Electrum exposing addresses to public?

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: Cereberus on October 06, 2016, 11:26:31 AM

Electrum wallet is the worse of the worse wallets in terms of privacy. It shows all your bitcoin addresses if you have only used 1 address then everyone can see the full addresses of this electrum wallet by using a simple website like walletexplorer.com .

Multibit Classic is the best out of the three Multibit,Multibit HD and Electrum for privacy as it keeps only one bitcoin address for each wallet and can create as many wallets as you like. Other people cannot link these addresses to be under the possesion of the same person differently from Electrum.

From this point of view, Electrum is far behind lacking big time in privacy compared to Multibit classic.

What the hell are you taking about? Both Electrum and Multibit use the same key derivation algorithm, bip32. Furthermore it is not possible to know the other addresses in a wallet by knowing Judy one address, they need to be forms linked, and any wallet software will likely end up spend linking all the addresses in the wallet.

Lastly, what does"each wallet" mean? For both software you have one wallet open at a time. A wallet is a collection of addresses, and no one knows the addresses in your wallet unless they are spend linked.

Cereberus

legendary

Activity: 910

Merit: 1000

Electrum wallet is the worse of the worse wallets in terms of privacy. It shows all your bitcoin addresses if you have only used 1 address then everyone can see the full addresses of this electrum wallet by using a simple website like walletexplorer.com .

Multibit Classic is the best out of the three Multibit,Multibit HD and Electrum for privacy as it keeps only one bitcoin address for each wallet and can create as many wallets as you like. Other people cannot link these addresses to be under the possesion of the same person differently from Electrum.

From this point of view, Electrum is far behind lacking big time in privacy compared to Multibit classic.

Abdussamad

legendary

Activity: 3710

Merit: 1586

Quote from: nezhurin on September 29, 2016, 11:24:31 AM

Quote from: achow101 on September 29, 2016, 11:20:57 AM

Quote from: nezhurin on September 29, 2016, 11:12:20 AM

Thank you for the answer but are the new version of multibit secure?

Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.

I am just trying out Multibit and it seems to be much better than electrum at first look,no idea why more people recommend electrum
But i created a test wallet and it gives timestamp and then on verification step it ask to put timestamp or leave blank if unknown but if i leave blank i cant press next and if i put a fake timestamp it also cant press next so have to give real timestamp,and cant use without the timestamp?

The timestamp helps it sync your wallet faster. Technically it can sync your wallet without the timestamp but why take a risk? Backup both the timestamp and the wallet words.

BTW you should ask these questions in the multibit forum:
https://bitcointalk.org/index.php?board=99.0

nezhurin

newbie

Activity: 16

Merit: 0

Is my understading of bloom filters above correct?
If it's not can you please explain how they protect anything

krishna1

sr. member

Activity: 322

Merit: 250

yes i belive they are recording our ip addresses and our transaction history and if they really are then also i do not actully care they can not have my wallet nor even my private key

nezhurin

newbie

Activity: 16

Merit: 0

Quote from: Jhanzo on September 29, 2016, 11:27:30 AM

Quote from: achow101 on September 29, 2016, 11:06:41 AM

Quote from: nezhurin on September 29, 2016, 10:58:42 AM

So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?

The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

What about the IP addresses (I believe that's what OP asked)? I've read quite a few about it and all of them seem to indicate that the servers can indeed see your IP address, are they all wrong?

From what I understand in this case it wont matter that the user IP is exposed since when multibit will try to get balance of your address it will in the sametime try to get balance of other addresses that dont belong to you

Jhanzo

hero member

Activity: 798

Merit: 506

Thank satoshi

Quote from: achow101 on September 29, 2016, 11:06:41 AM

Quote from: nezhurin on September 29, 2016, 10:58:42 AM

So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?

The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

What about the IP addresses (I believe that's what OP asked)? I've read quite a few about it and all of them seem to indicate that the servers can indeed see your IP address, are they all wrong?

Edit:
Wait, by addresses you mean IP addresses or Bitcoin addresses? Tongue

nezhurin

newbie

Activity: 16

Merit: 0

Quote from: achow101 on September 29, 2016, 11:20:57 AM

Quote from: nezhurin on September 29, 2016, 11:12:20 AM

Thank you for the answer but are the new version of multibit secure?

Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.

I am just trying out Multibit and it seems to be much better than electrum at first look,no idea why more people recommend electrum
But i created a test wallet and it gives timestamp and then on verification step it ask to put timestamp or leave blank if unknown but if i leave blank i cant press next and if i put a fake timestamp it also cant press next so have to give real timestamp,and cant use without the timestamp?

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: nezhurin on September 29, 2016, 11:12:20 AM

Thank you for the answer but are the new version of multibit secure?

Yes. I don't recommend Multibit because it makes it harder to do advanced tasks like import/export private keys, signing raw transactions, etc. However, if you don't need any of that, then Multibit is fine.

nezhurin

newbie

Activity: 16

Merit: 0

Quote from: achow101 on September 29, 2016, 11:06:41 AM

Quote from: nezhurin on September 29, 2016, 10:58:42 AM

So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?

The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

Thank you for the answer but are the new version of multibit secure?

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: nezhurin on September 29, 2016, 10:58:42 AM

So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?

The person running the Electrum server can see all the addresses tied to your wallet.

It is not the same with Multibit because multibit does not use the same structure. Multibit is pure P2P so it relies on actual full nodes. It uses bloom filters to provide some privacy.

nezhurin

newbie

Activity: 16

Merit: 0

So I got 2 conflicting answers...so des the someone running electrum server can see my BTC address tied to my IP or not? If yes,is it the same with Multibit?

Jhanzo

hero member

Activity: 798

Merit: 506

Thank satoshi

Yes, it's true, and you can't avoid it other than using other wallet that doesn't rely on servers such as bitcoin core. You can use tor or VPN to mask your real IP, though.

amacar2

legendary

Activity: 1120

Merit: 1008

CryptoTalk.Org - Get Paid for every Post!

Electrum software is client side that mean all information about your wallet, balance are stored in your side and nothing is stored in their server.
Check this in their docs http://docs.electrum.org/en/latest/faq.html#does-electrum-trust-servers
Also they use simple payment verification system to boardcast transaction, know more about this here http://docs.electrum.org/en/latest/spv.html
However i couldn't find anything regarding recording users IP and associated bitcoin address in their server and i think if they do than it is possible for them to record.

nezhurin

newbie

Activity: 16

Merit: 0

When using Electrum I think for it to update balances it must make some request to a server with information about balance on specific address so it means that the person operating that server can see that a specific BTC address belong to a specific IP is this true? and if it is how to avoid it

Topic: Electrum exposing addresses to public? (Read 785 times)