Do you think Coinbase wallet is safe? - page 2.

Stake

newbie

Activity: 56

Merit: 0

Quote from: fligen on November 26, 2013, 06:44:56 AM

Quote from: Stake on November 26, 2013, 06:43:53 AM

"We take careful measures to ensure that your bitcoin is as safe as possible." - Coinbase

That is what I agree with. Not necessarily that Coinbase does do this, but that HTTP based wallets can do this.

It is the best they can do when comparing HTTP based wallet's security with electrum or Qt.

Coinbase would use client sided signing like Blockchain.info. Coinbase does not. Your bitcoin on coinbase is not as safe as possible.

Great. Reread my post. I quote "Not necessarily that Coinbase does do this, but that HTTP based wallets can do this."

TheButterZone

legendary

Activity: 3038

Merit: 1032

RIP Mommy

The word "safe" should not appear within googolplex light years of the term "online wallet". Every single online wallet is as UNsafe as you can possibly store your BTC.

Even 458,000 people displaying their private keys on 458,000 billboards would be safer than any online wallet whatsoever in past, present, or future use.

fligen

member

Activity: 102

Merit: 10

Crypto Pros

Quote from: Stake on November 26, 2013, 06:43:53 AM

"We take careful measures to ensure that your bitcoin is as safe as possible." - Coinbase

That is what I agree with. Not necessarily that Coinbase does do this, but that HTTP based wallets can do this.

It is the best they can do when comparing HTTP based wallet's security with electrum or Qt.

Coinbase would use client sided signing like Blockchain.info. Coinbase does not. Your bitcoin on coinbase is not as safe as possible.

You need to stop bringing up new points unless you have addressed existing ones me or z3ro has bought up. You have not sufficiently done that, and therefore I will no longer be responding until you do so. I'm sure everyone else has already disregarded everything you said due to your affiliation.

z3r0

full member

Activity: 194

Merit: 100

Quote from: btcton on November 26, 2013, 06:42:45 AM

To break the quote chain...
It all really depends on the user. If the user has 6 viruses and 81 potential threats in their hard drive, Coinbase is probably going to be more secure.

LOL??? You think it is not trivial to steal funds from online wallets with malware? It's even easier.

Stake

newbie

Activity: 56

Merit: 0

"We take careful measures to ensure that your bitcoin is as safe as possible." - Coinbase

That is what I agree with. Not necessarily that Coinbase does do this, but that HTTP based wallets can do this.

It is the best they can do when comparing HTTP based wallet's security with electrum or Qt.

btcton

legendary

Activity: 1302

Merit: 1007

To break the quote chain...
It all really depends on the user. If the user has 6 viruses and 81 potential threats in their hard drive, Coinbase is probably going to be more secure.

fligen

member

Activity: 102

Merit: 10

Crypto Pros

No. Go respond to the attack surface first or acknowledge you are wrong.

Stake

newbie

Activity: 56

Merit: 0

Quote from: z3r0 on November 26, 2013, 06:39:36 AM

Quote from: Stake on November 26, 2013, 06:35:49 AM

Quote from: z3r0 on November 26, 2013, 06:33:57 AM

Quote from: z3r0 on November 26, 2013, 06:07:19 AM

Quote from: Stake on November 26, 2013, 06:06:09 AM

You present valid arguments.

One huge difference is that Coinbase provides 2-Factor Authentication.

Bitcoin user is infected with malware -> Bitcoin funds stolen.

Bitcoin user is infected with malware -> 2-Factor saves user's Coinbase funds.

Outdated. Two factor authentication is getting built into the Bitcoin protocol. In addition, there was a exploit for GOOGLE that let you bypass 2FA 10 days ago. Not just bypass 2FA, but let you access into anyone's account remotely.

Just think about it. Coming in from the field, unless you're a POI, nobody cares about your emails, nobody cares about your photos, nobody cares about your facebook. If you get hacked, it's not personal. But we DO care about your bitcoins, and honestly, I cannot thank you enough if you use an online wallet.

http://thegenesisblock.com/bitcoin-protocol-analysis-native-two-factor-authentication/

Also keep in mind that malware can bypass 2FA already (hint: I've written one that bypasses blockchain.info, would be happy to adapt it for coinbase too but from "market research" the big BTC is stored locally or bc.info). And blockchain.info (which is a hybrid wallet, IE offline wallet running in your browser) has a shit ton more security measures than coinbase.

To recap: it is impossible for online wallets to be safer than offline wallets simply because there is a bigger attack surface (web stack, employees, legal compliance, etc), and rational attackers always target the most lucrative target.

