Bitcoin Forum
May 26, 2024, 11:40:44 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: noob questions re. security and exchanges  (Read 374 times)
oldiebg2 (OP)
Newbie
*
Offline Offline

Activity: 2
Merit: 0


View Profile
November 25, 2013, 05:52:11 AM
 #1

Tell me if this is right - I have to keep my private key safe. So if the exchanges know my name and address it doesn't affect my security. And if i have several addresses, then no one can link my total balance to the one wallet on the public chain. ?

How long would it take for someone to hack my computer and pinch my wallet.dat? I am using an old laptop, basically a glorified dvd player, to hold my wallet. If I only hook it to the net to check my balance and generate a couple of addresses, is it pretty safe? (aside from the need for backups.)

If I create a backup wallet by loading a live ubuntu off a usb stick, which part am i keeping offline? when is the private key generated?

Does your private key change? If you don't have access to your wallet.dat, is the private key enough to access your coins?

How can I buy and sell bitcoins totally online without going in to the bank, or sending photo id over the net?

tia
DannyHamilton
Legendary
*
Offline Offline

Activity: 3402
Merit: 4656



View Profile
November 25, 2013, 06:32:20 PM
 #2

Tell me if this is right - I have to keep my private key safe. So if the exchanges know my name and address it doesn't affect my security. And if i have several addresses, then no one can link my total balance to the one wallet on the public chain. ?

There are no wallets "on the public chain", there are only addresses.  If someone knows any of your addresses, then they can know exactly how much you've received at and sent from those addresses.  Depending on the wallet (or wallets) that you use, it may be possible to make inferences about other addresses that you are likely to control as well.

How long would it take for someone to hack my computer and pinch my wallet.dat? I am using an old laptop, basically a glorified dvd player, to hold my wallet. If I only hook it to the net to check my balance and generate a couple of addresses, is it pretty safe? (aside from the need for backups.)

Any time you are connected to "the net" there is potential that malware on your computer could steal your bitcoins (or potential that a hacker could exploit a weakness in your security. If you are truly concerned, you may want to look into running Armory, which allows you to keep your wallet computer permanently offline, as long as you have access to another computer that can transmit transactions and check balances.

If I create a backup wallet by loading a live ubuntu off a usb stick, which part am i keeping offline? when is the private key generated?

Which part?  I think the idea is to keep it completely offline.  The private key is generated after you install the software that you intend to use to generate the private key.

Does your private key change? If you don't have access to your wallet.dat, is the private key enough to access your coins?

Each address has its own unique private key that never changes for that address.  As long as you have all the private keys for all the addresses that have received bitcoins, then you have enough information to access those bitcoins.

How can I buy and sell bitcoins totally online without going in to the bank, or sending photo id over the net?

Take a look at localbitcoins.com

oldiebg2 (OP)
Newbie
*
Offline Offline

Activity: 2
Merit: 0


View Profile
November 27, 2013, 04:13:52 AM
 #3

Great thank you, that really helps, with trying to get my head around it. Just quitting caffeine so I'm a bit slow.

Quote
Take a look at localbitcoins.com
I am in Aus and haven't found an exchange where it's easy to transfer cash yet. I had a quick look at localbitcoins, will check it out again. I was under the impression you had to meet people in person for that one. Maybe that was a while back. (When I should have bought).

Quote
How long would it take for someone to hack my computer and pinch my wallet.dat? I am using an old laptop, basically a glorified dvd player, to hold my wallet. If I only hook it to the net to check my balance and generate a couple of addresses, is it pretty safe? (aside from the need for backups.)

Quote
Any time you are connected to "the net" there is potential that malware on your computer could steal your bitcoins (or potential that a hacker could exploit a weakness in your security.
I'm not well versed in linux but I can run mplayer from the command so I am going to try the live ubuntu. The wallet application to be installed, can be popped onto the same offline usb stick that holds the live ubuntu, no? Or do you have to go online to grab it. Or is it possible to access your hard drive, as like a mapped drive, from the bootable usb?

Quote
I think the idea is to keep it completely offline.  The private key is generated after you install the software that you intend to use to generate the private key.

That's a really good idea, keeping it totally offline. Then as you use addresses from it, you just copy them into a text file, onto a stick, to be used online, without the wallet.dat ever seeing the light of fibre, no?

Quote
Depending on the wallet (or wallets) that you use, it may be possible to make inferences about other addresses that you are likely to control as well.

Could this be used by say your flatmate, if he had one address, to work out a possible larger balance, and decide it was worth it to go through your things or pinch your laptop? Or is it something for the pure maths grads to work out?
DannyHamilton
Legendary
*
Offline Offline

Activity: 3402
Merit: 4656



View Profile
November 27, 2013, 12:02:37 PM
 #4

Quote
Depending on the wallet (or wallets) that you use, it may be possible to make inferences about other addresses that you are likely to control as well.

Could this be used by say your flatmate, if he had one address, to work out a possible larger balance, and decide it was worth it to go through your things or pinch your laptop? Or is it something for the pure maths grads to work out?

It all depends on which wallet you use and how you use it. Generally, if addresses are being re-used, no maths are involved at all.  You just need to know how to use a web browser.

For example:

If we imagine that I have the address: 1DZZYn1dEVJG6QBPzKULqqmL3vLiXfZhYS

And we imagine that the following transaction ID is a 5 BTC payment I received from someone
d7cdcc96e99d073d9dd3bf5629f13a226497c35f46d6c6c3131c529455933c51


I can go to the https://blockchain.info website, and paste that transactionID into the search.  I'll find the following transaction:
https://blockchain.info/tx/d7cdcc96e99d073d9dd3bf5629f13a226497c35f46d6c6c3131c529455933c51

Looking at that transaction, I can see that the sender controls the address:
1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6

Clicking on that address, I can see every transaction ever received at that address and which addresses were sent to when that value was spent:
https://blockchain.info/address/1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6

I can immediately see that the person who sent me the 5 BTC is still holding another 14.53829877 BTC at address 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6.

Scrolling down the page a bit I discover transaction ID:
be765a8eb5fb6824a6c276c65352b97e1151a76533d79829e752cd7672d7eeb9

Where the owner of 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6 sent 5.01000313 BTC and split the payment between two addresses:
Sending 0.01000313 BTC to 1CruZSh5CaR9QUA2Dnx5TpXgZ2LMcBxLL9 and 5 BTC to 1GkGZG5S4zjo8XkCwEGhEdy9Yg4wC73mRa

The interesting thing about this transaction though is where the 5.01000313 BTC in the transaction came from.
Only 3.14964169 BTC of it came from previous transactions that were sent to 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6.
An additional 1.86036144 BTC came from previous transactions that were sent to 1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt.

Since bitcoins that were previously sent to 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6 and bitcoins that were previously sent to 1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt were both spent in the same transaction, I can infer that the person who controls 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6 also controls 1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt.

Clicking on the 1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt address, I can see every transaction ever received at that address and which addresses were sent to when that value was spent:
https://blockchain.info/address/1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt

Here I can see that in addition to the 14.53829877 BTC that this person is holding at address 1FT9nQfpJ8Swgx9giXWAyE7oUQ7ZFpKqB6, they also are holding 11.42809465 at the 1BGf556H9JfEQ3ufvBh65PdXAegwCbhLwt address for a total of 25.966239342 BTC.


Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!