Bitcoin Forum
April 23, 2024, 02:55:41 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 [48] 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 ... 317 »
941  Bitcoin / Development & Technical Discussion / Re: How would you say is the most secure way to create and maintain a paper wallet? on: October 27, 2020, 04:59:38 PM
Thanks! Beautiful explanation. So Linux live USB then? With persistence or without? Also how does that compare to tails in security?

Yes, a live linux distro is the way to go.

Persistence is just for storing data between different boots.
For creating a paper wallet, you don't actually need that if you are using the command line option.
When using the software wallet (a.k.a probably electrum) option, you might need it to store the electrum AppImage there prior booting the distro in offline mode.

And Tails basically just is a linux distro which is preconfigured for easier "privacy" mode, i.e. it is easier to boot it completely offline / with tor.
You can use tails, if you want to. Just as good as debian, manjaro, whatever. As long as it is a trusted distro and you verify the signature of the .iso prior installing it, you are fine.
942  Other / Beginners & Help / Re: Wrong fee estimation in bitcoinfees on: October 27, 2020, 03:12:13 PM
bitcoinfees.earn.com is known to have a horrible fee estimation.
Usually they overestimate the fee (e.g. recommending 100 sat/vB when 4 would be enough to get a confirmation in the next block).

The fact that they are currently recommending 2 sat/vB, for a "fast and cheap" transaction, probably just means that this is a temporary bug.

However, i'd always advise to not use that site to choose a fee. The estimation almost always is extremely bad.
You are better off checking https://core.jochen-hoenicke.de/queue/#0,2h and using the 3rd graph to check the mempool. Then choose a fee at roughly 0.5MB to 1MB from the tip to get a (very) fast confirmation.



I do not get your point, if bitcoin fee is wrong, then what is the fee displayed on earn.com that is very low which is 2 satoshi/vbyte above? Is it not still bitcoin fee?

OP just meant that they estimate the fee wrong. 2 sat/vB won't get you confirmed within a few blocks, which "fast" would indicate.
943  Bitcoin / Development & Technical Discussion / Re: How would you say is the most secure way to create and maintain a paper wallet? on: October 27, 2020, 02:49:28 PM
1) How else does (should) one generate a paper wallet then?

Just like pooya87 said. Use a good wallet on a live linux distro (everything offline + signatures verified). That's the easiest way.
Another option would be to use command line tools from linux which are built in. This won't give you a mnemonic code, but you'll be able to generate a private-/public keypair and address with nothing but core functionality from your operating system.



2) Didn't get you about the not forced to use the paper as a medium to storage. Could you eleborate please?

Well, you don't need to print it on a piece of paper (which can be vulnerable to water, fire, etc..).
You could for example engrave the private key into metal.



3) Dedicated offline storage? Like a mobile that's never online? Or do you mean HW like Ledger?

A mobile which never goes online and doesn't have any other network connection (preferably with the components being removed) would be an option, yes.
That's basically dedicated cold storage. Most people use an old PC or laptop. But a mobile is fine too.


Could you rank storage methods from most secure to least?

This always depends on the user and environment.

Generally:
Dedicated Cold Storage > Paper Wallet > HW Wallet > Desktop-/Mobile Wallet > Browser-based Wallet > Web Wallet > Custodial Wallet


But you also have to know the pitfalls of each scheme. For example:
  • If you for example use a website to create your paper wallet on an online device, it suddenly is roughly as secure as a web wallet.
  • And if you create it perfectly, but at some point you need to spend from your paper wallet and use a software wallet being online, this whole setup suddenly is no longer more secure than a standard desktop wallet.


In the end, no storage method is perfect. There is no "most secure" option. It always depends on your adversary- / threat model.
944  Bitcoin / Hardware wallets / Re: Hardware wallet question on: October 27, 2020, 02:39:04 PM
If you don't trust that process (which is entirely fair) and want to use an airgapped computer for everything, then the hardware wallet doesn't really add anything that can't be achieved for free.

Except for protection against physical attacks i.e. tampering.
This would be especially interesting in an evil maid scenario where someone has access to the hardware within a short timeframe more than once.

While using hard drive encryption and integrity checks already protect against most attack vectors, there are still some specific ones which can leak the private keys from an air-gapped device.
A hardware wallets adds another layer of protection.


