Bitcoin Forum
May 25, 2024, 11:48:54 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 [22] 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 ... 463 »
421  Bitcoin / Bitcoin Discussion / Re: Could bitcoin mining solve climate change? on: August 09, 2022, 07:15:38 AM
Renewable energy is not perfectly carbon netural. Renewable energy is better than traditional fossil fuel because it incurs less carbon footprint than those but it doesn't mean that it doesn't incur any at all. Building resources specifically to cater to those operations will inevitably result in even more pollution than not having it at all. This is a rather weak argument because the entire profits of Bitcoin mining cannot possibly impact the development of renewable energy to a noticeable extent.

Besides, miners gravitate to cheaper energy. If coal is cheaper than renewable energy, they will use coal or vice versa. All of the power plants have limited capacity and it would actually make far more sense to give those to the locals rather than for Bitcoin mining operations.
422  Bitcoin / Development & Technical Discussion / Re: Sha-mir backup done securely online ? on: August 08, 2022, 06:13:13 AM
Note that the more parts of the whole you have scattered, the more risk there is that you lose one of them.
That is fine. Shamir Secret Sharing allows full recovery with only a partial number of shares, and that is why it is acceptable for the secret to be split.
423  Bitcoin / Development & Technical Discussion / Re: Sha-mir backup done securely online ? on: August 08, 2022, 02:45:26 AM
Generally, you want to create Shamir Shares in a secure environment and that would automatically rule out doing so remotely because that is an entire path for the attacker to exploit. You would first need to ensure that your remote environment is sanitized and your connection is secured.

Afterwards, you would probably want to stick to a known standard, SLIP39 is one that I would recommend. Here's a Python tool that Trezor uses: https://github.com/trezor/python-shamir-mnemonic/. You should try your best to find one that is more refined rather than this but I can't find any other reputable code myself.
424  Bitcoin / Wallet software / Re: I don't understand the seed management on Electrum on: August 07, 2022, 10:26:29 AM
Because when I delete my wallet and recreate it from the seed (the 12 words), all the transactions appear as well as all the addresses with funds. That's what scares me.

For the moment I still don't understand.
That is a feature of the seed. It is about as secure as your private key, because the number of permutations is similar with both.

Everything I say is wrong, it's just an example to popularize, same for the Pythonn, I can do it in C or other it was an example, not to be taken literally.
Nope. Unfortunately the most optimized code ever cannot bruteforce at millions, much less billions of times per second.

[1] https://btcrecover.readthedocs.io/en/latest/GPU_Acceleration/
Let
If my seed is :

word1 word2 word3

And I do a brute force, and the brute script tells me that the words : word1 word2 word3 are a valid wallet, it's over ?

What prevents a person from having access to the wallet?
Nothing. However, you have correctly demonstrated why we have a 12 word seed instead of a 3 word seed.

A simple demonstration would be using the word list to randomly generate a 12 word seed and iterate through the permutations and determine the number of iterations it takes to find that exact set of 12 words. The problem is there are 2048^12 (5.4445179e+39) possible permutations of it. You need to iterate at a rate of (10^30) to be able to find a seed in 5 centuries. That would be a factor of 21 over a billion, which is impractical, especially given that we established that the overheads makes this a very inefficient process.
425  Bitcoin / Wallet software / Re: I don't understand the seed management on Electrum on: August 07, 2022, 06:27:32 AM
There are not many words, 1625 is not much when you know the power of today's PCs. On my PC, with a Python script, I can test several billion possible combinations.

That's what I don't understand. If I test the combinations and find for example one that has funds, it's over for the portfolio, right?

It would be easy to take 12 random words from the list of 1625 words and test and then repeat and that several times per second.
Nope. Python is notoriously slow for loops and there are faster implementations out there. Depending on your type of loops or iterations, the actual rate will probably be far less than a couple of million per seconds.

There are actually tons of bottlenecks to be considered when you are bruteforcing seed phrases. First of all, you have to consider that various key stretching functions are used in the various steps of the process which slows it down significantly, because they are far more intensive than just generating random 12 word phrases. You are unlikely to really achieve speeds anywhere near feasible.

