Pages:
Author

Topic: [ANNOUNCE] Electrum - Lightweight Bitcoin Client - page 14. (Read 274569 times)

hero member
Activity: 546
Merit: 500
LOL what you looking at?
What does the server see? I mean in case someone looks at the server data can he see all the addresses that are connected to one wallet?

Yes.

Quote
Though i guess the label sync plugin should be able to provide the same data, even for more than one wallet when using the same plugin website login.

I believe that data is encrypted before being sent to the server.

edit: see  https://bitcointalksearch.org/topic/online-label-syncing-plugin-in-electrum-17-154144

Oh... doesnt sound good... I mean who knows what those data could be useful for if such a electrum server gets hacked or seized. And the server operator could see it all the time. The same goes for the plugin server.

So its possible to identify the complete wallet, addresses, transactions and property of a certain user only by finding one hint. I dont like thinking about this and im a bit angry why i didnt think about this earlier.

I thought it would be better to create a new wallet and a new plugin account with new email sometimes. But now i think using electrum is a risk in itself. You need to trust every server provider (when using auto connect, which is the standard) and you need to hope the server nor the plugin server gets hacked. Sounds a bit risky. The coins cant be stolen but it sounds still too much for me.

You can run your own server if that is bothering you so much.

You mean, an Electrum server?
hero member
Activity: 672
Merit: 500
Dowloading bootstrap.dat... no thanks. Welcome BTC wallet at last!
legendary
Activity: 1246
Merit: 1029
I just didn't know till today that ThomasV created Electrum client. Anyways I use only Electrum. And I just love it. THANKS ThomasV for creating Electrum.
newbie
Activity: 32
Merit: 0
What does the server see? I mean in case someone looks at the server data can he see all the addresses that are connected to one wallet?

Yes.

Quote
Though i guess the label sync plugin should be able to provide the same data, even for more than one wallet when using the same plugin website login.

I believe that data is encrypted before being sent to the server.

edit: see  https://bitcointalksearch.org/topic/online-label-syncing-plugin-in-electrum-17-154144

Oh... doesnt sound good... I mean who knows what those data could be useful for if such a electrum server gets hacked or seized. And the server operator could see it all the time. The same goes for the plugin server.

So its possible to identify the complete wallet, addresses, transactions and property of a certain user only by finding one hint. I dont like thinking about this and im a bit angry why i didnt think about this earlier.

I thought it would be better to create a new wallet and a new plugin account with new email sometimes. But now i think using electrum is a risk in itself. You need to trust every server provider (when using auto connect, which is the standard) and you need to hope the server nor the plugin server gets hacked. Sounds a bit risky. The coins cant be stolen but it sounds still too much for me.

You can run your own server if that is bothering you so much.
legendary
Activity: 2674
Merit: 1083
Legendary Escrow Service - Tip Jar in Profile
What does the server see? I mean in case someone looks at the server data can he see all the addresses that are connected to one wallet?

Yes.

Quote
Though i guess the label sync plugin should be able to provide the same data, even for more than one wallet when using the same plugin website login.

I believe that data is encrypted before being sent to the server.

edit: see  https://bitcointalksearch.org/topic/online-label-syncing-plugin-in-electrum-17-154144

Oh... doesnt sound good... I mean who knows what those data could be useful for if such a electrum server gets hacked or seized. And the server operator could see it all the time. The same goes for the plugin server.

So its possible to identify the complete wallet, addresses, transactions and property of a certain user only by finding one hint. I dont like thinking about this and im a bit angry why i didnt think about this earlier.

I thought it would be better to create a new wallet and a new plugin account with new email sometimes. But now i think using electrum is a risk in itself. You need to trust every server provider (when using auto connect, which is the standard) and you need to hope the server nor the plugin server gets hacked. Sounds a bit risky. The coins cant be stolen but it sounds still too much for me.
legendary
Activity: 3710
Merit: 1586
What does the server see? I mean in case someone looks at the server data can he see all the addresses that are connected to one wallet?

Yes.

Quote
Though i guess the label sync plugin should be able to provide the same data, even for more than one wallet when using the same plugin website login.

I believe that data is encrypted before being sent to the server.

edit: see  https://bitcointalksearch.org/topic/online-label-syncing-plugin-in-electrum-17-154144
legendary
Activity: 2674
Merit: 1083
Legendary Escrow Service - Tip Jar in Profile
What does the server see? I mean in case someone looks at the server data can he see all the addresses that are connected to one wallet? Though i guess the label sync plugin should be able to provide the same data, even for more than one wallet when using the same plugin website login.
full member
Activity: 144
Merit: 100
i need to sign a message and having difficulty- maybe some kind person could refresh my memory
the address i want to sign a message from is in my watching only wallet (1.9.6)- and when i right click there is no 'sign message ' in the context menu. the offline wallet has this option but the address is not listed . How do i proceed? do i need to get the address into the offline wallet? and how do i do that?

Thanks a lot

You will need to use the offline wallet because that has the private keys. You will need to coax it to generate the addresses you need. See this post for info on how to do that:

https://bitcointalksearch.org/topic/m.3690179


thanks
figured the easiest way for just put the offline pc online to sync up the wallet for 10 secs and the disconnect again- hey presto!
legendary
Activity: 3710
Merit: 1586
i need to sign a message and having difficulty- maybe some kind person could refresh my memory
the address i want to sign a message from is in my watching only wallet (1.9.6)- and when i right click there is no 'sign message ' in the context menu. the offline wallet has this option but the address is not listed . How do i proceed? do i need to get the address into the offline wallet? and how do i do that?

Thanks a lot

You will need to use the offline wallet because that has the private keys. You will need to coax it to generate the addresses you need. See this post for info on how to do that:

https://bitcointalksearch.org/topic/m.3690179
full member
Activity: 144
Merit: 100
i need to sign a message and having difficulty- maybe some kind person could refresh my memory
the address i want to sign a message from is in my watching only wallet (1.9.6)- and when i right click there is no 'sign message ' in the context menu. the offline wallet has this option but the address is not listed . How do i proceed? do i need to get the address into the offline wallet? and how do i do that?

Thanks a lot
sr. member
Activity: 441
Merit: 250
One of the electrum dependencies is a python package called slowaes. Even though it's included with electrum when you do a pip install pip fetches it from pypi.python.org. slowaes' latest version is a pre-release version. In older versions of pip it would install pre release versions without complaint. Now you have to tell it do that with the --pre switch.


I don't think there have been any security related changes bugs in a long time. What version is on the ubuntu repos?

Edit: You can see the release notes here:

https://github.com/spesmilo/electrum/blob/1.9.8/RELEASE-NOTES



that is 1.9.7-1
legendary
Activity: 3710
Merit: 1586
One of the electrum dependencies is a python package called slowaes. Even though it's included with electrum when you do a pip install pip fetches it from pypi.python.org. slowaes' latest version is a pre-release version. In older versions of pip it would install pre release versions without complaint. Now you have to tell it do that with the --pre switch.


I don't think there have been any security related changes bugs in a long time. What version is on the ubuntu repos?

Edit: You can see the release notes here:

https://github.com/spesmilo/electrum/blob/1.9.8/RELEASE-NOTES

sr. member
Activity: 441
Merit: 250
Got a quick question:
I tried to install electrum on Ubuntu 14.04 (trusty) with the installation instructions given here: https://electrum.org/download.html - It didn't work. I got some error back which I don't remember. It used to work with Ubuntu 12.04 with the same instructions.
Now I could download electrum via the Ubuntu Software Center. But this is not most recent version. Is that one safe still (open ssl, any other security relevant issues?)?


You can install the version on electrum.org if you change the pip install line to the following:

Code:
sudo pip install --pre https://download.electrum.org/Electrum-1.9.8.tar.gz#md5=e3918fec0254267f08e41a1fb8691382

i.e. you just add the --pre switch.

