Bitcoin Forum

Bitcoin => Electrum => Topic started by: nezhurin on September 29, 2016, 03:48:45 PM



Title: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 03:48:45 PM
When using Electrum I think for it to update balances it must make some request to a server with information about balance on specific address so it means that the person operating that server can see that a specific BTC address belong to a specific IP is this true? and if it is how to avoid it


Title: Re: Electrum exposing addresses to public?
Post by: amacar2 on September 29, 2016, 03:55:32 PM
Electrum software is client side that mean all information about your wallet, balance are stored in your side and nothing is stored in their server.
Check this in their docs http://docs.electrum.org/en/latest/faq.html#does-electrum-trust-servers
Also they use simple payment verification system to boardcast transaction, know more about this here http://docs.electrum.org/en/latest/spv.html
However i couldn't find anything regarding recording users IP and associated bitcoin address in their server and i think if they do than it is possible for them to record.


Title: Re: Electrum exposing addresses to public?
Post by: Jhanzo on September 29, 2016, 03:56:40 PM
Yes, it's true, and you can't avoid it other than using other wallet that doesn't rely on servers such as bitcoin core.  You can use tor or VPN to mask your real IP, though.


Title: Re: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 03:58:42 PM
So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?


Title: Re: Electrum exposing addresses to public?
Post by: achow101 on September 29, 2016, 04:06:41 PM
So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?
The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.


Title: Re: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 04:12:20 PM
So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?
The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.
Thank you for the answer but are the new version of multibit secure?


Title: Re: Electrum exposing addresses to public?
Post by: achow101 on September 29, 2016, 04:20:57 PM
Thank you for the answer but are the new version of multibit secure?
Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.


Title: Re: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 04:24:31 PM
Thank you for the answer but are the new version of multibit secure?
Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.

I am just trying out Multibit and it seems to be much better than electrum at first look,no idea why more people recommend electrum
But i created a test wallet and it gives timestamp and then on verification step it ask to put timestamp or leave blank if unknown but if i leave blank i cant press next and if i put a fake timestamp it also cant press next so have to give real timestamp,and cant use without the timestamp?


Title: Re: Electrum exposing addresses to public?
Post by: Jhanzo on September 29, 2016, 04:27:30 PM
So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?
The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

What about the IP addresses (I believe that's what OP asked)?  I've read quite a few about it and all of them seem to indicate that the servers can indeed see your IP address, are they all wrong?

Edit:
Wait, by addresses you mean IP addresses or Bitcoin addresses?  :P


Title: Re: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 04:31:10 PM
So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?
The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

What about the IP addresses (I believe that's what OP asked)?  I've read quite a few about it and all of them seem to indicate that the servers can indeed see your IP address, are they all wrong?

From what I understand in this case it wont matter that the user IP is exposed since when multibit will try to get balance of your address it will in the sametime try to get balance of other addresses that dont belong to you


Title: Re: Electrum exposing addresses to public?
Post by: krishna1 on September 29, 2016, 05:09:43 PM
yes i belive they are recording our ip addresses and our transaction history  and if they really are then also i do not actully care they can not have my wallet nor even my private key


Title: Re: Electrum exposing addresses to public?
Post by: nezhurin on September 29, 2016, 05:19:02 PM
Is my understading of bloom filters above correct?
If it's not can you please explain how they protect anything


Title: Re: Electrum exposing addresses to public?
Post by: Abdussamad on October 06, 2016, 02:20:26 PM
Thank you for the answer but are the new version of multibit secure?
Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.

I am just trying out Multibit and it seems to be much better than electrum at first look,no idea why more people recommend electrum
But i created a test wallet and it gives timestamp and then on verification step it ask to put timestamp or leave blank if unknown but if i leave blank i cant press next and if i put a fake timestamp it also cant press next so have to give real timestamp,and cant use without the timestamp?

The timestamp helps it sync your wallet faster. Technically it can sync your wallet without the timestamp but why take a risk? Backup both the timestamp and the wallet words.

BTW you should ask these questions in the multibit forum:
https://bitcointalk.org/index.php?board=99.0


Title: Re: Electrum exposing addresses to public?
Post by: Cereberus on October 06, 2016, 04:26:31 PM
Electrum wallet is the worse of the worse wallets in terms of privacy. It shows all your bitcoin addresses if you have only used 1 address then everyone can see the full addresses of this electrum wallet by using a simple website like walletexplorer.com .

Multibit Classic is the best out of the three Multibit,Multibit HD and Electrum for privacy as it keeps only one bitcoin address for each wallet and can create as many wallets as you like. Other people cannot link these addresses to be under the possesion of the same person differently from Electrum.

From this point of view, Electrum is far behind lacking big time in privacy compared to Multibit classic.


Title: Re: Electrum exposing addresses to public?
Post by: achow101 on October 06, 2016, 04:35:26 PM
Electrum wallet is the worse of the worse wallets in terms of privacy. It shows all your bitcoin addresses if you have only used 1 address then everyone can see the full addresses of this electrum wallet by using a simple website like walletexplorer.com .

Multibit Classic is the best out of the three Multibit,Multibit HD and Electrum for privacy as it keeps only one bitcoin address for each wallet and can create as many wallets as you like. Other people cannot link these addresses to be under the possesion of the same person differently from Electrum.

From this point of view, Electrum is far behind lacking big time in privacy compared to Multibit classic.
What the hell are you taking about? Both Electrum and Multibit use the same key derivation algorithm, bip32. Furthermore it is not possible to know the other addresses in a wallet by knowing Judy one address, they need to be forms linked, and any wallet software will likely end up spend linking all the addresses in the wallet.

Lastly, what does"each wallet" mean? For both software you have one wallet open at a time. A wallet is a collection of addresses, and no one knows the addresses in your wallet unless they are spend linked.