Pages:
Author

Topic: Bitcoin Wallet Recovery Services - for forgotten wallet password - page 13. (Read 63957 times)

full member
Activity: 210
Merit: 100
Very cool if legit
member
Activity: 89
Merit: 21
If there are additional entropy-reduction mechanisms in the tool, such as timing measurements (statistically significant early denies vs late denies in a brute-force pass for hash match) that sort of information could suggest improvements in the wallet code security.  Keep in touch with the development effort, please.
Hi
To put your mind at ease, no, I haven't identified any encryption weaknesses or shortcuts to the decryption mechanism in the bitcoin, litecoin or blockchain wallets.

Development on the toolset continues. It is surprising how many different types of {x} there are amongst people's "I thought I knew my passphrase but it doesn't work, and it might be because {x}"
 Embarrassed

Regards.
legendary
Activity: 1204
Merit: 1002
Gresham's Lawyer
If there are additional entropy-reduction mechanisms in the tool, such as timing measurements (statistically significant early denies vs late denies in a brute-force pass for hash match) that sort of information could suggest improvements in the wallet code security.  Keep in touch with the development effort, please.
member
Activity: 89
Merit: 21
Hi Nick Morana
If you are reading this, please get back in touch with me. Your reply email address from your recent communication appears to be an invalid email address:
Refer to this error report:
________________
Technical details of permanent failure:
 Google tried to deliver your message, but it was rejected by the server for the recipient domain roadrunner.com by cdptpa-smtpin01.mail.rr.com. [75.180.132.243].

 The error that the other server returned was:
 550 5.1.1 - Invalid mailbox: {removed}@roadrunner.com

Thanks
Dave
member
Activity: 102
Merit: 10
Crypto Pros
I can definitely see why Smiley
member
Activity: 89
Merit: 21
Do you have any vouches from users who had their wallet recovered?
It is interesting that most users prefer to remain quiet. (perhaps a degree of embarassment). Smiley

Currently I am busy with attempts on multiple wallets. (both bitcoin/litecoin based and blockchain.info based)

The majority of wallets decryptions that I've attempted have been unsuccessful, but I have had a number of notable successes. I might prod those (successful) wallet users, and see if they will put a message up here about their experiences.

Cheers
Dave
donator
Activity: 2772
Merit: 1019
Do you have any vouches from users who had their wallet recovered?

He can't steal your money, because peer the process used you are only giving him a partial Walter containing keys without funds on them. We elaborated this in this thread and op put up a 1btc bounty for one week which wasn't claimed.
newbie
Activity: 12
Merit: 0
Do you have any vouches from users who had their wallet recovered?
hero member
Activity: 561
Merit: 500
Institute of Advance Blockchain Research
as I may be in need of such a service.

as of last week (Sunday Aug 25)I was gearing up to make
an investment using my blockchain wallet

and suddenly out of no where my blockchain
wallet unsynced from my mobile device [ android]
literally in seconds of me sending my bitcoins to it!

mind you, 3 months usage I've never had a issue until then
which caused alot of fustration and precious time
trying to retrieve my btc!

the password I use when I first downloaded the blockchain App
wallet seem to be invalid *( I write down all passwords for all my accounts)*

it's been an ongoing nightmare with the thought of losing my btc
which I can't seem to understand why would my blockchain wallet
UNsync from my device, jus seconds of me sending btc to It!

if your service can help me recover my password / btc
I'm willing to compensate you for your time

thank you
kind regards

peer2peer360



member
Activity: 89
Merit: 21
The temperance and perspicuity you display is admirable.
The fact that such an offering could be done by an unscrupulous scammer does not make you one.
Holding the tool vs distributing it is an interesting choice.  Would you care to comment on that?

I guess it comes down to a couple of reasons:
1) If I distribute the tool (open source-wise), then unscrupulous persons can use it. In fact I have already been approached by someone wanting to buy my software stack, but I turned them down outright, since it was probably a botnet owner or similar... I didn't want to be sullied by the bad guys.
2) If I distribute the tool, then I have little chance of making any money. Currently I am working on several wallets with substantial 'rewards'. (as well as some with little or no reward, I might point out)

Also, (as pointed out later in this thread), quite a few of the specific wallets that I've worked on do indeed require tweaks to the algorithms... no matter how generic you make them, someone always has another bit of remembered logic up their sleeve... like "wordnumberwordnumber where I'm pretty sure that the numbers were the reverse of each other's digits", etc, etc

Maybe when/if I get tired of bitcoins and wallet decryption stuff, then I will open-source it.
Regards





legendary
Activity: 1204
Merit: 1002
Gresham's Lawyer
Holding the tool vs distributing it is an interesting choice.  Would you care to comment on that?