Obviously this scenario only needs to be considered in rare scenarios (e.g. lots of money being stored + people can gain access to the hardware).
945  Local / Deutsch (German) / Re: Vorschlag: Sichtbares Trust-Rating im kompletten lokalen Bereich? on: October 27, 2020, 02:18:03 PM
- es wird immer wieder behauptet, man wolle nicht in "normalen" Diskussionen (Bitcoin Discussion etc.) die Trust-Bewertung anzeigen, da es diese Diskussionen "beeinflussen" könnte (wohl weil Trust immer sehr kontrovers ist)

Genau aus diesem (oft genannten) Grund, wird das wohl vermutlich auch nie eingeführt.

Persönlich kann ich das nicht verstehen. Leute gehen teilweise auf sinnlose Diskussionen von Leuten ein, die -18 Trust haben.
Wenn einem das sofort ins Auge schießen würde, dann würden die sich auch nicht an diesen Troll Diskussion beteiligen und wir hätten zumindest mal etwas weniger sinnlose Diskussionen.

Jetzt braucht es immer noch jemanden, der ein "Don't feed the Troll" dort lässt.. Und trotzdem artet es aus  Cheesy
946  Economy / Scam Accusations / Re: Be Aware Fake Ads Electrum Wallet on Chrome on: October 27, 2020, 02:07:50 PM
hello newbie, don't search "electrum" on Google searching box, I warn you, Look at the image below;

Searching for a term on google is fine.
Not using an adblocker (like you do) is the problem as well as clicking on ads.

I'd recommend you (and every other person) to install an ad blocker.


So, don't use chrome anymore.

While people definitely shouldn't use google chrome, this is not the reason for that.
Without an ad blocker, you'll see those ads in every browser, not just chrome.
947  Local / Anfänger und Hilfe / Re: Bitcoin Core wallet.dat nach Windows Neuinstallation on: October 27, 2020, 02:03:25 PM
Standardmäßig befindet sich die wallet.dat (die Wallet Datei) in C:\Users\YourUserName\Appdata\Roaming\Bitcoin

Um einfach dorthin zu gelangen, WIN + R drücken und folgendes eingeben:
Code:
%APPDATA%\Bitcoin

Dort müsste dann eine Datei mit der Endung .dat liegen. Standardmäßig: wallet.dat.


Bei einer Neuinstallation ist es jedoch üblich, dass Windows Nutzerdaten (inklusive APPDATA) löscht.
Wenn dort also keine wallet.dat mit den korrekten Private keys liegt, wurde die Datei von Windows gelöscht.


Ein (immer empfohlenes und insbesondere bei Windows unabdingbares) Backup oder der Versuch der Datenrettung wären dann deine einzigen beiden Möglichkeiten.
948  Bitcoin / Development & Technical Discussion / Re: How would you say is the most secure way to create and maintain a paper wallet? on: October 27, 2020, 01:51:10 PM
~snip~

So what do you suggest as a 2nd best alternative to HW?

Don't listen to him.
You should never use any website to generate a paper wallet. And neither are you forced to only use paper as the medium of storage.

To answer your question, it depends.
Generally, a dedicated offline device is the best way to store private keys in a cold wallet.

If you don't transact very often and don't want to buy a HW wallet, a paper wallet would be one of the most secure ways.


949  Bitcoin / Electrum / Re: Electrum... Android 7....safe? on: October 27, 2020, 01:42:53 PM
Who needs exploits when all Android (and iOS) devices let anyone unlock the phone by default? That is way more easier to exploit by the average layman than using a sophisticated CVE and proof-of-concept.

Crypto wallets on mobile devices that aren’t password-protected are unsafe to use because anyone who takes the phone can trivially open the app and steal the funds.

Same applies to every computer/notebook/etc..
All are not password-protected by default. Or password protected with a standard password.

That's the only possible way to sell a product. Either without a password lock or with a standard password.

Every computer is unsafe because everyone with access to it can trivially open the software and steal the funds.

Obviously, you should assume that a person at least uses a pin code if not a password to lock the phone.



Even better, use a phone with a fingerprint reader so that it’s impossible for someone else to unlock it without forensic tools like fingerprint dusters.

Actual good fingerprint reader cost multiple thousands of dollars.
Those 5-50$ reader built into a smartphone are worthless and are quite easy to circumvent. Together with face recognition, these are the weakest way to secure your phone.

A passphrase/pin code is superior.
950  Local / Anfänger und Hilfe / Re: Electrum Wallet plötzlich leer - unbekannte Auszahlung on: October 27, 2020, 10:02:30 AM
Vielleicht erhalten wir ja noch eine Rückmeldung bzgl. der Verifikation der Signatur.
Das würde schon mal etwas Klarheit bringen.


