karsyla (OP)
Full Member
 Offline
Activity: 248
Merit: 112
Time is money so I went and bought a Rolex
|
 |
October 10, 2017, 07:22:09 PM |
|
Hello,
What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?
What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?
|
|
|
|
|
|
|
|
|
|
|
|
|
"Your bitcoin is secured in a way that is physically impossible for others to access, no matter for what reason, no matter how good the excuse, no matter a majority of miners, no matter what." -- Greg Maxwell
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
aleksej996
Sr. Member
Offline
Activity: 490
Merit: 389
Do not trust the government
|
|
October 10, 2017, 07:56:16 PM |
|
A programmer needs to understand that private keys should be highly secured and usually web developers don't get involved with private keys or this type of issues. It is very possible that the programmer could make some obvious design flaw if he knows nothing about crypto, but no one can know how he/she will handle it. You obviously need some research, at least, to make a working web wallet in the first place.
No one knows how that person will handle it, but some additional understanding will have to be acquired.
|
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3388
Merit: 4616
|
|
October 10, 2017, 08:02:40 PM |
|
Hello,
What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?
If he "knows nothing about crypto and blockchain", then there would be a risk that he would not know how to protect against mistakes that could lead to a loss of funds. It is possible that he could learn, but his lack of experience would be a concern. What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?
Knowledge of cryptography and what risks exist would be important if you want it to actually be secure. I'm not sure what you mean by "web wallet", but anything that I'd call a "web wallet" I would never consider to be "secure". |
|
|
|
|
|
nibor
|
|
October 10, 2017, 08:38:14 PM |
|
A developer with a big team of security experts, a team to ensure segregation of duties etc....
Every Tom, Dick and Harry (including the people hosting your site, cleaning your office, working for you) will be trying to hack in...
Don't even think of doing it in your bedroom on your own - many have tried - had a nightmare and failed. Then been worried about the police coming knocking as everyone assumes you were not hacked - but that you stole it and pretended you were hacked!
|
|
|
|
|
karsyla (OP)
Full Member
Offline
Activity: 248
Merit: 112
Time is money so I went and bought a Rolex
|
|
October 10, 2017, 09:13:17 PM |
|
Knowledge of cryptography and what risks exist would be important if you want it to actually be secure.
I'm not sure what you mean by "web wallet", but anything that I'd call a "web wallet" I would never consider to be "secure".
I know web wallets are never perfectly secured, but there are lots of them and they still are able to survive. What I would like to get set up, is a simple bitcoin exchange, and the first step to that is a wallet. A simple web wallet with some individual modifications (every transactions gets new address etc.), which would enable bitcoin transactions. So, what programming language a programmer must know in order to set up a 'base' of this exchange/wallet? I am not talking about putting it in a web here, I would even say a web developer, since I believe it is a pure programming. I would have one guy to set up this foundation of the system itself (the wallet) and another guy putting it on the web and doing the interface etc. |
|
|
|
karsyla (OP)
Full Member
Offline
Activity: 248
Merit: 112
Time is money so I went and bought a Rolex
|
|
October 10, 2017, 09:14:54 PM |
|
A developer with a big team of security experts, a team to ensure segregation of duties etc....
Every Tom, Dick and Harry (including the people hosting your site, cleaning your office, working for you) will be trying to hack in...
Don't even think of doing it in your bedroom on your own - many have tried - had a nightmare and failed. Then been worried about the police coming knocking as everyone assumes you were not hacked - but that you stole it and pretended you were hacked!
Believe me, I will not do it myself, because I am not a programmer. Believe me how I wish I could do it myself though... |
|
|
|
valucash
Member
Offline
Activity: 110
Merit: 10
|
|
October 11, 2017, 06:38:22 AM |
|
Why go through all the trouble?, look for a good opensource web wallet and customize it, you are good to go.
|
|
|
|
|
|
suzanne5223
|
|
October 11, 2017, 09:22:18 AM |
|
The kind of programmer you need will be someone who is good in security aspect and must understand how the block chain/crypto currency network work. However, the place to find what you're looking for is github.
|
|
|
|
J.Werner
Newbie
Offline
Activity: 13
Merit: 0
|
|
October 11, 2017, 09:24:29 AM |
|
how many a secure web wallet do not create, still there is someone who can hack it...
|
|
|
|
|
|
mensa84
|
|
October 11, 2017, 10:08:24 AM |
|
Hello,
What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?
