Is a blockchain.info wallet in Tor browser secure?

Herbert2020

legendary

Activity: 1946

Merit: 1137

Quote from: Bernard Lerring on November 14, 2014, 06:42:04 PM

Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.

But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.

Any thoughts?

i warn you to stay away from using Blockchain.info with Tor. my friend lost his hard earned bitcoins this way.

Buziss

hero member

Activity: 896

Merit: 1000

It should be safe to use the .onion to access your blockchain.info wallet, but if you are looking for ultimate security, it is better to use an offline wallet or Trezor.

LewiesMan

sr. member

Activity: 384

Merit: 250

I think it can be (I wouldnt) trusted as blockchain.info has gotten an SSL cert for tor, the second .onion site after facebook!

BiTJack

hero member

Activity: 806

Merit: 1000

Absolutely not i won't trust TOR with that kinda stuff. If you need it but a vpn it's better than using tor nodes.

Foxpup

legendary

Activity: 4466

Merit: 3090

Vile Vixen and Miss Bitcointalk 2021-2023

Quote from: notlist3d on December 03, 2014, 08:58:25 AM

Quote from: rz20 on December 03, 2014, 08:17:47 AM

Yes if you use .onion address the real site cant be spoofed by an exit node

It still risks the exit node being able to see traffic (including sensitive data). Tor is just had enough exploits I would be afraid to use it for logging into something important.

No it doesn't. Hidden servers do not involve exit nodes at all, and all traffic to hidden servers is encrypted with that hidden server's public key, so no Tor nodes can see it. Please stop posting false information.

Minnlo

hero member

Activity: 868

Merit: 1000

Just use an offline wallet to keep your bitcoin safe. If you want to hide your IP, you can push your raw transactions on blockchain.info/pushtx with Tor.

newflesh

hero member

Activity: 630

Merit: 500

Yeah I'd be careful using blockchain.info with Tor, even with small amounts of bitcoins.

Heard way too many horror stories of people losing btc

notlist3d

legendary

Activity: 1456

Merit: 1000

Quote from: rz20 on December 03, 2014, 08:17:47 AM

Yes if you use .onion address the real site cant be spoofed by an exit node

It still risks the exit node being able to see traffic (including sensitive data). Tor is just had enough exploits I would be afraid to use it for logging into something important.

rz20

legendary

Activity: 1330

Merit: 1001

Yes if you use .onion address the real site cant be spoofed by an exit node

Soappa

hero member

Activity: 569

Merit: 500

I don't know much about Tor, so here is my question. If I use the .onion site to access my blockchain.info wallet, is my bitcoin safe against attacks on exit nodes?

Bernard Lerring

sr. member

Activity: 294

Merit: 250

What about moving hidden services to i2p?

I understand it's a lot harder to set up. Is there any work going on to just download an "i2p browser bundle"? Or is it more complicated than that?

arieq

sr. member

Activity: 364

Merit: 256

if TOR is compromised, what would that mean for the rest of the encrypted world..?

ikydesu

hero member

Activity: 686

Merit: 500

fb.com/Bitky.shop | Bitcoin Merch!Premium Quality!

Quote from: wadili89 on December 01, 2014, 01:48:57 AM

Quote from: ikydesu on November 30, 2014, 02:40:31 PM

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

Its likely they have your private keys. There may be malware on your computer so do a clean format. Otherwise you will lose even if you use a different wallet.

Maybe.
now i use different wallet. But still question is why my all history and balance is reset.

ranochigo

legendary

Activity: 3038

Merit: 4418

Crypto Swap Exchange

Quote from: Testing123 on November 30, 2014, 03:31:08 PM

Quote from: Kprawn on November 30, 2014, 10:46:28 AM

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Exactly. All those attacks on Tor have made it less and less usable, especially when you need to log in a site. Sad

Currently, blockchain.info have a tor onion address, http://blockchatvqztbll.onion/. When accessed using tor, the security risk of MITM is minimal compared to accessing blockchain.info using tor.

wadili89

legendary

Activity: 1106

Merit: 1000

Quote from: ikydesu on November 30, 2014, 02:40:31 PM

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

Its likely they have your private keys. There may be malware on your computer so do a clean format. Otherwise you will lose even if you use a different wallet.

Testing123

hero member

Activity: 561

Merit: 500

Quote from: Kprawn on November 30, 2014, 10:46:28 AM

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Exactly. All those attacks on Tor have made it less and less usable, especially when you need to log in a site. Sad

ikydesu

hero member

Activity: 686

Merit: 500

fb.com/Bitky.shop | Bitcoin Merch!Premium Quality!

Stolen twice!
And now my balance zero and reset my all history after the site upgrade!

wadili89

legendary

Activity: 1106

Merit: 1000

Quote from: Kprawn on November 30, 2014, 10:46:28 AM

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Use naked browsing with blockchain, just keep VERY small amounts online. {Why do you really need to have eg. 5 Bitcoins online all the time anyways}

When you want to buy something, just sweep it from cold storage and use it.

Strictly speaking, blockchain.info wallet is not an online wallet. The blockchain is online but the details stay local. The risk comes from sending the password which can be used to determine the key.

Kprawn

legendary

Activity: 1904

Merit: 1074

I will not trust Tor with anything these days... Exploits on exit nodes growing by the day.

Use naked browsing with blockchain, just keep VERY small amounts online. {Why do you really need to have eg. 5 Bitcoins online all the time anyways}

When you want to buy something, just sweep it from cold storage and use it.

Testing123

hero member

Activity: 561

Merit: 500

Quote from: validium on November 30, 2014, 03:34:03 AM

Some more info:

http://www.btcfeed.net/news/rogue-tor-node-hijacked-blockchain-info-accounts/

It looks like blockchain.info are blocking users from visiting the site using the main url via tor. They now have a .onion url

http://blockchatvqztbll.onion

Original tweet: https://twitter.com/blockchain/status/538719868292706304

I tested it just now with Tor browser. It still allows me to visit blockchain.info and use its block explorer function.
But when I try to access the wallet page, it doesn't allow me to do so and it gives me a message "A number of users have reported having their wallet stolen when connecting over TOR. Until the situation is resolved please use our onion URL http://blockchatvqztbll.onion".

Topic: Is a blockchain.info wallet in Tor browser secure? (Read 3797 times)