Time to move from Electrum - page 2.

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: dhas on February 08, 2018, 09:57:26 PM

~
However the charges of this wallet was so high, when I tried to withdraw or transfer my amount into different wallet charges was almost half of my amount, that's why I can't used now my electrum. But in terms of services and features of this wallet no problem, only the charges amount for me is the problem.

what charges?
you mean the transaction fees that you are paying the miners to process your transaction? also known as network fees?
what does that have to do with Electrum. it was the huge backlog of 200,000 unconfirmed transactions which caused the high fees. and Electrum is simply suggesting fees you can change them if you think the suggestion is not appropriate.

dhas

full member

Activity: 168

Merit: 120

Quote from: buwaytress on February 02, 2018, 05:46:08 AM

I'm probably close to being the average Bitcoin user:
- with very average technical understanding
- owning a modest sum of coins (and in possession of and controlling even less)
- using mainstream consumer hardware and OS
- transacting at most once a day

I've tried many wallets in my time and Electrum is still the best fit for me, based on above reasons. As others point out, that the developer(s) behind Electrum respond quickly and effectively to vulnerabilities makes me even more confident. That said, I don't think I can ever trust anything I don't fully understand. That's not a criticism of Electrum, that's probably just a best practice of security.

However the charges of this wallet was so high, when I tried to withdraw or transfer my amount into different wallet charges was almost half of my amount, that's why I can't used now my electrum. But in terms of services and features of this wallet no problem, only the charges amount for me is the problem.

buwaytress

legendary

Activity: 2842

Merit: 3536

Join the world-leading crypto sportsbook NOW!

I'm probably close to being the average Bitcoin user:
- with very average technical understanding
- owning a modest sum of coins (and in possession of and controlling even less)
- using mainstream consumer hardware and OS
- transacting at most once a day

I've tried many wallets in my time and Electrum is still the best fit for me, based on above reasons. As others point out, that the developer(s) behind Electrum respond quickly and effectively to vulnerabilities makes me even more confident. That said, I don't think I can ever trust anything I don't fully understand. That's not a criticism of Electrum, that's probably just a best practice of security.

Spendulus

legendary

Activity: 2898

Merit: 1386

Quote from: shamzblueworld on January 08, 2018, 09:07:58 AM

So as you can see from the notice above, ( https://bitcointalksearch.org/topic/critical-electrum-vulnerability-2702103 )
Electrum is vulnerable, and has been for quite a while. Its just that they have discovered it now, and also that their first fix wasn't a fix either, that have upgraded it again.
I for one am not feeling much better after this upgrade either, because tomorrow maybe another one like this.

So is it time to move from electrum to another option?

What do you guys think?

I'm afraid your logic is backwards.

Cryptography exists and is used for security because methods are published, put into use, flaws are discovered and the method is improved, repeatedly.

This has been the case since the 1950s.

Electrum is an example of this process, is it not?

alexeyneu

member

Activity: 335

Merit: 31

Quote from: hugeblack on January 09, 2018, 07:10:59 AM

(Real Hacking)
....do not allow https (website) to http (RPC) access to localhost, so the attacking website commonly has to be http only as well.

Source : https://www.reddit.com/r/Bitcoin/comments/7ooack/critical_electrum_vulnerability/

do you know what is https?

digaran

copper member

Activity: 1330

Merit: 899

🖤😏

Quote from: Subutai on January 25, 2018, 06:38:09 AM

Always thought Electrum was a popular choice and it actually is for many people.
So I think they'll resolve their issues, it's been around for so long.

Core seems to be the best way to go If you don't mind running a full node.

I do mind running a full node, I wanted to kill myself after realizing that I'd get nothing if I run a full node. lol. Electrum is a good choice, it is open source and if you have something to add to the code to make it better, you should do it. if any other wallet is better than Electrum, you should use it.

Subutai

newbie

Activity: 19

Merit: 0

Always thought Electrum was a popular choice and it actually is for many people.
So I think they'll resolve their issues, it's been around for so long.

Core seems to be the best way to go If you don't mind running a full node.

swogerino

legendary

Activity: 3136

Merit: 1233

The person behind Electrum is ThomasV which is doing a great work to keep Electrum as safe and secure as possible. As you can read in their website Electrum is run only on donations so you should respect ThomasV work. Electrum is as safe as a hardware wallet when used properly which means to be installed in newly formatted computer. Bugs happen to any software and as ThomasV is only human without supernatural powers he can make errors too. He fixed it in just 2 days and that is a record time.

Of course everyone is free to move from Electrum but so far there is not any other wallet which is free and more secure than Electrum. Since you are worried, a hardware wallet maybe a good option for you if you have made your decision to move away from Electrum.

