Bitcoin Forum
October 06, 2022, 01:41:02 PM *
News: Latest Bitcoin Core release: 23.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [OVERVIEW] Wallet and exchange security review (updated feb. 22 2016)  (Read 1468 times)
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 14, 2016, 02:45:41 AM
Last edit: February 22, 2016, 09:57:13 AM by xqus
 #1

This summary shows a short summary of the security mechanism implemented on a selection of online wallets and exchanges. This is no vulnerability-test on the back end code so it says nothing about how well they are protected from an attack, but it says something about how your account is protected and the general security awareness of the service providers.

The tests are done with SSL server test, and securityheaders.io. The lists are in no particular order.

The list is also available on a dedicated webpage here.



Please keep any feedback and suggestions in this thread, thanks.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
1665063662
Hero Member
*
Offline Offline

Posts: 1665063662

View Profile Personal Message (Offline)

Ignore
1665063662
Reply with quote  #2

1665063662
Report to moderator
1665063662
Hero Member
*
Offline Offline

Posts: 1665063662

View Profile Personal Message (Offline)

Ignore
1665063662
Reply with quote  #2

1665063662
Report to moderator
"Bitcoin: mining our own business since 2009" -- Pieter Wuille
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1665063662
Hero Member
*
Offline Offline

Posts: 1665063662

View Profile Personal Message (Offline)

Ignore
1665063662
Reply with quote  #2

1665063662
Report to moderator
1665063662
Hero Member
*
Offline Offline

Posts: 1665063662

View Profile Personal Message (Offline)

Ignore
1665063662
Reply with quote  #2

1665063662
Report to moderator
1665063662
Hero Member
*
Offline Offline

Posts: 1665063662

View Profile Personal Message (Offline)

Ignore
1665063662
Reply with quote  #2

1665063662
Report to moderator
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 14, 2016, 02:57:03 AM
Last edit: February 15, 2016, 09:58:28 AM by xqus
 #2

reserved

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
pooya87
Legendary
*
Offline Offline

Activity: 2870
Merit: 7501


Learn from history, it repeats


View Profile
February 14, 2016, 04:17:22 AM
 #3

good overview but you might want to add https://greenaddress.it/ to the online wallet list. i have never used it so i can not comment on their service but i heard good things.

also, there is something that people usually miss about online wallets and that is the big difference between wallets like blockchain.info, greenaddress with wallets like coinbase, xapo, circle
that big difference is the fact that your Money is controlled by a third party in the second group so you will have no control in case your account gets banned.

dollarneed
Hero Member
*****
Offline Offline

Activity: 742
Merit: 500



View Profile
February 14, 2016, 05:37:39 AM
 #4

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance
Herbert2020
Legendary
*
Offline Offline

Activity: 1946
Merit: 1137


View Profile
February 14, 2016, 06:21:20 AM
 #5

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

Weak hands have been complaining about missing out ever since bitcoin was $1 and never buy the dip.
Whales are those who keep buying the dip.
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 14, 2016, 10:24:58 AM
 #6

Updated.

- Added GreenAddress wallet
- Added priv key access column to wallets
- Added some more exchanges

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
quentincole32
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500



View Profile
February 14, 2016, 05:35:58 PM
 #7

nice thread and explanation, so far i just using blockchain for stored my bitcoin as online wallet, i just wondering about the exchange can you make a review about c-cex, bittrex, poloniex and yobit so far those exchanger i always used for my daily trading activity
thanks in advance

i agree you should add all the other exchangers to the list. not only famous bitcoin exchanger like bitfinex, btce but also altcoin exchangers like poloniex and bittrex.
here is a good list of them with their volumes: http://coinmarketcap.com/exchanges/volume/24-hour/

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

▃▃▌▌AMBROSUS▐▐▃▃▃ - TRUSTED QUALITY OF FOOD & MEDICINE
ICO date 13 September
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 14, 2016, 06:00:15 PM
 #8

Thanks for the feedback. I will add those very soon. I'm just trying to make sure the securityheaders.io results are correct. Seems like maybe cloudfare and the like are messing up the results.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
kotwica666
Legendary
*
Offline Offline

Activity: 2016
Merit: 1035


View Profile
February 14, 2016, 06:11:36 PM
 #9

Very nice review, but Coinbase should also be included as online wallet.  Wink
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 14, 2016, 06:18:29 PM
 #10

Fair enough! Smiley

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
shorena
Copper Member
Legendary
*
Offline Offline

Activity: 1498
Merit: 1426


No I dont escrow anymore.


View Profile WWW
February 14, 2016, 07:56:10 PM
 #11

Im missing blocktrail -> https://wallet.blocktrail.com/#/setup/register

Im not really here, its just your imagination.
Hugroll
Hero Member
*****
Offline Offline

Activity: 756
Merit: 500


View Profile
February 14, 2016, 11:13:55 PM
 #12

hmm it seems coinbase is more secure than i thought lol,maybe i should go back to using it.

really didnt expect coinbase to be the most secure.
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 15, 2016, 12:14:29 AM
 #13


Added

i would suggest bittrex and poloniex to be added to the overview list as both have the biggest exchange that accept so many altcoin and huge trade volume around $10,000 combined.
and both are so popular around here for altcoin traders due they provide over 200 altcoin on their exchange each. nice thread btw , goodluck.

Added Bittrex.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
notlist3d
Legendary
*
Offline Offline

Activity: 1470
Merit: 1000



View Profile
February 15, 2016, 03:32:46 AM
 #14

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 15, 2016, 10:02:01 AM
 #15

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.

Thank you for the links. I will try to add a security summary of the hardware wallets. I just need to figure out what attack vectors i should list.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
LTU_btc
Legendary
*
Offline Offline

Activity: 2478
Merit: 1168


Slava Ukraini!


View Profile WWW
February 16, 2016, 02:05:35 PM
 #16

Nice review, but I think you should add block.io wallet




▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄    ▄▄▄▄                  ▄▄▄   ▄▄▄▄▄        ▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄▄▄▄    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄▄▄
 ▀████████████████▄  ████                 █████   ▀████▄    ▄████▀  ▄██████████████   ████████████▀  ▄█████████████▀  ▄█████████████▄
              ▀████  ████               ▄███▀███▄   ▀████▄▄████▀               ████   ████                ████                   ▀████
   ▄▄▄▄▄▄▄▄▄▄▄█████  ████              ████   ████    ▀██████▀      ██████████████▄   ████████████▀       ████       ▄▄▄▄▄▄▄▄▄▄▄▄████▀
   ██████████████▀   ████            ▄███▀     ▀███▄    ████        ████        ████  ████                ████       ██████████████▀
   ████              ████████████▀  ████   ██████████   ████        ████████████████  █████████████▀      ████       ████      ▀████▄
   ▀▀▀▀              ▀▀▀▀▀▀▀▀▀▀▀   ▀▀▀▀   ▀▀▀▀▀▀▀▀▀▀▀▀  ▀▀▀▀        ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀   ▀▀▀▀▀▀▀▀▀▀▀▀        ▀▀▀▀       ▀▀▀▀        ▀▀▀▀▀

#1 CRYPTO CASINO & SPORTSBOOK
▄▄▀▀▀▀▀▀▀▀▀▄▄
▄█▀▄▄▀▀█▀▀▀█▀▀▄▄▀█▄
▄█▀▄▀▀█ ▄█▄▄▄█▄ █▀▀▄▀█▄
▄▀▄██▄▄▀▀▄▄ ▀▄▄▀▀▄▄██▄▀▄
▄█ ████ ███▌▐███ ████ █▄
█ ████ ████ ███ ████ ████ █
█ ████ ███ ▄▄▄▄▄ ███ ████ █
█ ████ █▀▄█▀▀▀▀▀█▄▀█ ████ █
▀█ ████ ██ ▄▀▀▀▄ ██ ████ █▀
▀▄▀██▀█▄▄ ▀▀▀▀▀ ▄▄█▀██▀▄▀
▀█▄▀█▄▄▀▀█████▀▀▄▄█▀▄█▀
▀█▄▀▀██▄▄▄▄▄██▀▀▄█▀
▀▀▄▄▄▄▄▄▄▄▄▀▀
OFFICIAL
BETTING
PARTNER
.INSTANT & FAST..
.TRANSACTION.....
.PROVABLY FAIR..
......& SECURE......
.24/7 CUSTOMER.
.............SUPPORT.
BTC      |      ETH      |      LTC      |      XRP      |      XMR      |      BNB      |     more
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 17, 2016, 08:41:28 AM
 #17

Nice review, but I think you should add block.io wallet

Added:
SSL: A+
Securityheaders: A

No 2FA (they say they support it, but e-mail is not 2FA, it is only 2-step).

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 17, 2016, 10:29:32 AM
 #18

Added coinmotion.

No support for TLS 1.2, which is the only secure protocol version, so stay away. Consider ALL communication with their servers as unencrypted.

Quite ironic since they are writing
Quote
We own and control our servers, whose every component has been configured to be hardened and secure.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus (OP)
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 22, 2016, 10:04:47 AM
 #19

Here are hardware wallets I have done hands on with:
https://bitcointalk.org/index.php?topic=1283805.0 - KeepKey
https://bitcointalk.org/index.php?topic=1298917.0 - Trezor
https://bitcointalk.org/index.php?topic=1305888.0 - Ledger Nano

Hotwallet
Yubikey physical token with Blockchain.info - https://bitcointalk.org/index.php?topic=1353231.0

I have become a huge fan of hardware wallets.

I have added a few HW wallets to the list. It is based on information I have found on their official sites, and may be inaccurate. Some of the information is pulled from notlist3ds reviews.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!