Thursday, December 7, 2017

Exchange hacks are exchange bliunders

Github rarely gets hacked and it has a similar problem.

If any exchange is holding your private key, dump them.  Here is what you want:


  • You encrypt your trade request using your secret key. 
  • The exchange, on discovering this is encryption, calls  the linux kernel running on top of the processor.  All decryption of your wallet happens there, and in no other spot because the kernel keeps its public keys protected. 
  • The only place where your wallet account needs decryption is in the kernel itself. Any  decrypted data need only appear in the processor ram, then erased. 


If an exchange says they were hacked, then someone got to their kernel, and that I doubt. Have your exchange explain their wallet account decryption policy.

No comments: