Post
Topic
Board Speculation (Altcoins)
Re: [XMR] Monero Speculation
by
GingerAle
on 17/03/2016, 14:44:58 UTC
If I understood correctly (bear in mind that this rarely happens Tongue) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

Quote
So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.


Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there. Tongue
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

I'll just speculate here, but I believe what was ultimately referred to was the vulnerability of MITM when accessing mymonero via Tor because outproxies are essentially just "men in the middle" and anyone using them is trusting that they are benign. I'm pretty sure that if you see the https in standard clearnet, things are encrypted end to end so noone in the middle can read your stuffs. This doesn't prevent malware on your end from swiping your stuffs though. Keyloggers I guess would be the main thing. Or if your text input into the mymonero login is stored temporarily in any fashion. But ultimately I don't really know what I'm talking about, I'm just piecing together what I've gathered so far.