Re:Reddit has shut down its nascent cryptocurrency project
by geofft on Monday February 02, 2015 @01:09PM
(#8985628)
That's also true of C with an auto-update framework. That's also true of closed-source C.
There are plenty of ways to avoid that particular trap of JS crypto (or more specifically web crypto). Bundling it inside an extension comes to mind.
All that said, I'm not even convinced this attack is within the threat model of Redditcoin, given that it's resources for a specific website that is also the JS origin.
There are plenty of ways to avoid that particular trap of JS crypto (or more specifically web crypto). Bundling it inside an extension comes to mind.
All that said, I'm not even convinced this attack is within the threat model of Redditcoin, given that it's resources for a specific website that is also the JS origin.