Show Posts
So you just saying google predicted how many estimated titles their are? I can throw out a big number too (sarcasum)
So then the average user probubly have nothing to worry about as not many people to my knowledge have access to search against the google book database with bitcoin seeds and i doubt those who have the entire google book database will only attack those wallets with high amounts of value in it(which if this is the case i doubt someone/entity would use a sentence from a book and would instead use a randomly generated password that is like a million characters in length)
So then the average user probubly have nothing to worry about as not many people to my knowledge have access to search against the google book database with bitcoin seeds and i doubt those who have the entire google book database will only attack those wallets with high amounts of value in it(which if this is the case i doubt someone/entity would use a sentence from a book and would instead use a randomly generated password that is like a million characters in length)
I am saying it is not safe to use a sentence from a book as your seed. Do not do that. Never.
Anyone can access a digitized library, loop over all sentences, derive Bitcoin addresses from them, and check them against the Bitcoin database. It does not take a vast amount of resources, and time is on the side of the attacker. There is already an instance of Bitcoins that have been stolen because someone created an address derived from a short phrase (it was something like 'fuckyou' iirc). It only a matter of time until someone uses a large book database to feed their search algorithm.
And, no, I was not throwing a big number. 130 million books is ridiculously small in terms of search. If we assume that each book contains on average 10000 sentences (a very generous estimate), we get around 10^15 sentences to test. In contrast, a random seed with 128 bits of entropy yield 3.4x10^38 combinations. Do you understand the difference between those numbers?
Do not trust people who tell you that you can safely derive the seed yourself. Train your memory and learn a purely random seed.
Ah i see high rate of probability of figuring out the seed now with the formula you presented.
I guess it really isn't a good idea, but to be fair 'fuckyou' is more like a dictionary attack or a commonly used password then a complete sentence out of a book.
Regardless of my perspective/opinions,
Thank you again for your insight.
but just in case the OP needed something different or someone else was looking for alt solutions searching around the forums i posted it any ways. Cheers mates!
