How secure is Blockchain.info | Bitcointalksearch.org

invisiblehand

newbie

Activity: 49

Merit: 0

Quote from: Seal on September 16, 2012, 11:44:09 PM

Also, there is the ability to use a second password to protect your wallets, am I right in saying that this is the same type of encryption used in the Bitcoin-qt's password where you need it to send funds?

Yes there is the ability to put a second password for sending coins

However, on QT the password is the same as the one used to encrypt the wallet

On blockchain it can be a different password, and it is entered using an on-screen keyboard to protect against keylogging

Seal

donator

Activity: 848

Merit: 1078

Quote from: hazek on September 16, 2012, 10:04:42 AM

Very secure, I'd venture to say it's as secure as an ewallet can possibly be.

Your wallet is stored encrypted, it's only decrypted on your computer and never leaves it in such a form, you can email yourself a backup copy with 1 click and you can use two factor authentication and a javascript verifier.

How secure is the encryption on the wallets that are stored on blockchain.info's servers?

Also, there is the ability to use a second password to protect your wallets, am I right in saying that this is the same type of encryption used in the Bitcoin-qt's password where you need it to send funds?

Kupsi

legendary

Activity: 1193

Merit: 1003

9.9.2012: I predict that single digits... <- FAIL

Quote from: hazek on September 16, 2012, 07:14:56 PM

Quote from: Kupsi on September 16, 2012, 06:58:23 PM

You can send the backup to a gmail account with two factor authentication enabled.

Are gmail accounts encrypted so google can't see inside?

I guess they can read my mail. But they also need a keylogger on my machine to decrypt the backup.

hazek

legendary

Activity: 1078

Merit: 1002

Quote from: Kupsi on September 16, 2012, 06:58:23 PM

You can send the backup to a gmail account with two factor authentication enabled.

Are gmail accounts encrypted so google can't see inside?

Kupsi

legendary

Activity: 1193

Merit: 1003

9.9.2012: I predict that single digits... <- FAIL

You can send the backup to a gmail account with two factor authentication enabled.

hazek

legendary

Activity: 1078

Merit: 1002

Does it really work that way? Is the backup only encrypted by my password?

Gaff

hero member

Activity: 924

Merit: 502

Quote from: hazek on September 16, 2012, 10:04:42 AM

Your wallet is stored encrypted, it's only decrypted on your computer and never leaves it in such a form, you can email yourself a backup copy with 1 click and you can use two factor authentication and a javascript verifier.

Actually I reckon the backup is a weak point. One of the biggest risks you face is the possibility of a key-logger on your machine. Two factor authentication protects you against this (as long as an attacker can't use social engineering to get it removed). However if they can get the backup encrypted with the same password they can effectively bypass the two factor authentication.

A simple solution for this would be to encrypt the backups with a different (rarely typed in) password. I do hope blockchain.info offer this at some point.

hazek

legendary

Activity: 1078

Merit: 1002

Quote from: zoinky on September 16, 2012, 01:01:25 PM

Quote from: barbarousrelic on September 16, 2012, 11:59:49 AM

Who runs blockchain.info ? Is he a poster here?

https://bitcointalksearch.org/user/piuk-17928

https://bitcointalksearch.org/topic/blockchaininfo-bitcoin-block-explorer-currency-statistics-40264

zoinky

hero member

Activity: 811

Merit: 1000

Web Developer

Quote from: barbarousrelic on September 16, 2012, 11:59:49 AM

Who runs blockchain.info ? Is he a poster here?

https://bitcointalksearch.org/user/piuk-17928

barbarousrelic

hero member

Activity: 675

Merit: 502

Who runs blockchain.info ? Is he a poster here?

hazek

legendary

Activity: 1078

Merit: 1002

Quote from: fivemileshigh on September 16, 2012, 11:26:43 AM

Quote from: hazek on September 16, 2012, 10:04:42 AM

you can use two factor authentication and a javascript verifier.

Hey, what's this?

thanks

https://blockchain.info/wallet/verifier

fivemileshigh

full member

Activity: 136

Merit: 100

Quote from: hazek on September 16, 2012, 10:04:42 AM

you can use two factor authentication and a javascript verifier.

Hey, what's this?

thanks

hazek

legendary

Activity: 1078

Merit: 1002

Very secure, I'd venture to say it's as secure as an ewallet can possibly be.

Your wallet is stored encrypted, it's only decrypted on your computer and never leaves it in such a form, you can email yourself a backup copy with 1 click and you can use two factor authentication and a javascript verifier.

stepkrav

full member

Activity: 188

Merit: 100

If you feel uncomfortable, why don't you use you own wallets (cold storage, offline etc) and have blockchain's wallet only for temporary storage of btc?

Seal

donator

Activity: 848

Merit: 1078

I know this has been discussed in the official post but I wanted to ask in a separate thread for clarity.

Just how secure is blockchain.info with my private keys?

From what I can gather, your info is all AES encrypted however its ultimately stored centrally on the blockchan.info server. This makes me feel a little uncomfortable.

Whats stopping someone with access to the server performing some kind of man in the middle attack?

Topic: How secure is Blockchain.info (Read 5522 times)