Pages:
Author

Topic: ChinaCoinWallet WARNING!!!! CONTAINS CLIPBOARDLOGGER!!!! (Read 2453 times)

newbie
Activity: 20
Merit: 0
I took advice and installed CHNC wallet on virtual machine. Better safe than sorry...

That might not protect you if clipboard sharing feature is active. Not sure if virtualbox does this or not.


Also VMbox has the ability to disable host to VM clipboard sharing. https://forums.virtualbox.org/viewtopic.php?f=6&t=32446

By default Virtualbox VM's have clipboard sharing disabled. I always install any new wallets etc. in a VM but then I'm a heavy VM user anyhow.
full member
Activity: 238
Merit: 100
I dont have a wallet i keep all my CNC on btc-e i know its risky but i only have 663 if they rise ill sell convert to BTC/LTC/FTC and send to wallet.
full member
Activity: 154
Merit: 100
bitcoin supporter
The sources are available on github and I see no evidence of a logger. That's not to say the binaries aren't compromised, I have no idea. You should post evidence if this is really the case so people are aware.

source code could have clean, but we cant see what's inside compiled exe file.
newbie
Activity: 10
Merit: 0
Any one of these new alt. coins could contain something like this, rather, use another pc if you have one just for alt coins just to be safe...
newbie
Activity: 19
Merit: 0
This is how i found out.

For windows, download http://www.zemana.com and open the wallet. I let it run a but then I got a notification.. Just saying, all other wallets don't pop up a notification but this one. I could be wrong, but i'd rather throw a warning then let's innocent people be a victim.

Also VMbox has the ability to disable host to VM clipboard sharing. https://forums.virtualbox.org/viewtopic.php?f=6&t=32446
newbie
Activity: 42
Merit: 0
You knows I was thinking.  Maybe a clipboard logger is a good thing.  Say you want to knows how many clipboards you have in the house.  If you don't have a clipboard logger you may not know how many clipboards you have. 

But if you has a clipboard logger you might answer "Let me check the clipboard logger.  I see we have 5 clipboards."  A clipboard logger could come in handy from time to time.
newbie
Activity: 14
Merit: 0
Please don't spread lies. Honestly did you check the other clients too? They all have it. It's to use the paste address form clipboard option when you do transactions.
newbie
Activity: 17
Merit: 0
Ha,

you're doing well if you've managed to get QT clients installed for every coin type you own..
newbie
Activity: 27
Merit: 0
Hey guys,

I'm new to crpyto-currency.

Do I have to install new QT clients for EVERY coin type I own?

That's a lot of work! Can't we all just get along?  Huh
member
Activity: 131
Merit: 10
Any proof or update of the topic with latest info ?
newbie
Activity: 50
Merit: 0
seems ok to me, some more information  ? 
sr. member
Activity: 490
Merit: 250
The clipboard code just for copy/paste wallet address. Nothing else. Stop spamming.
sr. member
Activity: 331
Merit: 250
just run it in vm
legendary
Activity: 1064
Merit: 1000
COMPLETE FUD


Code:
void SendCoinsEntry::on_pasteButton_clicked()
{
    // Paste text from clipboard into recipient field
    ui->payTo->setText(QApplication::clipboard()->text());
}

Is in EVERY COIN'S QT CODE.

In the module:

/src/qt/sendcoinsentry.cpp


A newbie with two posts..How did he/she even post in this forum?
legendary
Activity: 2940
Merit: 1090
All the QT clients for coins contain a "copy to clipboard" button, evidently because Windows does not let you just sweep across text with your mouse and mouseclick it into the clipboard.

So maybe whatever malware detector is saying there is a clipboard watcher in there is merely seeing the support that is in there for clipboards?

Does it find the same thing in all the other QT-based clients of all the other coins too?

-MarkM-
newbie
Activity: 42
Merit: 0
Using peoples willingness to get ahead in crypto currencies to happily install something dodge, that couldn't happen on the interweb, could it  Grin
legendary
Activity: 1736
Merit: 1006
I took advice and installed CHNC wallet on virtual machine. Better safe than sorry...

That might not protect you if clipboard sharing feature is active. Not sure if virtualbox does this or not.

That said, maybe OP is FOS.
newbie
Activity: 42
Merit: 0
Yeah. it's bullshit.
newbie
Activity: 13
Merit: 0
fear tactics
full member
Activity: 130
Merit: 100
I took advice and installed CHNC wallet on virtual machine. Better safe than sorry...
Pages:
Jump to: