Is a blockchain.info wallet in Tor browser secure?

[pooya87]

Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.

But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.

Any thoughts?

using an online wallet with Tor is never safe, just do a quick google search on this matter and you'll see lot of people complaining about losing their hard earned bitcoins this way

[C0ins_R_U5]

Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.

But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.

Any thoughts?

using an online wallet with Tor is never safe, just do a quick google search on this matter and you'll see lot of people complaining about losing their hard earned bitcoins this way

who do you think operates the majority of the unsafe exit nodes.. the bad guys, or the "good' guys ?

[notlist3d]

You can do this safely now using blockchain.info's onion site:

*Malicious Link Removed*

It would still have the exit nodes.  I think it leads to possible tor problems.   I could be wrong, but look at past exit nodes have had multiple problems in past.

[AussieHash]

You can do this safely now using blockchain.info's onion site:

*Malicious Link Removed*

ALERT ! SCAMMER !

https://www.reddit.com/r/Bitcoin/comments/2nrt2n/dear_blockchaininfo_users_hackers_are_smart_your/cmgn09h

[wadili89]

Its not secure.

Those runnng Tor exit nodes can get your password. Highly recommended to use blockchain on its own with a IP lock.

[validium]

Some more info:

http://www.btcfeed.net/news/rogue-tor-node-hijacked-blockchain-info-accounts/

It looks like blockchain.info are blocking users from visiting the site using the main url via tor. They now have a .onion url

http://blockchatvqztbll.onion

Original tweet: https://twitter.com/blockchain/status/538719868292706304

[Testing123]

Some more info:

http://www.btcfeed.net/news/rogue-tor-node-hijacked-blockchain-info-accounts/

It looks like blockchain.info are blocking users from visiting the site using the main url via tor. They now have a .onion url

http://blockchatvqztbll.onion

Original tweet: https://twitter.com/blockchain/status/538719868292706304

I tested it just now with Tor browser. It still allows me to visit blockchain.info and use its block explorer function.
But when I try to access the wallet page, it doesn't allow me to do so and it gives me a message "A number of users have reported having their wallet stolen when connecting over TOR. Until the situation is resolved please use our onion URL http://blockchatvqztbll.onion".

[Kprawn]

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Use naked browsing with blockchain, just keep VERY small amounts online. {Why do you really need to have eg. 5 Bitcoins online all the time anyways}

When you want to buy something, just sweep it from cold storage and use it.

[wadili89]

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Use naked browsing with blockchain, just keep VERY small amounts online. {Why do you really need to have eg. 5 Bitcoins online all the time anyways}

When you want to buy something, just sweep it from cold storage and use it.

Strictly speaking, blockchain.info wallet is not an online wallet. The blockchain is online but the details stay local. The risk comes from sending the password which can be used to determine the key.

[ikydesu]

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

[Testing123]

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Exactly. All those attacks on Tor have made it less and less usable, especially when you need to log in a site.

[wadili89]

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

Its likely they have your private keys. There may be malware on your computer so do a clean format. Otherwise you will lose even if you use a different wallet.

[ranochigo]

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Exactly. All those attacks on Tor have made it less and less usable, especially when you need to log in a site.

Currently, blockchain.info have a tor onion address, http://blockchatvqztbll.onion/. When accessed using tor, the security risk of MITM is minimal compared to accessing blockchain.info using tor.

[ikydesu]

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

Its likely they have your private keys. There may be malware on your computer so do a clean format. Otherwise you will lose even if you use a different wallet.

Maybe.
now i use different wallet. But still question is why my all history and balance is reset.

[arieq]

if TOR is compromised, what would that mean for the rest of the encrypted world..?

[Bernard Lerring]

What about moving hidden services to i2p?

I understand it's a lot harder to set up. Is there any work going on to just download an "i2p browser bundle"? Or is it more complicated than that?

[Soappa]

I don't know much about Tor, so here is my question. If I use the .onion site to access my blockchain.info wallet, is my bitcoin safe against attacks on exit nodes?

[rz20]

Yes if you use .onion address the real site cant be spoofed by an exit node

[notlist3d]

Yes if you use .onion address the real site cant be spoofed by an exit node

It still risks the exit node being able to see traffic (including sensitive data).   Tor is just had enough exploits I would be afraid to use it for logging into something important.

[newflesh]

Yeah I'd be careful using blockchain.info with Tor, even with small amounts of bitcoins.

Heard way too many horror stories of people losing btc