11 comments

[ 3.4 ms ] story [ 31.4 ms ] thread
I'm not a python guy, but from the screenshots I don't see where it is requesting something other than the version, I don't see where it appends the seed keys or anything on the check version request, but I don't use this or any wallet to care enough to verify.
On line 246 where the thread is created, you'll see that it's actually passing in the seed, not the version.
Looks like the version is actually the seed.

  self.thread_v1 = threading.Thread(target=self.verify_version_thread, args=(seed,))
Oh I see thank you :)
It seems utterly, utterly insane to me that the vendor of a currency wallet software would leave the .com of their product's name unregistered. Using the real Electrum at home but second-guessing that now.
By definition, the market value of that domain has to be close to the value of all BTC that ever gets stolen by the copycat malware.

Doesn't seem like something a project with no budget can afford.

I guess this is like storing mined 1800's gold in one's home. Totally unsecured, especially for the average Joe. Once it's gone, it's gone.
The whole point of Bitcoin (at least originally) was "be your own bank".

Users learnt really damn fast why securing a bank is hard.