Bitcoin Forum

Using bitcoins seems secondary to using PGP. Both PGP desktop and GPG wrecked my machine! I didn't think I could get it back. Where can i find a program that really works? Windows 7. 64 bit. I need step by step easy to follow instructions. Please! Maybe after I could achieve this, I can get some bitcoins,

Step 1. Go to blockchain.info.
Step 2. Click on "Wallet"
Step 3. Click on "Start a new Wallet"
Step 4. Save a copy your identifier and your password somewhere offline.
Step 5. Download a backup of your wallet.
Step 6. Use it.

I'm not sure what PGP and GPG have to do with bitcoin or how they could wreck your machine.

I'm one of those guys that doesn't understand a lot but I do know a little bit of knowledge is dangerous.

I've got Windows 7 pro 64bit but for some reason only 32bit Java and am too jittery to move to 64bit because I don't know what it's ll do to my computer and my understanding is it's important for me to have 64bit Java to get certain programs to run in the cryptosphere.

I did manage to get a wallet from blockchain.info and create an address to receive btc, I used what I believe to be a strong password but I still don't bother backing my wallet up. I'm afraid I'd mess it up. They keep asking me to improve my security by giving my phone number but that makes me nervous too.

Still I was able to open an account at Poloniex a couple of weeks ago, take a couple of positions that seem to me to be promising but still I'm worried that my limited knowledge about computers in general is keeping me shy of getting more involved in this new economy.

I can afford to lose what I'm playing with now but taking a long position with an eye to a set goal of gains makes the play rather boring now. I'd like to get a better understanding through hands on experience so I'm ready to input more fiat.

I just wonder where there might be a place where I can learn the basics of securing my wallet(s), for now I'm comfortable writing everything down on paper, then I backup by taking pictures of both my computer screen as well as my keys (identifiers?) and passwords on an old smartphone that is no longer being used for other purposes.

So do I need to update to Java 64bit? And how do I get a password generator from the internet to my old phone. I do have the old desktop version for syncing and upgrades for the phone. Can I safely transfer a password generator to my phone and then be able to use it without service or connection to the internet? Is this a viable air gap? I don't have a second laptop.

I don't know what PGP or GPG means but I still don't want to wreck my computer until I find a decent tower unit that can more easily be upgraded so I can eventually support the network. After I learn enough to be a benefit to the network rather than little more than the curious child I feel now.

Thanks in advance for any help with my situation.


So OP, you can achieve your goal of getting some bitcoins. Just know that you're stepping into a minefield and act accordingly until you gain the skills to navigate through it.



fdyl

@fdylstyx If you aren't (too) concerned with privacy, you could operate out of a few addresses whose private keys you have individually written down multiple times and stored in multiple locations.

It wouldn't hurt to update to 64 bit Java. A lot of websites use java to do things, and 64 bit is generally better than 32 bit. There are no negative effects of upgrading.

There isn't much to mess up with a wallet backup, especially on a web wallet. All that happens is you download a copy of your wallet, it won't effect your wallet's balance or anything unless someone steals it. Even then, you can still get an encrypted backup which is decrypted upon upload to their site for a restore if you wish to do so. Since it is a web wallet, a backup is not necessary, since they probably also back everything up and if their servers crash, they are liable and should reimburse you for any loss.

Why are you nervous about giving them your phone number for extra security? 2 factor authentication makes everything much more secure as a hacker who steals your password still cannot get into your account unless he also stole your phone.

I suppose that is ok. You should download encrypted backups of your wallet, and keep multiple copies of it in different places. Perhaps one on your computer, another on a flash drive, and a third on your old phone. You should also create a paper wallet, there should be an option for this in blockchain.info. You print out the paper wallet and put it in a safe deposit box at the bank. These are the normal tactics of keeping your Bitcoin secure.

Why would you need a password generator?

You should be able to download an app and transfer it to your phone to install it, depending on the phone. The app should never access the internet and be done completely offline. This is a viable air gap, but why would you need it?

