Topic: Electrum 1.9 released - page 7. (Read 16001 times)

 I entered my master public key on a separate internet connected computer to create a watching only wallet, but if I right click on a public address and click on "private key", I can see the address's private key without it asking me for my password.  Am I wrong or is this in effect no different than having an unencrypted wallet? If someone could hack into my computer, they could see the private keys for all my addresses.  Until this is clarified, I have transferred all my funds out of electrum wallets for the time being (though electrum is otherwise great).

Does this happen to anyone else?

+1

Good idea.  All software should be downloaded with https or at least have PGP signatures.  All devs should subscribe to Security Now (Podcast).

A bit problematic though, arguably a man in the middle, MIM, attacker could give a false public PGP key.  The devs public keys should be distributed over https.  There is also an issue in switching from http to https.

[quote SecurityNow Episode 403]
The problem is that they're initially able to make a connection that is not secure, and a man in the middle could, and we've talked about this before, could arrange to strip off the HTTPS outbound query, changing it to HTTP in order to still try to make the service usable.
[/quote]

So a MIM attacker that sees index.html over http could change the https links to http.  So, instead of downloading the PGP key over https it will come down over http which could actually be any key the attacker wants to substitute, such as one he creates himself.  This holds for signatures too as well as the binaries and that could be modified to be a trojan horse.

sdp

Here is some more information:

* I had experimented with creating new empty wallets, restoring from seed, etc and then deleted the additional wallets again. Maybe at this time i also accidentally deleted the old contacts list which had contained exactly one entry, namely "MtGox"?

* then the next day I saw that 1.9.4 was available, I installed 1.9.4 over 1.9.2 with pip as described on the download page.

* I started electrum, everything was fine, my wallet and transactions showed up normally, the only outgoing transaction was still labeled "MtGox" but my contacts were empty!

* Then I made another transaction to the same address and labeled it identically "MtGox" and it did not add MtGox to the contacts list, contacts was still empty, however it showed up as "MtGox" in the history list. Could this be because it first checked the existing address labels in the history instead of checking the contacts list for existence of this address/label and then decided to not add it? IMHO It should add it to the contacts list if its not in the contacts list already and not use the existing history labels for this decision.

I agree

Then I have found a bug because it did NOT do it. Otherwise I would not have had an empty contacts list after my last outgoing transaction.

yes, but doing it with a single click instead of having to switch around and copy paste would be easier. There is already a context menu with some items for things to do with the transaction like "show details" etc. and "add to contacts" would naturally belong in there too. Maybe I should submit a pull request.

Wallet > New Contact

It already does this.


In the network dialog uncheck auto connect option and then you'll be able to choose a server you like. You can also bring up this dialog box using the green/red icon in the bottom right.

Has something happened to the contacts list in 1.9.4?
I have only a tab with an empty list, no controls to manage contacts, no right click. I have labeled a few outgoing transactions, they show with labels in the history tab, I also just made a transaction and gave it a label immediately when sending in the send dialog but absolutely nothing is showing up in my contacts list.

I tried exporting labels, the file corectly contains labels for the addresses, I tried re-importing that file, still no contacts list.

Edit: Found it in the wallet menu. (I'm a new user since 1 week)

A few suggestions:
* please make "add to contacts" an Option the context menu in the history tab
* please make it add the contact automatically when sending
* please add a context menu to the **empty** space in the contacts tab for "add contact".
* Its throwing a lot of exceptions to the console on startup and also during shutdown.
* there is no way to disconnect/reconnect, the network dialog is confusing, what is the "auto connect" option and the list of servers good for if I cannot choose one of them to connect manually?

* I'm a new user, so the above might sound stupid but that are the problems I was immediately confronted with. There are a few more things regarding the user interface that don't seem to be how I would it expect to work but that might better fit into another post.

Thanks ThomasV.

no more. everybody shares the same user experience.

it has been hidden. it was unnecessarily complicated for normal users, and it is not a good method for merchants.

yes

they will still be supported. you may move them to your wallets directory

So I am updating from the 1.8 branch and have a few questions:

- Where do you toggle between expert mode and normal?

- Gap limit option has been removed, right?

- The copy option under the file menu is the new way to backup the wallet?

- Default wallet has been moved under wallets directory. But what about other wallets? They open fine but I want to know whether they will be "upgraded" in future?

edit: The new send many feature is really awesome!

The code itself

any docs for plugin dev?

Just download portable version 1.9.4 on Win7-x64

I got a small problem when I try to change the field "Display zeros". I set it to "8", and click ok. Right after, all my balance is shown with 8 digits after the decimal point.
However, upon closing and restarting Electrum, it turns back to the original setting (no digit after decimal).

Could someone please check if they can replicate the same problem?

Thanks.

Wrong terminology. Are you familiar with the basics of bitcoin?

Only FIAT coins and banknotes can reside inside a wallet.
For "Bitcoin", the wallet contains private keys, not "coins".

Coins are associated with a bitcoin address, as is recorded in the public ledger, the blockchain. You can only access coins associated with an address if you have the private key of this address. The WALLET is a computer file that contains one or many private keys (or in case of electrum a private seed from which the electrum algorithm can calculate all your determinstic private keys and their addresses).

Your original wallet contains the determinstic keys PLUS your manually imported keys/addresses, after you have imported them.
But after you recover your wallet from seed, this will only recover your deterministic keys, not the imported keys/addresses (because they have nothing to do with the seed), so they will not be in the wallet.

I think I cannot explain it any better.

How to verify signed binaries:

A tray icon, yeah! Not having one annoyed the hell out of me, haha. I still don't like the design of the new menu's, but oh well, everything seems to work now and that is the most important thing.

But the coins stay in the wallet i guess, sorry, just want to be sure lately

We just released version 1.9.4, with binaries for mac & windows.
This should fix the various bugs reported since 1.9 was launched.