Alternatively you can use the one in your distro's repository. OpenSSL is installed separately and not with the Electrum installation.
Thanks!

What does the "--pre" do?

Quote
Alternatively you can use the one in your distro's repository. OpenSSL is installed separately and not with the Electrum installation.
-> So no security relevant changes? Only feature related changes?
legendary
Activity: 3710
Merit: 1586
Got a quick question:
I tried to install electrum on Ubuntu 14.04 (trusty) with the installation instructions given here: https://electrum.org/download.html - It didn't work. I got some error back which I don't remember. It used to work with Ubuntu 12.04 with the same instructions.
Now I could download electrum via the Ubuntu Software Center. But this is not most recent version. Is that one safe still (open ssl, any other security relevant issues?)?


You can install the version on electrum.org if you change the pip install line to the following:

Code:
sudo pip install --pre https://download.electrum.org/Electrum-1.9.8.tar.gz#md5=e3918fec0254267f08e41a1fb8691382

i.e. you just add the --pre switch.

Alternatively you can use the one in your distro's repository. OpenSSL is installed separately and not with the Electrum installation.
sr. member
Activity: 441
Merit: 250
Got a quick question:
I tried to install electrum on Ubuntu 14.04 (trusty) with the installation instructions given here: https://electrum.org/download.html - It didn't work. I got some error back which I don't remember. It used to work with Ubuntu 12.04 with the same instructions.
Now I could download electrum via the Ubuntu Software Center. But this is not most recent version. Is that one safe still (open ssl, any other security relevant issues?)?
newbie
Activity: 32
Merit: 0
I've left it for hours with no change, just says 'Not Connected'. I've used my Seed to restore the wallet on OS X now, I'll have to spend some time reinstalling it on Debian.
hero member
Activity: 742
Merit: 502
Circa 2010
Can anyone help me out here... I have an Electrum wallet on Debian (1.7.3) and today it just refused to connect to any sever, is this version obsolete now or something?

As far as I know this version is completely up to date at the moment. Have you given it time to generate all the cert files?
newbie
Activity: 32
Merit: 0
Can anyone help me out here... I have an Electrum wallet on Debian (1.7.3) and today it just refused to connect to any sever, is this version obsolete now or something?
yxt
legendary
Activity: 3528
Merit: 1116
.... its extremely annoying to go through the list and... youre at the start again. Now try to find where you were and hope that it not updates before you can search a bit more.
I know that problem  Cry

I understand; I will try to fix this soon.
perfect :-)
legendary
Activity: 2674
Merit: 1083
Legendary Escrow Service - Tip Jar in Profile
I like and use Electrum often but now i nearly made a big error that partly is because of Electrum's behaviour to redraw the lists and put you on the first line again. (Breaking label writing and so on in the same step.)

I wanted to send 4 bitcoins to my smartphone. I had a contact with a label in my electrum. I searched the contact, only one label to see on the screen, and must have looked away shortly, i clicked the only address that had a label on the screen and sent since i believed when i used "send to" it has to be the correct address.

Unfortunately it didnt reach the target. I checked the transaction and did not find out what address i sent to. I thought maybe i had a virus that changed an address in clipboard but when i checked blockchain i sent a transaction to it a year ago. Luckily it was the address of a friend that had a label "Friend Test". So i could get the 4BTC back now.

I know its my fault too to not check more carefully though i didnt thought in that moment about the possibility that electrum could change the screen i see. So i used the address that was the only one with a label like the page was where i searched the address before.

I really would like to see Electrum mature here and have a more user friendly updating procedure. Its the first time it could have done harm now but it was work before too often enough. Writing labels... update... searching the address again, writing label again. Or when checking transactions to find anything. I have thousands of transactions and its extremely annoying to go through the list and... youre at the start again. Now try to find where you were and hope that it not updates before you can search a bit more.


I understand; I will try to fix this soon.

Thanks a lot!
Pages:
Jump to: