bitcore-wallet-service icon indicating copy to clipboard operation
bitcore-wallet-service copied to clipboard

Email notification for when one of the copayers is recovered from a backup seed

Open dskloet opened this issue 9 years ago • 3 comments

I use a 2 of 4 wallet. This means that as long as no more than 1 of my backups is found, nobody else can spend my money. But if just one of my backups is found, someone could recover it an see my wallet without me knowing. I think it would be good if all copayers could got an email notification whenever any of the copayers is restored from a backup seed.

dskloet avatar Jan 16 '16 13:01 dskloet

But wouldn't this give a false sense of security since an attacker could use the backup data to see your wallet without contacting BWS?

isocolsky avatar Jan 16 '16 16:01 isocolsky

Also consider the case ownership of the wallet is shared. It could be not convenient to notify some users about others actions.

On Sat, Jan 16, 2016 at 1:22 PM Ivan Socolsky [email protected] wrote:

But wouldn't this give a false sense of security since an attacker could use the backup data to see your wallet without contacting BWS?

— Reply to this email directly or view it on GitHub https://github.com/bitpay/bitcore-wallet-service/issues/440#issuecomment-172220644 .

matiu avatar Jan 16 '16 16:01 matiu

Sorry, I meant the word seed. They can't see anything unless they have all the extended public keys, which BWS provides in exchange for the seed, if I'm not mistaken.

@matiu what about just notifying that copayer? Or would the attacker be able to change the email address before? I guess not.

dskloet avatar Jan 16 '16 17:01 dskloet