Author

Topic: The New Rush Wallet (Read 1272 times)

legendary
Activity: 4410
Merit: 4788
August 07, 2014, 01:22:39 PM
#10

Browser extensions which may look at browser history, or any malware which finds browser history on disk. Using this on a foreign computer and not wiping history afterwards. Social bookmarking sites. Other cloud bookmarking/sync services. Social engineering to trick users into showing their URLs, because you know, URLs are safe.

Maybe it's not as easy as google hacking, but I am very confident people will find ways to attack that, even if just because browsing history and bookmarks are usually not that sensitive, not a worthy target, and thus most likely ill protected.


simply put trojans.. yep i understand. but thats not where bad coding is, thats more of training users in good security. EG rsh wallet also has a password option too.

trojans can grab any info, including being a key logger and rush wallet cant stop users for being foolish to download trojans.

one thing that would be beneficial for rush wallet is if they had an screen keyboard key aswell as passwords where the buttons are randomly placed and change everytime

one minute its this:
[6][4][2]
[3][7][8]
[9][5][1]
the next minute its this:
[7][9][5]
[6][3][1]
[2][4][8]

then a trojan that could maybe grab mouse cursor movements or touch screen location data still couldnt guess the passkey
full member
Activity: 187
Merit: 100
August 07, 2014, 01:12:27 PM
#9


This will end in tears because it just isn't possible to keep the wallet URL secret.

Instawallet 2.0 all over again.


instawallet was killed purely with the google search [ site:instawallet.com ] which crawled all pages and listing all 'secret urls'. so far rushwallet have got good enough code so that it doesnt list all pages on google...

so show me another way to break the secret?

Browser extensions which may look at browser history, or any malware which finds browser history on disk. Using this on a foreign computer and not wiping history afterwards. Social bookmarking sites. Other cloud bookmarking/sync services. Social engineering to trick users into showing their URLs, because you know, URLs are safe.

Maybe it's not as easy as google hacking, but I am very confident people will find ways to attack that, even if just because browsing history and bookmarks are usually not that sensitive, not a worthy target, and thus most likely ill protected.
legendary
Activity: 4410
Merit: 4788
August 07, 2014, 12:45:50 PM
#8


This will end in tears because it just isn't possible to keep the wallet URL secret.

Instawallet 2.0 all over again.


instawallet was killed purely with the google search [ site:instawallet.com ] which crawled all pages and listing all 'secret urls'. so far rushwallet have got good enough code so that it doesnt list all pages on google...

so show me another way to break the secret?
full member
Activity: 187
Merit: 100
August 07, 2014, 12:39:23 PM
#7


This will end in tears because it just isn't possible to keep the wallet URL secret.

Instawallet 2.0 all over again.
sr. member
Activity: 307
Merit: 250
et rich or die tryi
August 07, 2014, 12:04:38 PM
#6
The UI is really sexy but wasn't rush hacked in the past?
I will probably create a hot-wallet there because that UI is sexy as hell but i don't really want to store large amounts of BTC in there with that history.
legendary
Activity: 3038
Merit: 1660
lose: unfind ... loose: untight
August 07, 2014, 11:57:07 AM
#5
Where are the private keys stored?
legendary
Activity: 1456
Merit: 1001
This is the land of wolves now & you're not a wolf
August 07, 2014, 11:23:07 AM
#4
This looks really clean.   I don't like it when interfaces look to overwhelmingly busy...
hero member
Activity: 732
Merit: 500
Nosce te Ipsum
August 07, 2014, 10:59:26 AM
#3
This is fucking awesome!! I used to love Instawallet, and this is way better! Thanks for sharing man!
sr. member
Activity: 381
Merit: 250
August 07, 2014, 10:41:00 AM
#2
In an effort to help widen bitcoin’s reach and create a simpler experience when dealing with the online currency, KryptoKit, makers of the bitcoin wallet browser extension, launchedRushWallet, a new easy-to-use bitcoin wallet that works on all web browsers and mobile devices and unlike other wallets, it doesn’t require any login credentials.

http://www.ahametals.com/finally-instant-cross-platform-bitcoin-wallet/

This is pretty cool thank-you for sharing it! I think I also saw some news about this on Wired or Google Plus this morning as well. Here is a link to the actual wallet: https://rushwallet.com

Seems like you generate a wallet by moving your mouse around, then you bookmark a URL and are able too use the wallet, reminds me of how some of the Dice web-pages used to work.

Edit: Spelling
member
Activity: 72
Merit: 10
August 07, 2014, 09:53:16 AM
#1
In an effort to help widen bitcoin’s reach and create a simpler experience when dealing with the online currency, KryptoKit, makers of the bitcoin wallet browser extension, launchedRushWallet, a new easy-to-use bitcoin wallet that works on all web browsers and mobile devices and unlike other wallets, it doesn’t require any login credentials.

http://www.ahametals.com/finally-instant-cross-platform-bitcoin-wallet/





Jump to: