Bitcoin Forum
May 04, 2024, 09:39:25 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [ALPHA] Double signed wallet with a patternlock  (Read 1420 times)
grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 09, 2012, 12:42:21 AM
 #1

Eventually a simple multisig protection to your wallet.
It may save your bitcoins also if your private key is compromised.

The basic service is a free way to secure your wallet using a secondary remote signature, activated by a patternlock
This is an alpha release of the service.

Few links:
https://ubtcbank.com/basic/  - directly the service
https://ubtcbank.com/  - some marketing, example, faq and more
https://github.com/grazcoin/ubtcbank  - the source code

Please your comments.
Grazcoin

1714815565
Hero Member
*
Offline Offline

Posts: 1714815565

View Profile Personal Message (Offline)

Ignore
1714815565
Reply with quote  #2

1714815565
Report to moderator
1714815565
Hero Member
*
Offline Offline

Posts: 1714815565

View Profile Personal Message (Offline)

Ignore
1714815565
Reply with quote  #2

1714815565
Report to moderator
"There should not be any signed int. If you've found a signed int somewhere, please tell me (within the next 25 years please) and I'll change it to unsigned int." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714815565
Hero Member
*
Offline Offline

Posts: 1714815565

View Profile Personal Message (Offline)

Ignore
1714815565
Reply with quote  #2

1714815565
Report to moderator
1714815565
Hero Member
*
Offline Offline

Posts: 1714815565

View Profile Personal Message (Offline)

Ignore
1714815565
Reply with quote  #2

1714815565
Report to moderator
1714815565
Hero Member
*
Offline Offline

Posts: 1714815565

View Profile Personal Message (Offline)

Ignore
1714815565
Reply with quote  #2

1714815565
Report to moderator
grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 09, 2012, 12:42:44 AM
 #2

reserved

tytus
Sr. Member
****
Offline Offline

Activity: 250
Merit: 250


View Profile
September 09, 2012, 08:00:35 PM
 #3

I like the idea of having a savings account that can not be broken into after braking into my laptop. But I wonder if this service is also an additional threat that You loose Your coins by forgetting a pin code. An automated release of the additional security after a certain period [a year] would help to retrieve the funds by people who inherited the access to the primary account.
beckspace
Hero Member
*****
Offline Offline

Activity: 931
Merit: 500


View Profile
September 10, 2012, 01:20:19 AM
 #4

watching
grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 10, 2012, 07:34:39 AM
 #5

I like the idea of having a savings account that can not be broken into after braking into my laptop. But I wonder if this service is also an additional threat that You loose Your coins by forgetting a pin code. An automated release of the additional security after a certain period [a year] would help to retrieve the funds by people who inherited the access to the primary account.

Although you are advised to keep a paper backup of the secondary key (and then forgetting the pincode is not a big issue, since you can simply recreate the key with a new pincode), losing both the secondary private key and the credentials does not mean you lost your funds.
From the  https://www.ubtcbank.com/faq.html (#12):

I forgot my pincode, my key got disabled and I don't have a backup of the secondary private key. What now?

This is a delicate situation requiring few steps:

*    Send me the primary private key encrypted to grazcoin (at) ubtcbank.com using my gpg key, and a new destination address.
*    First I will send all funds to ubtc main address.
*    If no conflicting claims come within 100 days, I will send the funds minus a fee of 1BTC to the requested new destination address.
*    If there are conflicting claims, I will be the judge or let some other entity serve as a judge. The same fee of 1BTC applies.

As for your suggestion of an "automated release" - this cannot be done, since the service cannot spend the coins without the your primary private key signature.
The above procedure is the secure variant of the "automated release".

Instead of sending the private key, it would be enough to send the following tx signed by your primary key:
"Send the whole sum to 3BTChqkFai51wFwrHSVdvSW9cPXifrJ7jC"
Then the service would sign this tx as well, and the rest of the procedure holds.
I would add an option for creating this tx, for the "I lost everything" case.

Grazcoin

grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 11, 2012, 08:12:20 PM
 #6

To fully use the service one has to send BTC to the wallet she generated.
It's worth mentioning that sending BTC to the created multisig address (starting with the 3) is currently supported by:
http://instawallet.org/
satoshi client
(Android) Bitcoin Wallet (2.20)

Sending funds to a multisig address is NOT supported by:
electrum (1.0)
multibit (0.4.10)
bitcoinspinner (0.7.2b)

Grazcoin

grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 11, 2012, 09:07:21 PM
 #7

Warning:
=====
Do not keep more than 42 BTC in a wallet.
I managed to hit the 32 bit bug, since I keep a positive integer for the amount of satoshis.
So, anything more than 42.94967295 BTC may be problematic (and even cause tx fees to be much larger than you expect).
Very good that it was found before any coins got lost ...

A fix will be coming next week (after London bitcoin2012 conference), probably with a short downtime.
No problem to play with lower amounts though.

Grazcoin

P_Shep
Legendary
*
Offline Offline

Activity: 1795
Merit: 1198


This is not OK.


View Profile
September 11, 2012, 09:46:36 PM
 #8

Warning:
=====
Do not keep more than 42 BTC in a wallet.
I managed to hit the 32 bit bug, since I keep a positive integer for the amount of satoshis.
So, anything more than 42.94967295 BTC may be problematic (and even cause tx fees to be much larger than you expect).
Very good that it was found before any coins got lost ...

A fix will be coming next week (after London bitcoin2012 conference), probably with a short downtime.
No problem to play with lower amounts though.

Grazcoin

OK, that's a very amateur error :/
Gavin Andresen
Legendary
*
qt
Offline Offline

Activity: 1652
Merit: 2216


Chief Scientist


View Profile WWW
September 11, 2012, 10:21:28 PM
 #9

You would have probably found that a lot quicker running a testnet version.

The testnet Faucet is giving away 500 play bitcoins at a time right now:
  http://testnet.freebitcoins.appspot.com/

How often do you get the chance to work on a potentially world-changing project?
grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 12, 2012, 07:41:13 AM
Last edit: September 12, 2012, 07:52:45 AM by grazcoin
 #10

OK, that's a very amateur error :/

Indeed. It is still in first alpha stage, and the code is only few days old.
As the code is open, I expect the bugs to vanish fast.

You would have probably found that a lot quicker running a testnet version.

The testnet Faucet is giving away 500 play bitcoins at a time right now:
  http://testnet.freebitcoins.appspot.com/


That's definitely a good idea.
I will try add also a testnet version in parallel.
The problem is that the current code uses blockchain.info api, and this is not available for testnet (correct?).
It may take some time to set it up.

Grazcoin

grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 12, 2012, 08:39:16 AM
 #11

The problem is that the current code uses blockchain.info api, and this is not available for testnet (correct?).

The code uses some api from blockchain.info:
http://blockchain.info/unspent?address=3JEFRC6tuXRjxG6YUDtYzEmYEphf5pb86C
http://blockchain.info/q/pubkeyaddr/12oESJ63gKmf7EtqEdrV7Xnid8dmYTBKE3

any suggestions how to get this info for the testnet?
I could think of reimplementing this api on top of abe blockchain explorer, but I expect it to be a major effort.

grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 12, 2012, 08:23:15 PM
Last edit: September 12, 2012, 09:14:13 PM by grazcoin
 #12

Do not keep more than 42 BTC in a wallet.
I managed to hit the 32 bit bug, since I keep a positive integer for the amount of satoshis.
Fixed.
It was only changing PositiveIntegerField to BigIntegerField in models.py
https://github.com/grazcoin/ubtcbank/commit/24528cf2d2e95fdda4a801cb1e8e169ec3ca76b1
updating in the database:
ALTER TABLE ubtcbank_secureaddr MODIFY balance BIGINT;
ALTER TABLE ubtcbank_txlog MODIFY amount BIGINT;
ALTER TABLE ubtcbank_txlog MODIFY fee BIGINT;
and running syncdb
Grazcoin

grazcoin (OP)
Sr. Member
****
Offline Offline

Activity: 284
Merit: 250



View Profile
September 29, 2012, 10:23:38 PM
 #13

To fully use the service one has to send BTC to the wallet she generated.
It's worth mentioning that sending BTC to the created multisig address (starting with the 3) is currently supported by:
http://instawallet.org/
satoshi client
(Android) Bitcoin Wallet (2.20)

Sending funds to a multisig address is NOT supported by:
electrum (1.0)
multibit (0.4.10)
bitcoinspinner (0.7.2b)

Grazcoin

bitcoinspinner (0.7.3b) already supports sending funds to multisig address.
example tx sent by the spinner:
http://blockchain.info/tx/368afc1e3be84dd11912c0e90eeacd4395a2d49eddf122d25e3a1aabda5b05f9

so, you can top up your double signed wallet with the spinner now as well.
Grazcoin

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!