What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?
For webwallet need know: -> php or python -> mysql For cold wallet -> it is necessary to understand api (ex. qt wallet api) -> unix You need to use two different servers -> First server = web wallet -> Second server = cold wallet |
|
|
|
YIY Company
Newbie
Offline
Activity: 12
Merit: 0
|
|
October 11, 2017, 11:31:18 AM |
|
html + css + js + node.js/python/php + SQL/mongoDB + react/angular/vue
|
|
|
|
|
bob123
Legendary
Offline
Activity: 1624
Merit: 2481
|
|
October 11, 2017, 03:15:15 PM |
|
A programmer should not only be able to code some stuff, he should understand what he is doing.
You need a programmer who has experience in designing blockchain-applications.
On top of that you need a programmer who understands what "Security by Design" means. Not just a self-taught wannabe coder.
There is a lot of stuff going on in the web. Standing still in this business is regression.
You should rather pay a good fee to a good programmer if you want to have a good product in the end.
|
|
|
|
CryptoSpark
Newbie
Offline
Activity: 63
Merit: 0
|
|
October 12, 2017, 04:10:25 PM |
|
You need to understand many areas to be able to develop a safe web wallet.
> Infrastructure including setting up WAF's, hardened servers and placing sensitive components on servers behind multiple layers of security from Network Security Groups that restrict access to DMZ's. You can't just stick keys and services on a server near to the Internet, there has to be layers of security providing defence in depth. Assume your server will be attacked by the best hackers out there and then add even more security.
> For the front end itself you can use any technology you like as long as its used well. Javascript, .NET web applications, whatever takes your fancy.
> Again, don't do anything crypto on the web server, be very paranoid and consider those encryption to be the most precious object in the world.
> Then when you're 100% sure that you're security is tight, pen test it to pieces and run plenty of vulnerability scans.
But to answer your question, use whatever web technology you are most comfy with because it's more about understanding the risks and strengths of the technology. I'd rather an experienced php developer write an app in php than to try to write one in .NET just because .NET has a better reputation in terms of security.
|
|
|
|
|
BenOnceAgain
Member
Offline
Activity: 208
Merit: 84
🌐 www.btric.org 🌐
|
|
October 12, 2017, 05:24:38 PM |
|
Deploying a web wallet for cryptocurrency, especially Bitcoin, is basically painting a huge "HACK ME" sign on your entire infrastructure -- websites, DNS, email, backend, telephones, ISP, physical location, etc. Even your social media and marketing needs to be resilient -- phishing attacks have occurred.
Strong security audits of infrastructure and codebase are essential to do prior to launch and on an ongoing basis. Appropriate policies and procedures for back office functions are also essential to ensuring that your employees or team members do not succumb to temptation. Basically you should extend a "trustless" model to your entire operation with multiple layers of fail safe measures. And careful audits/monitoring during operations.
Think about it... what measures would you want a web wallet to take to protect YOUR BTC? What measures would you want your bank to take to protect your fiat?
That's where you start. And you have to keep track of vulnerabilities because they're discovered all the time in all manner of the software you'd need for a web stack.
Etc, etc, etc. Banks keep money in vaults. You need to build the digital equivalent of a vault to extend over your entire operation.
|
|
|
|
matthewcampbell
Newbie
Offline
Activity: 15
Merit: 1
|
|
October 13, 2017, 09:28:12 AM |
|
Hello,
What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?
What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?
It is not hard to make a web wallet. The hard part is understanding security. So browser based attacks like XSS and what not. If you haven't been coding in industry for a long time, I think you should avoid doing this. Last thing we need is another insecure wallet or exchange that gets hacked. |
|
|
|
|
|
