Define reasonable. What is reasonable security for one person with enough bitcoin on his phone to pay for a night on the town is going to be different than reasonable security for a cash mule trying to stay alive and deliver goods to the Zeta's.
I think we need to talk about our target audience. 
Topic: [ANN] BitcoinSpinner - page 6. (Read 45071 times)
maybe a dumb quesiton:
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
Define reasonable. What is reasonable security for one person with enough bitcoin on his phone to pay for a night on the town is going to be different than reasonable security for a cash mule trying to stay alive and deliver goods to the Zeta's.
maybe a dumb quesiton:
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
I don't think so, by being 6-digit numeric password there are few combinations to try. I guess it could be bruteforced in two months max.
one could bruteforce that with 1.000.000 phones in 5 seconds
I had the same question.. But everyone seemed to misunderstand what I was asking..
I would like to use my own wallet and private keys in B spinner..
Or be able to use the backup spinner provides anywhere else..
And how..
I would like to use my own wallet and private keys in B spinner..
Or be able to use the backup spinner provides anywhere else..
And how..
As far as I remember you have to choose Sipa format when importing into blockchain.info.
At MyWallet, no option to select as SIPA or base58. But both base58 and SIPA are listed on the features list. So I guess I need to convert base58 to SIPA.
This seems relevent:
https://bitcointalk.org/index.php?topic=3638.0;all
But perhaps I should craft a wallet backup file:
https://blockchain.info/wallet/wallet-format
No rush Jan for help. I'll have to look into this more at a later date. It sounds more like a MyWallet side thing. I have to say, it's not the first time a change in Bitcoin format has caught me out, which is a bit worrying for longevity. It's a good learning experience though. The guy I'm to pay seems very friendly and so forth so that's fine.
[/quote]
Still can't figure this out...
anyone else care to try it? (export a private key and import into blockchain.info)
maybe a dumb quesiton:
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
I don't think so, by being 6-digit numeric password there are few combinations to try. I guess it could be bruteforced in two months max.
maybe a dumb quesiton:
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
with very expensive bcrypt hashing with added salts, could a 6 digit pin maybe provide reasonable protection against bruteforcing?
so it would maybe take 5 seconds on a phone to calculate the correct decryption key, which is thrown away as soon as the app is closed.
BitcoinSpiner has just been updated to version 0.7.0b. You can find the latest version on Google Play or as a direct download for Kindle users.
New Features:
The PIN protection feature allows you to set a 6 digit PIN which must be entered whenever:
It is NOT used for encrypting the seed from which your private keys are generated. For that purpose a 6 digit PIN is useless. The PIN is there to protect your from someone who picks up your device and sends your funds elsewhere without you noticing.
The PIN protection feature is optional, but encouraged.
Note: Before PIN protecting your wallet you should make a backup of your wallet (In fact you should always do that). If you ever forget your PIN, you can uninstall and re-install BitcoinSpinner and restore your backup.
Enjoy
New Features:
- Added the long awaited PIN protection.
- Added Czech & Russian translation (Kudos to Slush)
- Added the current MtGox BTC exchange rate for the chosen currency to the title bar
- Now displaying BTC balances with full 8 digit precision (before it was with 5 digits)
- Extended Finish translation
The PIN protection feature allows you to set a 6 digit PIN which must be entered whenever:
- Sending bitcoins
- Backing up your wallet
- Exporting your private key
- Modifying your PIN
It is NOT used for encrypting the seed from which your private keys are generated. For that purpose a 6 digit PIN is useless. The PIN is there to protect your from someone who picks up your device and sends your funds elsewhere without you noticing.
The PIN protection feature is optional, but encouraged.
Note: Before PIN protecting your wallet you should make a backup of your wallet (In fact you should always do that). If you ever forget your PIN, you can uninstall and re-install BitcoinSpinner and restore your backup.
Enjoy
As far as I remember you have to choose Sipa format when importing into blockchain.info.
[/quote]
At MyWallet, no option to select as SIPA or base58. But both base58 and SIPA are listed on the features list. So I guess I need to convert base58 to SIPA.
This seems relevent:
https://bitcointalk.org/index.php?topic=3638.0;all
But perhaps I should craft a wallet backup file:
https://blockchain.info/wallet/wallet-format
No rush Jan for help. I'll have to look into this more at a later date. It sounds more like a MyWallet side thing. I have to say, it's not the first time a change in Bitcoin format has caught me out, which is a bit worrying for longevity. It's a good learning experience though. The guy I'm to pay seems very friendly and so forth so that's fine.
Quick and easy question to save me some time trying..
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Short answer:
You can't. BitcoinSpinner's "wallet" isn't designed that way. The one key it gives is all you can have.
Hmmmm..
So when I uninstall the program, and get a new wallet.. its not a new wallet ?
Because I've been doing this by restoring through QR code I've printed out..
Please explain further..
I am on the move, so short answer. When you uninstall/install you get a brand new wallet. More details here:
https://bitcointalksearch.org/topic/m.1024102
Quick and easy question to save me some time trying..
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Short answer:
You can't. BitcoinSpinner's "wallet" isn't designed that way. The one key it gives is all you can have.
Hmmmm..
So when I uninstall the program, and get a new wallet.. its not a new wallet ?
