Bitcoin Forum
December 07, 2016, 10:32:11 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 [36] 37 38 39 »
  Print  
Author Topic: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key  (Read 110065 times)
TheButterZone
Legendary
*
Offline Offline

Activity: 1624


Nemo me impune lacessit


View Profile WWW
September 07, 2015, 11:25:01 PM
 #701

Hi guys.

What is the best method of sweeping the paper wallet?

I don't want to use blockchains android app, what other ways can I withdraw from my bitaddress paper?

https://play.google.com/store/apps/details?id=com.mycelium.wallet&hl=en
https://play.google.com/store/apps/details?id=de.schildbach.wallet

ΜΟΛΩΝ ΛΑΒΕ! I sell stuff for BTC here here and here | Skirt & Kilts & Violin For Sale | Voiceover for BTC | Copy editing for BTC | THE Bitcoin Sound is here.
gpg_identity=http://pgp.thebutterzone.com | WoT feedback here & eBay feedback here | Buy BTC in San Diego, CA, or worldwide! | Get paid for taking surveys!
Change my name! "I am __ Satoshi __." | PayPal: Bitcoinese for "FU, I'm getting a chargeback up to 365 days later!" | Bitcoin voice chat
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481149931
Hero Member
*
Offline Offline

Posts: 1481149931

View Profile Personal Message (Offline)

Ignore
1481149931
Reply with quote  #2

1481149931
Report to moderator
OBAViJEST
Sr. Member
****
Offline Offline

Activity: 350



View Profile
September 07, 2015, 11:36:04 PM
 #702

Hi guys.

What is the best method of sweeping the paper wallet?

I don't want to use blockchains android app, what other ways can I withdraw from my bitaddress paper?

https://play.google.com/store/apps/details?id=com.mycelium.wallet&hl=en
https://play.google.com/store/apps/details?id=de.schildbach.wallet

I've used mycelium a looong time ago, how is it nowadays? Which do you recommend?

WBF1
Sr. Member
****
Offline Offline

Activity: 361


View Profile
September 07, 2015, 11:37:28 PM
 #703

Hi guys.

What is the best method of sweeping the paper wallet?

I don't want to use blockchains android app, what other ways can I withdraw from my bitaddress paper?

https://play.google.com/store/apps/details?id=com.mycelium.wallet&hl=en
https://play.google.com/store/apps/details?id=de.schildbach.wallet

I've used mycelium a looong time ago, how is it nowadays? Which do you recommend?

Schildbach "bitcoin wallet" is nice because it connects directly to the bitcoin network.

Luckypool.co is a new Bitcoin mine that supports BIP109, the Bitcoin Classic block size limit increase proposal. We support solo mining with an innovative fee-sharing payout structure. Come visit us at https://luckypool.co
yuyu123
Jr. Member
*
Offline Offline

Activity: 34


View Profile
September 15, 2015, 01:08:21 AM
 #704

The sha-256 of ZIP file downloaded from here https://www.bitaddress.org/bitaddress.org-v2.9.11-SHA256-40376eddc790a63d9afcfb72c0a45002827da965f3bfe6ba8c330e697bf188b2.html is not equal to what indicated for this version here https://github.com/pointbiz/bitaddress.org/blob/master/CHANGELOG.txt
why?
aes1
Member
**
Offline Offline

Activity: 66



View Profile
September 15, 2015, 07:12:26 AM
 #705

The shasum is not calculated from the zip, but the file bitaddress.org.html contained inside.

I wondered the same thing and found the answer here: http://bitcoin.stackexchange.com/questions/9112/how-can-i-verify-the-the-pgp-signature-of-bitaddress-org
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 07:15:39 PM
 #706

v3.0.0
https://www.bitaddress.org/bitaddress.org-v3.0.0-SHA256-4781574ca09c07f65d1966619f37a762aac6decd8732cacc85b2f2f972f82751.html
 - add session log icon that shows all the key pairs generated during the current session.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
dooglus
Legendary
*
Offline Offline

Activity: 2002



View Profile
October 25, 2015, 08:02:56 PM
 #707

v3.0.0
https://www.bitaddress.org/bitaddress.org-v3.0.0-SHA256-4781574ca09c07f65d1966619f37a762aac6decd8732cacc85b2f2f972f82751.html
 - add session log icon that shows all the key pairs generated during the current session.

