We all know blockchain.info, and we all knew mtgox.com.
How safe is it to store bitcoins in blockchain.info
How do i know that they will not get the money and run? Or something similar.
Not as safe as you think. Blockchain.info is a wallet which allows users to have their private keys and is open sourced. Private keys are generated client side and the server only has the encrypted private key. Password is also never transferred over the internet. Technically, this should be quite secure, as long as
#1 You used strong passwords
#2 The encryption is strong enough to deter any bruteforce attacks.
However, being an online wallet,
#1 they are susceptible to hacks and a hacker can potentially put a script to capture the passwords that are used to unlock the wallets. 2FA would not help. 2FA is a client side protection which only allows wallets to be downloaded to browser if the code is correct.
#2 They can implement changes without any authorization from a trusted third party.
- This happened one time in December last year. They implemented a code change which affected the randomness of the private keys and in turn allowed generation of insecure and non random private keys, causing attackers to permanently gain access to the keys generated during that period.
#3 Malware can still steal your wallet no matter how you secure it.
#4 If there is a vulnerability in SSL and you're using Tor, it is possible for an attacker to capture the wallet backup.
#5 It has a central validation system. Blockchain.info can trick users to accept non existent transactions or double spends.
SPV clients are arguably several thousand times more secure than this.