Online wallets don't magically have some bulletproof glass - they are running the a local wallet too, PLUS overhead (the online parts), PLUS employees, PLUS legal issues.

@Stake STOP. I have raised a point you cannot address. Instead of acknowledging defeat, you ignore it and jump onto something else. That is not how a rational discussion works, and I will no longer be responding to you.

You are not acting by rational rules of rhetoric, and we cannot continue.

Didn't see your post.

They both offer pros and cons.

What it really comes down to is convenience vs. security.

Usually technical-oriented people will choose security, average people or users will choose convenience especially with Coinbase flaunting their security measures.

They have an entire page dedicated to security...

They convince the clueless people they are just as secure.

You have not read what I said. Online wallets have a bigger attack surface than offline wallets and it is NOT POSSIBLE for it to be more secure. I have also proven offline wallets can be as convenient, if not more convenient, than online wallets earlier.

Oh and their security page is a joke.

I agree. Read the above post.

z3r0

full member

Activity: 194

Merit: 100

Quote from: Stake on November 26, 2013, 06:35:49 AM

Quote from: z3r0 on November 26, 2013, 06:33:57 AM

Quote from: z3r0 on November 26, 2013, 06:07:19 AM

Quote from: Stake on November 26, 2013, 06:06:09 AM

You present valid arguments.

One huge difference is that Coinbase provides 2-Factor Authentication.

Bitcoin user is infected with malware -> Bitcoin funds stolen.

Bitcoin user is infected with malware -> 2-Factor saves user's Coinbase funds.

Outdated. Two factor authentication is getting built into the Bitcoin protocol. In addition, there was a exploit for GOOGLE that let you bypass 2FA 10 days ago. Not just bypass 2FA, but let you access into anyone's account remotely.

Just think about it. Coming in from the field, unless you're a POI, nobody cares about your emails, nobody cares about your photos, nobody cares about your facebook. If you get hacked, it's not personal. But we DO care about your bitcoins, and honestly, I cannot thank you enough if you use an online wallet.

http://thegenesisblock.com/bitcoin-protocol-analysis-native-two-factor-authentication/

Also keep in mind that malware can bypass 2FA already (hint: I've written one that bypasses blockchain.info, would be happy to adapt it for coinbase too but from "market research" the big BTC is stored locally or bc.info). And blockchain.info (which is a hybrid wallet, IE offline wallet running in your browser) has a shit ton more security measures than coinbase.

To recap: it is impossible for online wallets to be safer than offline wallets simply because there is a bigger attack surface (web stack, employees, legal compliance, etc), and rational attackers always target the most lucrative target.

Online wallets don't magically have some bulletproof glass - they are running the a local wallet too, PLUS overhead (the online parts), PLUS employees, PLUS legal issues.

@Stake STOP. I have raised a point you cannot address. Instead of acknowledging defeat, you ignore it and jump onto something else. That is not how a rational discussion works, and I will no longer be responding to you.

You are not acting by rational rules of rhetoric, and we cannot continue.

Didn't see your post.

They both offer pros and cons.

What it really comes down to is convenience vs. security.

Usually technical-oriented people will choose security, average people or users will choose convenience especially with Coinbase flaunting their security measures.

They have an entire page dedicated to security...

They convince the clueless people they are just as secure.

You have not read what I said. Online wallets have a bigger attack surface than offline wallets and it is NOT POSSIBLE for it to be more secure. I have also proven offline wallets can be as convenient, if not more convenient, than online wallets earlier.

Oh and their security page is a joke.

Stake

newbie

Activity: 56

Merit: 0

Quote from: fligen on November 26, 2013, 06:37:22 AM

Quote from: Stake on November 26, 2013, 06:34:11 AM

Quote from: fligen on November 26, 2013, 06:32:10 AM

Quote from: Stake on November 26, 2013, 06:29:41 AM

It's good enough for hundreds of thousands of people (458,000 source).

Accounts != active users.

Still a large amount of people regardless.

Your logical fallacy is assuming that because a lot of people do it, that is right. I hope I don't have to explain why this is wrong.

Also, respond to z3r0 first who has made a pretty much conclusive argument. I'm going to ignore you too unless you rebut to what z3r0 has said (namely, online wallets have a bigger attack surface than offline wallets and it is not *possible* for online wallets to be more secure), or acknowledge you agree.

I'm not arguing that online wallets are safer.

I'm arguing that they can be as safe as can be.

I never said that because a lot of people do it, that it is right.

I simply stated that a lot of people put their faith into it which speaks volumes.