The other notable bottleneck is trying to find the addresses with any transaction history or funds. You have to get a set of all of the used addresses on the blockchain and search through it which involve both storage and computational complexity when you are searching thousands or billions of seeds per second.
426  Bitcoin / Development & Technical Discussion / Re: another way to generate bitcoin addresses on: August 06, 2022, 01:51:50 AM
we can make base 32 by keeping a bitcoin address starting with '1' ?
No. Because legacy addresses are always encoded in base58, so there is no way for you to encode in base32 and expect it to be valid.

Bech32 uses a special encoding and you don't have to use base58 to get a valid address.
427  Bitcoin / Development & Technical Discussion / Re: another way to generate bitcoin addresses on: August 05, 2022, 12:37:02 PM
why is it not possible for this address : 13YaqD5gGC79Jgzgt23eEMwscHBxuXdPhU not to be generated because 'z' is forbidden ?

and if this 'z' was removed from the address and the private key, could it avoid generating addresses and private keys without 'z' ?
Each of your addresses consists of checksums. When you generate that specific address, the last few byte corresponds to the checksum. Removing or otherwise changing any characters in the address will result in a checksum mismatch.

If you deliberately remove z from addresses without doing anything else, then your checksum will most likely be mismatching because your wallets always uses base58 to check for the address.
428  Bitcoin / Development & Technical Discussion / Re: another way to generate bitcoin addresses on: August 05, 2022, 11:38:17 AM
In fact I am trying to create this with the above example:

ex privkey : 5JdeC9P7Pbd1uGdFVEsJ41EkEnADbbHGq6p1BwFxm6txNBsQnsw

address : 12AKRNHpFhDSBDD9rSn74VAzZSL3774PxQ

I would like this address to be passed in this example because the address contains a forbidden character 'z'.

this private key must not exist because it returns a false address.
Not possible. You can remove and change more characters for the checksum to be valid but that would be too much work and you won't be able to see the private key.

You cannot modify or remove any of the address to any degree and expect it to be valid. Due to the avalanche effect, any modification to the private key will result in the address being completely different. You have to specifically search for an address that does not include your desired character from the onstart.
429  Bitcoin / Development & Technical Discussion / Re: another way to generate bitcoin addresses on: August 05, 2022, 11:14:31 AM
1) Yes. But certain addresses will be invalid because they will fail the checksum for the address generated.

2) Base58 goes from 0 to 57. Base57 goes from 0 to 56. Hypothetically, if there is a value with 57, then it would be considered 5 and 7 instead of 57 because it doesn't exist.

3) Not sure what you mean but you can easily create addresses without certain characters if you intentionally search for it.
430  Bitcoin / Bitcoin Discussion / Re: How do you introduce Bitcoin to people without digital literacy? on: August 05, 2022, 09:14:29 AM
There is no point of explaining and teaching them beyond what is necessary. If they are technologically illiterate to the point which they can't even use Paypal, Venmo then you would have to teach them those first.

Having to use or adopt Bitcoin does not necessarily mean that you have to understand all the nitty gritty details and it definitely doesn't mean that they would have to engage in any conversations about Bitcoin within the forum either. So long as there is an application that allows them to use Bitcoin like Paypal or basically any other payment processor, then they would be fine. There is little interest in the general population beyond how to use it.
431  Bitcoin / Electrum / Re: Electrum problem on: August 05, 2022, 09:00:08 AM
It should not become a watch-only wallet without the user doing something to it.

How did you create the wallet? Do you remember having to type in your address into Electrum or were you given a 12 word phrase?
432  Bitcoin / Bitcoin Technical Support / Re: Electrum Server Privacy Leaks on: August 04, 2022, 08:47:35 PM
Makes you wonder how difficult it would be to recode some of the SPV wallets to never connect to the same server for more then one request before going to another random one and then going to another random one.
You would have to keep a local log but it would make some analysis a bit more difficult.
Not very.

