Re:Instawallet Hacked
by GigabyteCoin on Wednesday April 03, 2013 @03:40PM
(#5488497)
I for one believe the barrage of attacks and attempted thefts will inevitably make Bitcoin safer. Just like Google Chrome's pwning contests, eventually nobody will be capable of claiming the prize.
[ Parent
| on HN ]
It's not really comparable to Pwn2Own. Pwn2Own's only vector of attack is by finding flaws in the software directly.
All of these wallet service companies employ people and many, many successful hacks are performed by exploiting the people involved / mistakes the people make.
So while software with enough hardening can eventually get to a state that's quite safe, as long as people are an active part of the security chain, you're going to have valid attack vectors.
There have also been attacks on Bitcoin companies that exploited their hosting company's procedures or lax handling by their employees. Securing this stuff is fundamentally hard.
Agreed, people are far easier targets than systems, unless the systems are negligently unsecured.
How are attacks on $yourbitcoinservice supposed to make $mynewbitcoinservice safer?
Re:Instawallet Hacked
by danielweber on Wednesday April 03, 2013 @04:44PM
(#5488940)
Because $mynewbitcoinservice will realize, "whoa, we should make sure we are hack-proof," and then use HTTPS to make sure they are hack-proof.
Hmmmm, I don't think "use HTTPS" is going to cut it in this case...
Instawallet used HTTPS.