Pages:
Author

Topic: Can my Bitcoin be stolen - page 3. (Read 4481 times)

legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 29, 2014, 08:43:04 AM
#84
I have now come to the conclusion that there is nothing that I can do to make a secure paper wallet. Surely any combination of numbers/letters/words etc will be guessed by some supercomputer sometime?

Not at all. Combinations grow exponentially large, much too big for supercomputers.

Flip a coin 128 times, you have 2^128.

That's about 340 trillion trillion trillion combinations,
Each of which would have to be checked by doing a complete
Sha256 hash.

No computer could do it in any mortal time frame.

Roughly a billion seconds ago, Jesus walked the earth.


So do you think my 64 dice rolls followed by a few words is sufficient?
IMO, a person could bruteforce your 64 dice rolls and a few words in a few months or even days. And are you sure you can spend the time to type those 64 letters and a few words? You can easily forget it.
-ranochigo
full member
Activity: 196
Merit: 100
May 29, 2014, 08:38:36 AM
#83
I have now come to the conclusion that there is nothing that I can do to make a secure paper wallet. Surely any combination of numbers/letters/words etc will be guessed by some supercomputer sometime?

Not at all. Combinations grow exponentially large, much too big for supercomputers.

Flip a coin 128 times, you have 2^128.

That's about 340 trillion trillion trillion combinations,
Each of which would have to be checked by doing a complete
Sha256 hash.

No computer could do it in any mortal time frame.

Roughly a billion seconds ago, Jesus walked the earth.


So do you think my 64 dice rolls followed by a few words is sufficient?
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
May 29, 2014, 08:27:34 AM
#82
I have now come to the conclusion that there is nothing that I can do to make a secure paper wallet. Surely any combination of numbers/letters/words etc will be guessed by some supercomputer sometime?

Not at all. Combinations grow exponentially large, much too big for supercomputers.

Flip a coin 128 times, you have 2^128.

That's about 340 trillion trillion trillion combinations,
Each of which would have to be checked by doing a complete
Sha256 hash.

No computer could do it in any mortal time frame.

Roughly a billion seconds ago, Jesus walked the earth.
full member
Activity: 196
Merit: 100
May 29, 2014, 07:17:58 AM
#81
I have now come to the conclusion that there is nothing that I can do to make a secure paper wallet. Surely any combination of numbers/letters/words etc will be guessed by some supercomputer sometime?
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 29, 2014, 07:06:26 AM
#80

-snip-

I did a LOT of research before making my wallets. I often read that those paper wallet generators could be rigged (can't remember what the correct term is but you know what I mean Smiley ) and was lead to believe that the way I did it was the most secure way.
[/quote]
That isn't 100% true. Yes its true that paper wallet generators can be rigged, you can use them on a offline computer by downloading the codes and run it on the offline computer. To prevent the possibility of it being rigged, the best way is to manually review the codes. Try not to use those online wallet generators.
-ranochigo
full member
Activity: 196
Merit: 100
May 29, 2014, 06:43:19 AM
#79
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.




Have there been known instances of attackers successfully bruteforcing keys made using a dice roll?
Do you mean dice roll by the result of (1-9)? If that is so, there is a lot of cases which the wallet was compromised.
-ranochigo

Is that the case no matter how many times the dice has been rolled? Also I added a few words after the numbers when generating my keys. Would that not make it harder for it to be bruteforced?
There is always a possibility, even if you add alot of letters, its not enough. Try generating a paper wallet, I believe alot of those paper wallet generators generates your privatekey using your mouse keystroke, its more random.
-ranochigo

I did a LOT of research before making my wallets. I often read that those paper wallet generators could be rigged (can't remember what the correct term is but you know what I mean Smiley ) and was lead to believe that the way I did it was the most secure way.
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 29, 2014, 06:39:38 AM
#78
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.




