Re:Why I find IOTA alarming
by ryan-c on Monday January 29, 2018 @09:19AM
(#16257591)
Requiring users to choose a password as a seed for their keys is a catastrophically bad vulnerability. Is that really how IOTA works?
[ Parent
| on HN ]
Re:Why I find IOTA alarming
by whataretensors on Monday January 29, 2018 @09:35AM
(#16257693)
Sort of. You have to generate a seed(like a private key) and use that to log in. The seed has to be random. Some used a dice, others /dev/random.
I fully expect a wave of stolen IOTA to come from people who typed a 'random' code.
I'm tempted to write a cracker for shitty seeds people come up with, but given what I've heard of the design of IOTA, I'm afraid of getting brain damage trying to understand and reimplement their algorithms.
Re:Why I find IOTA alarming
by whataretensors on Tuesday January 30, 2018 @12:55PM
(#16267305)
I've thought about this too but determined that it's too black hat for me.
Also look at it yourself, don't listen to others. Everyone is trying to do price manipulation on anything remotely related to crypto.
I thought the white paper and code were really interesting and thought-provoking fwiw, regardless of the viability of the project itself.
Re:Why I find IOTA alarming
by vvangemert on Monday January 29, 2018 @09:38AM
(#16257715)
No they used a online seed generator..