Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: bjbear123 on December 28, 2015, 11:52:07 PM



Title: A security threat ?
Post by: bjbear123 on December 28, 2015, 11:52:07 PM
I stumbled across this website earlier today .... http://directory.io/9

Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??



Title: Re: A security threat ?
Post by: Simgo on December 28, 2015, 11:54:55 PM
No. It would take billion of years to check or browse every private key. This site doesn't have every key on hard disk because it's to much. It's generated on the fly.


Title: Re: A security threat ?
Post by: European Central Bank on December 29, 2015, 12:10:42 AM
I read another thread where someone claimed to have picked up some coins from one of these sites. Hard to believe and I don't understand why they're doing it. Maybe they want to drive traffic from stupid and greedy people there.


Title: Re: A security threat ?
Post by: Greenenergy on December 29, 2015, 12:12:01 AM
Website is offline. Whats the site about?


Title: Re: A security threat ?
Post by: Simgo on December 29, 2015, 12:19:49 AM
Website is offline. Whats the site about?
It was possible to browse through a few private keys ranging from 1 to 2256-1 + showing the bitcoin address on the fly using a browser. But it would take too much time to check every possible key.
--> No danger to the bitcoin user! Don't worry.


Title: Re: A security threat ?
Post by: QQ88 on December 29, 2015, 12:21:58 AM
Well, the site in the OP is currently down...


Title: Re: A security threat ?
Post by: Hazir on December 29, 2015, 12:56:27 AM
I stumbled across this website earlier today .... http://directory.io/9

Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??


Site is down now, and I am not sure if it will be ever back. Anyway, if extracting bitcoin from random keys was possible even with 0.1% chance of success.
We would have major number of specialized farms of cracking machines running 24/7 to find the right algorithms.


Title: Re: A security threat ?
Post by: Hugroll on December 29, 2015, 01:04:29 AM
I stumbled across this website earlier today .... http://directory.io/9

Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??


since it lists all of the addresses available it cant really do anything, if you were to pick an address thers almost a 0 chance theres gonna be money in that exact address.


Title: Re: A security threat ?
Post by: aso118 on December 29, 2015, 01:55:11 AM
I stumbled across this website earlier today .... http://directory.io/9

Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??


Every private key on record?
If that were possible, Bitcoin wouldn't exist right now.
You can stop worrying about it.  :)


Title: Re: A security threat ?
Post by: Odien on December 29, 2015, 01:56:09 AM
I stumbled across this website earlier today .... http://directory.io/9

Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??


Every private key on record?
If that were possible, Bitcoin wouldn't exist right now.
You can stop worrying about it.  :)

Yup, just don't worry :)


Title: Re: A security threat ?
Post by: techmanuk on December 29, 2015, 02:15:12 AM
I chuckled when I saw it said Page 1 out of 904625697166532776746648320380374280100293470930272690489102837043110636675.  ;D


Title: Re: A security threat ?
Post by: justspare on December 29, 2015, 03:40:48 AM
The website is down anyway. I am pretty sure it needs to be online to have every private key. This is definitely not a big threat, why did you even think it was? Was the site working when you saw it?

No. It would take billion of years to check or browse every private key. This site doesn't have every key on hard disk because it's to much. It's generated on the fly.
There are too many private keys in the world, I doubt this website has even one-quarter of the private keys.
There are private keys generated every single day. There is no chance this website can be keeping up with this.


Title: Re: A security threat ?
Post by: Invuln on December 29, 2015, 03:50:55 AM
You do realise that there's only 1 page actually available, and if you check, the first three addresses are all named "DONATE PLEASE" or something similar to that. I'm just wondering was the ninth page available to you @OP when you checked? Or was it already down?


Title: Re: A security threat ?
Post by: saturn643 on December 29, 2015, 05:05:04 AM
If that were a security flaw then simply having private keys is a flaw in itself. A private key is really just a big number, hopefully randomly generated. The thing is is that there is a HUGE range of numbers to choose from for a private key, so the probability of two different people choosing the same number twice is incredibly low (barring any bad implementations). Furthermore, you could theoretically write a program which searches through every single private key possible (it isn't that hard, it is just a big integer and you go sequentially) but the odds of finding a key that corresponds to an address with Bitcoin in it is incredibly low. While doable, it would take an ungodly amount of time to do, on the scale of trillions (or more) of years. This is the basis of this kind of cryptography, that the probability of finding a collision is incredibly low and that to search every single possible private key would take an ungodly amount of time.

tl;dr due to the size of the private key range, this is perfectly fine and safe.


Title: Re: A security threat ?
Post by: Amph on December 29, 2015, 07:49:03 AM
if this is another thing about brute forcing private key from public key etc, then it will not work as you think, at present it's impossible, if it will ever be a threat it would be when everyone here is died already


Title: Re: A security threat ?
Post by: Jeremycoin on December 29, 2015, 07:55:17 AM
This is a silly question, there's no way someone or something can record all of the private keys. Internet is big, but your harddrive is not that big.


Title: Re: A security threat ?
Post by: NorrisK on December 29, 2015, 08:10:01 AM
The only difference between using this list and randomly trying strings is that these are probably already filtered to only contain valid private keys.

The number of keys is so huge, it would be impossible to check even a fraction of them in a lifetime. That is the whole idea behind the bitcoin security.