Have there been known instances of attackers successfully bruteforcing keys made using a dice roll?
Do you mean dice roll by the result of (1-9)? If that is so, there is a lot of cases which the wallet was compromised.
-ranochigo

Is that the case no matter how many times the dice has been rolled? Also I added a few words after the numbers when generating my keys. Would that not make it harder for it to be bruteforced?
There is always a possibility, even if you add alot of letters, its not enough. Try generating a paper wallet, I believe alot of those paper wallet generators generates your privatekey using your mouse keystroke, its more random.
-ranochigo
legendary
Activity: 2296
Merit: 1014
May 29, 2014, 06:38:21 AM
#77
You can fell for paranoia about security of your machine.
Hackers are clever beasts, brace yourselfs.
full member
Activity: 196
Merit: 100
May 29, 2014, 06:34:11 AM
#76
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.




Have there been known instances of attackers successfully bruteforcing keys made using a dice roll?
Do you mean dice roll by the result of (1-9)? If that is so, there is a lot of cases which the wallet was compromised.
-ranochigo

Is that the case no matter how many times the dice has been rolled? Also I added a few words after the numbers when generating my keys. Would that not make it harder for it to be bruteforced?
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 29, 2014, 06:31:18 AM
#75
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.

I bought a cheap tablet solely for the purpose of generating addresses & making paper wallets. I did this offline & that tablet will never again be connected to the internet. I think that's about as safe as you can get.
I would think twice before doing this. There was some problem in the RNG on android, it allowed attackers to brute force the private key easily. It might be possible for another problem to surface, use an offline computer which will and have not connected to the internet.
-ranochigo

I didn't use a RNG. I rolled dice & then put the resulting number in as a brainwallet passphrase. Does that mean my paper wallets are safe or are they still at risk due to this RNG problem on Android?
That is worst, brainwallet isn't the most secure, attackers can bruteforce the result of your dice number. If sucessful, everything will be stolen.
-ranochigo


Have there been known instances of attackers successfully bruteforcing keys made using a dice roll?
Do you mean dice roll by the result of (1-9)? If that is so, there is a lot of cases which the wallet was compromised.
-ranochigo
full member
Activity: 196
Merit: 100
May 29, 2014, 06:28:52 AM
#74
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.

I bought a cheap tablet solely for the purpose of generating addresses & making paper wallets. I did this offline & that tablet will never again be connected to the internet. I think that's about as safe as you can get.
I would think twice before doing this. There was some problem in the RNG on android, it allowed attackers to brute force the private key easily. It might be possible for another problem to surface, use an offline computer which will and have not connected to the internet.
-ranochigo

I didn't use a RNG. I rolled dice & then put the resulting number in as a brainwallet passphrase. Does that mean my paper wallets are safe or are they still at risk due to this RNG problem on Android?
That is worst, brainwallet isn't the most secure, attackers can bruteforce the result of your dice number. If sucessful, everything will be stolen.
-ranochigo


Have there been known instances of attackers successfully bruteforcing keys made using a dice roll?
full member
Activity: 196
Merit: 100
May 29, 2014, 06:27:45 AM
#73
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.

I bought a cheap tablet solely for the purpose of generating addresses & making paper wallets. I did this offline & that tablet will never again be connected to the internet. I think that's about as safe as you can get.
I would think twice before doing this. There was some problem in the RNG on android, it allowed attackers to brute force the private key easily. It might be possible for another problem to surface, use an offline computer which will and have not connected to the internet.
-ranochigo

I didn't use a RNG. I rolled dice & then put the resulting number in as a brainwallet passphrase. Does that mean my paper wallets are safe or are they still at risk due to this RNG problem on Android?

I don't know the specifics of this situation, but I took that to mean the "dice roll" is based on a faulty random number generator (RNG). So it can be cracked much more easily than if it were truly random.
]/quote]


How could my dice roll be based on a faulty RNG when I did it myself by hand? Also I checked various other passphrases on the tablet & on my PC to make sure the tablet was generating the same keys as the tablet. You all have me really worried now. Do I need to buy another tablet or PC & start again?
legendary
Activity: 1960
Merit: 1005
May 29, 2014, 06:15:49 AM
#72
Do not download a huge amounts or porn Cheesy And you will probably stay away from most of the PC viruses. Be careful always for scammers not only on this forum, but anywhere.
BR
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 29, 2014, 05:29:02 AM
#71
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.

