Bitcoin Forum
December 11, 2016, 12:29:24 AM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1] 2 »  All
  Print  
Author Topic: LiveUSB for better security.  (Read 2029 times)
cloud9
Member
**
Offline Offline

Activity: 70


View Profile
June 28, 2011, 12:55:28 PM
 #1

Can someone add to bitcoin.org's client page the following for Bitcoin to succeed securely:

A downloadable, lightweight bootable image file that automatically boots up into the bitcoin client when a usb stick of 2gb or so is connected to the computer and the computer is booted while it is attached.

It can be free license linux lightweight, automatically opening the Bitcoin client and storing the bitcoin block chain and wallet files on the usb - thus giving an easy to use client and a sterile environment.  It should only do bitcoin - if the user is done with bitcoin transactions - they shut down.

Disclaimer:  Postings of Cloud9 are only individual views of opinion and/or musings and/or hypothesisses.  On a non-authoritative, peer-to-peer public forum, you do not need permission from Cloud9 to derive your own conclusions or opinions, so please do.  Calculations and assumptions to be verified.
1481416164
Hero Member
*
Offline Offline

Posts: 1481416164

View Profile Personal Message (Offline)

Ignore
1481416164
Reply with quote  #2

1481416164
Report to moderator
1481416164
Hero Member
*
Offline Offline

Posts: 1481416164

View Profile Personal Message (Offline)

Ignore
1481416164
Reply with quote  #2

1481416164
Report to moderator
1481416164
Hero Member
*
Offline Offline

Posts: 1481416164

View Profile Personal Message (Offline)

Ignore
1481416164
Reply with quote  #2

1481416164
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481416164
Hero Member
*
Offline Offline

Posts: 1481416164

View Profile Personal Message (Offline)

Ignore
1481416164
Reply with quote  #2

1481416164
Report to moderator
cloud9
Member
**
Offline Offline

Activity: 70


View Profile
June 28, 2011, 07:13:21 PM
 #2

Included in the image file should also be a pre-set free license firewall with rule set to just allow bitcoin client traffic.

The average, computer novice, bitcoin user do not want to (/ can not) set this up manually.

Disclaimer:  Postings of Cloud9 are only individual views of opinion and/or musings and/or hypothesisses.  On a non-authoritative, peer-to-peer public forum, you do not need permission from Cloud9 to derive your own conclusions or opinions, so please do.  Calculations and assumptions to be verified.
CydeWeys
Full Member
***
Offline Offline

Activity: 154


View Profile
June 28, 2011, 07:23:05 PM
 #3

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0
cloud9
Member
**
Offline Offline

Activity: 70


View Profile
June 28, 2011, 07:34:40 PM
 #4

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0

Thanks!! It has even been noticed (although not yet endorsed) by allinvain  Embarrassed

It would be comforting if some of the veteran technical bitcoin people could verify its secureness and add it to the bitcoin.org client download page as a secure endorsement.

Disclaimer:  Postings of Cloud9 are only individual views of opinion and/or musings and/or hypothesisses.  On a non-authoritative, peer-to-peer public forum, you do not need permission from Cloud9 to derive your own conclusions or opinions, so please do.  Calculations and assumptions to be verified.
cloud9
Member
**
Offline Offline

Activity: 70


View Profile
June 28, 2011, 07:44:08 PM
 #5

http://www.pendrivelinux.com/put-xubuntu-10-04-on-a-flash-drive-with-windows/

Disclaimer:  Postings of Cloud9 are only individual views of opinion and/or musings and/or hypothesisses.  On a non-authoritative, peer-to-peer public forum, you do not need permission from Cloud9 to derive your own conclusions or opinions, so please do.  Calculations and assumptions to be verified.
CydeWeys
Full Member
***
Offline Offline

Activity: 154


View Profile
June 28, 2011, 08:00:03 PM
 #6

Thanks!! It has even been noticed (although not yet endorsed) by allinvain  Embarrassed

Why would you need his endorsement?  His claim to fame is losing a shedload of money through poor security practices.
cloud9
Member
**
Offline Offline

Activity: 70


View Profile
June 28, 2011, 08:14:21 PM
 #7

Thanks!! It has even been noticed (although not yet endorsed) by allinvain  Embarrassed

Why would you need his endorsement?  His claim to fame is losing a shedload of money through poor security practices.

 Cheesy

Wouldn't that make him the most careful, walking on eggs, bitcoin user at the moment?!?

