Blockchain.info - Bitcoin Block explorer & Currency Statistics

[easynote]

Good site... Recomend

[rme]

Please enable HSTS to avoid sslstrip or a MITM replacing the http page.
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

With PHP check if the page is been served in HTTP, if so redirect to HTTPS.
In HTTPS set the HSTS header:

Code:

header("strict-transport-security: max-age=31536000");

(Example implementation in PHP).

That tells the browser to only use the HTTPS versión of blockchain.info for a year (31536000 seconds).
So, my browser will go directly to https even if I have no internet conection.

Thanks.

[piuk]

Please enable HSTS to avoid sslstrip or a MITM replacing the http page.

Added.

[TheButterZone]

SMS "payment received at this watched address" alerts not going out?

[piuk]

SMS "payment received at this watched address" alerts not going out?

Are you getting alerts through other methods (i.e. email alerts)?

----

New method call to create wallets programatically - https://blockchain.info/api/create_wallet

By passing in a pre generated private key you can deposit and withdraw funds directly to the wallet using the wallet api or an external client. Request an API code here: https://blockchain.info/api/api_create_code

[TheButterZone]

SMS "payment received at this watched address" alerts not going out?

Are you getting alerts through other methods (i.e. email alerts)?

Getting SMS again.

I thought maybe there was a minimum BTC received threshold I set to trigger notifications, so I tried to login on the desktop site by copying and pasting my password (and retyping it) out of Keychain Access, and got "Error Decrypting Wallet. Please check your password is correct." then when I put in my mnemonic phrase, I get "Password Hints Have Not Been Set For This Wallet" in a pink box and "URIError: malformed URI sequence" in a gray box under it.

I was able to logout and login with the password on the IOS app (ETA: and Safari 5.1.10) for the same identifier... so what's wrong with the desktop site now?

[piuk]

"URIError: malformed URI sequence" in a gray box under it.

Could you check if there are any errors in the javascript console. Otherwise open a ticket https://blockchain.info/support-desk and I'll take a look further.

[TheButterZone]

"URIError: malformed URI sequence" in a gray box under it.

Could you check if there are any errors in the javascript console. Otherwise open a ticket https://blockchain.info/support-desk and I'll take a look further.

JS: [19:31:45.368] SyntaxError: Using //@ to indicate source map URL pragmas is deprecated. Use //# instead @ https://blockchain.info/Resources/wallet/jquery.min.js:1
JS: [19:31:45.938] Use of getPreventDefault() is deprecated.  Use defaultPrevented instead. @ https://blockchain.info/Resources/wallet/jquery.min.js:3
Security: [19:31:45.772] Content Security Policy: Directive inline script base restriction violated @ https://blockchain.info/wallet/recover-wallet

All the rest are CSS errors & warnings.

FF24

[SquishySquish]

Security error? Does that mean the blockchain security is compromised?

[umbrel]

Security error? Does that mean the blockchain security is compromised?

Do you read as google bot? searching for specific keywords?
Javascript error doesn't mean you need to start panic 

[piuk]

Do you read as google bot? searching for specific keywords?
Javascript error doesn't mean you need to start panic 

Yep, no need to worry.

TheButterZone, there is some problem decoding the mnemonic but i'm not sure the exact cause. If your not able to login into the wallet another way the please open a support ticket and i'll take a look as soon as possible. If you are able to login note down a new mnemonic and test into on the recover-wallet page.

[maxmint]

Feature suggestion: When creating a payment request (by clicking the "Request Payment" button on an address page) it would be great if one could enter a EUR or USD amount. Right now you can only enter BTC amounts, but I do know several merchants who price their products in Euro and would like to be able to create payment requestsbased on Euro amounts.

[willphase]

my android app now doesn't work and triggers blocking because of my IP locking, it didn't do this before...

Will

[SquishySquish]

IP blocking?? What is this?

[willphase]

IP blocking?? What is this?

it's under security options, you can lock the IP addresses that are allowed to connect to your wallet.  This historically has never affected the android app, but it appears to do so now.

Will

[truy]

Minor feature request:
Please print out a text version of the TOTP secret key below the qr code image on the two factor authentication settings page.

[Blockchain_Helper]

my android app now doesn't work and triggers blocking because of my IP locking, it didn't do this before...
Will

I've had a couple other users note this change in the last week or so. I already sent this off to Piuk, but thanks for the heads up!

Minor feature request: Please print out a text version of the TOTP secret key below the qr code image on the two factor authentication settings page.

I'll pass this suggestion along, but in the meantime you can use a different QR scanner app to get a copy of the secret key. If you ever need to reset two factor authentication, then you can just submit a 2FA reset request. We usually process these within 12-24 hours max (I check them multiple times a day).

[dancupid]

Any chance you could add a $ approximation to the miner's fee on the custom send money page.
It's a little inconvenient to do have to calculate the rough value of what I'm willing to pay and then double check I've counted the zeros correctly.
It's very easy to accidentally pay 10x more than was intended.
Thanks.

[VTC]

Not 100% sure, but with the new chrome app, the inactivity timeout loggout doesn't seem to work.

I have it set to default 10 minutes and it never logs me off, whereas before I had to relogin all the time.

[minimalB]

What happened with Firefox browser extension?

https://addons.mozilla.org/en-US/firefox/addon/my-wallet/  gives me "We're sorry, but we can't find what you're looking for."

Also, many users (including myself) have reported that version 1.98 wasn't working properly, did anyone from support comment about that? I can't find any comment regarding this.