The protocol that Electrum uses isn't designed to enhance privacy but quite the opposite instead. It doesn't use any methods to try to obfuscate your data whatsoever. It is totally possible for the server to jump from one to another with each address but that is ridiculously inefficient and gets more inefficient as the number of addresses increases. It does nothing against topological leaks given the limited number of servers and the possibility that a malicious agent runs multiple servers.

An example of a wallet that does this would be Wasabi but it is done with a combination of BIP 158 but Electrum just sends the Scripthash straight up.
433  Bitcoin / Bitcoin Discussion / Re: 1 Billion Bitcoin users by 2024 is possible with increased access to electricity on: August 03, 2022, 03:39:44 PM
There is a substantial difference between the ease of access to Bitcoin or Crypto and the willingless of adoption by the general population.

Fiat is a far better alternative as opposed to crypto mainly for a few reasons. Namely: Volatility, Ease of use and general reluctance to change the status quo. If El Salvador is of any indication, Bitcoin is not a sustainable currency where volatility is of any concern. It can be worse than the major currency in those countries because of its volatility. You can still argue that their currency may be subjected to hyperinflation but USD or major market currencies are far more stable. In countries with low literacy rates, you have very few of the people who are willing and able to use technology to their advantage. They are far more likely to be willing to maintain the status quo due to the lack of understanding of alternative currencies.

The problem is not with the ease of access but it is an entire myriad of problem that plagues the lack of adoption.
434  Bitcoin / Development & Technical Discussion / Re: Can we sign 3 messages from 3 addreses with same private key on: July 19, 2022, 02:09:19 PM
Yup I thought I'd seen that before but couldn't work out where. I'm surprised it:s not done in all other wallets as it's a reasonably easy implementation (and might just be based off calling the same but slightly different method each of the three times).

I know multisig compatibility has been stated on here before that devs would look to find a way that means different signatories can be used if necessary (ie there needs to be a way a signature can be removed from a raw transaction) if that's the same for signatures then it'll make things a bit harder.

(the topic that came from was a discussion on taproot, I'm not sure I've done what - I think mprep - said justice but it was a discussion on combining signatures to mean you'd run a verification algorithm over 1 signatur but with n private keys having signed the same hash/message.
Multisig transactions has multiple signatures, or one with an aggregated key in the case of Taproot. It is an easy implementation but it doesn't solve or address the root of the problem. You will always run into problems and continually try to catch up with the newer format by trying to validate with the keys instead of the spending script. We can better handle this by eliminating a ECDSA based validation (ie. validating individual keys and signatures) because that would introduce too many limitations.

Current solutions only provide a way to sign and validate with the ECDSA keypair, but it doesn't validate the address per se.
435  Bitcoin / Development & Technical Discussion / Re: Can we sign 3 messages from 3 addreses with same private key on: July 19, 2022, 01:07:21 PM
This actually gives me a novel idea for implementing "standardized signed messages for segwit".

Since the public key is being used to verify the message anyway, only the verification process needs to be changed.

1) When signing the message, the procedure remains almost exactly the same - same ECSDA algorithm with the same parameters, except in the "Address" section you merely place the segwit address in there.

2) Now when you verify the message, the signature and message will combine to give the public key. The public key can simply be hashed, and each encoding of P2PKH, P2SH, and P2WPKH can be tried in succession to see if they match the address. That way, it doesn't only try the base58 P2PKH encoder and fail for all segwit addresses.

All that needs to be done is create a BIP, and then get it approved for implementation (the implementation which is a ridiculously easy process as there is only minimal modification required to the sign/verify message processes).

Edit: I threw a rough draft of this idea into the mailing list, let's see what they have to say.

That is actually what Electrum is doing when signing with Segwit because Bitcoin doesn't allow it (No associated private key). However, that is not what we're getting at and treating addresses as entities with a single public key doesn't allow script based addresses, or multikey implementations to sign messages. You do need the address to cross check and that is usually provided by the user.