Disclaimer:  Postings of Cloud9 are only individual views of opinion and/or musings and/or hypothesisses.  On a non-authoritative, peer-to-peer public forum, you do not need permission from Cloud9 to derive your own conclusions or opinions, so please do.  Calculations and assumptions to be verified.
CydeWeys
Full Member
***
Offline Offline

Activity: 154


View Profile
June 28, 2011, 09:54:42 PM
 #8

Well, there's two kinds of people.

#1  Otherwise diligent people who make a colossal mistake and then go to great pains to never, ever let it happen again.

#2  People who make a colossal mistake simply because they're just not careful.  Making one colossal mistake doesn't make them any less likely to have another one in the future.

We don't know what type allinvain is.
Smalleyster
Member
**
Offline Offline

Activity: 70


I yam what I yam. - Popeye


View Profile WWW
July 10, 2011, 07:28:00 PM
 #9

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever

Feel like investing in a Miner?:
http://bitcointalk.org/index.php?topic=30044.msg377773#msg377773
A soup to nuts newbee system for a secure, portable USB wallet (free instructions):
NoobHowTo: http://bitcointalk.org/index.php?topic=27088.msg341387#msg341387
error
Hero Member
*****
Offline Offline

Activity: 574



View Profile
July 10, 2011, 07:34:28 PM
 #10

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever

It was designed for mining, not wallet storage.

15UFyv6kfWgq83Pp3yhXPr8rknv9m6581W
ercolinux
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW
July 10, 2011, 07:41:27 PM
 #11

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0
al

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever
I help mantain a linux distro and I've to tell that is not so simple make a secure password protected linux usb medium. The password should be stored in the persistent area, but this area is easily readable if you put the pen in a pc.  If you can have the medium in your hand only a strong cryptography of the partition can save your data.

Bitrated user: ercolinux.
Smalleyster
Member
**
Offline Offline

Activity: 70


I yam what I yam. - Popeye


View Profile WWW
July 10, 2011, 07:44:26 PM
 #12

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0
al

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever
I help mantain a linux distro and I've to tell that is not so simple make a secure password protected linux usb medium. The password should be stored in the persistent area, but this area is easily readable if you put the pen in a pc.  If you can have the medium in your hand only a strong cryptography of the partition can save your data.

Thank you for that explanation.

With that I can stop wasting my time expecting that I can create a secure yet easy to use wallet.

Oh well.

Feel like investing in a Miner?:
http://bitcointalk.org/index.php?topic=30044.msg377773#msg377773
A soup to nuts newbee system for a secure, portable USB wallet (free instructions):
NoobHowTo: http://bitcointalk.org/index.php?topic=27088.msg341387#msg341387
Smalleyster
Member
**
Offline Offline

Activity: 70


I yam what I yam. - Popeye


View Profile WWW
July 10, 2011, 07:47:44 PM
 #13

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever

It was designed for mining, not wallet storage.

Does anyone know of an answer for secure usb wallet storage?

Is the concept foolish and impossible?

Feel like investing in a Miner?:
http://bitcointalk.org/index.php?topic=30044.msg377773#msg377773
A soup to nuts newbee system for a secure, portable USB wallet (free instructions):
NoobHowTo: http://bitcointalk.org/index.php?topic=27088.msg341387#msg341387
error
Hero Member
*****
Offline Offline

Activity: 574



View Profile
July 10, 2011, 07:54:02 PM
 #14

See Linuxcoin with Persistence?  http://forum.bitcoin.org/?topic=7374.0

I have spent quite a bit of time on this project and in my opinion it is not at all secure because it allways boots up without asking for a password...ever

It was designed for mining, not wallet storage.

Does anyone know of an answer for secure usb wallet storage?

Is the concept foolish and impossible?

No, it could be done with an encrypted stick. It's just not very easy to set this up.

15UFyv6kfWgq83Pp3yhXPr8rknv9m6581W
ercolinux
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW
July 10, 2011, 08:44:57 PM
 #15

Does anyone know of an answer for secure usb wallet storage?

Is the concept foolish and impossible?

The best way to secure things is to put the OS on one media (best if is a non writable one like a cd-r) and the wallet datas on a encrypted usb stick.
It's not easy to setup but neither impossible to do. The greates problem is that a livecd is way slow compared to a usb stick and you've to reconfigure your hardware every time.

Bitrated user: ercolinux.
Smalleyster
Member
**
Offline Offline

Activity: 70


I yam what I yam. - Popeye


View Profile WWW
July 11, 2011, 12:15:12 AM
 #16

Does anyone know of an answer for secure usb wallet storage?

Is the concept foolish and impossible?

The best way to secure things is to put the OS on one media (best if is a non writable one like a cd-r) and the wallet datas on a encrypted usb stick.
It's not easy to setup but neither impossible to do. The greates problem is that a livecd is way slow compared to a usb stick and you've to reconfigure your hardware every time.

I'm still mulling all this over as i attempt to get different OS's bootable on USB sticks.

Right now I think I'll have to settle for "reasonably secure" kind of like the front door any locksmith can pick.

You guys have really helped remove the wool from my eyes.

Feel like investing in a Miner?:
http://bitcointalk.org/index.php?topic=30044.msg377773#msg377773
A soup to nuts newbee system for a secure, portable USB wallet (free instructions):
NoobHowTo: http://bitcointalk.org/index.php?topic=27088.msg341387#msg341387
brendio
Hero Member
*****
Offline Offline

Activity: 518


Firstbits: 1Brendio


View Profile
July 11, 2011, 02:23:15 PM
 #17

Does anyone know of an answer for secure usb wallet storage?

Is the concept foolish and impossible?

The best way to secure things is to put the OS on one media (best if is a non writable one like a cd-r) and the wallet datas on a encrypted usb stick.
It's not easy to setup but neither impossible to do. The greates problem is that a livecd is way slow compared to a usb stick and you've to reconfigure your hardware every time.

What about a partitioned usb stick with an unencrypted partition with the bootable OS and a true crypt (or similar) encrypted partition containing the Bitcoin wallet?

bitlotto
Hero Member
*****
Offline Offline

Activity: 672


BitLotto - best odds + best payouts + cheat-proof


View Profile WWW
July 11, 2011, 02:43:26 PM
 #18

What about a partitioned usb stick with an unencrypted partition with the bootable OS and a true crypt (or similar) encrypted partition containing the Bitcoin wallet?
That would work. You just have to be sure that it's not storing swap data on the unencrypted part. Honestly if you want a live distro I'd check either puppy linux or tiny core linux. Both run completely in ram off of a CD and are very fast. Then load the wallet off of a truecrypt container. When you reboot there will be no traces! If you used puppy linux you download the extras you want and when you reboot it will ask where to save those changes. You can put that on usb stick as well! Then you don't have to re-setup every time. Just pick -strong encryption- and not weak encryption (its not actually encryption!) when asked. Anyone familiar with what their strong encryption is? If it's decent you don't even have to worry about truecrypt as your live home folder is saved in the puppy linux storage file. I guess if you keep the usb stick safe your safe.

*Next Draw Feb 1*  BitLotto: monthly raffle (0.25 BTC per ticket) Completely transparent and impossible to manipulate who wins. TOR
TOR2WEB
Donations to: 1JQdiQsjhV2uJ4Y8HFtdqteJsZhv835a8J are appreciated.
Sandoz
Member
**
Offline Offline

Activity: 85


View Profile
July 11, 2011, 06:01:30 PM
 #19

What about a partitioned usb stick with an unencrypted partition with the bootable OS and a true crypt (or similar) encrypted partition containing the Bitcoin wallet?
That would work. You just have to be sure that it's not storing swap data on the unencrypted part. Honestly if you want a live distro I'd check either puppy linux or tiny core linux. Both run completely in ram off of a CD and are very fast. Then load the wallet off of a truecrypt container. When you reboot there will be no traces! If you used puppy linux you download the extras you want and when you reboot it will ask where to save those changes. You can put that on usb stick as well! Then you don't have to re-setup every time. Just pick -strong encryption- and not weak encryption (its not actually encryption!) when asked. Anyone familiar with what their strong encryption is? If it's decent you don't even have to worry about truecrypt as your live home folder is saved in the puppy linux storage file. I guess if you keep the usb stick safe your safe.

The Problem with persistence: lend me your USB Key for a Minute and I put a keylogger on.

Tails Linux on a signed CD-R is IMHO the safest choice at the moment
SeriousWorm
Jr. Member
*
Offline Offline

Activity: 54



View Profile
July 12, 2011, 03:56:25 AM
 #20

With Truecrypt, you can encrypt the whole system partition, I guess that goes for USB sticks too. The bootloader will decrypt the whole USB partition after you supply it with the correct password.

For extra extra security, you could even have a Truecrypt file container inside the whole USB partition container, with perhaps a dummy wallet as a hidden volume, so if you are forced to open your wallet, you can just type the alternate password and then your alternate wallet with perhaps only a few coins will decrypt.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!