Search Results

And most every loss that has occurred was the result of inadquate security practices at third parties. That doesn't mean you have no risk of loss. …

Bitcoin writes to some log files (bitcoin/*.log and bitcoin/database/log.nnnnnn ) Are these (and everything else other than wallet.dat) clear of any information that would allow a forensic investigat …

There are a number of attacks which have the potential to allow an attacker to double spend but none of them are successful when the recommended practice of accepting payment only when the transaction …

This is probably best conveyed using the wiki: http://en.bitcoin.it/wiki/Securing_online_services

You are looking for ways to improve the client's protections against flaws? Here's a list of its current protections: http://en.bitcoin.it/wiki/Weaknesses#Denial_of_Service_.28DoS.29_attacks

It is good to consider the security of a system in which you are relying. The HTML and Javascript served is not obfuscated so the code is easily verified. … While there have been no formal security audits, at least not that I'm aware of, there are many people with strong skills in cryptography, programming, math and security that have looked at the code. …

There is a period of time before a transaction has fully confirmed where a tactic similar to counterfeiting could be successful. A race attack is one -- where at the time of purchase two transactions …

The wallet.dat contains not just encryption keys but addresses as well. If you are using the encrypt feature from the Bitcoin client to encrypted the keys then mailed to yourself those keys in the wa …

Generally, application updates do not occur automatically. As a result protection from a wallet-stealing compromise, for instance, can come from not installing updates until after most everyone else …

As of April 2012, the two methods are: What countries is the service available in? Argentina, Australia, Austria, Belgium, Bosnia and Herzegovina, Bulgaria, Canada, Chile, Croatia, Czech Repub …

While these methods aren't generally considered secure, there may be situations where security can be traded off for the convenience. …

CampBX contracts with McAfee to run a scan: https://www.mcafeesecure.com/RatingVerify?ref=campbx.com

Thanks to Elliptic Curve cryptography, a third party doesn't need to know the private key to generate a vanity address, as JoelKatz describes here: http://bitcointalk.org/index.php?topic=81865.msg90 …

Coinapult's SMS wallet is currently only available in the U.S. and Canada but it works as you describe -- usable for a transaction where either or both parties are using a feature phone with only SMS …

Gox: OTP using YubiKey or Google Authenticator Options: [On Login] | [For WIthdrawals] | [For Changes To Security] Camp BX: OTP/Google Authenticator Bitstamp: OTP/Google Authenticator Bitcoin-24: OTP …