Quote from: gweedo on January 27, 2013, 06:33:22 PM

Quote from: schalk on January 27, 2013, 06:28:31 PM

Quote from: gweedo on January 27, 2013, 06:18:25 PM

Quote from: schalk on January 27, 2013, 05:43:41 PM

Quote

Bitcoinsharp and bitcoincs are more of librarys to be used on a desktop and functions as a wallet, and not a connection to bitcoind for web applications.

You are wrong. I have found it quite handy being able to generate bitcoin addresses, as well as using https://blockchain.info/pushtx to push transactions to the network. No need to use a bitcoind.

I bet you be that one that saves private keys in a database unencrypted and then when a sql injection is performed you are like OMG someone stole from me...

Bitcoind does it job and does it well

Actually no. I'm the kind of guy that uses a ORM (specifically http://www.mindscapehq.com/products/lightspeed) so I don't have to concentrate on making sure queries are escaped. I'm also the kind of guy that uses encryption / hashing when storing sensitive data. But thanks for sharing your concern.

ORM are used by you cause you don't take the time to learn about real security. I would even escape when using an ORM especially lightspeed, it aint that great of a server. I could make apache or nginx more secure anyway. Also you wouldn't use hashing to store a bitcoin private key, you would need to do a two way function probably aes so where you storing them keys?

Encryption / Hashing is decided on a case by case basis. Usually when dealing with passwords I would use hashing / salting of the password. However depending on what I want to do with a bitcoin private key would depend on how I would store it.

And yup, you nailed the head on that, I use an ORM since I don't take time to learn about security.