appears to have found the back door

bokub / vanity-eth

💎 Browser-based ETH vanity address generator

https://vanity-eth.tk

MIT License

749 stars 265 forks source link

appears to have found the back door #40

Closed c0yax closed 2 years ago

c0yax commented 2 years ago

url : https://metrics.vanity-eth.tk/api/collect

cache: null
hostname: ""
language: "zh-CN"
referrer: ""
screen: "1920x1080"
url: "/C:/Users/Admin/Desktop/dist/index.html"
website: "9086c519-8c4a-4f8e-9dfe-daee3739238a"

zhaocaijinbao1314 commented 2 years ago

Really？

c0yax commented 2 years ago

Please explain what this is

bokub commented 2 years ago

Hello,

This has nothing to do with a "backdoor"

It's just a self-hosted umami server (privacy-focused analytics) to count the number of visitors.

As you can see in your screenshot:

The only data sent to the analytics server are your language, the current URL, and your screen size
The HTTP call is done only when you land on the page, before you generate anything, so even if I wanted to, I couldn't steal your private key because it doesn't exist yet

c0yax commented 2 years ago

what about when I have generated it and then reopened it

bokub commented 2 years ago

Nothing is saved in your browser or computer. When you close the Vanity-ETH tab, everything disappears.

So when you "reopen" it, nothing else happens.

bokub commented 2 years ago

I'm closing the issue. Don't hesitate to ask if you have other questions.