PGP is an encryption system, unrelated to the functioning of Bitcoin. It is similar to Bitcoin, in that it uses public key cryptography. PGP can be used to verify that someone is who they claim they are by creating a signed message which can be verified. It is also used to encrypt and decrypt messages so that certain information can be kept private. GPG is an implementation of PGP.

I'm pretty much doing that already. I've found I can create a new BTC address at blockchain.info and I transferred my bitcoin to that address and archived the old one before opening my account at Poloniex with the new one.

Am I right in thinking this hasn't hidden any of my transactions on the blockchain? And no, privacy is less of an issue than security is for me at this time. I have much to learn before I can even begin to fool myself that I'm actually my own bank and nobody can no my business. IMO I don't really think anyone can complete privacy without becoming a prisoner within that false bubble security. Paranoia is a waste of time and time is our most precious currency in this life.

I thank you for sharing some of yours with me. Or were you responding to OP?  :-\

(I thought you were the OP.) It sounds like you're still recording things digitially. I am talking about actually recording the private keys that correspond to your addresses on multiple physical media, so you don't have to worry about how you handle your computer (at least, insofar as the safekeeping of your bitcoins is concerned).

maybe your computer had a virus or you may have downloaded a virus that's why your computer got wrecked?

achow101, thanks for your reply...I spent a while trying to figure out how to break a quote down like you have...with no progress, so I'll just go down the list.

I will check out upgrading to Java 64bit. Last time I downloaded it I couldn't bring myself to press accept. I'm beginning to think I'm overly cautious in this regard. Still pretty cautious about clicking on random links. I finally got rid of my Avast and just going with Windows firewall and defender...my computer runs much smother without all the bundled pups and other crud that comes with the freeware.


It's good to know that the wallet at blockchain.info is backed up by them. I do have the authenticator and my password written down. I haven't risked enough to worry about cold storage and for me to backup the blockchain.info wallet I believe required me to use a usb or disc and the 2FA I can't remember if that's the square image that I take a picture of with my smartphone or it's through Google+ but I don't think I'm comfortable with using my active phone at this time. In time I no doubt will have little choice if I want to keep an eye on my assets. I am aware of the printing of a paper wallet but have no printer and I'm still a bit lost on the airgapping a printer thing.

Hopefully my current security is sufficient for present purposes. Again, still climbing that learning curve.


As to a password generator it is my understanding that one can create a unique cryptic password from a picture of something as simple as a tree or cloud formations. I was thinking I could download something to my old smartphone (Storm 2) and take some pictures then create a suite of private keys and public passwords for future use. Maybe I'm over thinking all of this.

Ah...GPG...I've seen that a few times in some of my meanderings in this site. A trusted escrow would have one, although I've used escrow here and they did have that, it's certainly not the deciding factor in judging trust.

Thanks again for your time and helpful reply achow101.


fdyl

  


  

Nope, not the OP but I hope the answers I get to my questions are useful to him/her as much as they are to me. Sorry if it seems I've highjacked the thread.

Yup, paper (check), passwords and screen shots on an old phone (check), and still learning (check). If my accumulation grows I should be confident enough to feel it's secure.  ;)

If you are backing up your data to physical media, why are you then backing it up to electronic (i.e., hackable) storage?

Well, username18333, I think chow101 has already pointed out that my only digital backup is in good hands (and insured) by bockchain.info.

Are you implying that if I connect my old Storm2 to it's desktop manager to download a password generator to it, then disconnect, I've somehow compromised the information already stored on my old phone? I could delete the info before connecting and then re-enter everything after I disconnect.

I've also picked up a box of 2X4 inch copper plates that I intend on punching important keys and stashing (as a copmlete group) in various parts of the island I live on. Just in case the value of my holdings grow exponentially faster than my inevitable old age and the 50% chance of increasingly oncoming dementia.  ;)

I am merely reiterating that successfully compromising your computer systems (handheld or otherwise) would be more trivial than successfully raiding your island and retrieving your copper plates.

