undefined | Better HN

0 pointsryan-c8y ago0 comments

Requiring users to choose a password as a seed for their keys is a catastrophically bad vulnerability. Is that really how IOTA works?

0 comments

4 comments · 1 top-level

whataretensors8y ago· 3 in thread

Sort of. You have to generate a seed(like a private key) and use that to log in. The seed has to be random. Some used a dice, others /dev/random.

I fully expect a wave of stolen IOTA to come from people who typed a 'random' code.

ryan-cOP8y ago

I'm tempted to write a cracker for shitty seeds people come up with, but given what I've heard of the design of IOTA, I'm afraid of getting brain damage trying to understand and reimplement their algorithms.

whataretensors8y ago

I've thought about this too but determined that it's too black hat for me.

Also look at it yourself, don't listen to others. Everyone is trying to do price manipulation on anything remotely related to crypto.

I thought the white paper and code were really interesting and thought-provoking fwiw, regardless of the viability of the project itself.

vvangemert8y ago

No they used a online seed generator..

j / k navigate · click thread line to collapse