Bitcoin Forum
January 29, 2023, 07:58:47 PM *
News: Latest Bitcoin Core release: 24.0.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: What kind of programmer do I need to make a web wallet?  (Read 772 times)
karsyla (OP)
Full Member
***
Offline Offline

Activity: 246
Merit: 112


Time is money so I went and bought a Rolex


View Profile
October 10, 2017, 07:22:09 PM
 #1

Hello,

What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?

What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?

1675022327
Hero Member
*
Offline Offline

Posts: 1675022327

View Profile Personal Message (Offline)

Ignore
1675022327
Reply with quote  #2

1675022327
Report to moderator
1675022327
Hero Member
*
Offline Offline

Posts: 1675022327

View Profile Personal Message (Offline)

Ignore
1675022327
Reply with quote  #2

1675022327
Report to moderator
1675022327
Hero Member
*
Offline Offline

Posts: 1675022327

View Profile Personal Message (Offline)

Ignore
1675022327
Reply with quote  #2

1675022327
Report to moderator
Bitcoin addresses contain a checksum, so it is very unlikely that mistyping an address will cause you to lose money.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
aleksej996
Sr. Member
****
Offline Offline

Activity: 490
Merit: 388


Do not trust the government


View Profile
October 10, 2017, 07:56:16 PM
 #2

A programmer needs to understand that private keys should be highly secured and usually web developers don't get involved with private keys or this type of issues. It is very possible that the programmer could make some obvious design flaw if he knows nothing about crypto, but no one can know how he/she will handle it. You obviously need some research, at least, to make a working web wallet in the first place.

No one knows how that person will handle it, but some additional understanding will have to be acquired.
DannyHamilton
Legendary
*
Offline Offline

Activity: 3010
Merit: 3685



View Profile
October 10, 2017, 08:02:40 PM
 #3

Hello,

What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?

If he "knows nothing about crypto and blockchain", then there would be a risk that he would not know how to protect against mistakes that could lead to a loss of funds.  It is possible that he could learn, but his lack of experience would be a concern.

What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?

Knowledge of cryptography and what risks exist would be important if you want it to actually be secure.

I'm not sure what you mean by "web wallet", but anything that I'd call a "web wallet" I would never consider to be "secure".
nibor
Sr. Member
****
Offline Offline

Activity: 438
Merit: 290


View Profile
October 10, 2017, 08:38:14 PM
Merited by ETFbitcoin (1)
 #4

A developer with a big team of security experts, a team to ensure segregation of duties etc....

Every Tom, Dick and Harry (including the people hosting your site, cleaning your office, working for you) will be trying to hack in...

Don't even think of doing it in your bedroom on your own - many have tried - had a nightmare and failed. Then been worried about the police coming knocking as everyone assumes you were not hacked - but that you stole it and pretended you were hacked!
karsyla (OP)
Full Member
***
Offline Offline

Activity: 246
Merit: 112


Time is money so I went and bought a Rolex


View Profile
October 10, 2017, 09:13:17 PM
 #5

Quote
Knowledge of cryptography and what risks exist would be important if you want it to actually be secure.

I'm not sure what you mean by "web wallet", but anything that I'd call a "web wallet" I would never consider to be "secure".

I know web wallets are never perfectly secured, but there are lots of them and they still are able to survive.
What I would like to get set up, is a simple bitcoin exchange, and the first step to that is a wallet. A simple web wallet with some individual modifications (every transactions gets new address etc.), which would enable bitcoin transactions.

So, what programming language a programmer must know in order to set up a 'base' of this exchange/wallet?
I am not talking about putting it in a web here, I would even say a web developer, since I believe it is a pure programming.
I would have one guy to set up this foundation of the system itself (the wallet) and another guy putting it on the web and doing the interface etc.


karsyla (OP)
Full Member
***
Offline Offline

Activity: 246
Merit: 112


Time is money so I went and bought a Rolex


View Profile
October 10, 2017, 09:14:54 PM
 #6

A developer with a big team of security experts, a team to ensure segregation of duties etc....

Every Tom, Dick and Harry (including the people hosting your site, cleaning your office, working for you) will be trying to hack in...

Don't even think of doing it in your bedroom on your own - many have tried - had a nightmare and failed. Then been worried about the police coming knocking as everyone assumes you were not hacked - but that you stole it and pretended you were hacked!

Believe me, I will not do it myself, because I am not a programmer. Believe me how I wish I could do it myself though...

valucash
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
October 11, 2017, 06:38:22 AM
 #7

Why go through all the trouble?, look for a good opensource web wallet and customize it, you are good to go.
suzanne5223
Hero Member
*****
Offline Offline

Activity: 2156
Merit: 584


Want top-notch campaign for your project, Hire me.


View Profile
October 11, 2017, 09:22:18 AM
 #8

The kind of programmer you need will be someone who is good in security aspect and must understand how the block chain/crypto currency network work. However, the place to find what you're looking for is github.

███████████████████████████
█████████▀▄▄▄▄▄██▀▀████████
█████▀▄█▀▀▄▄▄▄▄▄▄▀▀▄▄▀█████
████ █▀▄███████████▄▀██████
███▄█ ███████▀ ██████ █ ███
██▀█ ███  ▀▀█  ▀██████ █ ██
██ █ ████▄▄      ▀▀▀██ █ ██
██ █ █████▌        ▄██ ████
███▄█ █████▄▄   ▄▄███ █▀███
████▀█▄▀█████▌  ▀██▀▄█ ████
█████▄▀▀▄▄▀▀▀▀   ▄▄█▀▄█████
████████▄██▀▀▀▀▀▀██████████
███████████████████████████
.
█ █▀█ █▀█ █▀█  ▄  ▄▀▀ █   ▄▀█ ▀█▀ ▄▀▀   ▄███▄
█ █▀█ █ █ █ █ ▀█▀ ▀▀█ █   █ █  █  ▀▀█   ▀███▀
█ █▄█ █▄█ █▄█     ▄▄▀ ▀▄▄ █▄▀  █  ▄▄▀     
                                          █
████████████  ████████████  ████████████ 
███▀▀▀▀▀▀███  ███▀▀▀▀▀▀███  ███▀▀▀▀▀▀███ 
█▀▄██▀███▄▀█  █▀▄██▀███▄▀█  █▀▄██▀███▄▀████▄
█ █ ▀ ▀███ █  █ █ ▀ ▀███ █  █ █ ▀ ▀███ █████
█ ██    ▄█ █ █  ██    ▄█ █ █  ██    ▄█ █████
█▄▀██  ▀█▀▄█  █▄▀██  ▀█▀▄█  █▄▀██  ▀█▀▄████▀
███▄▄▄▄▄▄███  ███▄▄▄▄▄▄███  ███▄▄▄▄▄▄███
████████████  ████████████  ████████████

.OVER 3,000,000,000 BETS!.
               ▄███▄
            ▄████████

        ▄▄██████████
       █▀▀▀██▀▀▀████
      ███████████
    ▀▀▀████████████
      ▀███████████▀
      ▄███████████▄
 ▄
    ▀▀▀▀▀▀▀▀███▀▀   ▄
▀▀█▀▀
███████████▀▀▀█▀▀
    ████████████████
    ████████████████
▄▄▄▄▄▄███████████████▄▄▄▄▄▄
.
..PLAY NOW..
       ▄▄▄▄ ▄▄█████▄
     ████████████████
 ▄▄▄█████████████████████▄
███████████████████████████▄▄
▀█████████████████████████████
  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ▄█▄      ██
    ▄█▄▄█▄▄█▄          ▄▄
    ▄▄▄███▄▄▄    ▄ ▄ ▄ ▀▀
     ▀ ▄█▄ ▀  ▀▄█ ▀█▀ █▄▀
    ▄▄  ▀     ▀▀▀▀███▀▀▀▀
    ▀▀        ▀██▀▀█▀▀██▀
         ██   ▀ ▀▄▀█▀▄▀ ▀
J.Werner
Newbie
*
Offline Offline

Activity: 13
Merit: 0


View Profile
October 11, 2017, 09:24:29 AM
 #9

how many a secure web wallet do not create, still there is someone who can hack it...
mensa84
Full Member
***
Offline Offline

Activity: 184
Merit: 101



View Profile
October 11, 2017, 10:08:24 AM
 #10

Hello,

What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?

What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?

