3 ms·
Wow myetherwallet is trusted for transaction very non-trivial amounts. What would a good mitigation strategy be for these types of attacks.
by kentt 8y ago
Wow myetherwallet is trusted for transaction very non-trivial amounts. What would a good mitigation strategy be for these types of attacks.
- artursapek 8y agoMaking sure the cert is valid.
- quickthrower2 8y agoAlso do a dry run before each usage, generating a throwaway wallet, and inspect the network tab / use fiddler to check if there is any suspicious sending of data. Even this isn't 100% as they could seed keys if bad person gets control of the website. This has been done many times in the IOTA community for example, albeit those sites were dodgy from the get-go. So I'd probably get a snapshot of their client code when you trust it, and serve it to yourself locally thereafter. It's a sad state of affairs that people use services like this. I have done so myself :-( The reason is that the Ethereum desktop clients suck. More than suck, they are untenable. The official client never synced even after running for 2 weeks. I tried this twice. It is awful.
- g09980 8y agoAlso, you can save the MEW webpage locally and use it.
- influx 8y agoUsing a hardware wallet and verifying the address on your hardware wallet is the same you entered into the website.