You can extract WO wallet backups. You'll get 4 lines instead of 2. You can recreate the WO on your online machine in this way, without having to rely on a flash drive.
Great! didn't know that, thx a lot! |
|
|
|
|
The transactions signed and unsigned are pretty safe, I agree.
I just wish I could pass the watch-only wallet from offline to online in the same way like a transaction (with QR, sound, webcam,etc).
Anyway I have learned a lot! thank you both!
|
|
|
|
As long as you verify the signature on the software you have downloaded (or built if from source, verifying the sig on the tag), you know your wallet software isn't compromised. Here we're assuming the developer is well established and trusted. This will be our premise for the practical attacks on air gapped signers. We're also assuming there isn't just someone able to point a camera at your screen/keyboard when you type in your password then walk in and steal the signer. We're only addressing software attacks.
How about this kind of software attack: 1. Someone some how detected that I downloaded Armory 2. While copying the armory to my offline PC the attacker succeeds to also copy another malware file also through the USB hardware to my offline PC (the armory itself is valid but he has another spying file). 3. When creating the offline wallet the malware is there spying. 4. When I am copying the watch-only wallet file with the USB hardware to the online PC the attacker passes again a hidden file with all my private keys to the online PC. Is this kind of attack is not something I should be worried about? Thanks again! |
|
|
|
|
bob123,
Thanks a lot for your patience and through answers!
|
|
|
|
|
Thanks a lot!
But this does solve the problem only partially though I think.
How can I know that there is no malware inside my USB which copy itself automatically as a hidden file to my offline,
getting all the data and bringing it back to the online PC in a different hidden file or something when I think I am only coping the watch-only wallet?
Maybe I am paranoid but Armory has been here for quite a while, isn't it possible that this sort of malware exist?
|
|
|
|
|
Thanks!
But can you please explain what signature and how to create it? (noob here sorry)
|
|
|
|
|
Hi,
Probably not the first to ask it but can't find this here.
Copying armory software with USB to offline PC and installing it there can bring a virus to the offline PC.
Then even when using a new USB to pass watch-only wallet fie to online PC the virus can go back to the online with all the offline wallet data.
Isn't this a big security fail? What am I missing?
Thanks
|
|
|
|
|
Great, thank you all.
Assuming i didn't touch my BCH since it was created.
If I just want to send a BCH offline transaction (let's say to my new wallet), Can I broadcast it with an offline node?
|
|
|
|
So if I understand correctly, starting may 15th, you can't use armory on the BCH chain anymore?
Entirely depends on the span of the new HF. If it's just a block size increase and new opcodes, Armory should still "work" provided the network magic word part is fixed. Honestly, it would probably take me a single day to deal with this stuff assuming all they did was to increase the block size. I don't do it because I refuse to give up development time for BCH. Got it, thank you for your hard work!  It works if you just remove some checks for the network magic, those was only added in the last update, peers for other chains will still be banned so it could only lead initial to some more wrong connections from and to your node. See: https://bitcointalk.org/index.php?topic=2070058.msg37065819#msg37065819For now I think its the best solution, its not the optimal solution but that way you could still use armory and also update armory without needing to edit or add own code. You just need to make sure you remove the checks also in future updates on Bitcoin Cash. ( I assume the checks wont be updated much so should be easy to find and remove it in future versions as well ). Thanks, the problem is, as stupid as it may sound, that I don't really know how to download the code and build it with the changes, it will probably take me 2-3 days to do just that. I would have done that don't get me wrong but I think that this is a bad practice. goatpig don't want to support BCH which is his right and I respect it. So now for each new version of both armory and BCH you will have to find more and more workarounds to make it work which is really a bad practice. Armory is for BTC. I think it is best to just find another wallet for BCH. Any Ideas? |
|
|
|
So if I understand correctly, starting may 15th, you can't use armory on the BCH chain anymore?
Entirely depends on the span of the new HF. If it's just a block size increase and new opcodes, Armory should still "work" provided the network magic word part is fixed. Honestly, it would probably take me a single day to deal with this stuff assuming all they did was to increase the block size. I don't do it because I refuse to give up development time for BCH. Got it, thank you for your hard work! |
|
|
|
|
So if I understand correctly, starting may 15th, you can't use armory on the BCH chain anymore?
|
|
|
|
I don't think that is possible. It may be possible to do if address B was a p2sh address that used a custom script, but I don't think it will be possible.
I am confused, with a custom script it is possible? Possibly. I don't know as I haven't checked or tried, but it may be possible to create a custom script which requires different private keys. I think the OP codes have enough options for that logic, but as I said earlier, I do not know. You will need to try this yourself. Thanks ! |
|
|
|
I don't think that is possible. It may be possible to do if address B was a p2sh address that used a custom script, but I don't think it will be possible.
I am confused, with a custom script it is possible? |
|
|
|
|
Let's say I am sending 1 bitcoin from address "A" to address "B"
Is it possible to do it in such a way that:
1)to transfer bitcoin form address "B" to address "C" it can only be done with private key "c".
2)to transfer bitcoin form address "B" to address "D" it can only be done with private key "d".
and of course "c","d" are different.
|
|
|
|
|
I am unbanned! thank you all!
|
|
|
|
You're trying to say people should get a small discount for paying in bitcoins?
No, I am asking if for international purchases it is possible to make the transaction cheaper than any other methods (without the seller giving and discount) if the process is: 1) buyer pays fiat money with his country's currency 2) the money from 1 is used to buy BTC 3) the BTC from 2 is used to buy seller's fiat currency 4) the money from 3 is payed to seller. 2+3 should be executed fast enough so there won't be any changes in BTC rate. |
|
|
|
|
Pay with bitcoin is too difficult at this point I think because people need to learn what bitcoin is and how to use it and because it is volatile.
Instead people should pay via bitcoin. Lets Say I buy something from a US website but I am not from the US.
I got 3 options of payment:
pay with Paypal and it will cost me 102$
pay with bank wire and it will cost me 100$
pay via bitcoin and it will cost me 98$
pay via bitcoin = I pay 98$ worth of my country's currency, I don't know what bitcoin is and I don't care, all I know is it is cheaper than the other methods of payments. behind the scenes BTC is bought with my country's currency and the BTC are sold for US dollars to pay the website.
So this is like "bitpay" for the client side as well.
Do you think it is possible to make this "pay via BTC" cheaper than other methods at least for international purchases?
|
|
|
|
Thank you all for your comments.
No collateral, Yes I am stupid, please, this is not the point here!
I would like to know any piece of information on him that I can't get from his profile here.
Whatever info you find on the account creator is probably not going to be the same person that scammed you. I have been seeing a few people selling older senior and hero member accounts. It could easily be one of those situations (or hacked account as another person stated). Either way, sounds rough. I don't believe this is the case, He had a newsletter https://bitcointalk.org/index.php?topic=509527.0And he used the email written in his profile to send the news letters. Also, If you follow the bitcoins I sent him it seems they ended up in an exchange or something like that and not stored in some private persons wallet. May be I'm naive (again) but I think that something may have happen to him and the coins are stuck in one of the exchanges and all I need to do is find out where they are. |
|
|
|
|
Thank you all for your comments.
No collateral, Yes I am stupid, please, this is not the point here!
I would like to know any piece of information on him that I can't get from his profile here.
|
|
|
|
Well, arepo disappeared 2 months ago  If some one knows him or have any way to contact him or have any information about him please let me know Thanks |
|
|
|
|
Show Posts