Das Upgrade von Windows 7 auf Windows 10 ist auch heute noch möglich.
Passt hier gut rein und so kannst du auch ohne Neuinstallation sicher(er) werden Smiley
https://www.chip.de/news/Windows-10-kostenlos-Windows-7-gratis-aktualisieren_127005018.html

Aber davor definitiv ein Backup (falls noch nicht vorhanden) erstellen.
Windows neigt ja gerne mal dazu bei Updates einige Nutzerdaten, inbesondere Ordner wie AppData, worin z.B. das Electrum Wallet standardmäßig liegt, zu löschen  Grin

951  Bitcoin / Development & Technical Discussion / Re: How would you say is the most secure way to create and maintain a paper wallet? on: October 27, 2020, 09:58:38 AM
pooya87 already pretty much gave you a good list.
 
A little addition to step 8 (printing the paper wallet) would be, that you shouldn't use a modern printer which either 1) stores printed files in a cache or 2) is network-/internet connected.

Such printers pose a real risk. I remember reading a paper stating that roughly 50% (don't quote me on that number) of such printers can be manipulated by simply just visiting a malicious website (obviously javascript enabled, just like a regular user would browse).
You really want to use an old offline printer if you are going to print it out.

952  Bitcoin / Hardware wallets / Re: Hardware wallet question on: October 27, 2020, 09:14:41 AM
1. How about ledger nano x which support bluetooth, can it be affected by malware through bluetooth while performing online transaction?

You compare it to any others hardware wallets way to move unsigned transactions onto the hardware wallet and the signed one to the broadcasting device.
The one big difference is that it is a wireless technology.

So generally speaking, the risk is larger since an adversary doesn't have to be right in between your hardware wallet and your broadcasting device (e.g. with a manipulated usb cable or by compromising your device), but within a few meters.
This only really plays a role when there is a vulnerability in how the hardware wallet handles (weird) requests etc.

So theoretically, yes. The attack surface and therefore the risk is larger.
But practically this is / should be negligible.



2. Is it possible for hardware wallet to remain totally offline, while using another wallet as watch-only wallet in a way the hardware wallet will be used offline only for signing through the means of QR code?

It depends on how you move the unsigned/signed transactions between the HW wallet and the broadcasting device.

If it has an inbuilt camera, yes.
If via USB from an offline device, yes (but not using QR's).
If via USB from an online device, not so. Remember that the HW wallet never really is online, but also isn't completely offline when plugged into an online device.
953  Bitcoin / Electrum / Re: Can't Change Coin Type in Electrum? on: October 26, 2020, 05:44:34 PM
What privacy problems are you referring to? Do you mean the fact that Electrum connects to SPV nodes? Surely nodes can lie about the information they retrieve and then return false information to Electrum clients, but I think the the only information they can glean is the transaction history of an address(es) it’s querying, which it can then correlate with the IP address effectively getting a rough location from it, as most consumers are still using NAT IPV4 which rotates IP addresses in an address block.

The electrum server can obtain tons of useful information about the clients and correlate them with other source of information.
The information a server gets include:
  • Addresses
  • Transactions
  • Time the user mostly is active
  • Geo-location

This alone already is more information than necessary.
And even when sitting behind a NAT, it is still possible to locate you within a few kilometers (~10-20) radius.
954  Other / Meta / Re: Account VivGaming Banned. Mod Please Help on: October 26, 2020, 03:48:19 PM
It sure sounded like you are very much supporting his ban. Smiley

I am not.
Just pointed out that he indeed makes spammy posts with no substantial content.

This itself should not result in a ban since this applies to more than 50% of all people here  Cheesy



Again, I am not defending anyone and I left archive link for everyone to see, and you obviously spend more time researching his posts than me.

Obviously i don't know how much time you have spent, this literally was the first post i clicked on.
The Mining section has a relatively low amount of new posts. A new user posting in the mining section often is a useless necro-bump. Therefore this was the post i checked first  Grin
955  Other / Meta / Re: Account VivGaming Banned. Mod Please Help on: October 26, 2020, 02:45:59 PM
You obviously have a very weird definition of banning.
[...]
You say it deserved ban for this?

I don't know whether you just didn't properly read my post or didn't understand it.
But here it is again, check the bolded part:

Does it add anything to the topic? Does it have valuable information?
If the answer to both of these questions is no, then it is spam (or at least off-topic) and deserves to be removed.