Spendulus

legendary

Activity: 2898

Merit: 1386

Quote from: pooya87 on January 09, 2018, 01:36:32 AM

Quote from: shamzblueworld on January 08, 2018, 09:07:58 AM

another option?

ingredients:

pen/pencil for writing: 1
paper to write on: as much as rquired
16-sided hexadecimal dice: 1
an even ground to roll the dice 64 times: as big as possible!

congratulations you now own a private key. not to get your bitcoin address you need:

some tool to convert the hexadecimal result to a bitcoin address.
a DVD with live linux to run that tool

now you are only trusting ECDSA and hashes to be safe. Grin

Or just sit in an outdoor cafe, and write down license plates numbers of passing cars.

cynical

full member

Activity: 490

Merit: 136

Interesting read.
I take from this thread that electrum is one of the better and widely used desktop type wallets.
It like all wallets of its type have flaws, and are fine for smaller bitcoin amounts.
The only 3 viable absolute secure options are: paper, cold storage and hardware.
?

cipher-x_09

full member

Activity: 168

Merit: 120

Which why I prefer to store less money in my online wallet because attack vectors are all over the internet world whether you have a strong or weak password hackers with a special type of abilities can gain easy accessed to your online wallet. Which why for me the safer tactics are first kept lesser amount of money stored in your wallet, the second download another wallet so that your bitcoin will be divided into parts and make sure the password you use for both is something you can easily remember and try writing the password in any paper.

cryptorampage

jr. member

Activity: 56

Merit: 30

Yes correct . The vulnerability issue has been on the ticker in the last few weeks . I have not flocked in any problem still . But i think time to move on . For BTC i would rather choose blockchain . Whats will be the ultimate solution ? I still believe on electrum wallet.

HCP

legendary

Activity: 2086

Merit: 4314

You realise that you can use Electrum WITH hardware wallets (Trezor and Ledger) right?

I prefer to use it this way, because I like the Electrum interface better than the "Ledger Wallet Bitcoin" and I feel that it gives me more flexibility with coin control and customised fees and "preview" which are not really available in the Ledger chrome app.

faatipoke

full member

Activity: 321

Merit: 100

Token That Will Transform The Venture Capital Mark

Why people still using Electrum for Bitcoin storage and transaction? I was using Electrum before because Bitcoin price was not high as now, so buying a hardware wallet was not worthy. I had some bitcoin but price of a hardware wallet was almost same as my bitcoin holding value.
But now things are changed and bitcoin price increased huge, Bitcoin owners made 20 times in one year, so I expect every Bitcoin owner has money to buy a hardware wallet and it really worth it
I can understand only if you are new to Bitcoin and do not have enough Bitcoin to store in a hardware wallet.

Jepli

member

Activity: 315

Merit: 10

Everyone is entitled for an option to use any wallet. But Electrum is still safe and useful we don't need to worry on anything because even if you use other wallets, still there is risk to it if hackers would really want to hack such.

bitbunnny

legendary

Activity: 2912

Merit: 1068

WOLF.BET - Provably Fair Crypto Casino

I beleive that every wallet have some kind of vulnerability. Those who are popular among many users, like Electrum, are more exposed and hackers are always trying to find the way how to breake the protection. But that doesn't mean that Electrum is bad wallet.
Because of potential vulnerabilities is clever to use multiple wallets of multiple types. You can't never be safe enough.

veleten

legendary

Activity: 2016

Merit: 1106

there is an update available,should be safe from any vulnerability
there are not many lightweight,easy to use,user friendly wallets to migrate to
electrum can be used to store some funds for day to day transactions
I highly doubt hackers would be able to breach your system and even if they do,there will be not much for the taking anyways

mpufatzis

full member

Activity: 840

Merit: 128

Electrum was vulnerable but not if you used an offline computer as cold wallet and another online (watch only) for the transactions.
I think you can still use it this way, it is the safest option. If you have many coins, buy a hardware wallet or for more safety use paper wallets. They are still usable.

jossiel

hero member

Activity: 2842

Merit: 625

I've noticed that news either that was discovered by theymos. If you are studying IT or you have been into an IT course, most of your professors or instructors will say that there's no perfect system.

But what happened to electrum is that you just need to upgrade the client as suggested to 3.0.5 even you recently upgrade to the last 3.0.4 (which is written above).

Quote from: shamzblueworld on January 08, 2018, 09:07:58 AM

So is it time to move from electrum to another option?

It's your choice if you want to move. I still trust electrum, it's one of the best wallets that I've used.

hugeblack

legendary

Activity: 2506

Merit: 3645

Buy/Sell crypto at BestChange

why all take Electrum vulnerability seriously (Real Hacking)

I quote this from Reddit @etmetm.

The common vector is javascript code on a malicious website scanning and connecting to the RPC interface for electrum running on localhost. More modern browsers do not allow https (website) to http (RPC) access to localhost, so the attacking website commonly has to be http only as well.

It can only steal funds if your wallet is passwordless, which is not usually the case. It's serious in that RPC can also be used to change settings in the electrum config.

Edit: CORS access https -> http should not work. POST requests from https to http seem to be possible indeed but they should be a lot slower. Brute forcing password will take time (especially on post requests) but good point for really short passwords. You'd need to keep open the attacker webpage for quite a while though.

Source : https://www.reddit.com/r/Bitcoin/comments/7ooack/critical_electrum_vulnerability/

Topic: Time to move from Electrum - page 2. (Read 734 times)