I just got hit for a ton of eth 3 meta wallets drained. Anyone heard anything or could help point me in the right direction of what to do? No idea how they accessed my funds.

  • N_GHTMVRE@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    Depends on the password manager. With something like KeePassXC, only you have the encrypted passwords file and it’s not on some server.

    • invaderdan@alien.topB
      link
      fedilink
      English
      arrow-up
      1
      ·
      10 months ago

      Nope no never absolutely not.

      Just a couple weeks ago I saw a thread where keepass was the culprit.

      NEVER USE A PASSWORD MANAGER

          • ScionoicS@alien.topB
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 months ago

            You went from saying “absolutely never use a password manager” and further down the thread you say you’re using your foreskin.

            Now you’re back tracking that all to pretend to be right?

            That’s absurd!

      • jeffreythesnake@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        You can just store a copy of keepass along with your file on a USB and access it that way, never has not be online.

      • Lifter_Dan@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        KeePass DB is vulnerable if they can crack the master password. If your master password has enough entropy that it would take so many million years to brute force, then you’ll be fine.

          • DigStock@alien.topB
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 months ago

            Anything can be cracked this way, this is just a bruteforce of the master password. It can take 300 centuries to crack using NSA servers if it’s a strong password.

          • Lifter_Dan@alien.topB
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 months ago

            That link describes hashcat which uses some of the methods I’m referring to, it’s dependent on the password quality. Crappy password will be quick.

            It doesn’t decrypt it, but tries many combinations of words etc encrypted to compare against the hash.

            Even with a good password, I never would want anyone storing seeds in keepass, anything on the computer is a no for storing seeds.