So...I'm good...right? Other than you think Windows defender and firewall fail miserably as antivirus and malware protection? :-\

I have some information on my site, about protecting yourself (http://makingmoneyhoney.com/guide3protect.htm). But also, you may want to get a paper wallet for cold storage (Guide on Creating Paper Wallets (http://makingmoneyhoney.com/PaperWallet.html)), if you get a good amount and you want to save it on a wallet that's never been connected to the internet (so hackers can't steal it).

I'm saying that "a chain is only as strong as its weakest link" and that, by introducing digital (i.e., hackable) backups into your regimen which includes physical (i.e., un-hackable) backups, you are actually undermining your own efforts.

So that would mean not counting on blockchain.info, beefing up my security (to the point of personal incomprehension) and continue to proceed with extreme caution when deciding to click on seemingly helpful links as in the post above your last?

No offense MakingMoneyHoney, but maybe you can tell me how to guard against a keylogger. I'm not saying you are such. Just saying I'm aware I've my lack of knowledge in such matters.

It would merely mean that you would only keep duplicates of your private keys inscribed on copper plates in multiple safes; you wouldn't then expose them to technological devices (and, therefor, the possibility of a remote attacker accessing them). (And, if you did expose them to the internet, you would ultimately transfer the bitcoins to an address that hadn't had its private keys thus exposed.)

thanks for the tip guys...this is really useful

If all else fails, reformat.

When you create a paper wallet, you would want to protect against keyloggers, that's why the first step listed is to get the open-source Operating System Ubuntu, and run it from the CD (You don't have to install it), etc.

You could also try using Sanboxie while you browser the web (it automatically quarantines files downloaded, and you have to tell the program that it's ok to save a file if you want to really save it), which I won't bother to link to. You obviously don't take links from strangers, lol. No problem. Just trying to help. You can also search how to make a paper wallet. I just think mine is a bit easier to understand for someone who's never used Ubuntu, since there's pics during the tutorial. Some of the other tutorials out there are short and skip over how to actually get Ubuntu set up and working.  (You can even look up Norton Safe Search, a search engine set up to let you know sites shown in results are safe sites to visit)

"(You can even look up Norton Safe Search, a search engine set up to let you know sites shown in results are safe sites to visit)"

Thanks MMH, this I'll check out before checking out your site. Looks like a handy tool I can use. I truly appreciate your providing a tutorial as asked. Even if it is your own.  ;D

Hope you don't mind me checking out your profile and post history.  ;)


Good stuff guys, and yes username18333, I do get what you're saying. Comprehension before implementation...I'm definitely somewhere between the two at this time.


fdyl  

What do you mean: "Both PGP desktop and GPG wrecked my machine!" ?
And what does it have to do with Bitcoin?

No need to be nervous... The phone number is acctually very good for 2FA and a extra level of security. {They have to get access to your phone or do a Sim swap to bypass that}

The best way to avoid losing coins, will be to shift 90% of it to cold storage or to use a hardware wallet for the coins you are planning to use on a daily basis.

Spread these coins to different paper wallets, to reduce the risk of losing everything in one hack.  ;)

he mean key authentication and data encryption

http://www.bitcoinnotbombs.com/beginners-guide-to-pgp/
http://wiki.bitcoin-otc.com/wiki/GPG_authentication

Thanks for your input Kprawn. I'll eventually use 2FA, I'm just not comfortable enough with my understanding to migrate to my every day phone. I'm really not into apps, however I do have a Z10 and I'm grandfathered into an unlimited data contract I started paying for even when my Storm 2 was pretty much useless at streaming video. My thinking then was eventually I would have a computer in my pocket and now I do. I carry two extra charged batteries when I'm away from a place to pug in my charger for a couple days. Wifi is disabled and I'm hoping the Blackberry encryption is still as strong or stronger when it was the go to phone for Heads of State, CEO, Kings and Queens etc.

When the time comes I will definitely be prepared to properly set up cold storage. I've already got a brain wallet that I'll access to refill my chosen hot wallet when that time comes.

So any big flaws in my approach so far? I'm one of those guys that's trying to prove that this crypto currency stuff isn't that tough to grasp for technically challenged of the world. And yes I know the "measure twice, cut once" approach applies to sending bitcoins to any address. There are no do overs.


fdyl