Pages:
Author

Topic: Bitcoin protocol can be hacked now! - page 2. (Read 1884 times)

hero member
Activity: 588
Merit: 501
March 05, 2014, 10:01:37 AM
#3
The private key of bitcoin could be recovered by flush+reload method. it seems to be true.
http://www.reddit.com/r/Bitcoin/comments/1zmgiq/new_side_channel_attack_that_can_recover_private/


Truth or lie, doesn't matter the fact of the matter is the btc protocol needs more security
Exchanges who used it should be more transparent such that their transactions are signed (verified)

One weaknesses of the protocol has already been exposed: https://bitcointalk.org/index.php?topic=492776.0;topicseen
now the community is fighting hard to uncover more weaknesses, not to exploit them, but to know what parts of the infrastructure needs replacement.

When you find the flaws, when you fix the flaws, you create a more secure protocol, and you create a more secure environment for the community to thrive
donator
Activity: 1218
Merit: 1079
Gerald Davis
March 05, 2014, 09:56:33 AM
#2
The private key of bitcoin could be recovered by flush+reload method. it seems to be true.
http://www.reddit.com/r/Bitcoin/comments/1zmgiq/new_side_channel_attack_that_can_recover_private/

You do realize this requires the attacker to have access to the CPU.  If the attacker has access to do the low level hardware you system is likely rooted, and he is reading your passphrase as you type it.

The one noteable exception is this makes VPS even less secure.  They already were a horrible idea for Bitcoin security but I guarantee you at least one "professional" bitcoin site is running on a VPS right now. Information security begins with physical security and you can't have physical security inside another persons vault (your VPS running on their hardware).  Title should be changed to "Using a VPS means you can be hacked (by this and countless other attack vectors)".
newbie
Activity: 8
Merit: 0
March 05, 2014, 09:50:07 AM
#1
The private key of bitcoin could be recovered by flush+reload method. it seems to be true.
http://www.reddit.com/r/Bitcoin/comments/1zmgiq/new_side_channel_attack_that_can_recover_private/
Pages:
Jump to: