Author

Topic: Eligius: 0% Fee BTC, 105% PPS NMC, No registration, CPPSRB - page 233. (Read 1061843 times)

sr. member
Activity: 434
Merit: 250
Amazon web servers can do 2FA with a gemalto physical device, so it's not possible to defeat the 2FA without the actual little device fob.
full member
Activity: 196
Merit: 100
Unless you are a high profile user, or do some really stupid things with your computer, your personal wallet on your PC is probably safer than an online wallet.

Maybe. It's a different risk profile, really.

Depends on what you consider "high profile". Depends on where you live. Depends on where you keep your PC. Depends if your PC is encrypted, and if you keep it running all the time. Depends on a lot of things.

Storing 20 BTC on your laptop which you leave running on the Internet pretty much 24/7, probably isn't safer than storing it on Coinbase behind a memorized password (not saved on your PC) and 2-factor authentication.

Maybe 20 BTC is "high profile". It's not an unrealistic amount, though.

And if your computer is compromised ... an online wallet won't help you anyhow.

It might. Depends on how badly it's compromised, whether or not you have 2-factor authentication set up, etc.

I don't think any online wallets currently have some sort of "limit me to 1 BTC of withdrawals per day unless I give 48 hours advance notice", but that's something else that could be done to make online wallets even safer.

2-factor authentication is mostly feel good.  Zeus is a good example of a trojan who knows how to get around 2-factor.

"I'm sorry, you entered the incorrect passcode."


M

Just because there's one method in which 2-factor authentication can be compromised, I wouldn't call it "mostly feel good".

Being able to break into your house and plant a trojan on your computer without you realizing it is much tougher than breaking in and just stealing your computer. Also, Coinbase doesn't require your 2FA code every time you log in, only when you make a withdrawal (or, if you'd prefer, only when you make a withdrawal over $100 in a day). If you're just sitting on, say, 20 BTC, or you don't withdraw more than $100 in a day, then you might not enter that 2FA code while the trojan is installed and undetected.

But yeah, it's a possible attack vector, which is why I said limiting the amount that can be withdrawn without 48-hours notice would be even safer.

My brokerage house is going to call me on the phone to verify things before I can make a $12,000 withdrawal from my IRA. No reason why online wallets can't do the same thing.
hero member
Activity: 700
Merit: 500
Storing 20 BTC on your laptop which you leave running on the Internet pretty much 24/7, probably isn't safer than storing it on Coinbase behind a memorized password (not saved on your PC) and 2-factor authentication.

I doubt this very seriously.  Of course, a few assumptions need to be made.  Firstly, how is your laptop connected to the Internet?  Is it behind a router?  How safe is its OS?  Do you keep it updated with the latest security measures?

Coinbase (or any other big exchange/wallet service) is a big fat target.  "Why did you rob banks?" "Because that's where the money was."  A random consumer PC connected to the Internet is pretty much invisible and anonymous.  Yes, it is vulnerable to attacks, but the chances of rewards are low.

Does Coinbase encrypt my wallet with a passphrase which only I know?  In other words, if I forget or lose my Coinbase passphrase, are my Coinbase holdings effectively lost forever?  If not, then Coinbase has independent access to my private keys.  Which means they can be stolen.  This is impossible if my private keys are encrypted and residing on my own PC.
legendary
Activity: 2576
Merit: 1186
blockchain.info is probably going to be the next MtGox...
Bold statement. You just speculating or have some specific information?
Mostly speculating. They like to portray themselves as more secure, when they're really not.

How so? With Blockchain.info, I have my private keys. They cannot run away with the money!

You have your private keys, but who else does as well?

Do you check the html/javascript every time you use the site?

I'm not saying they're doing anything nefarious, but what's to stop a rogue employee (or group of employees, or anyone capable of faking an SSL certificate) from modifying the javascript and stealing the private keys?
... or any browser plugin, or any other software on your PC, or github gets compromised, or ...

Did you know that Javascript lets you redefine the Number class such that every constant is always 42?
Things are not always what they seem, even if you use their code-audit plugin...

Where would you suggest I store my BTC thats not on my local computer ?

Is there a way to store BTC on paper ?
Armory supports true paper wallets.
sr. member
Activity: 672
Merit: 271
Thanks for all the feedback, dose my computer need to be on 24/7 for a wallet to be installed on my system ?

