Are you just trolling on purpose now? Or is it just that you fail to grasp that all of the things you want:

- Electrum to notify of updates
- Electrum to not display arbitrary text in error messages
- Electrum to post notification of security alerts

have already been implemented... Latest version of Electrum includes "opt-in" update notifications... it has been patched so only hardcoded error messages will be displayed... and the devs always post on the official website regarding security issues... they've even started using "good" servers to notify users of older versions that they should update.

This has been pointed out to you multiple times in multiple threads and you keep saying "not enough"

What more do you want the devs to do?

Did you import using the Jaxx 12 word seed mnemonic... or did you import private keys?

File -> New\Restore -> Standard Wallet -> Create a new seed -> "Legacy"

If you don't select Legacy, you will get a native Segwit wallet that generates "bc1" addresses.

ThomasV has stated multiple times that Electrum has and will always be BTC only.

As joniboni said, all the code is on Github... in fact, I'm even sure there are already DASH compatible "electrum clones". So, your best bet would be to engage some developers to modify that to work with your fork.

Refer:
https://electrum.dash.org/
https://github.com/akhavr/electrum-dash

And higher prices


Given the "paranoia" levels among crypto enthusiasts... it will indeed be difficult for newcomers in the hardware wallet space. You'd need to open source everything and be very open about all aspects of your device to try and build the trust.

Given that you haven't been a victim of the current phishing scam and downloaded a malware version of Electrum, then it is likely that your wallet seed mnemonic (12 words) have been compromised.

- Have you ever stored your Electrum 12 word seed mnemonic in a digital format? ie. text file or screenshot on your PC, email or cloud file storage?
- Have you ever entered your Electrum 12 word seed mnemonic in another wallet, website or other application for trying to access fork coins like Bitcoin Cash, Bitcoin Gold, Bitcoin Diamond etc etc?

NOTE: as TryNinja says... you cannot get your coins back... and Electrum accept no liability. The point of these questions is to try and help you understand why you lost your coins so you can avoid making the same mistakes.

That's not quite what I was getting at... I'm not debating whether "proven scammers are bad" or not, but trying to determine what the standard of proof is to consider something as "proven" in the first place.

For instance, do you just need a screenshot of PM or do you need a PM that has been independently verified/corroborated by a 3rd party or do you need <something else>? Do you then need X members of DT to vote "guilty"? Do you need X "members" of the forum to vote "guilty"? etc

Does that make sense?

I am beginning to think that perhaps this might be a topic for a different thread. Apologies for the thread drift.

You missed Case 3, which seems to be the case moejoejay is referring to...

Case 3:
- I deposit 0.01 from my address 1NinjabXd... and get a chip of 0.01;
- I export private key from ChipMixer and import the private key into <SomeWallet>...
- Status: 1rAnD0mAddrFromMixer... address with 0.01;
- There is no direct link between my original address 1NinjabXd... and the final address 1rAnD0mAddrFromMixer... HOWEVER, ChipMixer knows the private key for this address! I must now trust that ChipMixer will not steal the funds until I spend them (or sweep them to a different address).

Don't trust, verify!

Which is why, regardless of the fact that I always download Electrum from electrum.org... I will always verify the digital signature before installing and using it. I also always check the Electrum website on a semi-regular basis to look for updates.

In my opinion, Electrum isn't "dodgy"... and at the end of the day... the real blame lies at the feet of the scumbags executing these attacks. 

Yeah... there seems to be an extra "script type" value in the derivation path...

so instead of: m / purpose' / coin_type' / account' / change / address_index
it is now: m / purpose' / coin_type' / account' / script_type' / change / address_index

so the derivation path isn't m/84'/0'/0'/0/0... but m/84'/0'/0'/0'/0/0

To make the modified Ian Coleman page (ie. where you have already modified it to work with Electrum seeds) generate the matching bech32 addresses/privkeys... you need to:

1. Enter Electrum Seed
2. Click on "BIP141" tab
3. Set "BIP32 Derivation path" to: m/0'/0
4. Set "Script Semantics" to: "P2WPKH"

The addresses should display at the bottom... path should show as: m/0'/0/x

I cannot reproduce this?

I even redownloaded the electrum-3.3.3-setup.exe from electrum.org (checked the digital signature)... and tried scanning with Windows Defender... it doesn't complain about the file or show any viruses/trojans.

I know several users have seen Windows Defender complaining about the Electrum installers, so I am now wondering if my Windows Defender is working properly.

There are still people falling for the "Dear sir, you have won $60million USD in Nigerian State Lottery" emails... there are still people falling for the "Hello, I am calling from Microsoft Security about virus on your computer" phone calls...

