Bitcoin Forum
May 09, 2024, 05:48:33 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Bug in blockchain.info, can be used for phishing  (Read 1310 times)
rme (OP)
Hero Member
*****
Offline Offline

Activity: 756
Merit: 504



View Profile
March 01, 2013, 01:57:25 PM
 #1

Hi!
To all BlockChain.info developers (@piuk and so),
I've just found a bug in the BlockChain.info Tag System, someone can just tag any address that he dont own and everybody will that open the blockchain.info address link will see it, (also is possible to include links).

Proof of Work:
(Look near the green arrow)

http://blockchain.info/address/1DkyBEKt5S2GDtv7aQw6rQepAvnsRyHoYM
http://blockchain.info/address/1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF
http://blockchain.info/address/16cou7Ht6WjTzuFyDBnht9hmvXytg6XdVT


How to insert text + link in someones bitcoin address page (at blockchain.info):
1.- Go to http://pastebin.com/ and paste the address, copy the given link
2.- Go to http://blockchain.info/tags and fill the form:
Address: Target_Bitcoin_Address
Tag: Your mensage (it will be shown publicly)
Link: Pastebin link
3.- Go to http://blockchain.info/address/Target_Bitcoin_Address and view your Tag.

No confirmation is required, see that the proof-of-work links are very famous addresses.


My bitcoin address (if someone wants to tip me):
BTC 1R2sWeVhFitB8zVbkrmdSoXzaQRsw6cfh

 Wink Thanks and keep improving Blockchain.info, the best online-wallet ever.
Be very wary of relying on JavaScript for security on crypto sites. The site can change the JavaScript at any time unless you take unusual precautions, and browsers are not generally known for their airtight security.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
rme (OP)
Hero Member
*****
Offline Offline

Activity: 756
Merit: 504



View Profile
March 01, 2013, 03:16:40 PM
 #2

Someone (maybe blockchain.info admin) is flushing recent Tags.
piuk
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1005



View Profile WWW
March 01, 2013, 03:23:33 PM
 #3

Someone (maybe blockchain.info admin) is flushing recent Tags.

tags are moderated, sometimes slowly.

rme (OP)
Hero Member
*****
Offline Offline

Activity: 756
Merit: 504



View Profile
March 01, 2013, 03:25:18 PM
 #4

Someone (maybe blockchain.info admin) is flushing recent Tags.

tags are moderated, sometimes slowly.

There is still a bug that allows someone to change tags randomly
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!