If account names are not transferable, what happens when wallet is compromised?

Started by fussyhands, September 27, 2014, 04:48:21 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

fussyhands

Quote from: toast on September 27, 2014, 05:17:15 PM
Compromised accounts should be revoked, once we build that feature

Sent from my SCH-I535 using Tapatalk

How would that work?  Would the revoked account name be lost forever?

fussyhands

Quote from: xeroc on September 27, 2014, 05:15:08 PM
you can move the wallet backup JSON file and import it there ... a keylogger alone does not compromise your funds. .

an attacker needs the passphrase AND the wallet .. .. in that case you can only safe your funds .. not the names ..

A keylogger implies access to your computer which means access to the wallet and the wallet should be assumed to be compromised.

fluxer555

If BM and the dev team really don't want account transferring, perhaps they could implement an 'account burn' feature, which allows you to permanently disable an account from sending/receiving/transacting. Any person attempting to send this account funds would get their funds sent back, with the memo that the account burner used in their burn transaction.

On second thought, maybe the memo feature would be too useful to an account hacker, eg "btercom has a new address, please send funds to xxblademasterxx for all future deposits instead."
Bitshares Wallet Recovery Service:
[url="https://bitsharestalk.org/index.php/topic,24436.0.html"]https://bitsharestalk.org/index.php/topic,24436.0.html[/url]

toast

Compromised accounts should be revoked, once we build that feature

Sent from my SCH-I535 using Tapatalk

Do not use this post as information for making any important decisions. The only agreements I ever make are informal and non-binding. Take the same precautions as when dealing with a compromised account, scammer, sockpuppet, etc.

xeroc

Quote from: fussyhands on September 27, 2014, 05:10:34 PM
So that means any compromise, or suspected compromise of my wallet results in loss of my account names forever?

Isn't that a problem, if people out in the world still have my account name and are sending money to it?

Should I only use account names on cold storage?
you should:

have one major account name ie "foobar" (in coldstorage !!! )

you only work with subaccounts .. ie. main.foobar .. home.foobar .. wife.foobar ..
lost keys there can be "updated" (in some sense)

xeroc

you can move the wallet backup JSON file and import it there ... a keylogger alone does not compromise your funds. .

an attacker needs the passphrase AND the wallet .. .. in that case you can only safe your funds .. not the names ..

fussyhands

So that means any compromise, or suspected compromise of my wallet results in loss of my account names forever?

Isn't that a problem, if people out in the world still have my account name and are sending money to it?

Should I only use account names on cold storage?

emski

I don't see what you can do for the username unless functionality to create new owner keys is created.
Which will essentially enable account trading.
[url="https://bitsharestalk.org/index.php/topic,9857.0.html"]https://bitsharestalk.org/index.php/topic,9857.0.html[/url]

fussyhands

What if I discover that I had a key logger on my hot wallet machine.  My wallet can no longer be trusted so I create a new one.  Is there a way to move the account names to my new wallet, or are they lost to humanity forever?