Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Man in the Middle Attacks possible! Proof is attached. MEW #2

Open
Zwilla opened this issue Aug 2, 2017 · 0 comments
Open

Man in the Middle Attacks possible! Proof is attached. MEW #2

Zwilla opened this issue Aug 2, 2017 · 0 comments

Comments

@Zwilla
Copy link
Owner

Zwilla commented Aug 2, 2017

affected = https://myEtherWallet.com
not affected =https://myTokenWallet.com


Dear MyEtherWallet Dev Team,
as you know I worked since one month on a high security fork of MEW, called MTW.

All my research you can find here: https://github.com/Zwilla/mytokenwallet.com/blob/master/New_Features_on_MyTokenWallet.md
see No. 10 Man-in-The-Middle-Attack possible - proof!

New release is in online: https://myTokenWallet.com

Proof! Test it by your self! MITM-Attack

  • on that case google itself plays the man in the middle: Try translate MEW
  • MTW is resistant - MTW
  • A google security issue, can someone tell google translator team to stop hacking our code?

Dear MyEtherWallet Dev Team,
If you want to learn about how to protect read this:
https://en.wikipedia.org/wiki/Man-in-the-middle_attack#Defense_and_detection


p.s. Your current code is also not resistant against MITB Attacks- PDF of Sans.org! USERS - Stop using Safari browser <= Version 10.1.2 (12603.3.8), yes it is the current version. Only on the Safari Technology Preview the bug is fixed!

Today I will make a video to proof that Safari is an infected and buggy browser <= Version 10.1.2 (12603.3.8)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant