Bitcoin Forum
April 25, 2024, 01:48:19 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: blockchain.info wallet: aliases don't work anymore?  (Read 3615 times)
Kazimir (OP)
Legendary
*
Offline Offline

Activity: 1176
Merit: 1001



View Profile
October 29, 2013, 12:00:23 PM
 #1

I use a couple of blockchain.info wallets for spare change, and I always logged in using an alias link, such as https://blockchain.info/wallet/MyBigFatWallet (just a random example)

But for a while now, these alias links (or entering the alias manually at https://blockchain.info/wallet/login ) don't seem to work anymore. Instead I'm getting this:

Insecure Alias. Please login using your wallet identifier link.

So instead of the alias names, I now have to use the explicit wallet identifier, such as https://blockchain.info/wallet/5a1949f9-3a0d-53bd-1b7d-b7082e4b7ea1 (again, just a random example)

Piuk or anyone else: is this correct, or did I mess something up?

Note that the error is different from what I'm getting when entering a non-existing alias, in that case it just says "Unknown Wallet Identifier".

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
1714052899
Hero Member
*
Offline Offline

Posts: 1714052899

View Profile Personal Message (Offline)

Ignore
1714052899
Reply with quote  #2

1714052899
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714052899
Hero Member
*
Offline Offline

Posts: 1714052899

View Profile Personal Message (Offline)

Ignore
1714052899
Reply with quote  #2

1714052899
Report to moderator
1714052899
Hero Member
*
Offline Offline

Posts: 1714052899

View Profile Personal Message (Offline)

Ignore
1714052899
Reply with quote  #2

1714052899
Report to moderator
1714052899
Hero Member
*
Offline Offline

Posts: 1714052899

View Profile Personal Message (Offline)

Ignore
1714052899
Reply with quote  #2

1714052899
Report to moderator
Skinnkavaj
Sr. Member
****
Offline Offline

Activity: 469
Merit: 250


English Motherfucker do you speak it ?


View Profile
October 29, 2013, 02:28:42 PM
 #2

Sorry for hijacking thread, but kinda the same issue.
How do I login with another alias?
Like if I have two wallets.

Currently the only way for me to do it, is to do it in private mode because cookies or something save the wallet identifier and I cannot change it without going into private mode browsing.

bitpop
Legendary
*
Offline Offline

Activity: 2912
Merit: 1060



View Profile WWW
December 19, 2013, 02:46:53 PM
 #3

Removed as a security risk

Kazimir (OP)
Legendary
*
Offline Offline

Activity: 1176
Merit: 1001



View Profile
January 02, 2014, 07:41:52 AM
 #4

Removed as a security risk
Any more info on this? What's the involved risk, exactly?

Bad alias + bad password = more vulnerable to attacks than random GUID + bad password?

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
bitpop
Legendary
*
Offline Offline

Activity: 2912
Merit: 1060



View Profile WWW
January 02, 2014, 07:54:07 AM
 #5

Removed as a security risk
Any more info on this? What's the involved risk, exactly?

Bad alias + bad password = more vulnerable to attacks than random GUID + bad password?




I know reusing addresses is forbidden mostly

Kazimir (OP)
Legendary
*
Offline Offline

Activity: 1176
Merit: 1001



View Profile
January 02, 2014, 10:08:29 AM
 #6

Removed as a security risk
Any more info on this? What's the involved risk, exactly?

Bad alias + bad password = more vulnerable to attacks than random GUID + bad password?

I know reusing addresses is forbidden mostly
Uhmmm.... no understand.

I does reusing addresses relate to using an alias instead of a guid as a blockchain wallet ID?  Huh

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
bitpop
Legendary
*
Offline Offline

Activity: 2912
Merit: 1060



View Profile WWW
January 02, 2014, 10:47:13 AM
 #7

Removed as a security risk
Any more info on this? What's the involved risk, exactly?

Bad alias + bad password = more vulnerable to attacks than random GUID + bad password?

I know reusing addresses is forbidden mostly
Uhmmm.... no understand.

I does reusing addresses relate to using an alias instead of a guid as a blockchain wallet ID?  Huh

Oops nevermind

Yes usernames are bad because most people will use the same one here, etc. Now if the database leaks, they can now brute force your wallet if they think you're a big target.

Abdussamad
Legendary
*
Offline Offline

Activity: 3598
Merit: 1560



View Profile
January 09, 2014, 02:33:05 PM
 #8

The way bc.i works is your browser gets a copy of the encrypted wallet when it visits a page with a legitimate identifier. So aliases make it easy for hackers to get copies of encrypted wallets. All they have to do is run a bot that loops over a dictionary and harvests encrypted wallets en masse. Then they can take their sweet time brute forcing those wallets using their GPU farms. This is how many ordinary users who used simple passwords lost their coins.

So now when you visit an alias you get an email that tells you your wallet identifier and then you login using that.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!