Pages:
Author

Topic: Can I trust my Chrome Extensions if I am a bitcoin user? (Read 1944 times)

sr. member
Activity: 406
Merit: 250
AltoCenter.com
Yeah, it's like keeping your window open and asking the neighbors not to peek...

Google was the favorite fishing site for heartbleed.
mkc
hero member
Activity: 517
Merit: 501
No browser can be trusted. No machine connected to internet can be trusted.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
Pretty much you can't trust anything electrical if you're a bitcoin user.

That is why, the most safe place bitcoin have, is on paper... paper wallet, you know. that is safe.

yeah but what about, you know...nanobots?
legendary
Activity: 2282
Merit: 1050
Monero Core Team
When it comes to software the only software that can be trusted is Free Libre Open Source Software (FLOSS) from a reputable source. For example GNU/Linux. A distant second is propriety software that was fully paid for and is targeted at business users. Any propriety software targeted at consumers is very high risk and if it is also gratis then it is virtually guaranteed to contain malware and / or adware.

When it comes Chrome, it is propriety on both Microsoft Windows and OS X. Chromium on GNU/Linux is FLOSS big difference. The problem is that Google allows add supported extensions, very bad, so unless the Chrome extension is FLOSS and from a non commercial source I say stay well away. Mozilla Firefox (or a Firefox clone on GNU/Linux) is way safer. Even there one has to be very careful with propriety extensions.

Just because the vast majority of users use propriety software from companies that have made espionage deals with, and / or provided exclusive access to the source code to, agencies such as the NSA (United States) the FSB (Russia) or the PLA (China) does not mean one can have a secure computer running GNU/Linux with a very minimal risk to one Bitcoins even if the computer is regularly used online.

I have not had a single satoshi stolen from me by malware, even though I keep my Bitcoins on computers that are regularly used online, and have been using Bitcoin since 2011. The secret is FLOSS.
legendary
Activity: 3276
Merit: 3067
Pretty much you can't trust anything electrical if you're a bitcoin user.

That is why, the most safe place bitcoin have, is on paper... paper wallet, you know. that is safe.
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
No you cannot. I recently had an extension on another computer that had auto-updated itself to inject ads into webpages. Chrome Extensions by default auto-update and scammers are known to buy extensions with lots of users from developers so they can release malicious versions instead.

Can you show some examples of that situation? Which extensions were good and now are malicious and not trustworthy?
http://arstechnica.com/security/2014/01/malware-vendors-buy-chrome-extensions-to-send-adware-filled-updates/
legendary
Activity: 1596
Merit: 1005
★Nitrogensports.eu★
No you cannot. I recently had an extension on another computer that had auto-updated itself to inject ads into webpages. Chrome Extensions by default auto-update and scammers are known to buy extensions with lots of users from developers so they can release malicious versions instead.

Can you show some examples of that situation? Which extensions were good and now are malicious and not trustworthy?
legendary
Activity: 1736
Merit: 1023
I would be careful and definitely be sure to use cold storage for the majority of your bitcoins. I haven't personally heard of a malicious chrome plugin stealing bitcoins but it could happen.
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
No you cannot. I recently had an extension on another computer that had auto-updated itself to inject ads into webpages. Chrome Extensions by default auto-update and scammers are known to buy extensions with lots of users from developers so they can release malicious versions instead.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
You should be keeping 95% of your stash in cold storage for starters.
sr. member
Activity: 280
Merit: 250
Brainwashed this way
Don't keep your bitcoins on your computer......use a password program so you are not constantly typing "real" passwords in....use a GOOD program like "Kaspersky Internet Security" for antivirus/malware....don't use 3rd party programs to access email accounts....use VPN.....always assume your computer is(or can be at any time)compromised....don't download anything from emails or forum links, even if it's from friends...
full member
Activity: 532
Merit: 100
legendary
Activity: 3472
Merit: 4794
What internet browser is best for security and anonymity?

Perhaps Lynx?
legendary
Activity: 840
Merit: 1000
What internet browser is best for security and anonymity? I'm currently using Chrome but after reading the posts here I'm rethinking that choice. Plus, Mozilla accepts Bitcoins donations which is good

I use tor for the anonymity part...but Im not really sure if its anonymous..!! n I generally use Firefox which works just great.!! never had any issues with it.!! Chrome is faster..but it crashes a lot.!! cant work with shit like that.!
legendary
Activity: 2170
Merit: 1427
Nothing can guarentee that your Bitcoins are safe, so don't trust anything.

Just make sure you don't download crappy software, and don't store the majority of your coins on the same machine that you use to browse / download stuff.
legendary
Activity: 1974
Merit: 1029
What internet browser is best for security and anonymity?

Tails is a good start. Not just a browser, though.
newbie
Activity: 30
Merit: 0
What internet browser is best for security and anonymity? I'm currently using Chrome but after reading the posts here I'm rethinking that choice. Plus, Mozilla accepts Bitcoins donations which is good
legendary
Activity: 1512
Merit: 1012
You can't trust Chrome.

legendary
Activity: 977
Merit: 1000
Pretty much you can't trust anything electrical if you're a bitcoin user.
full member
Activity: 149
Merit: 100
This could be a real concern? Are they bulletproof by the Chrome Web Store (in the same way an App is on the iOS App Store)?

Not unless you're willing to get hacked.
Pages:
Jump to: