iotaledger-archive/trinity-wallet
View on GitHub ↗ ★ 458 JavaScript archived
Trinity is IOTA's old, deprecated wallet. Use Firefly instead.
3 mentions on Hacker News by 2 people: 0 stories, 3 comments · first 2020-02-18 · latest 2020-02-18
20082026
-
Actually, it's way worse than that. They were directly loading code from someone's CDN: https://github.com/iotaledger/trinity-wallet/pull/2565/files...
comment by timdorr · 2020-02-18 · in Iota cryptocurrency shuts down entire network after wallet hack -
This wasn't an npm vulnerability. It's a direct link to a CDN file that was compromised: https://github.com/iotaledger/trinity-wallet/pull/2565/files...
comment by timdorr · 2020-02-18 · in Iota cryptocurrency shuts down entire network after wallet hack -
Is this the correct diff for the patch that tries to fix the wallet exploit? https://github.com/iotaledger/trinity-wallet/pull/2565/files... The commit removes these lines: - const script = document.createElement('script'); - script.src =…
comment by seanwilson · 2020-02-18 · in Iota cryptocurrency shuts down entire network after wallet hack