|
|
|
|
|
"Bitcoin: mining our own business since 2009" -- Pieter Wuille
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
canton
|
 |
January 15, 2014, 03:07:08 PM |
|
would you add wallet creation using coin Lucky you! You can already do this. 1) click on "Wallet Details" 2) flip your coin(s) and record the results as 0's and 1's in the "Enter Private Key" field 3) click "View Details" and agree to have your 0101010... "key" used as a SHA256 hash. |
|
|
|
|
pointbiz (OP)
Sr. Member
 Offline
Activity: 437
Merit: 415
1ninja
|
|
January 18, 2014, 05:41:51 AM |
|
v2.8.0 https://www.bitaddress.org/bitaddress.org-v2.8.0-SHA1-87dcf19f02ee9fb9dd3a8c787bcf52eef944aa82.html - more entropy from browser fingerprinting for PRNG seed - user can add entropy through URL hash tag - seed mouse movement as 16-bit number - whole seed pool initially filled by window.crypto.getRandomValues - added textbox as an alternative input source for entropy - address will not generate without a minimum amount of human added entropy from mouse or keyboard - discard mouse movements less than 40ms apart - visualize points of entropy collection from the mouse |
|
|
|
phelix
Legendary
Offline
Activity: 1708
Merit: 1019
|
|
January 18, 2014, 11:02:58 AM |
|
v2.8.0 https://www.bitaddress.org/bitaddress.org-v2.8.0-SHA1-87dcf19f02ee9fb9dd3a8c787bcf52eef944aa82.html - more entropy from browser fingerprinting for PRNG seed - user can add entropy through URL hash tag - seed mouse movement as 16-bit number - whole seed pool initially filled by window.crypto.getRandomValues - added textbox as an alternative input source for entropy - address will not generate without a minimum amount of human added entropy from mouse or keyboard - discard mouse movements less than 40ms apart - visualize points of entropy collection from the mouse cool |
|
|
|
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
January 19, 2014, 06:52:16 AM |
|
Any plans to fix the ssl chain to remove ssl warnings?
|
|
|
|
pointbiz (OP)
Sr. Member
Offline
Activity: 437
Merit: 415
1ninja
|
|
January 19, 2014, 07:25:03 PM |
|
Any plans to fix the ssl chain to remove ssl warnings?
Sorry. Fixed. |
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
January 19, 2014, 09:21:10 PM |
|
Any plans to fix the ssl chain to remove ssl warnings?
Sorry. Fixed. Sweet, won't scare the mugus any more |
|
|
|
fluffypony
Donator
Legendary
Offline
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
|
|
January 20, 2014, 08:43:07 AM |
|
Heya - how hard would it be to add BIP-38 for brainwallet addresses? You already have an implementation for paper wallet addresses, but adding it to brainwallets would dramatically increase security on them (imho).
|
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
January 20, 2014, 12:32:00 PM |
|
Heya - how hard would it be to add BIP-38 for brainwallet addresses? You already have an implementation for paper wallet addresses, but adding it to brainwallets would dramatically increase security on them (imho).
I dont think that's possible as there's nothing to encrypt. |
|
|
|
fluffypony
Donator
Legendary
Offline
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
|
|
January 22, 2014, 05:08:28 PM |
|
Heya - how hard would it be to add BIP-38 for brainwallet addresses? You already have an implementation for paper wallet addresses, but adding it to brainwallets would dramatically increase security on them (imho).
I dont think that's possible as there's nothing to encrypt. Huh? As far as I understand it, BIP-38 encrypts the private key? So confused right now, lol. |
|
|
|
Newar
Legendary
Offline
Activity: 1358
Merit: 1000
https://gliph.me/hUF
|
|
January 22, 2014, 06:10:10 PM |
|
Heya - how hard would it be to add BIP-38 for brainwallet addresses? You already have an implementation for paper wallet addresses, but adding it to brainwallets would dramatically increase security on them (imho).
I dont think that's possible as there's nothing to encrypt. Huh? As far as I understand it, BIP-38 encrypts the private key? So confused right now, lol. He means that with a brain wallet the private key is not saved/stored or printed anywhere. How do you encrypt something that is not there? |
|
|
|
bitpop
Legendary
Offline
Activity: 2912
Merit: 1060
|
|
January 22, 2014, 07:21:57 PM |
|
Yes in brain wallet your password is the private key essentially. Nothing to store.
In bip38 you must store an encrypted private key.
|
|
|
|
|
|
pointbiz (OP)
Sr. Member
Offline
Activity: 437
Merit: 415
1ninja
|
|
January 23, 2014, 02:43:12 AM |
|
A browser addon could be a good approach. How do you propose updates and checksums are handled? Who signs the plugin? |
|
|
|
|
moni3z
|
|
January 23, 2014, 05:45:08 AM |
|
A browser addon could be a good approach. How do you propose updates and checksums are handled? Who signs the plugin? Crypto.cat does it https://crypto.cat/ after they gave up on server provided client side due to audit failures and packaged it all in an extension. Firefox could sign your .xpi file using xpisign.py (with a certificate from a trusted issuer, such as whatever cert you have for your site) and Mozilla will check the update for malicious code and then distro the update. Chrome same thing can sign using your site's cert and openssl except Chrome autoupdates for extensions are shady. IE I have no idea, Safari no idea. Just Cinfu VM is kind of risky for trusting to generate keys, this way with an addon server doesn't matter. |
|
|
|
|
pointbiz (OP)
Sr. Member
Offline
Activity: 437
Merit: 415
1ninja
|
|
January 23, 2014, 12:24:42 PM |
|
I read that matasano article a long time ago but from what I remember it mostly does not apply to bitaddress because no external Javascript is loaded on the page. Javascript is Turing complete and bitaddress uses the same two validation techniques as all other open source software. Detached sig and checksums. |
|
|
|
|
RGBKey
|
|
January 23, 2014, 04:17:56 PM |
|
Just wanted to drop in to say thanks, I've used your site many times and I have 8 paper wallets printed from your site that I laminated and put in my room. Love it!
|
|
|
|
|
minimalB
Donator
Hero Member
Offline
Activity: 674
Merit: 522
|
|
January 28, 2014, 11:10:04 AM |
|
Using tablet... i am unable to enter any characters into textbox. Keyboard does not appear on the screen no matter what i do.
If i use some other input form on some other webpage... keyboard appears normally.
Bug?
|
|
|
|
|
|
bitcoindaddy
|
|
January 28, 2014, 02:50:07 PM |
|
v2.8.0 https://www.bitaddress.org/bitaddress.org-v2.8.0-SHA1-87dcf19f02ee9fb9dd3a8c787bcf52eef944aa82.html - more entropy from browser fingerprinting for PRNG seed - user can add entropy through URL hash tag - seed mouse movement as 16-bit number - whole seed pool initially filled by window.crypto.getRandomValues - added textbox as an alternative input source for entropy - address will not generate without a minimum amount of human added entropy from mouse or keyboard - discard mouse movements less than 40ms apart - visualize points of entropy collection from the mouse Is the increased (mouse) entropy used on all the tabs (like the paper wallet) or just on the first tab? |
|
|
|
|
|