Now, after you checked the bolded word with your translator, does it match the meaning of banning?

Because here, banning is not the same as removing a post.

And all i did was to comment your statement:
I checked out all the posts from VivGaming here, and I didn't noticed any unusual spamming [...]
956  Bitcoin / Electrum / Re: Did not receive BTC when transfering to Electrum wallet on: October 26, 2020, 02:39:05 PM
No I did not enable proxy I havnt touch my settings in Electrum, I have the Electrum app up now where do I disable it cant find :/  

If on PC: Tools -> Network -> Proxy
If with "app" you refer to your mobile, i don't exactly now since i don't use electrum. But it should be similair and somewhere in the settings / networksettings.

If the Proxy is disabled (as it should be), you can check whether Select server automatically is checked in the Server tab within Settings->Network. This should be the case.


In the block explorer it says the transaction is confirmed but cant see anything in electrum.

Good, then you are fine.
You received your coins. As long as you have access to your private key, you have access to your BTC.

It is just a network/displaying issue.
957  Bitcoin / Electrum / Re: Did not receive BTC when transfering to Electrum wallet on: October 26, 2020, 02:29:00 PM
Kraken is a reputable exchange. So they definitely didn't scam you.


Now, regarding your problem. This most likely is the issue:

And when I open my Electrum it says "Not connected (proxy enabled) should it say that? I have 4.0.4 version of Electrum too.

Your wallet needs to be connected to check your wallet for new incoming transactions.
Did you enable the proxy on purpose? If not, disable it in the settings. If yes, then could you confirm that your proxy works as it should?


You are most likely fine. If you want to be on the safe side, take your address from electrum and check it on a block explorer.
Does it show an incoming transaction / a balance? If so, you definitely received your coins. They are just not shown yet on your electrum instance.
958  Other / Meta / Re: Account VivGaming Banned. Mod Please Help on: October 26, 2020, 02:23:17 PM
I checked out all the posts from VivGaming here, and I didn't noticed any unusual spamming or plagiarism in this case:
https://ninjastic.space/search?author=VivGaming

Some mods should watch out before they ban people


Then you obviously have a very weird definition of spamming.


For example:

Quote
Good to know that you've learned everything from Bitcointalk and become able to setup such a perfect and beautiful small mining farm. I am amazed to know that this forum has so much potential for someone who want to learn and achieve something.
I will keep following your thread. keep us updated.
I might setup a mining farm one day too. you really inspired me.

This has been posted in a thread without any reply in the last 3+ months.

Does it add anything to the topic? Does it have valuable information?
If the answer to both of these questions is no, then it is spam (or at least off-topic) and deserves to be removed.
959  Bitcoin / Hardware wallets / Re: Buying a used Ledger... Yay or Nay? on: October 26, 2020, 02:19:48 PM
1) Cheap is relative.

That's true.
But during the black friday sale, it will be cheaper than without the sale.

Also, you probably won't get it much cheaper 2nd hand. And if you do, i'd be suspicious.



2) No such thing as black Fridays here.

Ledger does the black friday sale.
It doesn't matter where you live. If you live on planet earth, there is the black friday sale you can make use of.



3) Don't use € here.

Ever heard of currency conversion?

The world works even without every country using the same currency.



4) The question is to find out if the risks could be eliminated.

No, they can't.

You can never eliminate all risks with buying a second-hand hardware wallet.
960  Local / Anfänger und Hilfe / Re: News über Electrum wallet on: October 26, 2020, 01:56:33 PM
Da es an anderer Stelle bereits als Risiko erwähnt wurde, gibt es eine Liste von Electrum Servern zu denen man sich unbesorgt verbinden kann?
Nachdenklich hat mich dieser Post gemacht, da ich Electrum eigentlich immer einsetze auch zusammen mit meinem Ledger Nano S

Die einzige Möglichkeit wäre es deinen eigenen Server zu verwenden.

Electrum ist dafür bekannt, dass große Bedenken bezüglich der Privatsphäre entstehen können. Das trifft aber auf fast alle Lightweight Clients (also ohne Full Node) zu.
Die einzige gute Ausnahme für den Desktoprechner wäre hier Wasabi, welches deine Adressen/IP gegenüber dem Server nicht leakt.

Ansonsten sind ein eigener Electrum Server oder ein Full Node die beste Möglichkeit.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 [48] 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 ... 317 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!