Bitcoin Forum
July 21, 2018, 06:34:15 PM *
News: Latest stable version of Bitcoin Core: 0.16.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 [41] 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 ... 129 »
  Print  
Author Topic: HOWTO: create a 100% secure wallet  (Read 274046 times)
procyon
Newbie
*
Offline Offline

Activity: 11
Merit: 0


View Profile
June 21, 2012, 04:19:23 PM
 #801

...
2. Wallets stolen from RAM:
You CAN'T do this even if the computer is running nothing BUT bitcoin and malware:

Every program has a ram space, other programs can't touch it.

This means that even assuming data stayed alive in RAM a while (I never heard of such):

The virus would need to allocate almost ALL the computers RAM to itself in order to even get access the residue after the bitcoin client closed THEN it would have to search it.

This would slow the PC to a crawl and be VERY obvious.
...

This is NOT true. Programs can read and write to RAM not owned by them. Nice programs don't do it, but programs can do this. You need to know something about the data you are looking for, it won't be nicely labeled 'secret_key:', but it is not impossible to find and extract. I have done this (with other programs, not bitcoin) on both windows xp and 7.
1532198055
Hero Member
*
Offline Offline

Posts: 1532198055

View Profile Personal Message (Offline)

Ignore
1532198055
Reply with quote  #2

1532198055
Report to moderator
1532198055
Hero Member
*
Offline Offline

Posts: 1532198055

View Profile Personal Message (Offline)

Ignore
1532198055
Reply with quote  #2

1532198055
Report to moderator
fair bitcoin games | pvp - pve - solo pve games | faucet |
Free satoshi code btcoon500
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1532198055
Hero Member
*
Offline Offline

Posts: 1532198055

View Profile Personal Message (Offline)

Ignore
1532198055
Reply with quote  #2

1532198055
Report to moderator
Beleth
Newbie
*
Offline Offline

Activity: 3
Merit: 0



View Profile
June 23, 2012, 08:25:55 AM
 #802

Thanks for the great guide.
Status
Jr. Member
*
Offline Offline

Activity: 35
Merit: 0



View Profile
June 24, 2012, 02:04:32 PM
 #803

Thanks, tried it out and it worked

Wallet : 1GKzh1whuTPFkPFwXHdZ53S7W7pcFko2Xj
userr
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
June 24, 2012, 10:49:30 PM
 #804

ARMORY looks like a good choice of software for secure wallet
knokturnl
Newbie
*
Offline Offline

Activity: 27
Merit: 0


View Profile
June 25, 2012, 06:08:40 PM
 #805

Thanks for this tut, I'm sure you've helped a countless number of people with it!

I sell BTC, PM me! Open to most forms of payment, prefer CIM though.

http://bitcoin-otc.com/viewratingdetail.php?nick=knokturnl
gamebak
Member
**
Offline Offline

Activity: 103
Merit: 10


View Profile
June 27, 2012, 02:55:22 AM
 #806

really a great tutorial, thanks mate.
muqali
Full Member
***
Offline Offline

Activity: 182
Merit: 100


View Profile
June 27, 2012, 04:54:22 AM
 #807

A linux distro that has everything you need probably can't come quick enough.

The distributor of that distro needs to enjoy enormous trust.

I trust a vanilla ubuntu live cd a ton lot more to contain no wallet stealer than a special "for your secure bitcoin savings" distro.



I am quite fond of TAILS but of course a Live CD can't store data like your wallet and private GPG key - it is possible though to use the built in disk utility to encrypt a USB stick which can contain such information.

V.

I'd like to second the use of tails as a live cd. It's backed by debian's massive repository if you absolutely need some program while setting up your secure wallet.

donations BTC: 1CaCwo4xneTqTLEdomW76Cg5NteZyvXi1c
donations LTC: LTcasvjtLuN92ks1Pc1qtkvE9PswsXEbev
rgenito
Full Member
***
Offline Offline

Activity: 139
Merit: 100


View Profile WWW
June 27, 2012, 06:02:07 AM
 #808

i didn't bother to read EVERY thread on here, but a thing to beware of with linux USB / live CDs: if your encryption requires high-quality random numbers, you might not want to generate random keys after booting from a USB boot / live CD; apparently that's not a good choice because the environment is more predictable. Anyone out there ever even take advantage of this flaw? I sure haven't; I've only had wikipedia entertain me with these thoughts Smiley

Honestly, it surely doesn't matter, but for those that love being paranoid: beware of generating keys after freshly booting from a live CD / USB.

As for creating a "100% secure wallet", I don't think it's possible to quantify or measure the % of security that a wallet is under. Keep in mind that your wallet isn't exactly secure if even YOU lose access to it! (It's no longer secure--it is useless!)

https://WallofCoins.com * A peer-to-peer market for buying and selling decentralized, Digital Currencies. Intelligent, trustworthy, and secure.
muqali
Full Member
***
Offline Offline

Activity: 182
Merit: 100


View Profile
June 27, 2012, 07:30:49 AM
 #809

i didn't bother to read EVERY thread on here, but a thing to beware of with linux USB / live CDs: if your encryption requires high-quality random numbers, you might not want to generate random keys after booting from a USB boot / live CD; apparently that's not a good choice because the environment is more predictable. Anyone out there ever even take advantage of this flaw? I sure haven't; I've only had wikipedia entertain me with these thoughts Smiley

Honestly, it surely doesn't matter, but for those that love being paranoid: beware of generating keys after freshly booting from a live CD / USB.

As for creating a "100% secure wallet", I don't think it's possible to quantify or measure the % of security that a wallet is under. Keep in mind that your wallet isn't exactly secure if even YOU lose access to it! (It's no longer secure--it is useless!)

http://en.wikipedia.org/wiki/RdRand

it's in my new cpu on the laptop but I don't know if it needs a kernel driver or not. Maybe anything using aes-ni can use it as an entropy source no kernel support needed.

donations BTC: 1CaCwo4xneTqTLEdomW76Cg5NteZyvXi1c
donations LTC: LTcasvjtLuN92ks1Pc1qtkvE9PswsXEbev
silentseawolf
Newbie
*
Offline Offline

Activity: 29
Merit: 0


View Profile
June 27, 2012, 04:13:16 PM
 #810

good how-to and discussion, thanks.
bighecks
Newbie
*
Offline Offline

Activity: 23
Merit: 0


View Profile
June 27, 2012, 10:54:12 PM
 #811

Thanks for this im try this later on.
ketamic
Newbie
*
Offline Offline

Activity: 7
Merit: 0


No turn unstoned.


View Profile
June 29, 2012, 01:35:13 AM
 #812

Very well written. And made me seriously think about security... (And changing to Linux)

Underpants + ? = Profit
Randy
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
June 29, 2012, 05:27:01 PM
 #813

What would be the best way for a 'physical' storage? An USB is an obvious solution, but I've also heard of people just writing down some things on paper?
Oxin
Newbie
*
Offline Offline

Activity: 25
Merit: 0


View Profile
June 29, 2012, 06:14:27 PM
 #814

Yes, it's really hard. And it is very necessary to know.
Randy
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
June 29, 2012, 07:05:02 PM
 #815

Yes, it's really hard. And it is very necessary to know.

Then, could you explain it please..? (:
seanschneider
Newbie
*
Offline Offline

Activity: 2
Merit: 0


View Profile
June 30, 2012, 02:45:51 PM
 #816

Thanks man, your awesome!
bulanula
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500



View Profile
June 30, 2012, 02:53:19 PM
 #817

Nothing is 100% secure.

You fail at security if you really believe 100% secure exists Roll Eyes
zero3112
Hero Member
*****
Offline Offline

Activity: 588
Merit: 500



View Profile
June 30, 2012, 07:53:28 PM
 #818

Encryption is good but a offline wallet would be even better.

btcwalker
Newbie
*
Offline Offline

Activity: 24
Merit: 0


View Profile
July 02, 2012, 07:31:40 AM
 #819

The more you secured, the more you know you don't secured Smiley
bitcrowd
Newbie
*
Offline Offline

Activity: 7
Merit: 0


View Profile
July 03, 2012, 01:08:59 AM
 #820

thanks for this
my wallet thanks you
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 [41] 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 ... 129 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!