4 ms·
Requiring users to choose a password as a seed for their keys is a catastrophically bad vulnerability. Is that really how IOTA works?
by ryan-c 9y ago
Requiring users to choose a password as a seed for their keys is a catastrophically bad vulnerability. Is that really how IOTA works?
- whataretensors 9y agoSort of. You have to generate a seed(like a private key) and use that to log in. The seed has to be random. Some used a dice, others /dev/random. I fully expect a wave of stolen IOTA to come from people who typed a 'random' code.
- vvangemert 9y agoNo they used a online seed generator..
- ryan-c 9y agoI'm tempted to write a cracker for shitty seeds people come up with, but given what I've heard of the design of IOTA, I'm afraid of getting brain damage trying to understand and reimplement their algorithms.
- whataretensors 9y agoI've thought about this too but determined that it's too black hat for me. Also look at it yourself, don't listen to others. Everyone is trying to do price manipulation on anything remotely related to crypto. I thought the white paper and code were really interesting and thought-provoking fwiw, regardless of the viability of the project itself.