|
Title: Armory operational question Post by: dollarbill on December 16, 2012, 05:46:46 PM Just started using Armory and have an offline copy running on an offline computer and on online copy on an online computer with a "Watch Only Waller".
I notice that the option under Wallet Properties: "Backup Individual Keys" is available on the online computer as well as the Offline computer. If you click on this and put in the password won't this spit out the private keys that are supposed to be only on the Offline Computer? If so isn't this a significant vulnerability? (If a hacker gained access to the online computer and were able to brute force guess the password wouldn't he be able to spend the bitcoins?) --or am I missing something--I hope. Thanks Title: Re: Armory operational question Post by: etotheipi on December 17, 2012, 02:25:40 AM Just started using Armory and have an offline copy running on an offline computer and on online copy on an online computer with a "Watch Only Waller". I notice that the option under Wallet Properties: "Backup Individual Keys" is available on the online computer as well as the Offline computer. If you click on this and put in the password won't this spit out the private keys that are supposed to be only on the Offline Computer? If so isn't this a significant vulnerability? (If a hacker gained access to the online computer and were able to brute force guess the password wouldn't he be able to spend the bitcoins?) --or am I missing something--I hope. Thanks There are no private keys at all in the watching-only wallet file, so there is nothing to be revealed. If you're really ambitious you can open your watching-only wallet file with a hex editor and compare the data against the documented format (http://bitcoinarmory.com/index.php/armory-wallet-files). You'll see that the private key fields are all zeros :) What you get when you click that button is the ability to see your public keys and/or addresses, which some users might want for a variety of reasons (mostly advanced users). Title: Re: Armory operational question Post by: dollarbill on December 18, 2012, 06:32:27 AM Many thanks. Outstanding software.
|