Bitcoin Forum
May 11, 2024, 03:51:30 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Security problem  (Read 691 times)
hahahafr (OP)
Hero Member
*****
Offline Offline

Activity: 938
Merit: 501



View Profile
May 18, 2013, 01:57:20 PM
 #1

Case 1: A thieve tries to steal fiat money online
1. He develops a widespread malware that tampers with lots of money processors and bank webpages, directly on the browser of the user's machine
2. Steals logins/passwords
3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws money
4. Issue: can't transmit the money to him directly or he will get caught
5. Even if he succeed to launders the money, the honest customer gets his money back from the bank and the money processors

Case 2: A thieve tries to steal bitcoins online
1. He develops a widespread malware that tampers with all the exchanges webpages, directly on the browser of the user's machine
2. Steals logins/passwords
3. Steals 2-fact codes and within the window of validity (from some seconds to some minutes) withdraws bitcoins
4. Profit
5. Honest user is screwed, must file a police alone

Only fix for the Bitcoin user is to secure its computer. No other choice.
This is my security problem, how do we solve this for lambda users?




                                           ◢◣                      ◢◣
                                     ◢████◣           ◢████◣
                               ◢████████◣◢████████◣
                               █████████████████
                               █████████████████
                               █████████████████
                               █████████████◤██████
                               ███████████◤████████
                               █████████◤██████████
                               ███████◤████████████
                               █████◤██████████████
                               █████◣                       ◢█████
                               ███████◣            ◢███████
                               █████████◣◢█████████
                               ◥████████◤◥████████◤
                                    ◥████◤            ◥████◤
                                          ◥◤                      



HYDAX
       Secure  
   Efficient
   Simple  
   Medium 
    Twitter  
    Telegram 
[/center
"Bitcoin: the cutting edge of begging technology." -- Giraffe.BTC
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715442690
Hero Member
*
Offline Offline

Posts: 1715442690

View Profile Personal Message (Offline)

Ignore
1715442690
Reply with quote  #2

1715442690
Report to moderator
1715442690
Hero Member
*
Offline Offline

Posts: 1715442690

View Profile Personal Message (Offline)

Ignore
1715442690
Reply with quote  #2

1715442690
Report to moderator
Terk
Hero Member
*****
Offline Offline

Activity: 616
Merit: 522



View Profile
May 18, 2013, 02:20:45 PM
 #2

Well this is a general issue for any DIY activity. There's nobody to hold your back if you do things on your own and screw. If you outsource to 3rd party, there's a possibility that they will take responsibility for failures and/or will be insured and you won't get hurt. It's not bitcoin related really and affects any DIY activity.

If bitcoin becomes widespread, I'm sure there will be bitcoin banks and you could deposit your money there if you don't want to handle it yourself (with all the pros and cons of that).

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!