Just because many people murder doesn't make it right. Same concept.

fligen

member

Activity: 102

Merit: 10

Crypto Pros

Quote from: Stake on November 26, 2013, 06:34:11 AM

Quote from: fligen on November 26, 2013, 06:32:10 AM

Quote from: Stake on November 26, 2013, 06:29:41 AM

It's good enough for hundreds of thousands of people (458,000 source).

Accounts != active users.

Still a large amount of people regardless.

Your logical fallacy is assuming that because a lot of people do it, that is right. I hope I don't have to explain why this is wrong.

Also, respond to z3r0 first who has made a pretty much conclusive argument. I'm going to ignore you too unless you rebut to what z3r0 has said (namely, online wallets have a bigger attack surface than offline wallets and it is not *possible* for online wallets to be more secure), or acknowledge you agree.

Stake

newbie

Activity: 56

Merit: 0

Quote from: z3r0 on November 26, 2013, 06:33:57 AM

Quote from: z3r0 on November 26, 2013, 06:07:19 AM

Quote from: Stake on November 26, 2013, 06:06:09 AM

You present valid arguments.

One huge difference is that Coinbase provides 2-Factor Authentication.

Bitcoin user is infected with malware -> Bitcoin funds stolen.

Bitcoin user is infected with malware -> 2-Factor saves user's Coinbase funds.

Outdated. Two factor authentication is getting built into the Bitcoin protocol. In addition, there was a exploit for GOOGLE that let you bypass 2FA 10 days ago. Not just bypass 2FA, but let you access into anyone's account remotely.

Just think about it. Coming in from the field, unless you're a POI, nobody cares about your emails, nobody cares about your photos, nobody cares about your facebook. If you get hacked, it's not personal. But we DO care about your bitcoins, and honestly, I cannot thank you enough if you use an online wallet.

http://thegenesisblock.com/bitcoin-protocol-analysis-native-two-factor-authentication/

Also keep in mind that malware can bypass 2FA already (hint: I've written one that bypasses blockchain.info, would be happy to adapt it for coinbase too but from "market research" the big BTC is stored locally or bc.info). And blockchain.info (which is a hybrid wallet, IE offline wallet running in your browser) has a shit ton more security measures than coinbase.

To recap: it is impossible for online wallets to be safer than offline wallets simply because there is a bigger attack surface (web stack, employees, legal compliance, etc), and rational attackers always target the most lucrative target.

Online wallets don't magically have some bulletproof glass - they are running the a local wallet too, PLUS overhead (the online parts), PLUS employees, PLUS legal issues.

@Stake STOP. I have raised a point you cannot address. Instead of acknowledging defeat, you ignore it and jump onto something else. That is not how a rational discussion works, and I will no longer be responding to you.

You are not acting by rational rules of rhetoric, and we cannot continue.

Didn't see your post.

They both offer pros and cons.

What it really comes down to is convenience vs. security.

Usually technical-oriented people will choose security, average people or users will choose convenience especially with Coinbase flaunting their security measures.

They have an entire page dedicated to security...

They convince the clueless people they are just as secure.

Stake

newbie

Activity: 56

Merit: 0

Quote from: fligen on November 26, 2013, 06:32:10 AM

Quote from: Stake on November 26, 2013, 06:29:41 AM

It's good enough for hundreds of thousands of people (458,000 source).

Accounts != active users.

Still a large amount of people regardless.

z3r0

full member

Activity: 194

Merit: 100

Quote from: z3r0 on November 26, 2013, 06:07:19 AM

Quote from: Stake on November 26, 2013, 06:06:09 AM

You present valid arguments.

One huge difference is that Coinbase provides 2-Factor Authentication.

Bitcoin user is infected with malware -> Bitcoin funds stolen.

Bitcoin user is infected with malware -> 2-Factor saves user's Coinbase funds.

Outdated. Two factor authentication is getting built into the Bitcoin protocol. In addition, there was a exploit for GOOGLE that let you bypass 2FA 10 days ago. Not just bypass 2FA, but let you access into anyone's account remotely.

Just think about it. Coming in from the field, unless you're a POI, nobody cares about your emails, nobody cares about your photos, nobody cares about your facebook. If you get hacked, it's not personal. But we DO care about your bitcoins, and honestly, I cannot thank you enough if you use an online wallet.

http://thegenesisblock.com/bitcoin-protocol-analysis-native-two-factor-authentication/

Also keep in mind that malware can bypass 2FA already (hint: I've written one that bypasses blockchain.info, would be happy to adapt it for coinbase too but from "market research" the big BTC is stored locally or bc.info). And blockchain.info (which is a hybrid wallet, IE offline wallet running in your browser) has a shit ton more security measures than coinbase.

To recap: it is impossible for online wallets to be safer than offline wallets simply because there is a bigger attack surface (web stack, employees, legal compliance, etc), and rational attackers always target the most lucrative target.

