Man in the Middle Attacks possible! Proof is attached. MEW #2
Description
affected = https://myEtherWallet.com
not affected =https://myTokenWallet.com
- read the original opened issue Issue No# 804
Dear MyEtherWallet Dev Team,
as you know I worked since one month on a high security fork of MEW, called MTW.
All my research you can find here: https://github.com/Zwilla/mytokenwallet.com/blob/master/New_Features_on_MyTokenWallet.md
see No. 10 Man-in-The-Middle-Attack possible - proof!
New release is in online: https://myTokenWallet.com
Proof! Test it by your self! MITM-Attack
- on that case google itself plays the man in the middle: Try translate MEW
- MTW is resistant - MTW
- A google security issue, can someone tell google translator team to stop hacking our code?
Dear MyEtherWallet Dev Team,
If you want to learn about how to protect read this:
https://en.wikipedia.org/wiki/Man-in-the-middle_attack#Defense_and_detection
p.s. Your current code is also not resistant against MITB Attacks- PDF of Sans.org! USERS - Stop using Safari browser <= Version 10.1.2 (12603.3.8), yes it is the current version. Only on the Safari Technology Preview the bug is fixed!
Today I will make a video to proof that Safari is an infected and buggy browser <= Version 10.1.2 (12603.3.8)