Covered already. Don't trust crappy sources of entropy. Again, not a paper wallet vulnerability.
Regular user don't even know about entropy or entropy sources while most geeks/nerds only know entropy source which known to be secure (such as /dev/urandom & lots of mouse movement), but only know high level overview of the entropy source. Is there anything else that I'm missing? --snip-- Don't forget : 1. Microcode & firmware which almost always closed-source which makes audit impossible 2. Manipulate k value of ECDSA (See https://aisel.aisnet.org/cgi/viewcontent.cgi?article=1035&context=mcis2015 & https://github.com/tintinweb/ecdsa-private-key-recovery for reference) This Chris guy is crazy.
No, i think his problem are : 1. He have high standard or expectation of what regular user can do (set-up air-gapped device, etc.) 2. He have high standard or expectation of what regular user knowledge (choosing good/trusted entropy, one-time address, etc.) 3. Strongly prefer paper wallet to the point where he refuse to admit both HW & paper have vulnerability |
|
|
|
As some of the USB drives have their own security system software installed, I wish to know are these softwares actually trustworthy to be kept in it (like to add a password to password-protect it to secure our USB drive and/or even external hard drive)? I guess this varies per device. I'd prefer an Open Source solution for encryption. What kinda solution? Any preference you'd share here to make us aware of it? Personally i'd recommend using LUKS or LUKS2 encryption. If you use linux, you could either use gnome-disks (GUI) or cryptsetup (terminal) |
|
|
|
For reference, you can do it by : 1. Select "Coins" tab 2. Click "Amount" to sort by value for easier selection 3. Hold "Ctrl" button, then choose all UTXO you want to use 4. Right click on any UTXO you choose and select "Spend" 5. Then you should see "Send" tab and proceed to create transaction On a side note, you might want to crop your images. You're exposing few private info such as receiving address & bitcoin amount, this might attract people who want to steal your coins with social-engineering attack. |
|
|
|
I can't do it precisely if I remove letters from the base58 bitcoin addresses are invalid
If you meant Bitcoin address with shorter length (shorter than 26), then it's impossible. See https://en.bitcoin.it/wiki/Address#What.27s_in_an_addressex: 15nE3ebnYkJYRok2H9H9Xdw1widwPtYt7TD4
1E3en5widwbn..........
1onbwE53................ You're going to have to limit the prefix length, or it will take forever to create. Also, lower case "o" isn't allowed. According to https://en.bitcoin.it/wiki/Base58Check_encoding#Base58_symbol_chart, lower case "o" is allowed, characters which aren't allowed are 0 (zero), O (upper case "o"), I (upper case "i"), and l (lower case "L") |
|
|
|
|
I'm a bit confused about the setup plan, but 2-of-3 Multi-Sig-Setup Charlie seems like best option. Not too complicated & only rely on one third-party.
3-of-4 Multi-Sig-Setup Charlie clearly bad idea because you store unencrypted passphrase/seed on multiple location and third-party.
I don't understand about Electrum_Seed_GFM & Electrum_Seed_Brain, so no comment about 3-of-5 Multi-Sig-Setup Charlie.
Alternatively, i'd recommend build bitcoin script where Charlie can spend coin anytime, but Alice and Bob only can spend it after block height n mined or after timestamp m.
The cons is Charlie need to spend coin to P2SH address with same script again before Alice and Bob can spend the coin.
|
|
|
|
|
Why don't you use Tor Browser rather than modified Firefox Browser? Bad configuration could lead to deanonymization or slower connection.
Switch circuit is best solution most of the times, but reCAPTCHA is very unfriendly if you use known Tor exit node, VPN or proxy, you have to switch circuit multiple times and solve reCAPTCHA many times.
But if you allow 3rd cookies & login to your google account, reCAPTCHA will be more friendly, at cost of your privacy.
|
|
|
|
|
While i agree most of the reply isn't merit-worthy, it's not suitable to use trust feedback, flag or trust configuration in this case. Only theymos who can decide what do do.
But we don't know the context or topic of the topic and recent replies, so i might wrong.
IMO the merit source could give more merit amount to merit-worthy posts rather than give merit to mediocre post or a joke.
|
|
|
|
|
Because they realize permissioned blockchain is exist where all power they had (on current centralized system) could be remained.
They're not interested to support Cryptocurrency which offer privacy & freedom (full control over money).
|
|
|
|
Usually it's permission or dependency problem. If you're not sure if you have all dependency, install it with command sudo apt-get install python3-pyqt5
If you build from source, install the dependency and install Electrum parameter --upgradesudo apt-get install python3-setuptools python3-pip
python3 -m pip install --user Electrum-3.3.6.tar.gz[fast] --upgrade
If you still can't run electrum, try to get error message by running electrum from terminal so we can diagnose the problem. |
|
|
|
gmaxwell explained it well They've been assigned in blocks in an effort to keep related BIPs together. Also, sometimes people have ignored the process and self-assigned numbers and started using them in communications-- sometimes multiple people with the same number, when that happens the number gets temporarily skipped for assignment to avoid adding confusion. But primarily just due to grouping. BIPs from #1 to implement whatever I've missed
You absolutely shouldn't do that. The BIP process has virtually no editorial control-- it's just a publication numbering scheme that assigns a number to anything that persists long enough requesting one. There are many low quality / broken BIPs that no sane party should use. Essentially the only editorial lever in BIPs is that if many people dislike a proposal they'll encourage the proposer to abandon it before it reaches the point of getting a number assigned. If the proposer can't be convinced or if no one cares enough to convince them and the proposer persists their proposal will get numbered. TLDR : BIP number it's not used in sequence, but by category |
|
|
|
Try logging in to your routher and check the connected devices?
Disconnect all devices expect a computer/laptop you use & E9+ to make identification easier, then get IP of your computer/laptop (with ipconfig on cmd if you use windows). And obviously listed IP which isn't your computer/laptop is IP of E9+ |
|
|
|
What files did you download and verify? If it has .AppImage extension, all you need to do is run it either by double-click it on your file manager or use command ./electrum.AppImage on terminal If it has .tar.gz or .zip extension, there are 2 option : 1. Extract and run it with command 2. Install it with command python3 -m pip install electrum.tar.gz[fast] |
|
|
|
Will it more difficult to get the key?
Most likely yes, but : 1. It's useless if attacker know you use brainwallet & know this method 2. Unless you write down passphrase for brain wallet, you will forget your passphrase or/and your clever method 3. It's still far less secure than simply use CSPRNG to generate your private key/seed |
|
|
|
Even if my PC has a reputed Anti-Virus/Anti-Malware/Anti-Spyware software to ^protect^ my PC, should I still consider it compromised if my OS is pirated?
Yes, your system is still vulnerable against zero-day exploit, especially due to update is disabled by default on some pirate distribution. 1) I run Pirated Windows in a Linux OS based PC through Virtual Machine software
2) I run Linux OS in a Pirated Windows through Virtual Machine software and keep my coins in Linux
3) I run both by installing both these OS in one PC simultaneously
4) I've an Antivirus which is itself cracked to use its Premium features
1, 2) Should be secure, it's difficult to "get out" from Virtualization & vice-versa 3) Should be secure, use drive encryption on Linux OS if you have serious security concern 4) No Idea |
|
|
|
In case you didn't know, Raspberry Pi 4 just released. You can see it at https://www.raspberrypi.org/blog/raspberry-pi-4-on-sale-now-from-35/Raspberry Pi 4 specification : - A 1.5GHz quad-core 64-bit ARM Cortex-A72 CPU (~3× performance)
- 1GB, 2GB, or 4GB of LPDDR4 SDRAM
- Full-throughput Gigabit Ethernet
- Dual-band 802.11ac wireless networking
- Bluetooth 5.0
- Two USB 3.0 and two USB 2.0 ports
- Dual monitor support, at resolutions up to 4K
- VideoCore VI graphics, supporting OpenGL ES 3.x
- 4Kp60 hardware decode of HEVC video
- Complete compatibility with earlier Raspberry Pi products
I'm amazed with hardware improvement, especially 4GB RAM which allow "RAM-hungry" application & better multi-tasking. What do you think? |
|
|
|
Nice guide, you even mention risks of exposed xpub and private key generated from the xpub  You might want to mention Ledger/Trezor user also can use any software besides "official" software to make watch-only wallet. |
|
|
|
|
Show Posts
