4 ms·

So they were not using the 32 bytes of the 301 redirect message from random.org as the rng seed for all their wallets? > How exactly is wallet security any dif

So they were not using the 32 bytes of the 301 redirect message from random.org as the rng seed for all their wallets? > How exactly is wallet security any different from bank security? I don't need to start by installing a blank linux VM on a permanently offline computer, to have a secure bank account.

ryanlol 11y ago
No they weren't. The bug affected a very small minority of the apps users running broken android versions. Why would you have to do that with bitcoins? How are bitcoins any easier to steal than your bank credentials?
- aliakhtar 11y ago
  https://reddit.com/r/Bitcoin/comments/37p2gm/security_advisory_all_addresses_made_with_the/ https://reddit.com/r/Bitcoin/comments/37p2gm/security_adviso... "[SECURITY ADVISORY] All addresses made with the Android Blockchain.info wallet application since 1 May 2014 are potentially compromised, your funds are at a direct risk of theft." I've answered your 2nd question already: > I don't need to start by installing a blank linux VM on a permanently offline computer, to have a secure bank account.
  - ryanlol 11y ago
    >[SECURITY ADVISORY] All addresses made with the Android Blockchain.info wallet application since 1 May 2014 are potentially compromised, your funds are at a direct risk of theft. This is incorrect, posted by some random guy on reddit. Check out the source code he links to, it should be obvious that on any sane platform the random.org generator is used in conjunction with /dev/urandom. > I don't need to start by installing a blank linux VM on a permanently offline computer, to have a secure bank account. I don't even know where to begin here, why would you have to do this with bitcoins? How is storing your bitcoins on your computer any different than using online banking? In both scenarios you risk losing everything if you get hacked.

ryanlol 11y ago

No they weren't. The bug affected a very small minority of the apps users running broken android versions. Why would you have to do that with bitcoins? How are bitcoins any easier to steal than your bank credentials?

aliakhtar 11y ago
https://reddit.com/r/Bitcoin/comments/37p2gm/security_advisory_all_addresses_made_with_the/ https://reddit.com/r/Bitcoin/comments/37p2gm/security_adviso... "[SECURITY ADVISORY] All addresses made with the Android Blockchain.info wallet application since 1 May 2014 are potentially compromised, your funds are at a direct risk of theft." I've answered your 2nd question already: > I don't need to start by installing a blank linux VM on a permanently offline computer, to have a secure bank account.
- ryanlol 11y ago
  >[SECURITY ADVISORY] All addresses made with the Android Blockchain.info wallet application since 1 May 2014 are potentially compromised, your funds are at a direct risk of theft. This is incorrect, posted by some random guy on reddit. Check out the source code he links to, it should be obvious that on any sane platform the random.org generator is used in conjunction with /dev/urandom. > I don't need to start by installing a blank linux VM on a permanently offline computer, to have a secure bank account. I don't even know where to begin here, why would you have to do this with bitcoins? How is storing your bitcoins on your computer any different than using online banking? In both scenarios you risk losing everything if you get hacked.