While the log does appear to record the address I make using B6 (99 dice), it only starts recording once entropy collection is complete. Any I generate before that are lost.

I don't see any way of encrypting the private keys I generate using B6 (99 dice), and don't feel safe storing unencrypted private keys. Could the option of encrypting paper wallets be extended to the 'wallet details' tab as well, for people who don't want to trust the in-browser RNG and prefer to provide their own by rolling dice?

pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 09:03:08 PM
 #708

Could you paste your pgp signature here at bitcointalk instead? Copy paste it into the opening message for example. It doesn't make much sense get it from the same website which authenticity I am trying to verify, specially over plain http.

Yes, done.

Thank you. sorry I didn't suggest this at first, but in adition to posting the key here (which greatly improves security) you could also upload it to a key server and update the tutorial to retrieve the key from a key server instead of from bitaddress.org.

It is fairly simple to do:
https://www.gnupg.org/gph/en/manual/x457.html

Anyway. Great work, been using it even more frequently as of lately. It is my favourite way of generating addresses as I can manually enter randomness, while many other wallets and address generators rely simply on RNGs which have been attacked repeatedly. All has been great using Bitaddress+mycelium.

I have another feature request if you're up to it:
in the wallet details tab, if the entered private key is bip38 encrypted, you could show the encrypted private key in HEX format too.

Either way, big thanks and keep up.

I plan to improve the instructions for verifying the signature.

Regarding your request "show the encrypted private key in HEX format too". Can you describe the use case?

For example a use case for "Base 64" is to hide the private key data in plain sight. There might be circumstances
1) using an insecure channel
2) holding media that can be confiscated
where data could be hidden in base 64 noise. An example is putting the private key base64 encoded data into a JPEG. Then you just have to remember the beginning byte and ending byte of the private key data within the JPEG. There is plausible deniability at play here because you are not using the Bitcoin specific base 58 encoding.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 09:18:27 PM
 #709

20 btc reward for anyone that can assist me here;

I created an offline BTC wallet using a saved version of bitaddress.org html (version 2.76) on an offline macbook air using google chrome version 32.0.1700.77

I did the randomization it generated a new address I saved the public address and sent some coins to that public address, in the  next minute or so I hit "generate new address" by accident and it created a new wallet. I didn't save the private address but already sent the coins to that wallet. Is there any way to retrieve the previous address data? Is it saved in RAM anywhere or perhaps in the java?

Whoever can assist me in this will have 20 btc shipped to them immediately.

Regards



I do not know of anything you can do.

To prevent this happening to others in the future versions 3.0.0+ now have a session log icon that can be pressed to view all the keypairs generated during the current session.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 09:48:13 PM
 #710

Hi guys.

What is the best method of sweeping the paper wallet?

I don't want to use blockchains android app, what other ways can I withdraw from my bitaddress paper?

I use the  Android "Bitcoin Wallet" by "Bitcoin Wallet developers":
https://play.google.com/store/apps/details?id=de.schildbach.wallet

I'm going to try Mycelium Android app because you can spend part of a paper wallet balance without sweeping it. This has the security risk that your private key is exposed temporarily in memory of your Android and then you are leaving a balance connected to that private key. But I think that's an acceptable risk for low amounts.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 09:49:40 PM
 #711

v3.0.0
https://www.bitaddress.org/bitaddress.org-v3.0.0-SHA256-4781574ca09c07f65d1966619f37a762aac6decd8732cacc85b2f2f972f82751.html
 - add session log icon that shows all the key pairs generated during the current session.

While the log does appear to record the address I make using B6 (99 dice), it only starts recording once entropy collection is complete. Any I generate before that are lost.

I don't see any way of encrypting the private keys I generate using B6 (99 dice), and don't feel safe storing unencrypted private keys. Could the option of encrypting paper wallets be extended to the 'wallet details' tab as well, for people who don't want to trust the in-browser RNG and prefer to provide their own by rolling dice?

I have a fix coming for the issue above regarding when the recording of the session log begins. Thanks for the feedback now and over the past years!

