So as you can see from the notice above, ( https://bitcointalk.org/index.php?topic=2702103.0 ) Electrum is vulnerable, and has been for quite a while. Its just that they have discovered it now, and also that their first fix wasn't a fix either, that have upgraded it again. I for one am not feeling much better after this upgrade either, because tomorrow maybe another one like this. So is it time to move from electrum to another option? What do you guys think? I'm afraid your logic is backwards. Cryptography exists and is used for security because methods are published, put into use, flaws are discovered and the method is improved, repeatedly. This has been the case since the 1950s. Electrum is an example of this process, is it not? |
|
|
|
My standard practice with forked coins and paper wallets is the following.
1. Importing Paper wallets to a new Bitcoin address <moving them away to keep them safe>
2. Taking old Paper wallet and using whatever forked wallet to extract the FREE coins. I assume you mean "Sweeping" instead of "Importing", right? It's probably a typo, but for others who read this it can be a crucial difference. These words have specific meaning, and confusing them can easily lead to loss of funds, in certain conditions. I understand you are being polite in saying "typo," but this is important. |
|
|
|
If multiple blockexplorers shows that you have funds in your addresses, It means that they are there. Have you tried to recover them to Electrum? You can try that, just make sure you check the "BIP39 Option" while typing the seed.
Yes, I've tried Electrum. It does the same thing. Creates a wallet with no funds using the 12 words. I created another wallet on Electrum using my lost wallet address ID and it created a "Watching Only" wallet that does show the funds. In my experience by far the most common reason for typing a seed word sequence in and finding it creates a "wallet with no funds" is incorrect "m derivation sequence, e.g. like 'm/44/0/0' " Some wallets give you control of this and some don't. However this is easy to test, set up a Trezor with a few USD in value in a number of supported cryptos, then try to "restore" to various wallets and see what happens. Bet you find you get some wallets with zero balance. I would suggest going back and reviewing the BIP39 proposal, and in particular, checking your words against the word lists therein. |
|
|
|
I believe there is no need for a subforum on the Lightning Network. Not yet. Because if the mods make yet another subforum, then the newbies will only start ignoring it simply for being isolated. It is better for Lightning threads to be in the open and be more welcoming and accessible to the newbies. They might learn something.
Lol at that. However I believe that my initial question "Where is the home discussion of lightning network" is reasonably well answered. There is currently no home. There is some here, some on twitter, some on reddit. I'm not trying to place a value judgement on that, just seeking to establish what the reality is. I too think it would have been reasonable to have a subforum for Lightning. It is a paradigm change as far as feature additions to bitcoin are concerned. Its success mostly depends on the network effect it'll garner. In fact, the forum is probably one of the places where having widespread adoption from individuals could contribute a lot to the success of LN. I am just going to use this thread now to bump a topic i started with the intention to discuss ideas on how we as a community can rally to make sure SegWit and LN have the desired effect. For your considerations: Thoughts on Supporting SegWit/LN and not Big blocks. Sorry if someone's a BCH fan as I am not sold on its merits and claim to the legacy. Very interesting and (seems to me) apolitical article. RE "adoption of Segwit" I would point out that certain uses, such as paper wallets, really do best with traditional "legacy addresses." Number of reasons for that but I think they are self evident. RE LN / Segwit, although clearly Segwit is a part of the Bitcoin modified algorithm LN is not. LN is as separate from bitcoin as a horse and it's rider. |
|
|
|
Before you want to close the thread, you should consider why I opened it :
1. I want a offline method to do this. <with encryption when you go online>
2. I want a easier method for newbies to do this. <Nice GUI interface>
3. I want to sweep everything, not just move a percentage of the coins.
These days, with all the free coins that needs to be claimed from the forks, we need a fast and easy and safe way to do this. I use a lot of paper wallets and this is becoming a issue with all of these forks. ^grrrrr^
Previously Codewrench explained standard accepted practice of air-gapped offline computer, where private keys are never exposed to the Internet. Are you referring to the risk when private keys are placed in new-coin-wallets for purposes of retrieval of those coins? Because this is a process of importing the private keys, such that they stay the same. "Sweep" usually refers to the reading of key into a new key in a wallet. Since every new fork is unique I doubt there is every going to be any GUI interface that makes all cases easier for newbies. |
|
|
|
Trezor is safe i know but still is it good to handle about 500 transactions in batch.
