Bitcoin Forum
May 04, 2024, 10:59:58 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: If Multibits servers were compromised  (Read 1502 times)
CleansingRains (OP)
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
January 18, 2015, 11:32:18 PM
 #1

Is this possible? If this did happen what would the attacker have hold of? I don't they would have your private keys because you sign the locally but I may be wrong please let me know if I am. If the servers got compromised no one would be able to send transactions right?

this is the one problem I have with multibit you have to rely on them.
1714820398
Hero Member
*
Offline Offline

Posts: 1714820398

View Profile Personal Message (Offline)

Ignore
1714820398
Reply with quote  #2

1714820398
Report to moderator
1714820398
Hero Member
*
Offline Offline

Posts: 1714820398

View Profile Personal Message (Offline)

Ignore
1714820398
Reply with quote  #2

1714820398
Report to moderator
1714820398
Hero Member
*
Offline Offline

Posts: 1714820398

View Profile Personal Message (Offline)

Ignore
1714820398
Reply with quote  #2

1714820398
Report to moderator
Bitcoin addresses contain a checksum, so it is very unlikely that mistyping an address will cause you to lose money.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714820398
Hero Member
*
Offline Offline

Posts: 1714820398

View Profile Personal Message (Offline)

Ignore
1714820398
Reply with quote  #2

1714820398
Report to moderator
1714820398
Hero Member
*
Offline Offline

Posts: 1714820398

View Profile Personal Message (Offline)

Ignore
1714820398
Reply with quote  #2

1714820398
Report to moderator
shorena
Copper Member
Legendary
*
Offline Offline

Activity: 1498
Merit: 1499


No I dont escrow anymore.


View Profile WWW
January 19, 2015, 09:22:13 AM
 #2

Is this possible? If this did happen what would the attacker have hold of? I don't they would have your private keys because you sign the locally but I may be wrong please let me know if I am. If the servers got compromised no one would be able to send transactions right?

this is the one problem I have with multibit you have to rely on them.

Servers? Electrum relies on special servers. Multibit works with regular bitcoin nodes[1]. If those were all compromised we would have a general problem.


[1] https://en.bitcoin.it/wiki/Scalability#Simplified_payment_verification

Im not really here, its just your imagination.
R2D221
Hero Member
*****
Offline Offline

Activity: 658
Merit: 500



View Profile
January 19, 2015, 02:36:30 PM
 #3

If MultiBit server (I don't think there's more than one) is compromised, then it would be dangerous to download the client, but people with the client already installed would have no issue using it.

An economy based on endless growth is unsustainable.
Blazr
Hero Member
*****
Offline Offline

Activity: 882
Merit: 1005



View Profile
February 06, 2015, 05:39:30 PM
 #4

The Multibit client does not rely on any third party servers, it communicates with the normal Bitcoin network.

Multibit do use servers that let people download the client. If these were compromised then anyone who downloads the client while the servers are compromised could be infected with bitcoin-stealing malware and/or the client be backdoored. This can be prevented by checking the download is signed by the Multibit developers PGP key before you install it.

Servers? Electrum relies on special servers. Multibit works with regular bitcoin nodes[1]. If those were all compromised we would have a general problem.

Electrum receives it's transaction data from special nodes (which anyone can run), this is for privacy purposes as with SPV the node you get your transaction data from knows what your Bitcoin addresses are, so it's a good idea to only use a node that you trust instead of randomly choosing them each time you make a tx. Electrum still connects to 8 normal Bitcoin nodes to get block headers to make sure that the electrum server you use isn't leaving any transactions out, so it's difficult for the node to do anything malicious.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!