imjustagirl (OP)
Member
Offline
Activity: 118
Merit: 11
|
|
September 07, 2017, 09:09:54 AM |
|
Hi, I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks. I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help!
|
1JPnqMd1Q43L3KbZ7SoTSdRCD2aLj2sikF Tip Me!
|
|
|
|
|
|
|
|
"With e-currency based on cryptographic proof, without the need to
trust a third party middleman, money can be secure and transactions
effortless." -- Satoshi
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
ranochigo
Legendary
Offline
Activity: 2968
Merit: 4179
|
|
September 07, 2017, 09:40:40 AM |
|
Hi, I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks.
It is NOT the fault of Bitcoin. The problem is with the implementation of the wallet; if there is a bug that somehow affects the randomness of the R value, your wallet will be vulnerable. This does not affect addresses with no transactions that is being spent. If you don't reuse address, you are completely safe. This does not cover the randomness of the address itself. I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help! You can easily set it up on Windows. There is no such tool for Windows, neither is there a need. By the time you try to scan it, your address would have already been compromised.
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
imjustagirl (OP)
Member
Offline
Activity: 118
Merit: 11
|
|
September 07, 2017, 01:27:23 PM |
|
I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'" Maybe I'm doing it wrong?
|
1JPnqMd1Q43L3KbZ7SoTSdRCD2aLj2sikF Tip Me!
|
|
|
efeaydin
|
|
September 07, 2017, 01:56:12 PM |
|
I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'" Maybe I'm doing it wrong? The scripts is written in Python3, but you are trying to run it with Python2
|
|
|
|
imjustagirl (OP)
Member
Offline
Activity: 118
Merit: 11
|
|
September 08, 2017, 06:34:16 PM |
|
I run Python 3.5
|
1JPnqMd1Q43L3KbZ7SoTSdRCD2aLj2sikF Tip Me!
|
|
|
achow101
Moderator
Legendary
Offline
Activity: 3388
Merit: 6635
Just writing some code
|
|
September 08, 2017, 08:26:54 PM |
|
I tried to run Rscan with python in cmd Windows. I always get the error "SyntaxError: Missing parentheses in call to 'print'" Maybe I'm doing it wrong? The scripts is written in Python3, but you are trying to run it with Python2 I run Python 3.5 It's the other way around; the script is in python 2 but you are using python 3.
|
|
|
|
posternat
|
|
September 09, 2017, 06:19:18 AM |
|
You are not going to be able to hit that sweet spot and take advantage of Bitcoin in the end. It is too hard to figure the right time and spot of the attack and there is no amount of scanning that is going to do it. It is like trying to scan private keys and find a wallet with a balance, the time is better spent getting coins the right way.
|
|
|
|
virasog
Legendary
Offline
Activity: 2982
Merit: 1159
|
|
September 09, 2017, 07:13:55 AM |
|
There have not been any scripts written for this and there won't be any. It is a waste of time because the resources are above the return. You can scan all day and night and even if the moment happens when you find the crack, it is going to be gone by the time that you manage a targeted attack. With a little luck you may get in there, but you might as well try hitting the lottery with one of those betting scams.
|
| | . .Duelbits│SPORTS. | | | ▄▄▄███████▄▄▄ ▄▄█████████████████▄▄ ▄███████████████████████▄ ███████████████████████████ █████████████████████████████ ███████████████████████████████ ███████████████████████████████ ███████████████████████████████ █████████████████████████████ ███████████████████████████ ▀████████████████████████ ▀▀███████████████████ ██████████████████████████████ | | | | ██ ██ ██ ██
██ ██ ██ ██
██ ██ ██ | | | | ███▄██▄███▄█▄▄▄▄██▄▄▄██ ███▄██▀▄█▄▀███▄██████▄█ █▀███▀██▀████▀████▀▀▀██ ██▀ ▀██████████████████ ███▄███████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ▀█████████████████████▀ ▀▀███████████████▀▀ ▀▀▀▀█▀▀▀▀ | | OFFICIAL EUROPEAN BETTING PARTNER OF ASTON VILLA FC | | | | ██ ██ ██ ██
██ ██ ██ ██
██ ██ ██ | | | | 10% CASHBACK 100% MULTICHARGER | │ | | │ |
|
|
|
btctousd81
|
|
September 09, 2017, 09:07:21 AM |
|
Hi, I have been thinking about investing a sum of money into bitcoin, so I have been reading about its vulnerabilities. As I understand, blockchain sometimes gives repeated R-values which makes some bitcoin wallets vulnerable to hacks. I wanted to find a tool to scan for such vulnerability, but seem to find none. I found R-scan, unfortunately it does not run under Windows, and I tried to run it in pythonanywhere, but to no success. Is there a tool to do this in Windows? Is there a tool to do this for the whole blockchain, so there is some output script like this http://www.want2pay.com/bad_randoms_bitcoin.html ? Please help, I want to make sure I can search for the vulnerability myself, instead of waiting for someone else to post it when its too late. Thanks in advance for your help! can you provide link to R-scan ? so i can test it ? thanks
|
|
|
|
imjustagirl (OP)
Member
Offline
Activity: 118
Merit: 11
|
|
September 09, 2017, 09:33:29 AM Last edit: September 09, 2017, 09:53:32 AM by imjustagirl |
|
https://bitcointalk.org/index.php?topic=977070.0The R-scan was in this thread. Now the more you tell me about it, the more I am curious, somehow people have done it though? I mean scanned the blockchains script signatures, if they were not using a script, then they used malware? Its not possible to scan the blockchain by personally looking at all the transactions, and obviously there is an output script like on the website I provided in my original post. Or was this done by the developers and they have some special tool for it? Update: Thank you so much for pointing me in the right direction! I was able to run the script under Python 2.7 after installing simplejason dependencies, now I get another error: Traceback (most recent call last): File "E:\rng-scanner-master\rscan.py", line 44, in <module> print "hash: " + str(addrdata['txs'][y]['hash']) IndexError: list index out of range this is so frustrating, if you could give me any advice, I would appretiate it, thank you.
|
1JPnqMd1Q43L3KbZ7SoTSdRCD2aLj2sikF Tip Me!
|
|
|
|