bjbear123 (OP)
|
|
December 28, 2015, 11:52:07 PM |
|
I stumbled across this website earlier today .... http://directory.io/9 Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ??
|
BTC: 1Q3B9pr84adJJxBNmo3w3FaEWgcCjCSPTv | ETH: 0x1A053Df90E06f59fc7Aeb12F7a7Ea1f47FA53748 | LTC: LYUQYCy7S68Yry2qv3XRC7xx62GbHZEWhH | BCH: lol
|
|
|
Simgo
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 28, 2015, 11:54:55 PM |
|
No. It would take billion of years to check or browse every private key. This site doesn't have every key on hard disk because it's to much. It's generated on the fly.
|
|
|
|
European Central Bank
Legendary
Offline
Activity: 1288
Merit: 1087
|
|
December 29, 2015, 12:10:42 AM |
|
I read another thread where someone claimed to have picked up some coins from one of these sites. Hard to believe and I don't understand why they're doing it. Maybe they want to drive traffic from stupid and greedy people there.
|
|
|
|
Greenenergy
|
|
December 29, 2015, 12:12:01 AM |
|
Website is offline. Whats the site about?
|
|
|
|
Simgo
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 29, 2015, 12:19:49 AM |
|
Website is offline. Whats the site about?
It was possible to browse through a few private keys ranging from 1 to 2 256-1 + showing the bitcoin address on the fly using a browser. But it would take too much time to check every possible key. --> No danger to the bitcoin user! Don't worry.
|
|
|
|
QQ88
Member
Offline
Activity: 119
Merit: 100
|
|
December 29, 2015, 12:21:58 AM |
|
Well, the site in the OP is currently down...
|
|
|
|
Hazir
Legendary
Offline
Activity: 1596
Merit: 1005
★Nitrogensports.eu★
|
|
December 29, 2015, 12:56:27 AM |
|
I stumbled across this website earlier today .... http://directory.io/9 Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ?? Site is down now, and I am not sure if it will be ever back. Anyway, if extracting bitcoin from random keys was possible even with 0.1% chance of success. We would have major number of specialized farms of cracking machines running 24/7 to find the right algorithms.
|
|
|
|
Hugroll
|
|
December 29, 2015, 01:04:29 AM |
|
I stumbled across this website earlier today .... http://directory.io/9 Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ?? since it lists all of the addresses available it cant really do anything, if you were to pick an address thers almost a 0 chance theres gonna be money in that exact address.
|
|
|
|
aso118
Legendary
Offline
Activity: 1918
Merit: 1012
★Nitrogensports.eu★
|
|
December 29, 2015, 01:55:11 AM |
|
I stumbled across this website earlier today .... http://directory.io/9 Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ?? Every private key on record? If that were possible, Bitcoin wouldn't exist right now. You can stop worrying about it.
|
|
|
|
Odien
|
|
December 29, 2015, 01:56:09 AM |
|
I stumbled across this website earlier today .... http://directory.io/9 Is this a possible security threat. I understand there is a HUGE amount of pages, but this site has every private key on record, couldn't they make a program to filter out the keys which have available balance ?? Every private key on record? If that were possible, Bitcoin wouldn't exist right now. You can stop worrying about it. Yup, just don't worry
|
|
|
|
techmanuk
Newbie
Offline
Activity: 52
Merit: 0
|
|
December 29, 2015, 02:15:12 AM |
|
I chuckled when I saw it said Page 1 out of 904625697166532776746648320380374280100293470930272690489102837043110636675.
|
|
|
|
justspare
|
|
December 29, 2015, 03:40:48 AM Last edit: December 29, 2015, 03:50:52 AM by justspare |
|
The website is down anyway. I am pretty sure it needs to be online to have every private key. This is definitely not a big threat, why did you even think it was? Was the site working when you saw it? No. It would take billion of years to check or browse every private key. This site doesn't have every key on hard disk because it's to much. It's generated on the fly.
There are too many private keys in the world, I doubt this website has even one-quarter of the private keys. There are private keys generated every single day. There is no chance this website can be keeping up with this.
|
|
|
|
Invuln
Newbie
Offline
Activity: 1
Merit: 0
|
|
December 29, 2015, 03:50:55 AM |
|
You do realise that there's only 1 page actually available, and if you check, the first three addresses are all named "DONATE PLEASE" or something similar to that. I'm just wondering was the ninth page available to you @OP when you checked? Or was it already down?
|
|
|
|
saturn643
|
|
December 29, 2015, 05:05:04 AM |
|
If that were a security flaw then simply having private keys is a flaw in itself. A private key is really just a big number, hopefully randomly generated. The thing is is that there is a HUGE range of numbers to choose from for a private key, so the probability of two different people choosing the same number twice is incredibly low (barring any bad implementations). Furthermore, you could theoretically write a program which searches through every single private key possible (it isn't that hard, it is just a big integer and you go sequentially) but the odds of finding a key that corresponds to an address with Bitcoin in it is incredibly low. While doable, it would take an ungodly amount of time to do, on the scale of trillions (or more) of years. This is the basis of this kind of cryptography, that the probability of finding a collision is incredibly low and that to search every single possible private key would take an ungodly amount of time.
tl;dr due to the size of the private key range, this is perfectly fine and safe.
|
|
|
|
Amph
Legendary
Offline
Activity: 3248
Merit: 1070
|
|
December 29, 2015, 07:49:03 AM |
|
if this is another thing about brute forcing private key from public key etc, then it will not work as you think, at present it's impossible, if it will ever be a threat it would be when everyone here is died already
|
|
|
|
Jeremycoin
Legendary
Offline
Activity: 1022
Merit: 1003
𝓗𝓞𝓓𝓛
|
|
December 29, 2015, 07:55:17 AM |
|
This is a silly question, there's no way someone or something can record all of the private keys. Internet is big, but your harddrive is not that big.
|
faucet used to be profitable
|
|
|
NorrisK
Legendary
Offline
Activity: 1946
Merit: 1007
|
|
December 29, 2015, 08:10:01 AM |
|
The only difference between using this list and randomly trying strings is that these are probably already filtered to only contain valid private keys.
The number of keys is so huge, it would be impossible to check even a fraction of them in a lifetime. That is the whole idea behind the bitcoin security.
I agree it may look scary that your private key is on a list somewhere, but I wouldn't be too worried about this. If you really are, just spread your coins over multiple addresses.
|
|
|
|
bitkilo
Legendary
Offline
Activity: 1638
Merit: 1010
https://www.bitcoin.com/
|
|
December 29, 2015, 08:16:48 AM |
|
They could not possibly have "every" private key. I create paper wallets all the time with nothing that has even been near a computer so i know nobody has the private keys to my stash but me.
Maybe it was leaked data from Coinbase or one of those online wallet providers that hold your private key for you. (I would hope they are not stupid enough to store their users private key online) but i also highly doubt that.
I still would have liked to see the site, did anybody get a screenshot or cache?
|
Not a paid signature, just added to promote Bitcoin.com
|
|
|
odolvlobo
Legendary
Offline
Activity: 4466
Merit: 3391
|
|
December 29, 2015, 08:17:59 AM |
|
That site has been around for more than two years now and it is still causing people to freak out! Read this: https://bitcointalk.org/index.php?topic=354518.0
|
Join an anti-signature campaign: Click ignore on the members of signature campaigns. PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
|
|
|
Maskedman
|
|
December 29, 2015, 08:23:54 AM |
|
This is simply not possible... Dont worry. It's a hoax.
|
|
|
|
|