Bitcoin Forum
September 17, 2019, 09:41:47 AM *
News: Latest Bitcoin Core release: 0.18.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Good practice or security theatre  (Read 172 times)
samspaces
Legendary
*
Offline Offline

Activity: 1346
Merit: 1000


View Profile
September 17, 2018, 08:05:23 PM
 #1

Generating electrum seeds in the following way:

added temporary user in ubuntu
added encrypted VM in temporary user
download electrum, sever internet connection (as in, no working router/modem)
generate seeds
remove VM and all files
remove temporary user
restore internet

Opinions?
1568713307
Hero Member
*
Offline Offline

Posts: 1568713307

View Profile Personal Message (Offline)

Ignore
1568713307
Reply with quote  #2

1568713307
Report to moderator
1568713307
Hero Member
*
Offline Offline

Posts: 1568713307

View Profile Personal Message (Offline)

Ignore
1568713307
Reply with quote  #2

1568713307
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
aleksej996
Sr. Member
****
Offline Offline

Activity: 476
Merit: 328


Do not trust the government


View Profile WWW
September 17, 2018, 09:13:45 PM
Merited by Foxpup (2), LoyceV (1), HeRetiK (1)
 #2

There isn't much use of running a VM if what you are trying to protect is on the VM.
VM for security is useful when you are trying to protect the host from the potentially vulnerable software that you run on a VM.

Best course of action I would say is to install Tails on a usb drive, unplug the Internet cable and boot from the usb to run Electrum that is already installed in Tails by default.
nc50lc
Hero Member
*****
Offline Offline

Activity: 714
Merit: 528


Self-proclaimed Genius ㊙️


View Profile WWW
September 18, 2018, 04:00:58 AM
 #3

Electrum doesn't need to connect to the internet in order to create SEEDs.
Just directly create a new wallet on an offline computer with a newly installed OS, never plug it on the internet.

More extra steps can be considered paranoia.

          ███████
      ██   ▀███▀   ██
  ▄█▄  ▄▄█████████▄▄  ▄█▄
 ▄███▄██▀▀       ▀▀██▄███▄
 ██▀███    ▄▄█▄█    ███▀██
    ██      █▀▀██    ██
██  ██     █████▀    ██  ██
    ██   ▄▄█▄▄▄██    ██
 ██▄███    █▀█▀▀    ███▄██
 ▀███▀██▄▄       ▄▄██▀███▀
  ▀██  ▀▀█████████▀▀  ██▀
      ██   ▄███▄   ██
          ███████
bspin   ███████████████████████
███████████████████████████
███████████████████████████
███████▀█▀    ▀▀▀██▀███████
███████            ▄███████
███████ ▄██▄▄▄▄▄▀ ▄████████
███ ▀  ▀  ██▀▀   ▄▀  ▀  ███
███▄▄█▀  █▀     █▄▄█▀  ████
█████   █▀       ██   █████
████▄▄▄▄█▄▄▄▄▄▄▄▄█▄▄▄▄█████
███████████████████████████
███████████████████████████
  ███████████████████████
       ▄▄█████████▄▄
    ▄█████████████████▄
  ▄█████████████████████▄
 ▄█████████  █  █████████▄
▄████████        █████████▄
███████████  ██  ██████████
███████████       █████████
███████████  ███  █████████
▀████████        ▄████████▀
 ▀█████████  █  █████████▀
  ▀█████████████████████▀
    ▀█████████████████▀
       ▀▀█████████▀▀
..PLAY NOW..
samspaces
Legendary
*
Offline Offline

Activity: 1346
Merit: 1000


View Profile
September 18, 2018, 10:15:19 AM
 #4


More extra steps can be considered paranoia.

It felt like such.
bob123
Legendary
*
Offline Offline

Activity: 1022
Merit: 1506



View Profile WWW
September 19, 2018, 12:45:12 PM
 #5

Adding a temporary user doesn't bring you any benefit. Neither does the VM.
With an infected host machine, your VM is compromised too.

The general approach to safely create a seed is:
  • Download a wallet (e.g. electrum)
  • Verify the signature to make sure you are not a victim of a MITM attack
  • Boot your PC with a linux live system (without internet connection)
  • Move electrum to your live system and generate your seed
  • Back your seed up (offline, on paper)
  • Export your xpub (to create a watch-only wallet on your online-pc)
  • Delete everything (Or simply shutdown your live system; all traces get removed)

And afterwards you have to make sure to NOT import your seed into a wallet on your online-machine. This would destroy the whole purpose of creating the seed offline.
To sign transactions you either have to use an alway-offline-PC or boot into a live system (without internet connection) each time.

The easier way probably would be to use a dedicated offline machine or a hardware wallet.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!