3 ms·
Inject into their code and wait until the big players log in and reveal their keys to the trusted site. Game over. The encryption only protects against an oppor
by nwh 14y ago
Inject into their code and wait until the big players log in and reveal their keys to the trusted site. Game over. The encryption only protects against an opportunistic database grab.
- StavrosK 14y agoHow is this any different from someone keylogging your bank passwords?
- nwh 14y agoWell it's different, but the end result is the same. Banks are massive and have pretty much everything insured. If they mess up, it's on them. Not so much with bitcoin, if they mess up their users lose out. Additionally demonstrated by Mt. Gox, most bitcoin services are run by complete novices. Basic SQL injection on a website dealing with currency is unforgivable.