I bought a cheap tablet solely for the purpose of generating addresses & making paper wallets. I did this offline & that tablet will never again be connected to the internet. I think that's about as safe as you can get.
I would think twice before doing this. There was some problem in the RNG on android, it allowed attackers to brute force the private key easily. It might be possible for another problem to surface, use an offline computer which will and have not connected to the internet.
-ranochigo

I didn't use a RNG. I rolled dice & then put the resulting number in as a brainwallet passphrase. Does that mean my paper wallets are safe or are they still at risk due to this RNG problem on Android?
That is worst, brainwallet isn't the most secure, attackers can bruteforce the result of your dice number. If sucessful, everything will be stolen.
-ranochigo
hero member
Activity: 633
Merit: 500
May 29, 2014, 03:33:40 AM
#70
The answer is yes. Be very careful of Malware and software that claims to increase your bitcoin. Eventually the hackers will Crack the algorithm for wallets. Just a matter of time.

If this ever became a real threat (people have already considered quantum computing and still say it isn't possible) the encryption would just be changed I'd think. I wouldn't really worry about it being cracked. As long as you use a decent password obviously.

Keylogger could log your password when you enter it (say, when you create a tx to send out bitcoin), and your bitcoin would be gone even if you used an extremely long random password. Wink


I was responding to the cracking wallet passwords part. Keylogging isn't cracking; it's keylogging. Very different things.

I see. My bad, I thought you were referring to the "Be very careful of Malware" part. Tongue
legendary
Activity: 1988
Merit: 1007
May 29, 2014, 03:31:05 AM
#69
The answer is yes. Be very careful of Malware and software that claims to increase your bitcoin. Eventually the hackers will Crack the algorithm for wallets. Just a matter of time.

If this ever became a real threat (people have already considered quantum computing and still say it isn't possible) the encryption would just be changed I'd think. I wouldn't really worry about it being cracked. As long as you use a decent password obviously.

Keylogger could log your password when you enter it (say, when you create a tx to send out bitcoin), and your bitcoin would be gone even if you used an extremely long random password. Wink


I was responding to the cracking wallet passwords part. Keylogging isn't cracking; it's keylogging. Very different things.
hero member
Activity: 633
Merit: 500
May 29, 2014, 03:27:49 AM
#68
The answer is yes. Be very careful of Malware and software that claims to increase your bitcoin. Eventually the hackers will Crack the algorithm for wallets. Just a matter of time.

If this ever became a real threat (people have already considered quantum computing and still say it isn't possible) the encryption would just be changed I'd think. I wouldn't really worry about it being cracked. As long as you use a decent password obviously.

Keylogger could log your password when you enter it (say, when you create a tx to send out bitcoin), and your bitcoin would be gone even if you used an extremely long random password. Wink
legendary
Activity: 1988
Merit: 1007
May 29, 2014, 02:32:13 AM
#67
The answer is yes. Be very careful of Malware and software that claims to increase your bitcoin. Eventually the hackers will Crack the algorithm for wallets. Just a matter of time.

If this ever became a real threat (people have already considered quantum computing and still say it isn't possible) the encryption would just be changed I'd think. I wouldn't really worry about it being cracked. As long as you use a decent password obviously.
legendary
Activity: 966
Merit: 1000
In holiday we trust
May 29, 2014, 02:29:58 AM
#66
The answer is yes. Be very careful of Malware and software that claims to increase your bitcoin. Eventually the hackers will Crack the algorithm for wallets. Just a matter of time.
full member
Activity: 238
Merit: 100
May 28, 2014, 07:36:02 PM
#65
Any computer connected to the internet can be attacked. If you have enough to worry about get a laptop and never connect it to the internet.

I bought a cheap tablet solely for the purpose of generating addresses & making paper wallets. I did this offline & that tablet will never again be connected to the internet. I think that's about as safe as you can get.
I would think twice before doing this. There was some problem in the RNG on android, it allowed attackers to brute force the private key easily. It might be possible for another problem to surface, use an offline computer which will and have not connected to the internet.
-ranochigo

I didn't use a RNG. I rolled dice & then put the resulting number in as a brainwallet passphrase. Does that mean my paper wallets are safe or are they still at risk due to this RNG problem on Android?

I don't know the specifics of this situation, but I took that to mean the "dice roll" is based on a faulty random number generator (RNG). So it can be cracked much more easily than if it were truly random.
Pages:
Jump to: