Bitcoin Forum
May 11, 2024, 08:45:06 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: Linux VM Secure Wallet  (Read 2063 times)
drgr33n
Sr. Member
****
Offline Offline

Activity: 308
Merit: 251



View Profile
August 17, 2011, 01:16:48 PM
 #21

LinuxCoin works in under 2gb. I use 4gb w/ 2gb persistence file for when I want persistence. It also works great in transient mode for when i don't want to leave a trail.
No idea if others agree - but I'd certainly not use a distro that isn't generic.
The problem with using ANY distro targeted at bitcoin is that something could get in there to take advantage of that.
It certainly creates the possibility of a very LARGE financial gain for anyone unethical enough to attempt such a nefarious act.

My mining rig uses Xubuntu 11.04 and I've documented a list of commands to create it/update it to running cgminer - and the reason I specifically did this is so that it starts with a generic distro (built from the Live CD) and thus I am not a suspect in possibly producing something that could have a backdoor or wallet capture issue ... and no one needs to trust me to use it - they only need trust any software I've said needs installing.

In case anyone is thinking it: the reverse is not worse.
i.e. being worried about a backdoor or wallet capture in the generic distro: since if that is there, any bitcoin targeted distro made from it will also have the same problem (no one building a bitcoin distro is going to search all the software installed on it and guarantee to find issues and remove them)
If anyone finds such it would certainly be removed upstream as soon as they were told about it.

Unencrypted wallet.dat files are the bane of bitcoin (in my opinion), and thus any decision I make about a software distro on a machine that may contain one is going to not choose a distro with bitcoin in it's design target - only as add on software (though for me it won't ever include windows either)

LinuxCoin doesn't have a wallet stealer inside Cheesy There have been 10000's of downloads and no ones complained about their wallet being stolen from a linuxcoin install yet. Also LinuxCoin is like  Xubuntu on roids Cheesy It has added security features you just wouldn't find in a generic OS.

I have had a quick look at the page for Linux Coin, and I may just be missing it, but can't see the added security features. Could you point me in the right direction or elaborate on them for me?

Grsecurity / PaX hardened kernel giving linuxcoin Role-Based Access Control.
Tor / privoxy preinstalled
sandboxed applications ie; apache  (Coming with next update) If an attacker gains access to your system via the http server which is running for the munin bits and bobs It's jailed.
Optional wallet encryption (Next update depreciates the scripts for the in house wallet encryption.)
bitcoin client has been compiled with hardening cflags.
The system RAM is overwritten when LinuxCoin is being shutdown or when the boot medium is physically removed. Handy if your using linuxcoin not on your personal computer. coming with next update.

More features to be announced. Put this all together with an encrypted home-rw snapshot and you've got a very secure system to store your coins. I realize that the trust has gone with a lot of people but I'm not in it for a profit and if I was going to include a wallet stealer I would of done it when bitcoins were worth around the £20 mark lol


Sounds like a nice set of features and features to come.

If I wasn't already happy with my own generic setup I may have considered this distro.

Keep up the good work, we need more security concious people developing wares for Bitcoin.

JG

Nice to see you changed your way of thinking Wink also working on compressed persistence so you can store even more data within a smaller space. 
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!