Topic: TORwallet a scam? (Read 6619 times)
I don't have experiences with this TOR wallet but I see many people here have issues. Maybe they wanted to attract people with the fact that is TOR so more anonimous and now they are taking advantage of it. Maybe that you shift to another wallet like blockchain or something?
As you can see by the other posts in this thread, TOR Wallet is a scam. Sorry for your loss. It's tough to learn first hand that sending money to an anonymous stranger on the internet is generally a bad idea.
Sadly people will continue to get burnt by shit like this. Seriously how many times does it have to be stated -
If you are not the sole owner of your private keys then they are not your bitcoin's
I have had no problem using this site id yo try again and did yu manage t sort at the problem I h0pe you have if just keep trying you should be able to get your coins....
There are many negative reviews regarding this. This is why it is best to use blockchain.info online wallet, if you want an online one, the Bitcoin-qt wallet, if a software is needed and a hardware/paper wallet is best if you are talking about holding significant BTCs.
As you can see by the other posts in this thread, TOR Wallet is a scam. Sorry for your loss. It's tough to learn first hand that sending money to an anonymous stranger on the internet is generally a bad idea.
I just recently used my Tor wallet successfully, but today trying to log in to my account I got error message "Invalid username or password. Please login below."
I am 100% sure I used correct username and password
Then if I try to recover password to the registered email I get message:
"Thank you! Please check your e-mail for further information."
What the F*CK is going on`
This incident takes all credibility from your service!! What a joke!!
I have 0 trust on this site!
I am 100% sure I used correct username and password
Then if I try to recover password to the registered email I get message:
"Thank you! Please check your e-mail for further information."
What the F*CK is going on`
This incident takes all credibility from your service!! What a joke!!
I have 0 trust on this site!
wow, that is a really old thread
Looks like you will not get your BTC back.
Found this update to the story !
http://www.reddit.com/r/Bitcoin/comments/1z9jmy/just_noticed_my_tor_wallet_emptied_a_couple_of/
Any updates on this site? It is up and running again - and scamming.
Since you did not quote the part where I warned about that then I assume you did not read it:
Wasn't that an edit ? Sorry if it wasn't and I overlooked it You should be on the watch for their javascript changing though.
There are plugins for browsers that will warn you if the javascript changes.
Yep, but that isn't blockchain.info anymore, that's blockchain.info + a plugin.The source code as it stands now is very easy to read.
My mom still has issues with the concepts of copy and paste With such a plugin I would consider it to be reasonably safe.
I do agree, but many people still think it's some kind of security silver bullet where they don't have to trust the operator since he "doesn't have access to your keys". Honestly, how much people do you think use some kind of JS verifier ?Oh, that may have been an edit, but within minutes of the original post. I agree that for Mom and Pop using it that they are vulnerable. Good point about now having to trust the plugin, a valid concern.
I know a little perl, I may try to directly interface with their API if I can figure out local signing and decryption of keys.
Since you did not quote the part where I warned about that then I assume you did not read it:
Wasn't that an edit ? Sorry if it wasn't and I overlooked it You should be on the watch for their javascript changing though.
There are plugins for browsers that will warn you if the javascript changes.
Yep, but that isn't blockchain.info anymore, that's blockchain.info + a plugin.The source code as it stands now is very easy to read.
My mom still has issues with the concepts of copy and paste With such a plugin I would consider it to be reasonably safe.
I do agree, but many people still think it's some kind of security silver bullet where they don't have to trust the operator since he "doesn't have access to your keys". Honestly, how much people do you think use some kind of JS verifier ?If you want a quick throwaway wallet use a site like blockchan.info. Not only are your funds in your actual account(not consolidated into some giant wallet), but the private key is never revealed to the server. They could not take your coins even if they wanted to.
Fallacy, has been discussed before hereTL;DR : Your bitcoins can easily get stolen if the server gets compromised, the owner threatened or if he goes rogue, and that's simply because javascript is dynamically served from the server, it can be modified at will by anyone accessing the server.
Since you did not quote the part where I warned about that then I assume you did not read it:
You should be on the watch for their javascript changing though.
There are plugins for browsers that will warn you if the javascript changes. With this plugin an attacker cannot change the system to reveal your keys without you getting a warning. The source code as it stands now is very easy to read. With such a plugin I would consider it to be reasonably safe. It does however compromise you ability to be anonymous if that is your thing.
There is even a plugin just for and by blockchain to protect against js modification attacks: https://blockchain.info/wallet/verifier - however I prefer to use a generic version for the aformentioned potential of the operator going rouge.
You also forgot to mention man in the middle attacks which can take place at a tor exit node, but that would require the servers ssl cert to be compromised.
If you want a quick throwaway wallet use a site like blockchan.info. Not only are your funds in your actual account(not consolidated into some giant wallet), but the private key is never revealed to the server. They could not take your coins even if they wanted to.
Fallacy, has been discussed before hereTL;DR : Your bitcoins can easily get stolen if the server gets compromised, the owner threatened or if he goes rogue, and that's simply because javascript is dynamically served from the server, it can be modified at will by anyone accessing the server.
If you want a quick throwaway wallet use a site like blockchan.info. Not only are your funds in your actual account(not consolidated into some giant wallet), but the private key is never revealed to the server. They could not take your coins even if they wanted to.
This is an excellent site - perfect for what I want. (Note, it should be blockchain.info)
If you want a quick throwaway wallet use a site like blockchan.info. Not only are your funds in your actual account(not consolidated into some giant wallet), but the private key is never revealed to the server. They could not take your coins even if they wanted to.
Take a backup of the unencrypted keys from blockchain.info and you can import them into any client if the site goes down.
You should be on the watch for their javascript changing though.
Take a backup of the unencrypted keys from blockchain.info and you can import them into any client if the site goes down.
You should be on the watch for their javascript changing though.
Command line options might be a good way to go too. I haven't looked into those too much yet. Maybe have a special user which runs a very restricted shell, with multiple levels of escalation, one-time pass-codes etc and throw putty on a thumb-drive (though it's a very simple/small download in any case).
VNC and VPN might go a long way
Interesting TORwallet's last activity was September 16, 2012, 04:58:15 PM and post was September 14, 2012, 11:49:43 PM:
https://bitcointalksearch.org/user/torwallet-59945
I'm afraid you have been scammed, my friend.
He has not been scammed.
Please reply to our email with the information requested so we can get this resolved.
All this seems to be right before the current error message is displayed. I wonder if timmah got his bitcoins back?
https://bitcointalksearch.org/user/torwallet-59945
i sure hope these count as posts because I need to contact the *** at torwallet.net because they have 200+ of my btc locked up in their torwallet in a "Database Error!" on their webpage online wallet!!!! With no one answering emails or anything... am I just screwed out of my 2k?!!!
I hope they fix their website!!!!!!!!!!!!
I hope they fix their website!!!!!!!!!!!!
I'm afraid you have been scammed, my friend.
He has not been scammed.
Please reply to our email with the information requested so we can get this resolved.
All this seems to be right before the current error message is displayed. I wonder if timmah got his bitcoins back?
Jump to: