Bitcoin Forum
June 19, 2024, 10:23:13 PM *
News: Voting for pizza day contest
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 [103] 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 ... 192 »
2041  Bitcoin / Bitcoin Technical Support / Re: Pruned node v0.11 bad alloc, memory issues on: October 08, 2015, 12:10:44 PM
See the part about transaction flooding:

https://bitcoin.org/en/release/v0.11.0

On reddit someone set minrelaytxfee to 0.0001 (double what is suggested above) and his node is using very little RAM.
2042  Bitcoin / Electrum / Re: Electrum + Keylogger + TrustedCoin on: October 07, 2015, 01:57:05 PM
If your computer has malware when you create your electrum wallet then its possible the malware will just steal your seed. But if it doesn't have malware at the time of wallet creation then you are definitely protected with a 2FA wallet from future malware infections. The 25 word seed is not written to the wallet file so any future malware infection will not be able to spend your bitcoin all by itself. Any transaction will have to be signed by trusted coin and they require you enter the 2FA code first and of course in the process you review the transaction. I suppose if the malware was really sophisticated it could show you a fake transaction on-screen to get you to enter the 2fa code but then nothing can protect you from that sort of malware.
2043  Bitcoin / Electrum / Re: Electrum Wallet Backup Question on: October 07, 2015, 01:50:50 PM
My laptop is very complicated.  You can't just take the hard drive just like that.


So you telling me best to send the bitcoin to blockchain or a site then just keep it there until i get my laptop back?

Depends on how paranoid you are. If you don't trust the laptop repairmen then you should know that he could just install some malware on your hard drive while he has it with him. That way he can steal your bitcoin remotely later.
2044  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 07, 2015, 01:48:38 PM

It's just that if Intel compromised the RNG they must have compromised other parts of the CPU as well right? Why stop at just RNG? Everything goes through the CPU so your entire system could be compromised.

Yea you are right there, I will just disregard this risk vector.

Anyway this is all just speculation. You are paranoid and I'm feeding your paranoia Smiley

When it comes to securing your money and not letting it on the hands of hackers, i think the paranoia is justified.

=======================

Ok so what about my original question, has Electrum been audited by some specialists. I know the wallets that are promoted on bitcoin.org have all undergone security audits, so how about Electrum? And where I can find that Cheesy

Thanks.

There has been no formal audit that I know of if that's what you mean. It's open source so lots of interested people look over the code from time to time. Some of them find security holes that they report. Also see open issues

You know you are worried about electrum's security when its open source but you forget about your closed source operating system. Only Microsoft knows what's going with Windows code.
2045  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 01:36:49 AM
Anyway this is all just speculation. You are paranoid and I'm feeding your paranoia Smiley
2046  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 01:35:22 AM
Quote
Adding mouse movement, network log, sound card noise ,etc can be an additional security feature.

It already is. That's how entropy is collected by the linux kernel. That's why I'm saying Linux does not rely on CPU RNG alone.

I dont understand why you say that if the CPU RNG is insecure, then it is fatal because if I add other entropy it should be secure no? Please explain.

It's just that if Intel compromised the RNG they must have compromised other parts of the CPU as well right? Why stop at just RNG? Everything goes through the CPU so your entire system could be compromised.
2047  Bitcoin / Electrum / Re: Electrum Wallet Backup Question on: October 06, 2015, 01:19:30 AM
The reason why i ask is this because i'm going to have my laptop looked at for another issue and if something happens to my laptop in the repair, then i want to make sure my bitcoins are safe. 

You should remove your hard drive before sending off your laptop for repair. Otherwise the repairman might steal your bitcoin!
2048  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 01:17:06 AM
Then it should create a very safe seed no? I would prefer a 512 bit seed an I think the 256 bit is not that secure.

Bitcoin addresses only have 128 bits of security. A larger seed is pointless.
2049  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 01:14:48 AM
If I use external entropy then I have to rely less on my processor RNG right? How safe is that?

Depends on the source of the external entropy. I don't really know why you are worried about this. If your CPU is insecure then everything is insecure.

If it's any consolation on Linux systems at least the output of the hardware RNG in the CPU is XORed with whatever entropy the system collects from its normal operation i.e. disk seeks, network activity, user mouse and keyboard activity etc.

https://plus.google.com/+TheodoreTso/posts/SDcoemc9V3J
2050  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 01:09:59 AM
Will that make me a 256 bit seed with that entropy? (I can use a much higher random number)

I am not sure. I suggest reading the source code.

https://github.com/spesmilo/electrum/

The entropy you provide has to be in base 10

I do know that if you give it a really large number for entropy it'll up the seed size.
2051  Bitcoin / Electrum / Re: Electrum RNG audit question on: October 06, 2015, 12:57:37 AM
It uses the operating system RNG:

Quote
Under Linux and Unix like operating systems including Mac OS X that is /dev/urandom and under Windows it is CryptGenRandom().

https://bitcoinspakistan.com/blog/electrum-seed-explained/

You can make your own seed:

https://bitcoinspakistan.com/blog/make-your-own-electrum-seed/

BTW if your OS has been compromised then no wallet can protect you.
2052  Bitcoin / Electrum / Re: Electrum Wallet Backup Question on: October 06, 2015, 12:53:24 AM
Just use the file menu > save copy command to save a copy of the wallet on a removable drive. Then on the freshly installed system use file>open to open the wallet. That's all.
2053  Bitcoin / Electrum / Re: Regarding amount of Electrum addresses and security overall on: October 01, 2015, 03:33:27 PM
1)It is advised that to have the perfect security, you should remember/write down the private keys of every bitcoin address where you receive funds, right? At the same time, it is advised not to use an address to receive funds more than once. So do I really need to write down every private key of every bitcoin address I receive funds to? seriously? I know this might be overreacting, but I really want to have my wallet 100000% secured.

Electrum is a deterministic wallet which means that all address specific private keys are derived from a single seed. This is shown in the user interface in the human friendly form of 13 random words. The words and their order is important. Write down the seed and it is the only backup you need. *All* the address specific private keys can be derived from it. The addresses themselves are derived from the private keys so all your addresses can be recovered with just the 13 word seed.

If you like you can also make a backup of the wallet file using file menu > save copy. The wallet file stores address and transaction labels that cannot be recovered from the seed alone.

Quote
2)Upon creating a wallet in electrum, I am provided with 10x different addresses, but I can't seem to be able to create more. Now if I do not want to use an address more than once, 10 addresses is definitely NOT enough for me, I fail to see any button or something to generate a new address. Also, if there is actually a way to generate more addresses, will these new ones also be backed up by the seed?

Electrum will automatically create new addresses from your seed when you start to use the old ones. It tries to make sure you always have at least 10 UNUSED addresses. As mentioned above all addresses and address specific private keys can be recovered from the seed or a one time wallet file backup. Although if you add a lot of labels you will want to make more frequent backups of the wallet file just for the labels.

Oh and desktop wallets are definitely better than web wallets.
2054  Bitcoin / Electrum / Re: Receiving bitcoin on expired wallet ? on: October 01, 2015, 03:29:02 PM
Addresses never expire. This thread is based on a misconception. People replying to the OP need to stop talking about addresses or wallets expiring.
2055  Bitcoin / Bitcoin Discussion / Re: dot.bitcoin or dot.btc TLD on: September 28, 2015, 07:59:43 PM
.coin would be best IMO

That could be misleading, and non related to bitcoin. It could be .crypto, but that is also vague.

.BTC is the best

And then we can know how many bitcoin related sites are there.

TLDs aren't made for micro-niches. The market has to be large enough for it to be worth the cost of running the registry including the fees that you have to pay ICANN. So we want a TLD for all crypto currencies not just bitcoin. While bitcoin is the most successful today there remains the possibility that some other alt coin will come that will supersede bitcoin in the future. Besides .coin can be used for digital currencies outside the crypto space too.

Personally I like the idea of a bit.coin, btc.coin, news.coin or something.coin. The possibilities for nice domain names are greater IMO.
2056  Bitcoin / Electrum / Re: Importing a multi-signature account into electrum on: September 28, 2015, 07:54:49 PM
Also when you say extended masterpassword do you mean the Private key like the 52 character key or the public key, the 66 character key.

I didn't say extended master password. I said your extended private key and the extended public keys of the other participants in this multisig wallet. You can see examples of extended keys here. xprv... = extended private key and xpub... = extended public key.

2057  Bitcoin / Bitcoin Discussion / Re: dot.bitcoin or dot.btc TLD on: September 27, 2015, 06:02:20 PM
.coin would be best IMO
2058  Bitcoin / Electrum / Re: Importing a multi-signature account into electrum on: September 27, 2015, 05:54:08 PM
Use file > new/restore to create a new wallet. Choose to restore and choose multisig as the wallet type. Then just paste in the extended private key of your wallet and the extended public keys of the other participants.
2059  Bitcoin / Bitcoin Discussion / Re: Has someone found any btc addy on directory.io with btc in it? on: September 27, 2015, 05:52:23 PM
I have not heard of anyone that has found something.
Have you tried it? I used some help and can confirm that starting 5 pages have nothing in them.

It isn't possible to find a key with coins in it. Please read the answers that others have given. The numbers are too large.
2060  Bitcoin / Electrum / Re: Why Electrum doesn't allow another 2fa option? on: September 27, 2015, 03:07:44 PM
However, if you have a "key logger" malware accidentaly installed on your computer(s) you are dead in the water.   

The key logger would need to be on both computers not just one. That is why we use 2FA/multisig because any attacker has to compromise two systems to steal anything.
Pages: « 1 ... 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 [103] 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 ... 192 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!