Quote from: hyphymikey on December 02, 2014, 04:28:34 AM

I've always told people to enable the second password. Where you have to enter it to send coins from the wallet. You have to type it in using the on screen keyboard. I was wondering, how hard is it for a hacker to get this password? Do they just record your screen and watch the mouse move around and try to guess where you clicked? Or is that pretty hard to do?

There is malware that waits until you have unlocked your wallet and then bye bye bitcoins. Better use Linux and have a closed down system for your coins if you are keeping them on your computer to decrease the chances of this happening to you.

Quote from: Foxpup on December 02, 2014, 06:40:00 AM

Quote from: hitton on November 30, 2014, 11:18:51 PM

Quote from: HYPERfuture on November 28, 2014, 02:56:14 PM

I've had enough of seeing people who have been hacked and lose coins on blockchain.info so here is a guide for beginners to make your coins 100% secure and safe from hackers.

You forgot the most important step: either don't use TOR to access your Blockchain.info wallet, or use their new onion URL: *questionable link removed*

Due to the alleged questionability of that link (blockchatvqztbll.onion), I questioned it, and found the answer is that it is genuine. It is the link provided by Blockchain.info if you connect to their regular site via Tor (and check the certificate to avoid MITM attacks). Is it really that hard to give newbies any credit whatsoever? Wait, what am I thinking? Of course it is. Never mind.

Ha ha well it is nice to see that hitton had the best of intentions. I would still recommend NEVER using TOR even if a link may supposedly be safe.

Quote from: ikydesu on December 02, 2014, 07:15:55 AM

Quote from: Moonpig on November 29, 2014, 11:55:58 AM

Email still is 2-factor though it is easier to compromise, but I would recommend using the sms 2-factor if you can. Much safer.

You sure sms 2FA is much safer? I think you just lucky guy because hacker don't attack you, so you think sms 2FA is much safer Tongue

wait for some weeks Tongue

Email is NOT true 2FA as all an attacker needs is your email password and bye bye Bitcoins. Real 2FA like Yubikey, Google Auth or SMS (although seems there are vulnerabilities with SMS) on BOTH your email and blockchain account is required at the very least.