Because I've been doing this by restoring through QR code I've printed out..
Please explain further..
Quick and easy question to save me some time trying..
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Short answer:
You can't. BitcoinSpinner's "wallet" isn't designed that way. The one key it gives is all you can have.
Quick and easy question to save me some time trying..
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
Bitaddress.org can make an addy and a private key..
How would I go about making a wallet from bitaddress.org and importing it into spinner ?
obviously I have some ideas on this.. but would like to know the surefire way..
Thanks
I made a backup of the private key and it's been given in the format:
But this fails when trying to import into online wallets like at Blockchain:
Can it be reformatted to work?
Code:
bsb:(~44 digit private key here)?net=0
But this fails when trying to import into online wallets like at Blockchain:
Quote
Error importing private key: Unknown Key Format (key here)
Can it be reformatted to work?
No, that's not your private key. You did a backup wallet, which gives you the bsb code. You would use a QR code generator with that code and be able to use bitcoin spinner to restore your wallet.
To export your private key:
Settings > Advanced > Export Private Key
Thanks. I used the backup to restore into Bitcoinspinner and it seemed to work even though I have no WiFi or 3G connectivity.
So then I exported the key to the clipboard and wrote that directly into a txt file.
I then copied that into the blockchain.info wallet but I get "Unknown key format".
I'm using v0.6.0b but I can't upgrade it as I'm heavily firewalled.
I made a backup of the private key and it's been given in the format:
But this fails when trying to import into online wallets like at Blockchain:
Can it be reformatted to work?
Code:
bsb:(~44 digit private key here)?net=0
But this fails when trying to import into online wallets like at Blockchain:
Quote
Error importing private key: Unknown Key Format (key here)
Can it be reformatted to work?
No, that's not your private key. You did a backup wallet, which gives you the bsb code. You would use a QR code generator with that code and be able to use bitcoin spinner to restore your wallet.
To export your private key:
Settings > Advanced > Export Private Key
Thanks. I used the backup to restore into Bitcoinspinner and it seemed to work even though I have no WiFi or 3G connectivity.
So then I exported the key to the clipboard and wrote that directly into a txt file.
I then copied that into the blockchain.info wallet but I get "Unknown key format".
I'm using v0.6.0b but I can't upgrade it as I'm heavily firewalled.
I made a backup of the private key and it's been given in the format:
But this fails when trying to import into online wallets like at Blockchain:
Can it be reformatted to work?
Code:
bsb:(~44 digit private key here)?net=0
But this fails when trying to import into online wallets like at Blockchain:
Quote
Error importing private key: Unknown Key Format (key here)
Can it be reformatted to work?
Server down for scheduled maintenance Sunday July 1 8 PM PST. Maintenance window expected to be 3 hours.
In that window you will not be able to use BitcoinSpinner for transactions. Note that with BitcoinSpinner you can always export your Bitcoin private key regardless of server availability.
In that window you will not be able to use BitcoinSpinner for transactions. Note that with BitcoinSpinner you can always export your Bitcoin private key regardless of server availability.
ok, sorry for spreading fud as this is most likely a bug in my android phone and persists for many other sites since at least 6 months:
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
my phone is rooted, just in case that helps. the problem was there before rooting it.
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
Quote
This certificate is not from a trusted authority.
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
my phone is rooted, just in case that helps. the problem was there before rooting it.
This is a known issue and is caused by the CA not being included in android. To fix it we will be switching to another CA, but for now please disregard the warning - despite the CA not being in android your data is still secure.
You have a link? Why is this CA not included? In Opera it works.
The phone is rooted so I should be able to import those certificates but I posted here to raise awareness as I don't know how many are affected. It scares people out of using bitcoin when they apparently have some IP poisoning going on on their device (or whatever their guess is).
ok, sorry for spreading fud as this is most likely a bug in my android phone and persists for many other sites since at least 6 months:
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
my phone is rooted, just in case that helps. the problem was there before rooting it.
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
Quote
This certificate is not from a trusted authority.
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
my phone is rooted, just in case that helps. the problem was there before rooting it.
This is a known issue and is caused by the CA not being included in android. To fix it we will be switching to another CA, but for now please disregard the warning - despite the CA not being in android your data is still secure.
You have a link? Why is this CA not included? In Opera it works.
ok, sorry for spreading fud as this is most likely a bug in my android phone and persists for many other sites since at least 6 months:
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
my phone is rooted, just in case that helps. the problem was there before rooting it.
bitinstant as some other bitcoin related websites show an illegal certificate warning on my motorola defy.
as bitinstant is affected at least on my device, they might be interested in resolving the source of this scary warning.
Quote
This certificate is not from a trusted authority.
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
Issued to:
CN: RapidSSL CA
Org: GeoTrust, Inc.
Issued by:
CN: GeoTrust Global CA
Org: GeoTrust Inc.
Validity:
issued: 19/2/2010
Expires: 18/2/2020
my phone is rooted, just in case that helps. the problem was there before rooting it.
This is a known issue and is caused by the CA not being included in android. To fix it we will be switching to another CA, but for now please disregard the warning - despite the CA not being in android your data is still secure.
You have a link? Why is this CA not included? In Opera it works.
Jump to: