3

If I want to store a substantial number of Bitcoins, would there be any add security or safety to doing this in multiple blockchain.info hybrid ewallets, in stead of all in one?

4

For large numbers of coins, software wallets (online or desktop), no matter how well designed, are not safe. Online clients aren't safe because the ones that are encrypted your side (like blockchain) might somewhat be susceptible to man-in-the-middle attacks. As Lohoris mentioned, Blockchain uses js verification with Github, requiring both websites to be compromised - of which there is a slim chance. Standard desktop clients are inherently not safe either, not when you're storing thousands of $/£ in coins. Even with all the safeguards in place, the absolute safest storage method is to keep the keys offline.

You would be much better off generating a large number of keys using an offline computer and storing them on encrypted flash drives in safe locations. This is what the biggest known BTC hoarders (Winklevoss) do.

You can then add the addresses without the keys to Blockchain for easy monitoring and zero risk.

  • Totally a FUD. Online wallets aren't safer than standard clients, they only have different security concerns. – o0'. May 7 '13 at 8:31
  • 1
    I qualified my statement in a previous edit. They aren't safe because even the really good ones with browser side encryption (Blockchain.info et al) are subject to man-in-the-middle attacks. For someone storing a substantial value in Bitcoins (as per the question), this would present an unacceptable security risk. Edit: I see how it could be edited to say that any "wallet software" online or desktop, is unsafe. I will reword to this effect. – George Pearce May 7 '13 at 10:01
  • 2
    Good edit. I've modified it just a bit since they aren't really always susceptible to MITM attacks, since blockchain.info for instance has a JS verifier against github, hence you'd need to crack both blockchain.info and github to make the attack work. – o0'. May 7 '13 at 10:09
  • 2
    I didn't know that. Thanks for your help with clarification :) – George Pearce May 7 '13 at 10:11
  • 1
    Revised to include @Lohoris info on MITM attacks. – George Pearce May 7 '13 at 13:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.