Bitcoin Forum
July 17, 2019, 11:21:39 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [2017-12-16] Mist Browser’s bug discloses private keys  (Read 40 times)
Rick Nolan
Newbie
*
Offline Offline

Activity: 168
Merit: 0


View Profile WWW
December 16, 2017, 01:06:42 PM
 #1

Yesterday the Mist team published a warning on the Ethereum blog stating that Mist Browser Beta has a bug that could potentially allow private keys to be stolen by malicious websites. The vulnerability affects Mist Browser Beta v0.9.3 and below.

The warning highlights how security update discrepancies across Mist, its underlying platform Electron, and the Chromium browser could compromise data privacy.

Read more: https://hype.codes/mist-browsers-bug-allows-private-keys-be-stolen

Do you use Mist browser?
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1563362499
Hero Member
*
Offline Offline

Posts: 1563362499

View Profile Personal Message (Offline)

Ignore
1563362499
Reply with quote  #2

1563362499
Report to moderator
MoonJeina
Sr. Member
****
Offline Offline

Activity: 655
Merit: 250


Make winning bets on sports with Sportsbet.io!


View Profile
December 16, 2017, 06:01:01 PM
 #2


Yesterday the Mist team published a warning on the Ethereum blog stating that Mist Browser Beta has a bug that could potentially allow private keys to be stolen by malicious websites. The vulnerability affects Mist Browser Beta v0.9.3 and below.

The warning highlights how security update discrepancies across Mist, its underlying platform Electron, and the Chromium browser could compromise data privacy.

Read more: https://hype.codes/mist-browsers-bug-allows-private-keys-be-stolen

Do you use Mist browser?

No , I don't use Mist Browser
I don't understand , instead of stating the problem and the risk of leaking the private keys why the developers did not think about implementing some changes in the version by making the browser more secure . Who would like to use  a browser that can cost the user its privacy and the private keys ?
That would definitely effect its  number of users.                               

   ▄▄██████▄▄
  ████████████
███▄▄
 ██████████████▀▀▀██▄
████████████████   ▀██▄
████████████████     ▀██
██████████████       ██▌
██████████████        ▐██
██▌▀▀██████▀▀         ▐██
▐██                   ██▌
 ██▄                 ▄██
  ▀██▄             ▄██▀
    ▀██▄▄▄     ▄▄▄██▀
      ▀▀█████████▀▀





███████████████████████████
███████████▀▀         ▀▀███
████████▀   ▄▄██▄  ▀█▄  ▀██
██████▀  ▄████████▄  ▀█  ██
████▀  ▄██████▄▀  ██▄    ██
███▀  ██████▄▀  ▄▀████▄  ██
██▀  █████▄▀  ▄▀██████  ▄██
██  ▀███▄▀  ▄▀███████  ▄███
██    ▀██▄▄▀███████▀  ▄████
██  █▄  ▀████████▀  ▄██████
██▄  ▀█▄  ▀██▀▀   ▄████████
███▄▄         ▄▄███████████
███████████████████████████
███████████████████████████
████████▀▀       ▀▀████████
█████▀   ▄ ▀███▀ ▄   ▀█████
████  ▄████▄ ▀ ▄████▄  ████
███  ▄ ▀███▀ ▄ ▀███▀ ▄  ███
██  ▄██ ▀▀ ▄███▄ ▀▀ ██▄  ██
██  █▀ ▄█ ███████ █▄ ▀█  ██
██   ▄███▄ █████ ▄███▄   ██
███  ████▀ ▄▄▄▄▄ ▀████  ███
████  ▀ ▄ ▀█████▀ ▄ ▀  ████
█████▄  ▀▀▄ ███ ▄▀▀  ▄█████
████████▄▄       ▄▄████████
███████████████████████████
████████     INDUSTRY LEADING BITCOIN SPORTSBOOK     ████████
LIVE
STREAMING
DAILY PRICE
BOOSTS
LIVE DEALER
CASINO
FAST & SECURE
PAYMENTS
███████████████████████████
████████▀▀       ▀▀████████
█████▀  ▄█▄  ▀  ▄▄   ▀█████
████  ▄  ▀    ▀█████▄  ████
███  ▀█▀   ▀█▄   ▀▀██▄  ███
██  ▄    █▄  ▀██▄▄  ▀█▄  ██
██  █▀ ▄  ▀█▄  ▀███▄  ▀  ██
██    ▄██  ▀██▄  ▀███▄   ██
███  ▀████  ▀███▄  ▀█▀  ███
████  ▀████  ▀████▄    ████
█████▄   ▀▀█▄  ▀▀▀   ▄█████
████████▄▄       ▄▄████████
███████████████████████████
███████████████████████████
████████▀▀ █████ ▀▀████████
█████▀    ▄█████▄    ▀█████
██████▄▄█▀▀ ▄▄▄ ▀▀█▄▄██████
███▀███▀ ▄███▀███▄ ▀███▀███
██   █ ▄██▀     ▀██▄ █   ██
██   █ ██         ██ █   ██
██   █ ▀██▄▄█ █▄▄██▀ █   ██
███▄███▄ ▀██▄▄▄██▀ ▄███▄███
██████▀▀█▄▄ ▀▀▀ ▄▄█▀▀██████
█████▄    ▀█████▀    ▄█████
████████▄▄ █████ ▄▄████████
███████████████████████████





[.
WIN WITH US!
]
iamTom123
Hero Member
*****
Offline Offline

Activity: 490
Merit: 501



View Profile
December 17, 2017, 09:45:09 AM
 #3


Yesterday the Mist team published a warning on the Ethereum blog stating that Mist Browser Beta has a bug that could potentially allow private keys to be stolen by malicious websites. The vulnerability affects Mist Browser Beta v0.9.3 and below. The warning highlights how security update discrepancies across Mist, its underlying platform Electron, and the Chromium browser could compromise data privacy. Read more: https://hype.codes/mist-browsers-bug-allows-private-keys-be-stolen Do you use Mist browser?

No , I don't use Mist Browser. I don't understand , instead of stating the problem and the risk of leaking the private keys why the developers did not think about implementing some changes in the version by making the browser more secure . Who would like to use  a browser that can cost the user its privacy and the private keys? That would definitely effect its  number of users.                               

Maybe they are divulging out the problem in the spirit of transparency and as a form of warning for their users while the problem has not yet been cleared. This is just telling us that as long as we are using third-party wallet there is no such thing as absolute security for our coins or tokens. It is then imperative for us to soon invest in offline wallet which can be more secured and truly under our own control. Security has and will always be a big concern for many of us in the world of cryptocurrency...this has become another industry unto itself. Hope the Mist team have already done the necessary actions to remedy the situation and to avoid the same occurrence again in the future.
veleten
Legendary
*
Offline Offline

Activity: 1638
Merit: 1062



View Profile
December 17, 2017, 10:05:03 AM
 #4

....which will affect approximately all 11 users of  Mist browser!
also the number will decrease significantly now Smiley
I can't imagine anyone in their right mind using some non mainstream browser to perform sensitive operations


Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!