Some more info:
http://www.btcfeed.net/news/rogue-tor-node-hijacked-blockchain-info-accounts/
It looks like blockchain.info are blocking users from visiting the site using the main url via tor. They now have a .onion url
http://blockchatvqztbll.onion
Original tweet: https://twitter.com/blockchain/status/538719868292706304
Topic: Is a blockchain.info wallet in Tor browser secure? - page 2. (Read 3797 times)
Its not secure.
Those runnng Tor exit nodes can get your password. Highly recommended to use blockchain on its own with a IP lock.
Those runnng Tor exit nodes can get your password. Highly recommended to use blockchain on its own with a IP lock.
You can do this safely now using blockchain.info's onion site:
*Malicious Link Removed*
ALERT ! SCAMMER !*Malicious Link Removed*
https://www.reddit.com/r/Bitcoin/comments/2nrt2n/dear_blockchaininfo_users_hackers_are_smart_your/cmgn09h
You can do this safely now using blockchain.info's onion site:
*Malicious Link Removed*
*Malicious Link Removed*
It would still have the exit nodes. I think it leads to possible tor problems. I could be wrong, but look at past exit nodes have had multiple problems in past.
Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
using an online wallet with Tor is never safe, just do a quick google search on this matter and you'll see lot of people complaining about losing their hard earned bitcoins this wayBut I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
who do you think operates the majority of the unsafe exit nodes.. the bad guys, or the "good' guys ?
Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
using an online wallet with Tor is never safe, just do a quick google search on this matter and you'll see lot of people complaining about losing their hard earned bitcoins this way But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
Tor data is encrypted. So I'm not sure how sniffing can expose you to vulnerability.
On the other hand, blockchain.info wallet scripting is client side. So, I think, even if u use Static IP, still you are secure...
sometimes bugs are discovered in the encryptation protocol, like the last time the forum advised everyone to change password
In a perfect world you use cold storage.
Can I ask is it ok to show IP for security? Or do you have to be anonymous completely.
Can I ask is it ok to show IP for security? Or do you have to be anonymous completely.
BTC wallet security is very important and not easy. There are a lot cases with trojans and so on. In fact I you want serious wallet security, PM me - even here in forum are different people - I have really good knowledge how to prevent your computer and wallet at best possible way.
As long as tor uses exit nodes there is a chance off bad things. (It HAS to use exit nodes so you are always at risk).
You can use it and it will be rolling the dice on if you get compromised.
You can use it and it will be rolling the dice on if you get compromised.
Several people have lost coins due to compromised nodes. I wouldn't bother logging in via it to be safe. Why must you use tor to have an account?
I thought it might be handy in case I ever want to open up one of my BIP38 paper wallets, since blockchain.info accepts a BIP38 private key import automatically. Then send some of the remaining balance back to a new cold (paper) wallet.
I like to use electrum with SOCKS5 to send tumbled coins to an offline paper wallet to ensure that they're not traceable in future.
Why would you need to use tor though for that? You could also use a proxxy if you wish but make sure that isn't compromised or saves your data.
Several people have lost coins due to compromised nodes. I wouldn't bother logging in via it to be safe. Why must you use tor to have an account?
I thought it might be handy in case I ever want to open up one of my BIP38 paper wallets, since blockchain.info accepts a BIP38 private key import automatically. Then send some of the remaining balance back to a new cold (paper) wallet.
I like to use electrum with SOCKS5 to send tumbled coins to an offline paper wallet to ensure that they're not traceable in future.
global moderator
Activity: 3934
Merit: 2676
Join the world-leading crypto sportsbook NOW!
A cold wallet is the most secure.
Only as safe as you are. If you use a dodgy site or the documents are saved in your printer that's two ways you could lose coins.
I think using the blockchain.info wallet in the Tor browser is compromised and one person here in the community have posted an issue about stealing his coins. I think the reason is about the exit nodes? I'm not sure but yeah, the security is vulnerable and is prone to hacks.
Several people have lost coins due to compromised nodes. I wouldn't bother logging in via it to be safe. Why must you use tor to have an account?
I guess I will have to keep using electrum through SOCKS5 proxy then. I thought that blockchain.info over Tor would be a simpler solution.
I think using the blockchain.info wallet in the Tor browser is compromised and one person here in the community have posted an issue about stealing his coins. I think the reason is about the exit nodes? I'm not sure but yeah, the security is vulnerable and is prone to hacks.
i read 4x topic
where people say this danger
1 guy in china lost big bitcoins and a lot in this scene
i am read and etc...
A cold wallet is the most secure.
Why dont u use your normal connection to access blockchain.info ?
I just figured that Tor was secure and recently learned about exit nodes being hacked. It's not really as good a system as I thought it was.
Suppose I create an online wallet with https://blockchain.info/ in Tor browser and keep a small stash of BTC in there. It's an anonymous stash, right? So long as I only access via Tor browser, use change addresses and send BTC wisely.
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
But I've recently read about people running Tor exit nodes and maliciously sniffing the data through them, so I was wondering if this is a safe way of having an online wallet without anyone gaining access to my password/BTC.
Any thoughts?
Tor data is encrypted. So I'm not sure how sniffing can expose you to vulnerability.
On the other hand, blockchain.info wallet scripting is client side. So, I think, even if u use Static IP, still you are secure...
There have been multiple exploits at exit node. On exit node it actually pulls up site so it is visible when there is a operational exploit.
The nodes in the middle you are correct they dont see end traffic.
Is this how Julian Assange got secured information ? I heard he and his accomplishes used to run Tor.
Thanks for the replies. I keep most in paper wallets, which use BIP38 encryption.
I was just wondering about small, shopping transactions in https://blockchain.info/ for convenience sake, since it's very easy to fire up Tor browser and access your account.
I will bear in mind that there is a slight risk of exploiting Tor exit nodes and give it a try.
I was just wondering about small, shopping transactions in https://blockchain.info/ for convenience sake, since it's very easy to fire up Tor browser and access your account.
I will bear in mind that there is a slight risk of exploiting Tor exit nodes and give it a try.
Why dont u use your normal connection to access blockchain.info ?
Jump to: