Bitcoin Forum
November 13, 2024, 06:00:15 PM *
News: Check out the artwork 1Dq created to commemorate this forum's 15th anniversary
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: skepticism  (Read 1238 times)
wigglyuk (OP)
Full Member
***
Offline Offline

Activity: 120
Merit: 100



View Profile
March 22, 2012, 07:08:52 AM
 #1

What if the latest bitcoin-qt is packed with a wallet-stealing trojan...

and when our anti-virus software asks us, "should Bitcoin.exe be trusted", we click Yes out of habit?

just remember EVERYONE is out to get your bitcoins, even the ones who supplied you with the initial software...

List of Active Altcoin Giveaways and Altcoin Faucets | https://bitcointalk.org/index.php?topic=322446.0
Kluge
Donator
Legendary
*
Offline Offline

Activity: 1218
Merit: 1015



View Profile
March 22, 2012, 08:07:21 AM
 #2

Why would a thief utterly destroy confidence in the currency/commodity/accounting-system/whatever-you-wanna-call-it he's stealing?

Actually.... It would be pretty interesting to see the results of that scenario playing out. Would the inherent value of Bitcoin be able to overcome the "taint" of having devs distribute thieving software? I very much doubt over 5% of Satoshi Client users analyzed its source code, or even compiled the program themselves -- they rely on faith in the devs.

Oh, a small step beyond.... What if everyone's lying to me and I don't exist in the reality I perceive, but everyone else (in the "real" real world) is actually watching how I act in this environment?  Roll Eyes  Tongue
Stephen Gornick
Legendary
*
Offline Offline

Activity: 2506
Merit: 1010


View Profile
March 22, 2012, 08:15:48 AM
Last edit: March 22, 2012, 10:03:35 AM by Stephen Gornick
 #3

What if the latest bitcoin-qt is packed with a wallet-stealing trojan...

You can verify the checksum for the Bitcoin.org client binary that you download as described here:
 - http://bitcointalk.org/index.php?topic=69355.msg813205#msg813205

There are many eyes on these releases.  Even so, if you don't trust the Bitcoin.org binary, you can always build from the github source yourself.

If you don't trust the Bitcoin.org source, you can always use another client (e.g., MultiBit, Electrum, Armory).

Also, it is not usually the case where an update needs to be performed right away -- especially if you aren't mining.  If you are concerned, there's no need to be the first to do an upgrade.

Unichange.me

            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █
            █


theymos
Administrator
Legendary
*
Offline Offline

Activity: 5376
Merit: 13410


View Profile
March 22, 2012, 08:26:58 AM
 #4

0.5.3.1 was signed by at least four of the top Bitcoin developers. It'd be very difficult for an attacker to get these signatures on a trojan.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
wumpus
Hero Member
*****
Offline Offline

Activity: 812
Merit: 1022

No Maps for These Territories


View Profile
March 24, 2012, 01:47:52 PM
 #5

build.it.from.source

Bitcoin Core developer [PGP] Warning: For most, coin loss is a larger risk than coin theft. A disk can die any time. Regularly back up your wallet through FileBackup Wallet to an external storage or the (encrypted!) cloud. Use a separate offline wallet for storing larger amounts.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!