Bitcoin Forum
December 15, 2017, 11:45:01 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: [OVERVIEW] Wallet and exchange security review (updated feb. 22 2016)  (Read 1415 times)
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 14, 2016, 02:45:41 AM
 #1

This summary shows a short summary of the security mechanism implemented on a selection of online wallets and exchanges. This is no vulnerability-test on the back end code so it says nothing about how well they are protected from an attack, but it says something about how your account is protected and the general security awareness of the service providers.

The tests are done with SSL server test, and securityheaders.io. The lists are in no particular order.

The list is also available on a dedicated webpage here.



Please keep any feedback and suggestions in this thread, thanks.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513381501
Hero Member
*
Offline Offline

Posts: 1513381501

View Profile Personal Message (Offline)

Ignore
1513381501
Reply with quote  #2

1513381501
Report to moderator
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 14, 2016, 02:57:03 AM
 #2

reserved

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
pooya87
Legendary
*
Offline Offline

Activity: 1120


Buy bitcoin they said... who listened?


View Profile
February 14, 2016, 04:17:22 AM
 #3

good overview but you might want to add https://greenaddress.it/ to the online wallet list. i have never used it so i can not comment on their service but i heard good things.

also, there is something that people usually miss about online wallets and that is the big difference between wallets like blockchain.info, greenaddress with wallets like coinbase, xapo, circle
that big difference is the fact that your Money is controlled by a third party in the second group so you will have no control in case your account gets banned.

dollarneed
Hero Member
*****
Offline Offline

Activity: 546


View Profile
February 14, 2016, 05:37:39 AM
 #4

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

Herbert2020
Legendary
*
Offline Offline

Activity: 1064



View Profile
February 14, 2016, 06:21:20 AM
 #5

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

.BITSLER.                 ▄███
               ▄████▀
             ▄████▀
           ▄████▀  ▄██▄
         ▄████▀    ▀████▄
       ▄████▀        ▀████▄
     ▄████▀            ▀████▄
   ▄████▀                ▀████▄
 ▄████▀ ▄████▄      ▄████▄ ▀████▄
█████   ██████      ██████   █████
 ▀████▄ ▀████▀      ▀████▀ ▄████▀
   ▀████▄                ▄████▀
     ▀████▄            ▄████▀
       ▀████▄        ▄████▀
         ▀████▄    ▄████▀
           ▀████▄▄████▀
             ▀██████▀
               ▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄            
▄▄▄▄▀▀▀▀    ▄▄█▄▄ ▀▀▄         
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄      
█  ▀▄▄  ▀█▀▀ ▄      ▀████   ▀▀▄   
█ █▄  ▀▄   ▀████       ▀▀ ▄██▄ ▀▀▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█  ▀▀       ▀▄▄ ▀████      ▄▄▄▀▀▀  █
█            ▄ ▀▄    ▄▄▄▀▀▀   ▄▄  █
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█ ▄▄   ███   ▀██  █           ▀▀  █ 
█ ███  ▀██       █        ▄▄      █ 
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  
▀▄            █        ▀▀      █  
▀▀▄   ███▄  █   ▄▄          █   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀    
▀▀▄   █   ▀▀▄▄▄▀▀▀         
▄▄▄▄▄▄▄▄▄▄▄█▄▄▀▀▀▀              
              ▄▄▄██████▄▄▄
          ▄▄████████████████▄▄
        ▄██████▀▀▀▀▀▀▀▀▀▀██████▄
▄     ▄█████▀             ▀█████▄
██▄▄ █████▀                ▀█████
 ████████            ▄██      █████
  ████████▄         ███▀       ████▄
  █████████▀▀     ▄███▀        █████
   █▀▀▀          █████         █████
     ▄▄▄         ████          █████
   █████          ▀▀           ████▀
    █████                     █████
     █████▄                 ▄█████
      ▀█████▄             ▄█████▀
        ▀██████▄▄▄▄▄▄▄▄▄▄██████▀
          ▀▀████████████████▀▀
              ▀▀▀██████▀▀▀
            ▄▄▄███████▄▄▄
         ▄█▀▀▀ ▄▄▄▄▄▄▄ ▀▀▀█▄
       █▀▀ ▄█████████████▄ ▀▀█
     █▀▀ ███████████████████ ▀▀█
    █▀ ███████████████████████ ▀█
   █▀ ███████████████▀▀ ███████ ▀█
 ▄█▀ ██████████████▀      ▀█████ ▀█▄
███ ███████████▀▀            ▀▀██ ███
███ ███████▀▀                     ███
███ ▀▀▀▀                          ███
▀██▄                             ▄██▀
  ▀█▄                            ▀▀
    █▄       █▄▄▄▄▄▄▄▄▄█
     █▄      ▀█████████▀
      ▀█▄      ▀▀▀▀▀▀▀
        ▀▀█▄▄  ▄▄▄
            ▀▀█████
[]
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 14, 2016, 10:24:58 AM
 #6

Updated.

