You are viewing a single comment's thread from:

RE: HiveSigner is INSECURE? - discussion and deep dive

in HiveDevs10 days ago

Isnt this the same issue LeoAuth got a ton a crap about a while ago?

Sort:  

I am pretty sure if its not EXACTLY THE SAME, then its like, 99% the same issue 😅

Man khal and team got sooo much crap over that 😅
Good that you acknowledge it though because its like you say not that secure 😅

Nope they have stored the keys in a cookie. Now they store them in the local storage but other than hivesigner they are encrypted with a pincode. On top of the cookie thing they have sent the private key over the internet at the beginning - thats when the whole thing blew off

Alright, noted! :)