Bitcoin Forum
June 21, 2024, 09:24:12 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 [33] 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 ... 192 »
641  Bitcoin / Electrum / Re: Over 25k IP addresses are involved in DDoS against Electrum servers on: April 12, 2019, 11:32:38 AM
It's 140k addresses according to echevaria on IRC. He's a bitcoin expert. They can also rent more if they need to. Many hacker forums out there where you can rent botnets.

That issue linked above is interesting because the people affected were using 3.3.2. The DoS exploit in the client prevents < 3.3 from connecting but versions 3.3.0-3.3.2 can still connect to legit servers so their users don't see any immediate reason to upgrade to newer legit versions and they remain vulnerable. The DoS attack on legit servers increases the chances of these users connecting to a scammer's server.
642  Bitcoin / Electrum / Re: Error when executing Electrum on: April 11, 2019, 11:46:52 AM
If you have the latest updates from the mothership aka microsoft and this is still happening perhaps you should create an issue about it on github so that developers can look into it?
643  Bitcoin / Electrum / Re: Wallet password protected and encrypted, is it safe ? on: April 11, 2019, 06:17:04 AM
When setting up my standard wallet with Electrum, I am given a seed, which I record, then I am asked for a password to encrypt it. When I go back into the new wallet after logging out, I am asked for my password and can then view my seed. Yet we are advised not to store the seed on computer.Is that safe?

There are two things going on here:

- The seed is your backup in case you forget your password or your computer crashes. If you stored your seed on the PC as well you wouldn't be able to restore from it because it would be lost too. That's why they tell you to write it down.

- The wallet file does include your seed but it is encrypted with the password you set. Storing the seed in plaintext (unencrypted) on the computer would allow any program that can read that file to steal from you.

The primary reason is the first one - it serves as a backup. If you are confident you can remember the wallet password you can always rely on soft copy backups of the wallet file instead. You can do that via file > save copy.

Quote
The wallet's security is entirely dependent on the password and encryption.  If I then store that wallet offline, would it still be vulnerable when connecting to transact? Is there any good way around this? Please spell it out, I'm a noob.

The security of your PC matters. Doesn't matter what software you use if you get a malware infection you will lose money. Even with hardware wallets you can be fooled into paying to the wrong address or fooled into thinking you received money you didn't.

Electrum supports both cold storage and multisig setups. Another alternative is a 2fa wallet which is a form of multisig wallet that is easier for newbies to get started with.
644  Bitcoin / Electrum / Re: labels disappeared on: April 10, 2019, 04:14:16 AM
Alternatively if you have the old wallet file you can simply save that on to a usb drive via file > save and open it in the new pc via file > open.
645  Bitcoin / Electrum / Re: This is what Electrum Wallet users must do to save their coins. on: April 10, 2019, 03:44:14 AM
4. isn't necessary. electrum can be used. it wouldn't be worth using if it couldn't.
646  Bitcoin / Electrum / Re: Electrum servers are currently under a DoS attack on: April 09, 2019, 12:16:18 AM
Non of the servers seem to be working ATM. Seems like the network is dead.
647  Bitcoin / Electrum / Re: Electrum servers are currently under a DoS attack on: April 08, 2019, 11:04:26 PM
AWS is premium web hosting. If you want to run electrumx what you need is a bargain basement dedi from ovh, online.net or hetzner. Most public servers run in hetzner's DCs.  If you want to run electrum personal server a 4GB ram VPS from ramnode, vultr or DO will suffice. Make sure to enable pruning in bitcoin core to save space.

However unless you need the special features of electrum there is little point in running a complicated setup like above. Much easier to just switch to bitcoin core.
648  Bitcoin / Electrum / Re: I can not connect to the network. Wallet is not synchronized on: April 08, 2019, 03:24:08 AM
This command on the console tab (view > show console if you can't see it) will only display the private keys of addresses with unspent coins:

Code:
getprivatekeys(listaddresses(False,False,False,False,False,True))

649  Bitcoin / Electrum / Re: Beware of electrum. !!! Stilling founds ? on: April 08, 2019, 01:41:25 AM
It is careless because you're dealing with digital cash and if you're not careful your money will be stolen and you won't be able to get it back.

650  Bitcoin / Electrum / Re: Multiple Qs prompted by the phishing attack re opsec/vulnerability on: April 07, 2019, 08:04:41 PM
You can set a password via wallet > password. Be sure to write down the seed before you do this in case you forget your password. Seed can be referred to via wallet > seed.

I've already explained above that if you install malware nothing on your system will be safe. The only step you can take is to not install malware in the first place. Learn to verify the gpg sig so you don't install malware by accident.
651  Bitcoin / Electrum / Re: Electrum Totally Stuck Syncing - No fix identified yet on: April 07, 2019, 08:01:46 PM
Learn to switch servers.  Keep doing this until it syncs.
652  Bitcoin / Electrum / Re: Electrum create new wallet with same seed on: April 06, 2019, 10:07:32 PM
See here for things to try.
653  Bitcoin / Electrum / Re: Multiple Qs prompted by the phishing attack re opsec/vulnerability on: April 06, 2019, 09:58:35 PM
Once you install malware on a system you should consider that entire system compromised. Installing multiple copies of electrum won't do anything for you.

However if this is a general question regarding support for multiple wallets then that is definitely there. You can create new wallets and switch between them.
654  Bitcoin / Electrum / Re: Lost money from my Electrum wallet, need help? on: April 05, 2019, 09:51:53 PM
Regarding fees see here and here
655  Bitcoin / Electrum / Re: Multiple Qs prompted by the phishing attack re opsec/vulnerability on: April 05, 2019, 08:33:13 PM
The sha256 hash of the download i installed the update from from matches other installers acquired from other browsers electrum-3.3.4-setup (1).exe electrum-3.3.4-setup (2).exe (can this, has this been spoofed as far as anyone knows?)

All this tells you is that you correctly downloaded the same file. It doesn't tell you whether this file is legit electrum or fake electrum. That's why we do gpg signature verification. When you do that you are checking that the maintainer has signed the file in addition to checking that you downloaded it correctly. If you trust the maintainer ThomasV then you can trust the download.

Quote
I did not feel comfortable gpg verifying the download. I thought if i was confident i was installing from a link on the actual electrum site that should be enough, but if I install the new version to a new directory and (this part did not go as planned hence me registering here and posting this) "only" restore in the newly installed client a seed from a wallet with a smaller amt of btc as a test and it didn't disappear then i could be confident the new install was legit. (the new install apparently overwrote the previous install, and populated the "recent" wallets from the previous version automatically which i did not expect. So i got paranoid and i am here trying to decide what to do next.)

You can still gpg verify the download so I suggest doing that. That'll make your life a lot easier. Here's a guide. You learn how to do this once it serves you every time you need to update electrum going forward. Electrum gets updates a lot so you will need this knowledge.


Quote
If I have or will DL/install compromised updates to electrum does the attacker immediately gain access to every (seed)wallet>addresses that i can toggle between under file>recently open? (so my btc in all "recent" wallets are already gone)

The wallet file is encrypted with the password you set in electrum. So the attacker gets access to your coins as soon as enter the password. If you never do that he doesn't get access to your coins although there's still the possibility that he installed other malware on your PC. It's also possible that he may get your encrypted wallet secrets and attempt to brute force your password at his convenience. So if you never entered the password you should still move your coins to a new wallet.

Quote
If yes how can i prevent the electrum client from being a central point of failure in the future for all wallets/coins stored (hot) on that device (Passwords? moving .dat out of a directory, and zip-encrypting it...??) shy of a watch only + airgapped machine, which i will get to eventually but not now.

You can't. If the wallet is malware it doesn't matter what you do you will lose your coins.

Quote
If i already installed a compromised version but not all coins across all seeds/wallets listed in recent have been swept instantly (i did not broadcast any transactions), what steps can i take to protect funds in the other "recent" hot seeds/wallets?

Reinstall the OS, download, gpg verify and install genuine electrum and then move your coins to new wallets with new autogenerated seeds. You can create a new wallet via file > new/restore, enter a unique filename and click next for the rest of the steps.

Quote
Of course any other advice/links on general opsec could be useful, but honestly if only one wallet at a time is at risk of being compromised that is a level of risk i am fine with in perpetuity.

Thank You

Learn to gpg verify the download and save yourself the headache and worry.
656  Bitcoin / Electrum / Re: Help Please ! ! ! BTC received and mysteriously it dissapears :( on: April 05, 2019, 01:14:10 AM
Note also that he's claiming to have downloaded it from electrum.org. This is why its hard to take users at their word when they claim to have gotten it from the official site. Even when we ask them to confirm the URL from their browser's history they sometimes take the easy way out and just regurgitate what they think is the URL rather than checking.
657  Bitcoin / Electrum / Re: Cant find seed (2fa) and i have to update, help! on: April 04, 2019, 07:29:21 PM
Don't bother exporting your private keys. IT won't help you.

This is what you should do. First make a backup of your wallet file via file > save copy. This is a precautionary step. Then install the latest electrum version. In most cases it'll pick up your wallet file and upgrade it and you'll be good to go. If it doesn't then tell us and maybe we can help you.

Once you have the latest version running you should create a new wallet and move your coins to it. That's because in the event you lose your phone you will also lose your bitcoins since you didn't write down the seed.
658  Bitcoin / Electrum / Re: electrum 3.3.4 problem in sychorinzing on: April 04, 2019, 07:25:32 PM
Public electrum servers are currently being heavily ddosed. Your best bet is to install electrum personal server and use that in conjunction with electrum.

Another option is to migrate from electrum to bitcoin core. You can dump your private keys via wallet > private keys > export and then import them into bitcoin core using the importprivkey command.

Either way you're going to have to run your own full node.
659  Bitcoin / Electrum / Re: Long symbols receiving addresses on: April 04, 2019, 07:21:10 PM
Starting with "bc1..." am I right? Those are native Segwit addresses, and unfortunately, they still aren't suported by many services/exchanges/wallets. You can create a legacy/standard wallet (addresses starting with a "1"), which are accepted everywhere by selecting it when creating a new wallet, or you can create a nested Segwit wallet (Segwit with addresses starting with a "3") which have cheaper fees and are also accepted everywhere.

That's how you can do it:


This isn't safe. You are trusting that site to not steal from you. Please don't encourage people to do this everytime they face a small problem with bech32 addresses. Much better to tell them to simply create a legacy wallet.
660  Bitcoin / Electrum / Re: Strange error when broadcasting:bad-txns-vin-empty 3.3.4 on: April 04, 2019, 07:16:54 PM
I wouldn't mind being able to get that far, heh.  I've not had much luck even connecting to servers in the new 3.3.4 release.  I tried at least 10 different ones.  The circle in the corner stays red.  How long should it take before it starts synchronising?  

Straight away. If it doesn't do that keep switching. Servers are being heavily ddosed because the phishing vulnerability has created an incentive for scammers to control which server you connect to. It's turned into a war!
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 [33] 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 ... 192 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!