- Added GreenAddress wallet
- Added priv key access column to wallets
- Added some more exchanges

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
quentincole32
Hero Member
*****
Offline Offline

Activity: 518



View Profile
February 14, 2016, 05:35:58 PM
 #7

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

▃▃▌▌AMBROSUS▐▐▃▃▃ - TRUSTED QUALITY OF FOOD & MEDICINE
ICO date 13 September
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 14, 2016, 06:00:15 PM
 #8

Thanks for the feedback. I will add those very soon. I'm just trying to make sure the securityheaders.io results are correct. Seems like maybe cloudfare and the like are messing up the results.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
kotwica666
Legendary
*
Offline Offline

Activity: 1176


ALGORY.io Crowdsale starts on 8/12/2017


View Profile
February 14, 2016, 06:11:36 PM
 #9

Very nice review, but Coinbase should also be included as online wallet.  Wink

.
            ▀███████████████▄▄
              █████████████████
               █████████████████
                █████████████████
                 █████████████████
                  █████████████████
        ▄▄▄▄       █████████████████
    ▄██████████▄    █████████████████
   ██████████████    █████████████████
  ████████████████    █████████████████
 ██████████████████    █████████████████
 ██████████████████     █████████████████
 ██████████████████      █████████████████
  ████████████████        █████████████████
   ██████████████          █████████████████
    ▀██████████▀            ▀████████████████▄
       ▀▀▀▀▀▀ 
ALGORY  Multifunctional Tool for Cryptocurrency Trading 
Join Whitelist and Get 20% Bonus┃CROWDSALE ON DEC. 8
           ░████████████▒
       ░████████████████████░
     ░████████████████████████▒
   ░████████████████████████████░
  ░██████████████████   █████████▒
 ░███████████████      ▒██████████░
 █████████████         ████████████
░██████████            ████████████░
░██████                ████████████▒
░█████████████▒▒      ▒████████████▒
 ████████████████     █████████████░
 ▒████████████████    ████████████▒
  ▒████████████████▒  ████████████
   ░█████████████████ ██████████▒
     ██████████████████████████░
       ▒█████████████████████
          ░██████████████▒
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 14, 2016, 06:18:29 PM
 #10

Fair enough! Smiley

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
shorena
Legendary
*
Offline Offline

Activity: 1400


ALL escrow is signed! https://keybase.io/verify


View Profile WWW
February 14, 2016, 07:56:10 PM
 #11

Im missing blocktrail -> https://wallet.blocktrail.com/#/setup/register

Hugroll
Hero Member
*****
Offline Offline

Activity: 728


View Profile
February 14, 2016, 11:13:55 PM
 #12

hmm it seems coinbase is more secure than i thought lol,maybe i should go back to using it.

really didnt expect coinbase to be the most secure.
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 15, 2016, 12:14:29 AM
 #13


Added

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

Added Bittrex.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
notlist3d
Legendary
*
Offline Offline

Activity: 1414



View Profile
February 15, 2016, 03:32:46 AM
 #14

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 15, 2016, 10:02:01 AM
 #15

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.

Thank you for the links. I will try to add a security summary of the hardware wallets. I just need to figure out what attack vectors i should list.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
LTU_btc
Hero Member
*****
Offline Offline

Activity: 714

★YoBit.Net★ 350+ Coins Exchange & Dice


View Profile WWW
February 16, 2016, 02:05:35 PM
 #16

Nice review, but I think you should add block.io wallet

xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 17, 2016, 08:41:28 AM
 #17

Nice review, but I think you should add block.io wallet

Added:
SSL: A+
Securityheaders: A

No 2FA (they say they support it, but e-mail is not 2FA, it is only 2-step).

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 17, 2016, 10:29:32 AM
 #18

Added coinmotion.

No support for TLS 1.2, which is the only secure protocol version, so stay away. Consider ALL communication with their servers as unencrypted.

Quite ironic since they are writing
Quote
We own and control our servers, whose every component has been configured to be hardened and secure.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus
Full Member
***
Offline Offline

Activity: 173



View Profile
February 22, 2016, 10:04:47 AM
 #19

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.

I have added a few HW wallets to the list. It is based on information I have found on their official sites, and may be inaccurate. Some of the information is pulled from notlist3ds reviews.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!