How to connect an api system and confirm transactions one by one and sent in a batch.
Can i make a different password for api and limit the api withdraw? so coders can get away with an hefty btc lol.
I wouldn't trust Trezor to be honest. Do you trust their RNG? do you trust the internals enough to know that it will be isolated when you connect it to a computer? Why not get a linux laptop, libreboot it, and put an offline wallet there, then craft the raw transactions, convert them in a QR code, and then pass this QR code into an online computer to broadcast it? This is I think the best way to go for serious cold storage that I know of. There's something a bit off about the idea of a 500x transaction, whether one with 500 ins or outs or 500 separate transactions, done from any cold storage platform. Or am I wrong on this? Seems like it is based on how you define cold storage, but I am curious as to opinions on the matter. |
|
|
|
I believe there is no need for a subforum on the Lightning Network. Not yet. Because if the mods make yet another subforum, then the newbies will only start ignoring it simply for being isolated. It is better for Lightning threads to be in the open and be more welcoming and accessible to the newbies. They might learn something.
Lol at that. However I believe that my initial question "Where is the home discussion of lightning network" is reasonably well answered. There is currently no home. There is some here, some on twitter, some on reddit. I'm not trying to place a value judgement on that, just seeking to establish what the reality is. |
|
|
|
If you look at a site such as https://walletgenerator.net/, then the tab entitled "Paper Wallet" you will see the BIP38 Encrypt option. That allows storing paper wallets encrypted. At the moment I don't have time to do testing but if I recall correctly some wallets, at the moment of sweeping such a QR code, will ask for the decryption password. yes, mycelium (android) will ask for the passphrase when sweeping a bip38 paper wallet. ive done it many times. Thanks. Although it wasn't Mycelium which I was thinking of. So there are more than one that do this (the BIP38 repository may have a list) However, this essentially answers the question posed in the thread. |
|
|
|
|
Simple question. We're seeing lots of traffic in this subforum on the Lightning Network.
But where should it be?
Is there a proper home for it and if so where?
|
|
|
|
I just installed it. The original wallet takes ages and centuries to load so i decided to give electrum a try. I will use it for loading my paper wallet balance. It looks safe enough, offers 2FA. But right now i don't trust anything which connects to internet when it comes to crypto coins so i think i will transfer my funds back to my paper wallet after i make my purschases.
One thing you might consider is loading the Electrum, saving the password and seed words, doing the work you need to do, including making records of your work, and then deleting the program and data from your computer completely. The goal here is years later to be able to restore the program. By design with Electrum this should be possible using the password, seed words, notes as to the operating system and computer used, version of Electrum used, etc. If you are uncertain about this, test it with a wallet with a nominal amount of funds. Note that if you go this route don't enable 2FA. The chance you'll have the 2FA device such as your current phone five or ten years later is near zero. |
|
|
|
I just need a user-friendly way to sweep bitcoins from a offline paper wallet onto the Blockchain, without having to expose your private key, whilst you are online. ....
The bitcoins in the paper wallet are already on the blockchain. What you are asking is about moving the private key from a paper wallet to some kind of wallet that can be used for transactions. You can create a transaction off line. Hence it is possible to never expose a private key to an online wallet. https://bitcointalk.org/index.php?topic=944915.0It only makes sense to me that a Paper wallet is meant to be created offline <Air-gapped computer> to increase the security and therefore it makes further sense that the Sweep/Import option should also be done offline first and then encrypted before you go online again. The automated Encryption and Decryption of the Private key <from text> to import/sweep the wallet, would reduce the risk of the private key being compromised during the process to sweep/import these wallets, when you go online. OfflineStep 1 - Scan QR code on Paper wallet and retrieve the Private key Step 2 - Insert Private key into App Step 3 - App Encrypt Private key <not recognised as text> Step 4 - Insert Bitcoin Address where coins will be swept to OnlineStep 5 - Go online <Enable Wifi or plug in data cable> Step 6 - App still running, Click on "Sweep Paper Wallet" Step 7 - Application automatically decrypt the Private key and sweep the coins from the paper wallet onto the Address specified in Step 4 Done If you look at a site such as https://walletgenerator.net/, then the tab entitled "Paper Wallet" you will see the BIP38 Encrypt option. That allows storing paper wallets encrypted. At the moment I don't have time to do testing but if I recall correctly some wallets, at the moment of sweeping such a QR code, will ask for the decryption password. |
|
|
|
I just need a user-friendly way to sweep bitcoins from a offline paper wallet onto the Blockchain, without having to expose your private key, whilst you are online. ....
The bitcoins in the paper wallet are already on the blockchain. What you are asking is about moving the private key from a paper wallet to some kind of wallet that can be used for transactions. You can create a transaction off line. Hence it is possible to never expose a private key to an online wallet. https://bitcointalk.org/index.php?topic=944915.0 |
|
|
|
another option?
ingredients: - pen/pencil for writing: 1
- paper to write on: as much as rquired
- 16-sided hexadecimal dice: 1
- an even ground to roll the dice 64 times: as big as possible!
congratulations you now own a private key. not to get your bitcoin address you need: - some tool to convert the hexadecimal result to a bitcoin address.
- a DVD with live linux to run that tool
now you are only trusting ECDSA and hashes to be safe.  Or just sit in an outdoor cafe, and write down license plates numbers of passing cars. |
|
|
|
That's one way to create the ability to wholesale the Ledger cheaper than anyone else! |
|
|
|
Good Day Everyone!
I think this is the most appropriate section where I can post my question regarding the development of Bitcoin.
I just read the Bitcoin whitepaper and most of it content are difficult for me to understand, lots of them are Mathematical Equation and programs. Upon reading there is only one question. that pops in my mind.
What processes or steps in order for the creator to increase its Supply Limit? [I am also pertaining to Alternative Coins not just Bitcoins]. Someone says that it is complicated.
Can you cite some relevant previous post or links?
To answer your exact question (bolded) I think if Satoshi Nakamoto suddenly showed up and asked everybody to increase the Supply Limit, it might happen. Not that it's a good idea or a bad idea. |
|
|
|
....There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.
So how can these activities be stopped or neutralized? It is difficult to actually completely stop someone to make a malicious page and then pay advertisement to Google or any other search engine that the result of such a site appears in the first place.There is option to report such site which I do many times here : https://safebrowsing.google.com/safebrowsing/report_phish/?hl=enBut new pages of the same type appear again because it's a very lucrative job.Just based on reports here on forum a lot of people loses BTC in this way,and I think this i maybe only 5-10% affected users. In every phishing report I explain and ask Google to ban all sites(except for a legitimate service) that are use "Electrum" in site name and not to allow them to use their advertising service.But it is hard to expect from them to do something about it,at least not in the near future. What this means is something like a 2FA authentication of a downloaded software wallet is required, before the wallet will work. This should be possible with Electrum because it uses dedicated servers. |
|
|
|
i just save my seed on keep.google.com like a TITLE so i create 12 title if someone ask its save i think yeah because only me know my gmail account  That's the dumbest thing I've ever heard. ha ha ha may be this a stupid things but not many people know that it is electrum seed But now we know it! 3...2...1... and it's gone! oh god i was leaked my way to save electrum seed, i thinks is time to discover stupid way to save seed Don't worry, just put a not in large capital letters next to these words saying "THIS IS NOT ELECTRUM SEED"  |
|
|
|
....There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.
So how can these activities be stopped or neutralized? |
|
|
|
There are some Bitcoiners declaring on social media that they have already started to open Lightning channels and started to send Bitcoins with them.
Should this be encouraged by the Lightning developers? I believe it is irresponsible because it has not been fully tested in the testnet. People might lose their coins.
Achow, Carlton, what are your opinions on this?
Well how about PLAYING with it? Like, let's play with it nothing moving over $1USD. |
|
|
|
I downloaded the latest files from https://electrum.org/#downloadBoth of below files failed the verification test using the gnupg kalopetra software Standalone Executable (signature) Windows Installer (signature) View the screenshot and advise what to do as its not secure to use such files:-   Translation: Your pgp does not have anyone in user list who vouches for ThomasV's software. |
|
|
|
|
Show Posts
