Author

Topic: Connecting Specter to Bitcoin Core = risk? (Read 94 times)

legendary
Activity: 2534
Merit: 6080
Self-proclaimed Genius
Sparrwor writes:
Unfortunately, Bitcoin Core stores your public keys and funds unencrypted on the computer that runs it. If that computer is regularly connected to the Internet, it is at risk to hackers - making you a target once your balance is discovered.
Ah, they mean that if some hacker got his hands into your xpub and with it, saw that you have certain amount of Bitcoins;
That information: "you possessing N number of Bitcoins" will be the basis of hackers to make you a target, specially if it's a significant amount.
It's not necessarily mean that they'll use the xpub in Bitcoin Core directly to hack your Specter wallet.

Nevertheless, take note that the xpub is not entirely safe if you've been exporting individual private keys from Specter, even prvKeys of the unfunded addresses.
(AFAIK, there's no option to do that in Specter, just like in Bitcoin Core's descriptor wallets)
Because a child private key can be used together with its parent "extended public key" to compute its pair "extended private key".
But if you haven't exported any private key and exposed it to the internet, then this shouldn't be an issue in your case.
member
Activity: 106
Merit: 49
Since Bitcoin Core stores the pub key unencrypted on the computer, I wonder whether there would be a risk if I connected Specter to the Core.
You're supposed to connect your Specter wallet to a Bitcoin Core client that you own which will create a watch-only wallet that's locally stored, so I don't get the point.

Thanks for the detailed answer.

Why does sparrow write that it would pose a risk?
What could a hacker do with the pub key?

Sparrwor writes:
Unfortunately, Bitcoin Core stores your public keys and funds unencrypted on the computer that runs it. If that computer is regularly connected to the Internet, it is at risk to hackers - making you a target once your balance is discovered.
legendary
Activity: 2534
Merit: 6080
Self-proclaimed Genius
What does it actually look like when you set up a multi-sig wallet at Specter?
Won't the whole thing be more difficult to calculate, or does it make no difference whether single-sig or multi-sig?
Use the command above and you'll see that it also imported your Specter MultiSig Wallet's Extended Public keys to a watch-only Bitcoin Core wallet with the same name.
So there's no difference in terms of your concern about quantum computers computing your private key from your public key.

Future-proofing your backup?

Since Bitcoin Core stores the pub key unencrypted on the computer, I wonder whether there would be a risk if I connected Specter to the Core.
You're supposed to connect your Specter wallet to a Bitcoin Core client that you own which will create a watch-only wallet that's locally stored, so I don't get the point.
member
Activity: 106
Merit: 49
Good evening,
I have a small concern.

Since Bitcoin Core stores the pub key unencrypted on the computer, I wonder whether there would be a risk if I connected Specter to the Core.
You could theoretically calculate the Prv key back if you had the pub key.
(I know, very difficult but certainly doable with a quantum computer)

What does it actually look like when you set up a multi-sig wallet at Specter?
Won't the whole thing be more difficult to calculate, or does it make no difference whether single-sig or multi-sig?

Does Bitcoin Core store the Account Extended Public Key or does it store the BIP32 Extended Public Key?
Jump to: