Bitcoin Forum
May 22, 2024, 06:35:26 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: how secure is double encryption of blockchain?  (Read 1942 times)
cp1
Hero Member
*****
Offline Offline

Activity: 616
Merit: 500


Stop using branwallets


View Profile
June 04, 2014, 05:48:38 PM
 #21

Just use offline storage / signing.

Guide to armory offline install on USB key:  https://bitcointalk.org/index.php?topic=241730.0
redwhitenblue
Member
**
Offline Offline

Activity: 104
Merit: 10


View Profile
June 05, 2014, 01:37:35 AM
 #22

You have two possible vulnerabilities:

1) your wallet is set to backup to a dropbox/email that can be hacked and your wallet is backed up prior to setting your very long password. You should note that your email account can potentially have it's password reset with "security/secret" questions that the answers to are possibly public.

This attack would happen as follows:
a) you create a wallet with a weak password (password = pw123 - can crack instantly)
b) you set your wallet to backup to a dropbox that can easily be hacked
c) you create a BTC address (BTC-1)
d) the private key to BTC address (BTC-1) is backed up to the above dropbox account
e) you change your wallet password to a 30 character password (password = pw30chr - cant crack)
f) you change your wallet sending password to a 40 character password (password = pw40chr - can't crack)
g) you create a 2nd BTC address (BTC-2)
h) the private key to BTC addresses (BTC-1) and (BTC-2) are backed up to a dropbox that can easily be hacked (your wallet password and sending password are still in tact).
i) you send 50% BTC to (BTC-1) and 50% of your BTC to (BTC-2)
j) attacker hacks your dropbox account and downloads both wallet backups
k) attacker easily cracks the password from backup from step "d"
l) attacker steals BTC from address (BTC-1)

This attack can be prevented by archiving and then deleting any addresses that are associated with a wallet prior to setting strong passwords, resulting in any backups of your wallet only containing addresses with strong passwords that cannot be cracked and any backups that have passwords that can be cracked only have addresses with no unspent BTc

2) the 2nd attack would simply be for an attacked to install a keylogger to your computer and simply wait for you to log into your wallet and send a small amount of BTC. Attacker now how both your primary password and sending password.

bitcoinforhelp
Full Member
***
Offline Offline

Activity: 154
Merit: 100


View Profile
June 05, 2014, 01:38:23 AM
 #23

nothing is 100% safe, weakest point is often human
so its not more safe than any other webservice
Bit_Happy
Legendary
*
Offline Offline

Activity: 2114
Merit: 1040


A Great Time to Start Something!


View Profile
June 05, 2014, 02:30:51 AM
 #24

Threads like this should be stickied, so more people learn about security..
Someday I will need the info in this thread. The best thing about not having many BTC is not having to be excessively concerned with triple layers of security.

jc01480
Hero Member
*****
Offline Offline

Activity: 854
Merit: 500


Nope..


View Profile
June 05, 2014, 03:54:18 AM
 #25

I'll hold it for 30 days free.  After that other arrangements can be made to help you secure them.  A moving target is hard to hit.
ShakyhandsBTCer
Sr. Member
****
Offline Offline

Activity: 448
Merit: 250


It's Money 2.0| It’s gold for nerds | It's Bitcoin


View Profile
June 14, 2014, 04:17:14 AM
 #26

I'll hold it for 30 days free.  After that other arrangements can be made to help you secure them.  A moving target is hard to hit.

I am not sure if you are serious or not but this would be extremely risky for the OP.
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!