 Show Posts
|
|
Pages: [1]
|
|
Ok, interesting.
But, that being said, it is more than what Bitcoin-qt uses, right? So if you're living by the "low hanging fruit principle", even if Armory is done on an offline computer with only Armory installed, it is better than just using Bitcoin-qt on an online computer?
Or am I wrong?
|
|
|
|
In addition to the OS's CSPRNG (either /dev/urandom or CryptGenRandom), it also mixes in: timestamps, down to the microsecond, of every keypress and mouseclick made during the wallet creation wizard. Also logs mouse positions on every press, though it will be constant while typing. ... Then we throw in the [name,time,size] triplets of some volatile system directories, and the hash of a file in that directory that is expected to have timestamps and system-dependent parameters. Finally, take a desktop screenshot...
Please note that it only uses the sources above if you're creating a wallet via the GUI. If you're using a simple script (e.g. the one I posted a couple of days ago for creating a wallet from a deck of cards), it only uses the OS's CSPRNG for additional entropy. FYI Bither is the only other wallet I know of which goes to similar lengths for collecting additional entropy like this. Thanks! Wow yeah that is a lot. My concern is that on an offline computer, won't all that other data it grabs be very similar to other offline computers (who have nothing installed but Armory)? Or is that not a valid concern. Thanks! |
|
|
|
|
Hello!
I know Armory uses a bunch of different sources to generate entropy, but is this still effective when generating addresses on an offline computer?
Could you explain to me how this works?
Thanks!
|
|
|
|
For Ubuntu, the OS settings should have a sub-section labelled "Removable Devices" or somesuch. Just disable Autorun on all device types (CD/DVD, USB storage, etc)
It's been some time since I've used a Mac, although FWIW I do recall finding that option being very similar to what's described for Ubuntu. Also, your Mac is vulnerable to a recent root exploit if you do not have latest up to date OSX (no idea which version that is, I read this in the press last week). So don't use an unpatched Apple machine for the cold storage if you can avoid it at this stage.
Ok, great! Once again, thanks for your help! |
|
|
|
Along the lines of what picobit was thinking, here's a Python script to do this.
Wow! Now I am glad I did not find my script - this is much easier to use, and more elegant. Thank you both for your help! |
|
|
|
Bear in mind that this is not an infallible scheme. You're transferring information from a semi-trusted domain to a trusted domain, so if some malware can make a trojan out of an unsigned transaction file, then you're just as exposed to threats as when using USB storage. These transactions are tiny plaintext files, so it should be easy to spot an unsophisticated attack.
Also comprehensive disabling of Storage Autorun features is equally important to using CDs/DVDs for this purpose as it is for using USB Storage devices.
Thank you for the tip! How would I go about disabling Storage Autorun on Mac and Ubuntu machines? |
|
|
|
The rationale is that CD's can be burnt read-only, and therefore are not as dangerous as USB devices (the BadUSB is stored in the USB firmware and so could perhaps provide false reports of the contents of the USB storage to a request from file explorer software).
So you devise a transaction on your online machine, burn the unsigned transaction to a CD-ROM, open the unsigned transaction on your offline machine using Armory, sign it, burn the signed transaction to a CD-ROM, open the signed transaction on your online machine using Armory, broadcast.
That's great, thank you! Armory should include this tip on their website! |
|
|
|
I've read in quite a few places how to sort of be your own RNG, using dice or cards, to create a private key. I have read a few different ways to do this with Armory and would like some clarification please on how to best do this. I feel that cards would be the best way, because you don't have to worry about the weight of the dice being perfect.
I also think cards are the easiest way, but they do have some pitfalls. See here for a good discussion on how to shuffle well enough to provide sufficient entropy: https://bitcointalk.org/index.php?topic=682842.0That was a very interesting read, thank you! Once I achieve the random shuffle, do you know how I go about getting the private key? And can this be used to generate a HD wallet, so I only need one backup? Thanks! |
|
|
|
|
Hi All,
I've read in quite a few places how to sort of be your own RNG, using dice or cards, to create a private key. I have read a few different ways to do this with Armory and would like some clarification please on how to best do this. I feel that cards would be the best way, because you don't have to worry about the weight of the dice being perfect.
Thank you for your input!
RB
|
|
|
|
|
Hello all,
I might just be paranoid, but with the BadUSB exploit and the recent NSA firmware hacks, I was thinking of a way to use Armory offline without a USB. Someone mentioned to me that it is possible to use a CD to transfer the signed transaction back to the online computer for broadcasting, and I was wondering if someone here could help explain that to me.
Thanks!
|
|
|
|
Hi All,
I have 8000 ANC I am looking to sell off-exchange.
Please PM me if you are interested.
RB
Hi, i'm interested. What is your price? Thank you for your response! I am looking to sell at 0.00025 BTC |
|
|
|
|
Hi All,
I have 8000 ANC I am looking to sell off-exchange.
Please PM me if you are interested.
RB
|
|
|
|
How sizable a stake were you looking to unload? Would anyone be able to act as escrow? I still have faith... It's too interesting an experiment; especially in light of the positive changes regarding I2p and the continued potential of coin development. I.e., Meshnet Vs. "Anonymously" controlled entrance/exit nodes... (t0r).
Hi Tomothy, I have PM'd you. I would start by sending the coins to you first, so you cannot be scammed. |
|
|
|
Hello all, I unfortunately have to sell some ANC for school this semester, after holding on for so long and with the update right around the corner  My goal is to be able to earn enough money to buy some back but right now I need to sell. I am hoping to sell off-market because there is not much volume. I know I don't have any rep at all so I was thinking I could split up whatever amount agreed upon, and start with me sending the ANC in smaller amounts, so I can't scam anyone. Please respond if you are interested! Thanks! |
|
|
|
|
