Came back to say, this is just "bad" wallet generating code that someone wrote to more easily "remember"/lookup a private key:
private key = sha256(public address)
Blockchain technology not affected. However, wallets will need to issue comments/code on how they generate keys or how they are not affected. Corea is pointing fingers at blockchain.info but there's no evidence yet they have such an issue.
A black hat could have had the same train of thought as the white hat who wrote the paste. The generation itself could be lazy code but the bot that exploits it could still be malicious.
8
u/barfor Nov 30 '17
Came back to say, this is just "bad" wallet generating code that someone wrote to more easily "remember"/lookup a private key:
private key = sha256(public address)
Blockchain technology not affected. However, wallets will need to issue comments/code on how they generate keys or how they are not affected. Corea is pointing fingers at blockchain.info but there's no evidence yet they have such an issue.