I will add BIP38 encryption on the wallet details tabs. It will be a checkbox beside the View Details button. When checked it will make the passphrase visible so you can then encrypt your key.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 11:21:26 PM
 #712

v3.0.1
https://www.bitaddress.org/bitaddress.org-v3.0.1-SHA256-24d2d7f047a9aa217bf69f3ef344c972c151b1e3f6a8aa86ceb9a3be62884bc0.html
- fix for session log not keeping track of keys from "Wallet Details" tab before entropy is collected.
Thanks dooglus.


Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
October 25, 2015, 11:28:39 PM
 #713

The next two features I'm planning to add are:
1) improve instructions for verifying signature (.sig) vs checking the SHA256 hash.
I'm going to look at Canton Becker's bitcoinpaperwallet.com for inspiration. He's got a good tutorial for doing this.

2) wallet details tab bip38 encrypt:
https://github.com/pointbiz/bitaddress.org/issues/44

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
minimalB
Donator
Hero Member
*
Offline Offline

Activity: 627


View Profile
October 25, 2015, 11:30:55 PM
 #714

I will add BIP38 encryption on the wallet details tabs. It will be a checkbox beside the View Details button. When checked it will make the passphrase visible so you can then encrypt your key.

Great! I've been waiting for this feature patiently. Thank you for continuously improving bitaddress! I guess it's donation time again : )
spazzdla
Legendary
*
Offline Offline

Activity: 1008


View Profile
November 04, 2015, 10:28:03 PM
 #715

How useless is a wallet when that random numbers warning comes up?
pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
November 05, 2015, 03:08:50 AM
 #716

How useless is a wallet when that random numbers warning comes up?

TL;DR The uniqueness gathered from your browser and the mouse movements should be enough "randomness"  for a secure wallet.

If you take the about 60 bits from browser uniqueness + current date/time and 1 bit for every mouse point (each point is worth more than one bit) and the site collects at least 200 mouse points then you have more than 256 bits (the length of a Bitcoin Private Key). This is the seed for the PRNG. If the PRNG has a flaw you are at risk. This is why the site warns people to use a browser that supports getRandomValues (OS level entropy) because if you have that then the site XORs the PRNG output with the getRandomValues output to protect you from flaws in either of those random generators.

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
spazzdla
Legendary
*
Offline Offline

Activity: 1008


View Profile
November 05, 2015, 03:36:16 AM
 #717

How useless is a wallet when that random numbers warning comes up?

TL;DR The uniqueness gathered from your browser and the mouse movements should be enough "randomness"  for a secure wallet.

If you take the about 60 bits from browser uniqueness + current date/time and 1 bit for every mouse point (each point is worth more than one bit) and the site collects at least 200 mouse points then you have more than 256 bits (the length of a Bitcoin Private Key). This is the seed for the PRNG. If the PRNG has a flaw you are at risk. This is why the site warns people to use a browser that supports getRandomValues (OS level entropy) because if you have that then the site XORs the PRNG output with the getRandomValues output to protect you from flaws in either of those random generators.

Sweet thanks for the explanation.
birr
Hero Member
*****
Offline Offline

Activity: 592


View Profile
November 05, 2015, 09:37:17 AM
 #718

Looking for which browsers support getRandomValues, I found
http://caniuse.com/#feat=getrandomvalues
Does anyone here know whether dolphin browser supports getRandomValues?  Didn't find any information on it.
calkob
Hero Member
*****
Offline Offline

Activity: 504


View Profile
November 19, 2015, 04:03:15 PM
 #719

Great resource PointBiz, thanks very much.  Small donantion left.  Grin

Quick question, does anyone know if Blockchain.info store the private key from a watch only address once you use on their site to authorize a payment?  i used the private key created on Bitaddress the other day to do such a thing.

again, many thanks

pointbiz
Sr. Member
****
Offline Offline

Activity: 426

1ninja


View Profile
November 21, 2015, 01:47:39 AM
 #720

Great resource PointBiz, thanks very much.  Small donantion left.  Grin

Quick question, does anyone know if Blockchain.info store the private key from a watch only address once you use on their site to authorize a payment?  i used the private key created on Bitaddress the other day to do such a thing.

again, many thanks

Thanks!

Coder of: https://www.bitaddress.org      Thread
Open Source JavaScript Client-Side Bitcoin Wallet Generator
Donations: 1NiNja1bUmhSoTXozBRBEtR8LeF9TGbZBN   PGP
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 [36] 37 38 39 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!