For webwallet need know:
-> php or python
-> mysql

For cold wallet
-> it is necessary to understand api (ex. qt wallet api)
-> unix

You need to use two different servers
-> First server = web wallet
-> Second server = cold wallet

   ⚡⚡ PRiVCY ⚡⚡   ▂▃▅▆█ PRiVCY (PRIV) is a new PoW/PoS revolutionary privacy project  ☞ Best privacy crypto-market! █▆▅▃▂
    Own Your Privacy! ───────────────── WebsiteGithub  |  Bitcointalk  |  Twitter  |  Discord  |  Explorer ─────────────────
   ✯✯✯✯✯                 ✈✈✈[Free Airdrop - Starts 9th June][Tor]✈✈✈ ║───────────║ Wallet ➢ Windows  |  macOS  |  Linux
YIY Company
Newbie
*
Offline Offline

Activity: 12
Merit: 0


View Profile WWW
October 11, 2017, 11:31:18 AM
 #11

html + css + js + node.js/python/php + SQL/mongoDB + react/angular/vue
bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2462



View Profile WWW
October 11, 2017, 03:15:15 PM
 #12

A programmer should not only be able to code some stuff, he should understand what he is doing.
You need a programmer who has experience in designing blockchain-applications.
On top of that you need a programmer who understands what "Security by Design" means. Not just a self-taught wannabe coder.
There is a lot of stuff going on in the web. Standing still in this business is regression.
You should rather pay a good fee to a good programmer if you want to have a good product in the end.

CryptoSpark
Newbie
*
Offline Offline

Activity: 63
Merit: 0


View Profile WWW
October 12, 2017, 04:10:25 PM
 #13

You need to understand many areas to be able to develop a safe web wallet.

> Infrastructure including setting up WAF's, hardened servers and placing sensitive components on servers behind multiple layers of security from Network Security Groups that restrict access to DMZ's. You can't just stick keys and services on a server near to the Internet, there has to be layers of security providing defence in depth. Assume your server will be attacked by the best hackers out there and then add even more security.

> For the front end itself you can use any technology you like as long as its used well. Javascript, .NET web applications, whatever takes your fancy.

> Again, don't do anything crypto on the web server, be very paranoid and consider those encryption to be the most precious object in the world.

> Then when you're 100% sure that you're security is tight, pen test it to pieces and run plenty of vulnerability scans.


But to answer your question, use whatever web technology you are most comfy with because it's more about understanding the risks and strengths of the technology. I'd rather an experienced php developer write an app in php than to try to write one in .NET just because .NET has a better reputation in terms of security.
BenOnceAgain
Member
**
Offline Offline

Activity: 208
Merit: 84

🌐 www.btric.org 🌐


View Profile WWW
October 12, 2017, 05:24:38 PM
 #14

Deploying a web wallet for cryptocurrency, especially Bitcoin, is basically painting a huge "HACK ME" sign on your entire infrastructure -- websites, DNS, email, backend, telephones, ISP, physical location, etc.  Even your social media and marketing needs to be resilient -- phishing attacks have occurred.

Strong security audits of infrastructure and codebase are essential to do prior to launch and on an ongoing basis.  Appropriate policies and procedures for back office functions are also essential to ensuring that your employees or team members do not succumb to temptation.  Basically you should extend a "trustless" model to your entire operation with multiple layers of fail safe measures.  And careful audits/monitoring during operations.

Think about it... what measures would you want a web wallet to take to protect YOUR BTC?  What measures would you want your bank to take to protect your fiat?

That's where you start.  And you have to keep track of vulnerabilities because they're discovered all the time in all manner of the software you'd need for a web stack.

Etc, etc, etc.  Banks keep money in vaults.  You need to build the digital equivalent of a vault to extend over your entire operation.

Dream it. Plan it. Build it.
Need help with your project? [MY WEBSITE] | [MY COMPANY] | [BLOG] | [TWITTER] | [LINKEDIN] | [EMAIL]
Want to help support the blockchain charity I'm building? [LEARN ABOUT BTRIC] | [DONATE] | [TWITTER] | [EMAIL]
matthewcampbell
Newbie
*
Offline Offline

Activity: 15
Merit: 1


View Profile WWW
October 13, 2017, 09:28:12 AM
 #15

Hello,

What kind of programmer do I need in order to create a secure web wallet? (so it could not be hacked easily) Any programmer could do that, or does he have to be a master of blockchain? If a programmer has 7 years of experience in programming, but knows nothing about crypto and blockchain, is he a viable option or not?

What I want to know here, does the guy has to possess some specific knowledge or any advanced programmer could build the code?

It is not hard to make a web wallet. The hard part is understanding security. So browser based attacks like XSS and what not. If you haven't been coding in industry for a long time, I think you should avoid doing this. Last thing we need is another insecure wallet or exchange that gets hacked.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!