Protip: when you do that, make sure the password field you're copy/pasting into is not shorter than the password (input's maxlength property).


I'm pretty sure you'll manage to open the wallet if you only use the first 20 characters or whatever password you set.
I can see how people generating pw's is normal, so I'm raising the limit. Is 32 chars enough or should I not stop below 100? :-)


No. Reason: the wallet starts with no-password for simplicity, so anything you set should be better.


I think you misunderstand how it works. In short: I don't store the user's private keys on the server (neither the system wallet's key).
This is all very irrelevant by the way (or should i say there are a dozen things that are a lot more important security wise).


"Hacker databases" are created everywhere automatically by users who re-use their passwords. Take your concern to them.


How do you know blockchain.info won't just run away with the BTC?

Reminder: I suggested the free bitcoin (faucet) functionality, I never asked anyone to use the wallet part. The wallet's primary purpose is to receive the coins you get from the faucet and BitBack.

Protip: If you limit passwords to 20 characters, or have other restrictions, tell your users up front about it, instead of
after they find themselves locked out of the wallet they created.   


It is not irrelevant at all for anyone interested in securing their coins.  Again you should do a better job of explaining how things work at your site, on your site.


I must say that doesn't inspire confidence.  Your response to a concern like that is something along the lines of, "Hackers do that thing all the time so don't worry about us doing it."   


Those two sentences seem to contradict each other... or if not then please explain how one can get free bitcoins from your site without using that wallet part?

There might be a communication problem here. You talked about private keys but I can't really be sure that you're talking about the private wallet file or not. If you'd be kind enough to be specific I'd appreciate it.

For example, if you are, the situation is the same: the wallet provider has a wallet and you're "renting" an address. This means that the blockchain.info web software needs to be able to transfer out of the wallet, which means the coins can be stolen. Whether the wallet file is on a different server or not does not change this fact.

Again, please excuse me if I misunderstood what you meant.



That is NOT what I said, nor is it "along the lines". I WAS pointing out that the real problem is with people re-using passwords. If you are afraid that I am going to "steal your password", then just use a completely new one (which of course you should, regardless). It's that simple. I'm not the only one running a faucet site, the most popular one is also using Google for verification. I don't see you being so hostile towards everyone on the internet who has social app connect - so what makes me so special?



So you're basically telling me (with a poker face) that using the wallet for 5 seconds to transfer the 0.006 you get out to your own wallet somewhere else a security risk?

I think this was a given to anyone not looking for "contradictions" of this epic nature, but if the 'other' people are wondering: when I say "i am not asking people to use the wallet" I mean actually using it to store your own bitcoins in it, not use it for 5 seconds to transfer my gifted bitcoins to yourself. Sheesh.

I've got my bitcoins 1-2 minutes after winning the game, thank you!

Thanks I will check it out. 

BitCrate ‏@BitCrate ( tweet )

"Hi everyone. It's been a few days since bitcrate has had sufficient funds to do payouts. As soon as possible my friends."

Thanks

Thanks.  Can you or anyone confirm a payout?

Is this an ongoing thing or a limited time offer?

Today I got 0.01 and it was send instantly. Thank you.

Put more different banners there, so I can support you more