I would expect, right off the bat, that the tool has to be modified to crack passwords that follow the pattern of the user who forgot theirs. Because unless the password is weak, brute force cracking with no clue as to what the password might resemble or contain isn't really possible.

Good point.  Providing the tool with these user patterns for modification takes a trusted channel.  That would likely count for the distribute choice.
Holding choice is supported by the anti-abuse use cases, which is a strong one considering...

vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
Holding the tool vs distributing it is an interesting choice.  Would you care to comment on that?

I would expect, right off the bat, that the tool has to be modified to crack passwords that follow the pattern of the user who forgot theirs. Because unless the password is weak, brute force cracking with no clue as to what the password might resemble or contain isn't really possible.
donator
Activity: 2772
Merit: 1019
The temperance and perspicuity you display is admirable.
The fact that such an offering could be done by an unscrupulous scammer does not make you one.
Holding the tool vs distributing it is an interesting choice.  Would you care to comment on that?

I can state with some confidence this is no scan. He has some cracking power available, so it males sense to offer as service.
legendary
Activity: 1204
Merit: 1002
Gresham's Lawyer
The temperance and perspicuity you display is admirable.
The fact that such an offering could be done by an unscrupulous scammer does not make you one.
Holding the tool vs distributing it is an interesting choice.  Would you care to comment on that?
newbie
Activity: 45
Merit: 0
PM'ed you about password retrieval.
member
Activity: 89
Merit: 21
Does that blockchain.info wallet format also allow removing the keys that have money on them in the same way as the bitcoind one?
The blockchain.info wallet backup format contains a sharedKey, various options, and (I believe) just the last used address. You can't separate the information in the same way as the wallet.dat format allows.
 So no, if there are bitcoins attached to that particular address, then they are potentially thievable. However if the bitcoins are on other addresses, then I don't believe that those addresses are disclosed in the backup. (afaik)
donator
Activity: 2772
Merit: 1019
It would be interesting if you could create a "pool" of people's machines to crack (err... recover) wallets, and distribute the fee to them based on how much work they did. I imagine you could do something similar to mining pools.

or similar to vanitygen-pool. cool idea.

I'm not sure its feasable. You'd have to find a way to divide up the search space and somehow make provable some subspace has been searched. This is different from vanitygen or mining where there are many solutions, not just one.


Yes, I've thought a bit about doing this (splitting up the search space and making a public API to access it).
Perhaps in the future.
However, for now, I can just run up multiple amazon instances to do the same thing.
p.s. In response to demand, I now have added the ability to walletrecoveryservices.com to brute force crack the blockchain.info wallet format too. If you have a wallet.aes.json file backup (for your mobile or online account), then I can help you recover your password if you've forgotten it.
Regards,
Dave

Does that blockchain.info wallet format also allow removing the keys that have money on them in the same way as the bitcoind one?
member
Activity: 89
Merit: 21
It would be interesting if you could create a "pool" of people's machines to crack (err... recover) wallets, and distribute the fee to them based on how much work they did. I imagine you could do something similar to mining pools.

or similar to vanitygen-pool. cool idea.

I'm not sure its feasable. You'd have to find a way to divide up the search space and somehow make provable some subspace has been searched. This is different from vanitygen or mining where there are many solutions, not just one.


Yes, I've thought a bit about doing this (splitting up the search space and making a public API to access it).
Perhaps in the future.
However, for now, I can just run up multiple amazon instances to do the same thing.
p.s. In response to demand, I now have added the ability to walletrecoveryservices.com to brute force crack the blockchain.info wallet format too. If you have a wallet.aes.json file backup (for your mobile or online account), then I can help you recover your password if you've forgotten it.
Regards,
Dave
donator
Activity: 2772
Merit: 1019
It would be interesting if you could create a "pool" of people's machines to crack (err... recover) wallets, and distribute the fee to them based on how much work they did. I imagine you could do something similar to mining pools.

or similar to vanitygen-pool. cool idea.

I'm not sure its feasable. You'd have to find a way to divide up the search space and somehow make provable some subspace has been searched. This is different from vanitygen or mining where there are many solutions, not just one.

tlr
member
Activity: 86
Merit: 10
It would be interesting if you could create a "pool" of people's machines to crack (err... recover) wallets, and distribute the fee to them based on how much work they did. I imagine you could do something similar to mining pools.
Pages:
Jump to: