Post
Topic
Board Reputation
Merits 1 from 1 user
Re: Flag - "CryptoSparks"
by
suchmoon
on 20/09/2019, 18:01:13 UTC
⭐ Merited by eddie13 (1)
I don't think he was trying to imply it would be like being in control of your own private keys

He most definitely was, multiple times.

An api key can be anything, if you generate a "private api key" of an online wallet service that can act as private key as long it's enabled. A bitcoin private key is nothing else than a way to authenticate you as the owner of that wallet. An api key with full privileges (aka private api key) authenticates you as the owner of the account controlling the funds. Now why should be wrong to say that an api key can act a private key? it seems that you don't get the fact tha api keys are modular tools and can be shaped at will.

And yet again i repeat, an API key is an authentication tool that based on the service can do basically anything.... even ACT AS A PRIVATE KEY.

I realize that he just painted himself into a corner and is not going to back down no matter what, but when you're taking someone's money I think lying about the risks is not cool.

At some point he started asking me to send him $100, can't find it now. I think it was when I gave him my API keys and told him to help himself to my bitcoins since the API key "can act" as a Bitcoin private key...