Open Source: Man and Machine Randomness Seed Generator.

[freemunny]

Hi in light of the recent wallet hacks I made a tool that makes super secure seed phrase generation possible for everybody. It's on GitHub here's the working tool that is part of a system I'm building for myself and will freely share with the world just as before

Anyways, it should explain itself.. disconnect internet before running it but isn't really needed as it is self contained and doesn't call any internet..  Oh, the xprv and xpub keys are for a random wallet type right now so just placeholders.. use the 12 or 24 word with optional passphrase and 200 taps or some mouse wiggles.. hope it helps someone. Best!
https://nwowner.github.io/airgap-machine-entropy-bip39/

[dkbit98]

We already have iancoleman.io and few other websites that are open source and they also generate BIP-39 words with additional passphrase.
This websites exist for years, and I don't see what is the big difference from your Seed Generator.
Real difference would be to correctly use dices for f+generating entropy, and making this wallet standard.

[Vod]

We already have iancoleman.io and few other websites that are open source and they also generate BIP-39 words with additional passphrase.
This websites exist for years, and I don't see what is the big difference from your Seed Generator.
Real difference would be to correctly use dices for f+generating entropy, and making this wallet standard.

Can't these websites store all these generations inside a database and then use them later when they detect a balance?

[[btc]]

Can't these websites store all these generations inside a database and then use them later when they detect a balance?

Yes. Avoid!

The fact that this page the OP has made has no way of downloading this generator as a standalone HTML file, should be seen as a very large red flag. He even put 'github' in the URL as an attempt to have this site viewed as some sort of technical-savvy cryptographic suite.

"Pure Client Execution." - lol right.

[ABCbits]

Can't these websites store all these generations inside a database and then use them later when they detect a balance?

That's possible. But from quick check with browser network dev tool, there's no additional network traffic after you load the page.

Although based on recent exploited coldcard vulnerability, there's always possibility of weak or backdoor on key generation or entropy processing, when OP doesn't even publish the source code.

[Yamane_Keto]

I would prefer generating entropy via QRNG rather than relying on the local machine's hardware entropy. Your tool won't be more secure than open-source hardware wallets, but it could be a good option for someone needing a temporary address.

[Vod]

That's possible. But from quick check with browser network dev tool, there's no additional network traffic after you load the page.

There doesn't have to be network traffic right when the info is captured.  The app can save it in a text file and send everything later in one burst. 

[TheButterZone]

Can't these websites store all these generations inside a database and then use them later when they detect a balance?

Yes. Avoid!

The fact that this page the OP has made has no way of downloading this generator as a standalone HTML file, should be seen as a very large red flag. He even put 'github' in the URL as an attempt to have this site viewed as some sort of technical-savvy cryptographic suite.

"Pure Client Execution." - lol right.

No... GitHub put GitHub in the URL - that's how it deploys your HTML app as a GitHub Page: https://github.com/nwowner/airgap-machine-entropy-bip39/blob/main/index.html is OP's source. As of now, the only other file in that repo is the readme.

See also thebutterzone.github.io = https://github.com/thebutterzone/thebutterzone.github.io (I didn't make mine a subdirectory page like OP's app, OP's main GitHub page deployment is nmowner.github.io = https://github.com/nwowner/nwowner.github.io)

What I will say though, is the entropy generation from mouse movement seems way too quick. Just a few seconds vs around 25 seconds with bitaddress.org

It doesn't matter that the site doesn't store data (which can be confirmed by reading the HTML source & also looking at your browser's option to clear cookies & site data) if the entropy is extremely low?