I agree it may look scary that your private key is on a list somewhere, but I wouldn't be too worried about this. If you really are, just spread your coins over multiple addresses.


Title: Re: A security threat ?
Post by: bitkilo on December 29, 2015, 08:16:48 AM
They could not possibly have "every" private key.
I create paper wallets all the time with nothing that has even been near a computer so i know nobody has the private keys to my stash but me.

Maybe it was leaked data from Coinbase or one of those online wallet providers that hold your private key for you. (I would hope they are not stupid enough to store their users private key online) but i also highly doubt that.

I still would have liked to see the site, did anybody get a screenshot or cache?


Title: Re: A security threat ?
Post by: odolvlobo on December 29, 2015, 08:17:59 AM
That site has been around for more than two years now and it is still causing people to freak out!

Read this: https://bitcointalk.org/index.php?topic=354518.0


Title: Re: A security threat ?
Post by: Maskedman on December 29, 2015, 08:23:54 AM
This is simply not possible... Dont worry. It's a hoax.


Title: Re: A security threat ?
Post by: NorrisK on December 29, 2015, 08:26:29 AM
They could not possibly have "every" private key.
I create paper wallets all the time with nothing that has even been near a computer so i know nobody has the private keys to my stash but me.

Maybe it was leaked data from Coinbase or one of those online wallet providers that hold your private key for you. (I would hope they are not stupid enough to store their users private key online) but i also highly doubt that.

I still would have liked to see the site, did anybody get a screenshot or cache?

Not true, they could generate strings of a certain length and start numbers easily. It has nothing to do with being online when creating your key, but all with random generation of the string. Just have a script create those strings and paste them on the webpage. It is probably growing by the day. Just look at the enormous length of the list.





Title: Re: A security threat ?
Post by: Mr. Forum on December 29, 2015, 08:30:39 AM
The website is currently unavailable but from the threads I have been reading, I do thing it is a repository for generated keys. What I can say is that it is good that the keys are always generated on the go. One thing you need to know is that the keys keep on growing based on demand and therefore the best solution i to always have them generated on the fly. It is not a security threat from my own personal understanding.


Title: Re: A security threat ?
Post by: ranochigo on December 29, 2015, 08:31:35 AM
They could not possibly have "every" private key.
I create paper wallets all the time with nothing that has even been near a computer so i know nobody has the private keys to my stash but me.

Maybe it was leaked data from Coinbase or one of those online wallet providers that hold your private key for you. (I would hope they are not stupid enough to store their users private key online) but i also highly doubt that.

I still would have liked to see the site, did anybody get a screenshot or cache?
It isn't any leaked data. It's probably randomly generated by them and they just placed it randomly on the website. There is a possibility that they repeatedly placed some of the keys and thus making a super huge number of keys. There were reports that some of the keys were used but the owner can possibly do that themselves and transfer the balance away.

Here's an archive (https://web.archive.org/web/20151020235605/http://directory.io/).


Title: Re: A security threat ?
Post by: Kprawn on December 29, 2015, 08:39:09 AM
Anyone can create a log file like that and sneak in 10 or so genuine private key combinations with a few coins, to make it look legit. It is probably just a elaborate hoax or someone

trying to confuse people, in making them to believe that a list of this kind can be generated to hack Bitcoin. You would not believe how much trouble people will go through to

discredit Bitcoin... this is just one of these attempts.  ::)


Title: Re: A security threat ?
Post by: NorrisK on December 29, 2015, 10:34:37 AM
Anyone can create a log file like that and sneak in 10 or so genuine private key combinations with a few coins, to make it look legit. It is probably just a elaborate hoax or someone

trying to confuse people, in making them to believe that a list of this kind can be generated to hack Bitcoin. You would not believe how much trouble people will go through to

discredit Bitcoin... this is just one of these attempts.  ::)

What is there to gain for them by discrediting bitcoin? An opportunity to get cheaper coins? I don't think that this is the best way for them as with all the time and effort they could easily make multiple times the coins they would potentially make now.

Unless it is something like governments trying to do it, but that is something I doubt greatly at this moment.


Title: Re: A security threat ?
Post by: calkob on December 29, 2015, 05:07:22 PM
watch the link below it explains it all........
  ;D
https://youtu.be/ZloHVKk7DHk


Title: Re: A security threat ?
Post by: odolvlobo on December 29, 2015, 06:26:21 PM
Hi, yes the site was UP when i used it yesterday. I edited the URL and typed in a random number clicked on one of the addresses and it had actually been used before, makes me think how long you would have to search to actually find one with coins in.

The keys on that site are pre-generated. Try another page. You will see the same keys. Furthermore, the site has been around for a long time, plus those keys are the first keys starting with 0 and counting up, so it is not unusual that people have been playing with them.


Title: Re: A security threat ?
Post by: pereira4 on December 29, 2015, 06:46:01 PM
if this is another thing about brute forcing private key from public key etc, then it will not work as you think, at present it's impossible, if it will ever be a threat it would be when everyone here is died already

Not even, since as time goes on, the algorithm in Bitcoin can be improved just in case any advancements in cryptology pose a serious risk in Bitcoin's security. Worrying about this is certainly a waste of time and needless stress.


Title: Re: A security threat ?
Post by: PakistanHockeyfan on December 29, 2015, 11:37:17 PM
I don't think it could be a security threat. Besides, money holding plans like this will be proven scams when necessary.