Online wallets don't magically have some bulletproof glass - they are running the a local wallet too, PLUS overhead (the online parts), PLUS employees, PLUS legal issues.

@Stake STOP. I have raised a point you cannot address. Instead of acknowledging defeat, you ignore it and jump onto something else. That is not how a rational discussion works, and I will no longer be responding to you.

You are not acting by rational rules of rhetoric, and we cannot continue.

fligen

member

Activity: 102

Merit: 10

Crypto Pros

Quote from: Stake on November 26, 2013, 06:29:41 AM

It's good enough for hundreds of thousands of people (458,000 source).

Accounts != active users.

TheButterZone

legendary

Activity: 3038

Merit: 1032

RIP Mommy

Quote from: Stake on November 26, 2013, 06:29:41 AM

Quote from: TheButterZone on November 26, 2013, 06:29:03 AM

Quote from: Stake on November 26, 2013, 05:51:42 AM

Quote from: TheButterZone on November 26, 2013, 05:48:58 AM

They are human.

NOT GODS.

You are right.

But they do the best they can.

"The best they can" is NEVER NEVER NEVER NEVER EVER EVER EVER EVER MOTHERFUCKING EVER GOOD ENOUGH.

It's good enough for hundreds of thousands of people.

Who will lose all their BTC in a Coinbase hack JUST LIKE EVERY OTHER ONLINE WALLET.

Stake

newbie

Activity: 56

Merit: 0

Quote from: TheButterZone on November 26, 2013, 06:29:03 AM

Quote from: Stake on November 26, 2013, 05:51:42 AM

Quote from: TheButterZone on November 26, 2013, 05:48:58 AM

They are human.

NOT GODS.

You are right.

But they do the best they can.

"The best they can" is NEVER NEVER NEVER NEVER EVER EVER EVER EVER MOTHERFUCKING EVER GOOD ENOUGH.

It's good enough for hundreds of thousands of people (458,000 source).

TheButterZone

legendary

Activity: 3038

Merit: 1032

RIP Mommy

Quote from: Stake on November 26, 2013, 05:51:42 AM

Quote from: TheButterZone on November 26, 2013, 05:48:58 AM

They are human.

NOT GODS.

You are right.

But they do the best they can.

"The best they can" is NEVER NEVER NEVER NEVER EVER EVER EVER EVER MOTHERFUCKING EVER GOOD ENOUGH. You are playing Russian Roulette with a FULLY LOADED AND FULLY FUNCTIONAL GUN. THEY WILL BE HACKED, JUST LIKE EVERY OTHER ONLINE WALLET.

fligen

member

Activity: 102

Merit: 10

Crypto Pros

No online wallet is ever safe, period. You are aware that people have been hacking into routers and transparently redirecting paypal.com, banks, to their servers, and it won't take too long before they do the same for online wallets, right? SHODAN makes identifying targetable routers incredibly easy, and so is HTTPS (or just stripping https out).

z3r0

full member

Activity: 194

Merit: 100

Quote from: Stake on November 26, 2013, 06:06:09 AM

You present valid arguments.

One huge difference is that Coinbase provides 2-Factor Authentication.

Bitcoin user is infected with malware -> Bitcoin funds stolen.

Bitcoin user is infected with malware -> 2-Factor saves user's Coinbase funds.

Outdated. Two factor authentication is getting built into the Bitcoin protocol. In addition, there was a exploit for GOOGLE that let you bypass 2FA 10 days ago. Not just bypass 2FA, but let you access into anyone's account remotely.

Just think about it. Coming in from the field, unless you're a POI, nobody cares about your emails, nobody cares about your photos, nobody cares about your facebook. If you get hacked, it's not personal. But we DO care about your bitcoins, and honestly, I cannot thank you enough if you use an online wallet.

http://thegenesisblock.com/bitcoin-protocol-analysis-native-two-factor-authentication/

Also keep in mind that malware can bypass 2FA already (hint: I've written one that bypasses blockchain.info, would be happy to adapt it for coinbase too but from "market research" the big BTC is stored locally or bc.info). And blockchain.info (which is a hybrid wallet, IE offline wallet running in your browser) has a shit ton more security measures than coinbase.

To recap: it is impossible for online wallets to be safer than offline wallets simply because there is a bigger attack surface (web stack, employees, legal compliance, etc), and rational attackers always target the most lucrative target.

Online wallets don't magically have some bulletproof glass - they are running the a local wallet too, PLUS overhead (the online parts), PLUS employees, PLUS legal issues.

Topic: Do you think Coinbase wallet is safe? - page 2. (Read 17420 times)