Try as hard as you can, you simply cannot protect people from themselves... Unfortunately, some are going to learn "the hard way"™ about security and personal responsibility when dealing with cryptocurrency

Was the recent exploit serious... yes... was it downplayed... No. There was even a "News" link at the top of all Bitcointalk pages by Theymos warning about it when it first happened. The exploit is now weeks old and it has been patched. If users are not updating and not staying up to date when dealing with their personal finances, you cannot blame the software developers for this.

I've said it multiple times... "Be your own bank" also implies "Be your own Bank's security department".

You can also do it very easily in Bitcoin Core... simply click the "+ Add Recipient" button on the "Send" tab. As far as I'm aware, you can add as many recipients as you like... but I've never added more than 3.


image "borrowed" from stackExchange

I don't see why... air-gapped PC with cold wallet == hardware wallet, with slightly different workflows... all they do is hold private keys and sign transactions.

In both cases, you still need the online computer to generate the unsigned transaction... this is the point where the "fake destination" will be injected. Regardless of whether or not you use airgapped PC or Hardware wallet, you still need to take your time and verify the destination address.

Essentially... an air-gapped PC and a hardware wallet are the same thing and achieve the same goal... Separation of private keys from the online world. The only real differences are probably cost, convenience and workflow.

Your assumption is wrong. Trezor is more than a box that keeps public/private key pairs. The transactions are signed within the hardware wallet itself... the private keys NEVER leave the device. They are never exposed to Electrum... server OR client. They are not even exposed to the Trezor wallet software.

You create an unsigned transaction within your wallet software (electrum, mycelium, hardware wallet software in browser or on desktop etc)... The unsigned hex is then passed to the hardware wallet and the hardware wallet signs the transaction internally and returns the signed transaction hex.

Again, the private keys NEVER, EVER leave the hardware wallet.


This is why you cannot be "in a harry[sic] or/and inattentive"...


You might want to reconsider your position.

To whose standard is the "proof" required? Your's? Mine? Theymos'?

This is an inherent problem we have... there is no defined standard. I see "red tags" being handed out to "alts abusing campaigns" because they all happened to deposit ERC20 tokens to the same address... In my mind, this is not definitive proof of accounts being alts. As I see it, it is just as likely (as is claimed by the "alts" in a lot of these instances) that it is simply a group of friends/family members all happily spamming away on FB/Twitter to earn some tokens and then consolidating them into one account to save on transaction/trading fees.

However, multiple BTC addresses "owned" by different accounts all being linked as inputs in a single transaction is definitive proof in my eyes that the addresses all belong to one person.

I've seen users here on various sides of various disputes claim (like your poll) that there are only 2 options... Yes/No, Black/White, For/Against etc... Unfortunately, in my opinion, the world we live in, isn't so neatly black and white... there are large areas of grey in various shades. So, attempting to define everything in such a binary manner is somewhat naive.

@Timelord2067... just a (very) minor correction to your OP:

We're currently on NZ Daylight Savings Time... NZDT is UTC+13

Otherwise, thanks for curating this list of articles. Excellent work!

It is a false positive... For some reason (shitty heuristics), a number of antivirus applications detect programs that use PyInstaller as having trojans... I think it is because a number of viruses/malware apps use PyInstaller... so the antivirus incorrectly marks ALL apps that use it as being trojans

If you downloaded from https://electrum.org/#download and follow the instructions here: https://bitzuma.com/posts/how-to-verify-an-electrum-download-on-windows/

And the digital signature checks out OK, you can be confident that you have a legitimate copy of Electrum and that it is safe. Ignore Windows Defender, it is a shit antivirus.

Make sure that the malware is gone? or that your coins are gone?

The only way to be close to 100% confident that the malware has gone... is to completely wipe your PC, full format and reinstall of the OS. You can also try running multiple malware detectors/removers like "Spybot search and destroy", MalwareBytes etc... and running multiple antivirus apps doing full scans of all files, but there is always the possibility that something sneaky will linger.

If you are just wanting to see if your coins are gone, just check your addresses on a block explorer... if they show 0 balance, coins are definitely gone.

If you didn't follow any links and/or download and install anything... then there is a very good probability that you are OK and there is nothing to worry about. Your transaction is probably just stuck for some reason (lots of unconfirmed transactions, low fee etc).

I had a look and there was a big spike in unconfirmed transactions (and fees) around the time you posted your message, so it is most likely related to that. Since then the mempool has cleared, so I would assume that your transaction has most probably confirmed now.

However, if your transaction has still not confirmed, can you post the transaction ID or the address that you were trying to send to? I realise that you're attempting to send to a mixer... and posting the TXID or Address will compromise the privacy, but without this, there is no way to understand what is happening with your transaction. You can PM me if you would like to post the TXID/address privately.