your questions are basically trying to pinpoint the user if he can be a candidate of a hack or not. For someone trying to aim for the improvement of the security of the user you are doing a bad job for it. If you are true to what you are aiming at I suggest that you start giving the full rundown of what they got wrong without the user giving their email, if you understand this then you aren't really doing anything bad for them.

[pilosopotasyo]

All the questions are great I've answered all of it except the part that is asking my email address, it's an option to subscribe to whatever you are going to send to my email, I always prefer to subscribe or enter my email to a site that I have complete trust and besides you don't need our email for this survey, you might even get tagged for creating tools to harvest emails.

[Saisher]

I understand the concerns but that is never our intention. That is the reason why we never ask for any personally identifiable information. You are also free to choose any email to get the analysis even if that means creating a new one for this specifically.

The question is easy to answer, but I don't like to give my email or create an email for this when there is a possibility that you can change the option to show the results right away, because not everyone here do not have knowledge about phishing an email, if you have an option to make it open with no need to enter an email it will be good for all concern, but right now your survey is questionable.

[o_e_l_e_o]

We respect everyone's privacy and hence never ask for any personally identifiable information. You can input any email you like (even creating a new one just for this) to receive the analysis.

If someone reuses an email address across multiple platforms, particularly social media, then the email address alone is more than enough to completely identify someone. Couple that information with which exchanges they have registered an account on with that email address, and that is a security risk.

Given that (as you say) you can use a brand new email address for this, then why do you ask for an email address at all, unless you are using it for the above reasons or to add to a spam mailing list for your hardware wallet? Just display the information in the browser.

[Lucius]

I try this quiz out of pure curiosity, and I must admit that I did not expect any special results in the sense that only a few questions can give me an answer whether I could be hacked or not. However, even though I use hardware wallets, my personal crypto security score is just 65/100, and considering the questions, I think my biggest drawback is that I only use paper for backup, not using multisig and maybe because of not using airgapped wallet. So I try again and select some other option which gave me a score of 82/100.

So I don't see the need for any additional analysis to be sent by e-mail, anyone can repeat the quiz several times and see which is the safest option - all in all this is one small quiz, which absolutely should not include any personal information.

[aioc]

Given that (as you say) you can use a brand new email address for this, then why do you ask for an email address at all, unless you are using it for the above reasons or to add to a spam mailing list for your hardware wallet? Just display the information in the browser.

Doesn't need an email for this survey and I will not opted to enter my email, when I was a newbie on this, I subscribed to one survey, after that I got bombarded by so many surveys on my email, because these companies thought that I was interest in doing survey because I subscribed to one and that one leads to another, so it's better not too ask email and just show the result right away.

[hulla]

So you ask people which exchanges or web wallets they store their crypto on, you ask them if they use a password manager or have thought up their own password, you ask them if they have 2FA set up and if they SIM protection from their phone carrier, and then you ask them for their email address, knowing full well that most people who are naive enough to store their coins on an exchange are also naive enough to use the same email address for everything.

I'm sorry, but this is a massive security risk. If this is not an intentional phishing attempt, then it certainly seems that way. I would suggest you remove the email requirement entirely.

If this was indeed a phishing attempt, why would we use a subdomain of our hardware wallet which is already a funded project? We respect everyone's privacy and hence never ask for any personally identifiable information. You can input any email you like (even creating a new one just for this) to receive the analysis.

OP, I understand your intentions are not bad cause you used your business subdomain link but the question asked in the quiz are information people are advised not to share with people for security purpose cause if the emails get into wrong hand it maybe sell online or use to send phishing messages and you should have stick to asking the question on your social media account not on here where security/privacy is a top priority.

[JohnBitCo]

All the questions are great I've answered all of it except the part that is asking my email address, it's an option to subscribe to whatever you are going to send to my email, I always prefer to subscribe or enter my email to a site that I have complete trust and besides you don't need our email for this survey, you might even get tagged for creating tools to harvest emails.

I also did the quiz but put a dummy email when it asks for my email address. I don't care if I don't receive any useful information because of this but i do not like to reveal my real email to any unknown survey / sites. The email can be used for marketing or hacking purpose, we never know the intentions.

[robelneo]

I also did the quiz but put a dummy email when it asks for my email address. I don't care if I don't receive any useful information because of this but i do not like to reveal my real email to any unknown survey / sites. The email can be used for marketing or hacking purpose, we never know the intentions.

This is not new, this is one of the tools internet marketing are using to acquire leads and grow their followers, they should have a disclaimer when doing this, subscribers should know what they are getting once they entered the email and they are opted and receive emails that they are expecting, if it's only for the results I would not even bother to participate if it asked for my email I consider this phishing for information and it's risky.

[Lorence.xD]

The email gathering pretty much works like a newsletter subscription I think. They try to advertise through spam mails. It is pretty funny that people are okay with this because it is a big company and they use a more sophisticated and elaborate way but when small developers do it everyone loses their mind. This one is more like a data gatherer rather shrouded in the veil that is online quiz.