📅 Original date posted:2018-11-07
📝 Original message:Copying addresses to the clipboard should be discouraged, rather than
supported.
It is an inherently insecure mechanism. Regardless of the OS used, any
application can monitor the clipboard for Bitcoin addresses and replace
any address with their own, usually without any specific permission or
confirmation by the user. Effectively this steals Bitcoins if the user
doesn't compare addresses manually.
This is a real risk, as this kind of malware has already been seen.
Never copy & paste Bitcoin addresses!
On 07/11/2018 15.09, Adam Ficsor via bitcoin-dev wrote:
> BIP: ?
> Layer: Applications
> Title: Address Paste Improvement
> Author: nopara73 <adam.ficsor73 at gmail.com
> <mailto:adam.ficsor73 at gmail.com>>, David Molnar <molnardavid84 at gmail.com
> <mailto:molnardavid84 at gmail.com>>
> Type: Standard Track
> Created: 2018-11-07
>
> Abstract. End-users often copy-paste addresses. This BIP aims to
> facilitate the user experience regarding this process.
>
> Motivation. Some services already implemented autopaste functions, which
> is done as follows: the user clicks to the address box and a Bitcoin
> address automatically gets pasted from the clipboard. Depending on the
> implementation, this could be either annoying or not permissive enough
> if it completely replaces the possibility of manually entering a Bitcoin
> address.
>
> The BIP Proposal can be found
> here: https://gist.github.com/nopara73/322dbd263a5c45267da87cffc36de6f6
>
> An implementation will soon follow in Wasabi Wallet.
>
> Regards,
> nopara73
>
>
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev at lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>
Andreas Schildbach [ARCHIVE] /
npub1xg…adsv7
2023-06-07 18:15:09
in reply to nevent1q…pfd9
Author Public Key
npub1xg2m84malu0cfm4444r0kysx4rgk27e75aj6sz6538kw8fcz627qeadsv7Published at
2023-06-07 18:15:09Event JSON
{
"id": "d82bb5e71f90b826318ab7210e7fa270bad43dff050141f813026874ebc9651f",
"pubkey": "3215b3d77dff1f84eeb5ad46fb1206a8d1657b3ea765a80b5489ece3a702d2bc",
"created_at": 1686161709,
"kind": 1,
"tags": [
[
"e",
"6b2133cdefe033c98de94718f9aec1f0191d14197767d256b7dab51b73fd3e89",
"",
"root"
],
[
"e",
"742c4ddc8faecdd9973147fb3fa5a778cd4e5f8ea0a43006304efd8b98870322",
"",
"reply"
],
[
"p",
"75f52ac24ef4f05f275587ff218a69c9bb9b3056ac1e2069f918970b6d7d430d"
]
],
"content": "📅 Original date posted:2018-11-07\n📝 Original message:Copying addresses to the clipboard should be discouraged, rather than\nsupported.\n\nIt is an inherently insecure mechanism. Regardless of the OS used, any\napplication can monitor the clipboard for Bitcoin addresses and replace\nany address with their own, usually without any specific permission or\nconfirmation by the user. Effectively this steals Bitcoins if the user\ndoesn't compare addresses manually.\n\nThis is a real risk, as this kind of malware has already been seen.\n\nNever copy \u0026 paste Bitcoin addresses!\n\n\nOn 07/11/2018 15.09, Adam Ficsor via bitcoin-dev wrote:\n\u003e BIP: ?\n\u003e Layer: Applications\n\u003e Title: Address Paste Improvement\n\u003e Author: nopara73 \u003cadam.ficsor73 at gmail.com\n\u003e \u003cmailto:adam.ficsor73 at gmail.com\u003e\u003e, David Molnar \u003cmolnardavid84 at gmail.com\n\u003e \u003cmailto:molnardavid84 at gmail.com\u003e\u003e\n\u003e Type: Standard Track\n\u003e Created: 2018-11-07\n\u003e \n\u003e Abstract. End-users often copy-paste addresses. This BIP aims to\n\u003e facilitate the user experience regarding this process. \n\u003e \n\u003e Motivation. Some services already implemented autopaste functions, which\n\u003e is done as follows: the user clicks to the address box and a Bitcoin\n\u003e address automatically gets pasted from the clipboard. Depending on the\n\u003e implementation, this could be either annoying or not permissive enough\n\u003e if it completely replaces the possibility of manually entering a Bitcoin\n\u003e address.\n\u003e \n\u003e The BIP Proposal can be found\n\u003e here: https://gist.github.com/nopara73/322dbd263a5c45267da87cffc36de6f6\n\u003e \n\u003e An implementation will soon follow in Wasabi Wallet.\n\u003e \n\u003e Regards,\n\u003e nopara73\n\u003e \n\u003e \n\u003e _______________________________________________\n\u003e bitcoin-dev mailing list\n\u003e bitcoin-dev at lists.linuxfoundation.org\n\u003e https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev\n\u003e",
"sig": "cca1c2238f35aec27109b1a6d2a2e36293277909b6bf0f5597b2de7cdfc115d109c066d67959510b6cc281b709ffaa89051b0192b99550ecccd24f09c64c3d54"
}