BIP322 is an implementation that attempts to solve this but it is at a draft stage.
436  Bitcoin / Bitcoin Technical Support / Re: Why doesn't Core have a broadcasttransaction RPC call? on: July 03, 2022, 03:41:20 AM
OK, when I was scouring the RPC help of the list of methods, I did not consider sendrawtransaction because I was looking for RPCs that took a txid (quite literally "txid" as that is how the parameters are labelled in the short description).

But what if I'm using an air-gapped wallet that doesn't provide a raw transaction, but just a txhash?  Perhaps the hexstr argument of sendrawtransaction can be amended to take the txhash as an alternative? This is the only way I think this funcionallity an be inserted if another RPC call cannot be created.

I know its already returned as the result, but it's not possible to obtain the raw transaction bytes in all wallets.

You should be able to. Txhash doesn't provide sufficient information for you to broadcast anything. You need the raw transaction, not just the txhash to broadcast the transaction.

If you can somehow rebroadcast using the Txid, then chances are your transaction is already propagated.
437  Bitcoin / Bitcoin Technical Support / Re: Why doesn't Core have a broadcasttransaction RPC call? on: July 02, 2022, 04:43:38 PM
Doesn't sendrawtransaction suffice for the purpose? Just pass a signed raw transaction in hex to the RPC.
438  Bitcoin / Bitcoin Technical Support / Re: My questions regarding wallet on: July 02, 2022, 08:51:41 AM
1) I use a trust wallet to store crypto. My question is how safe it is to store over $20k coins? Yes, of course, I take care of keeping my mobile safe and virus/malware free so never click on any unknown link as know about his as i am in IT field.
This is subjective. Even if you don't click on any links, run any suspicious software, there are still ways to compromise your computer without and zero day exploits are not uncommon as well.

2) What if I lost or damage my hardware wallet? Do i need to buy same hardware wallet and restore my coins? or can use private keys in any other online wallet and get my coins back?
You shouldn't use online wallets. You will be given the seed at the initialization of the hardware wallet. That can be imported into many of the compatible desktop wallets to restore all of the addresses.
3) What if the hardware wallet is damaged or corrupt?
Same as above. If you'd like, certain hardware wallet provides a limited warranty to cover for damages.
4) Instead of hardware wallet can I keep the separate phone to store my coins in wallet app like trustwallet and keep disconnecting from the internet unless i want to do transaction. Is this a better choice?
Not really. Hardware wallets are operated in a sanitized environment and it is difficult to compromise that environment. This is why they are secure, because they are designed for specific tasks and are intentionally secured to execute and accept certain commands.

Disconnecting your internet periodically actually does nothing to improve your security. Malware would just wait for an internet connection to relay any data back to their C&C. Your best case would be to ensure that the wallet never gets online and use another device to send the transaction data, aka. Airgapped wallet.
439  Bitcoin / Development & Technical Discussion / Re: zero-fee transaction accepted on mainnet on: July 02, 2022, 07:12:24 AM
It will still be protected from spam, because getblocktemplate and similar commands always put transactions from the highest to the lowest fee, so with those settings, free transactions will be included only if there is a room for them. And meanwhile, they could be combined with full-RBF, or they could even increase in fees, so that 500 transactions A->B->C->...->Z paying one satoshi each could be compressed into a single transaction with 500 satoshi fee.
The parameters are designed to prevent unnecessary resource usage by having to receive and relay these free transactions. While your mempool will still kick the transactions from the lowest fee once it hits the size limit, the mempool fee rate will still increase and overwrite your parameters.

If not, then your mempool will contain unnecessary transactions that wouldn't be mined regardless.
440  Bitcoin / Development & Technical Discussion / Re: Full RBF on: June 24, 2022, 01:24:18 PM
Isn't compulsory RBF benefiting miners? Why wouldn't they want to change their policy accordingly?
Very marginally. Most of the transactions shouldn't require RBF especially with periods of low fee rates and low fee volatility. Miners are known to be fairly slow at signalling support for various different protocol upgrades so that by itself already means that there is low incentives when there isn't a lot of tangible impact to their own earnings. It does come with some testing and manpower which can be insufficient for them to really change it.

I'm not saying that they won't do it, but then there will definitely be time lag.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 [22] 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 ... 463 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!