No, not at all.
Turn it off as much as you want.


Cheers for the feedback, Will install Bitcoin-Qt let it catch up then trial moving over some coins.

Hopefully get a reply from blockchain about my missing BTC payment that is already confirmed on the network

Thanks
legendary
Activity: 1540
Merit: 1001
Unless you are a high profile user, or do some really stupid things with your computer, your personal wallet on your PC is probably safer than an online wallet.

Maybe. It's a different risk profile, really.

Depends on what you consider "high profile". Depends on where you live. Depends on where you keep your PC. Depends if your PC is encrypted, and if you keep it running all the time. Depends on a lot of things.

Storing 20 BTC on your laptop which you leave running on the Internet pretty much 24/7, probably isn't safer than storing it on Coinbase behind a memorized password (not saved on your PC) and 2-factor authentication.

Maybe 20 BTC is "high profile". It's not an unrealistic amount, though.

And if your computer is compromised ... an online wallet won't help you anyhow.

It might. Depends on how badly it's compromised, whether or not you have 2-factor authentication set up, etc.

I don't think any online wallets currently have some sort of "limit me to 1 BTC of withdrawals per day unless I give 48 hours advance notice", but that's something else that could be done to make online wallets even safer.

2-factor authentication is mostly feel good.  Zeus is a good example of a trojan who knows how to get around 2-factor.

"I'm sorry, you entered the incorrect passcode."


M
full member
Activity: 154
Merit: 100
Thanks for all the feedback, dose my computer need to be on 24/7 for a wallet to be installed on my system ?

No, not at all.
Turn it off as much as you want.
full member
Activity: 196
Merit: 100
Thanks for all the feedback, dose my computer need to be on 24/7 for a wallet to be installed on my system ?

No.

Depending on what type of wallet you're using there might be more or less sync time, but when you reconnect, you'll catch up.
full member
Activity: 196
Merit: 100
Unless you are a high profile user, or do some really stupid things with your computer, your personal wallet on your PC is probably safer than an online wallet.

Maybe. It's a different risk profile, really.

Depends on what you consider "high profile". Depends on where you live. Depends on where you keep your PC. Depends if your PC is encrypted, and if you keep it running all the time. Depends on a lot of things.

Storing 20 BTC on your laptop which you leave running on the Internet pretty much 24/7, probably isn't safer than storing it on Coinbase behind a memorized password (not saved on your PC) and 2-factor authentication.

Maybe 20 BTC is "high profile". It's not an unrealistic amount, though.

And if your computer is compromised ... an online wallet won't help you anyhow.

It might. Depends on how badly it's compromised, whether or not you have 2-factor authentication set up, etc.

I don't think any online wallets currently have some sort of "limit me to 1 BTC of withdrawals per day unless I give 48 hours advance notice", but that's something else that could be done to make online wallets even safer.
sr. member
Activity: 672
Merit: 271
blockchain.info is probably going to be the next MtGox...

I have raised an issue with blockchain.info about the not confirming the transaction for all users in that payout.

I thought there would have been more on here asking about it.

Where would you suggest I store my BTC thats not on my local computer ?

Is there a way to store BTC on paper ?

Thanks

Unless you are a high profile user, or do some really stupid things with your computer, your personal wallet on your PC is probably safer than an online wallet.

And if your computer is compromised ... an online wallet won't help you anyhow.

M

Thanks for all the feedback, dose my computer need to be on 24/7 for a wallet to be installed on my system ?

Thanks
legendary
Activity: 1540
Merit: 1001
blockchain.info is probably going to be the next MtGox...

I have raised an issue with blockchain.info about the not confirming the transaction for all users in that payout.

I thought there would have been more on here asking about it.

Where would you suggest I store my BTC thats not on my local computer ?

Is there a way to store BTC on paper ?

Thanks

Unless you are a high profile user, or do some really stupid things with your computer, your personal wallet on your PC is probably safer than an online wallet.

And if your computer is compromised ... an online wallet won't help you anyhow.

M
full member
Activity: 196
Merit: 100
blockchain.info is probably going to be the next MtGox...
Bold statement. You just speculating or have some specific information?
Mostly speculating. They like to portray themselves as more secure, when they're really not.

How so? With Blockchain.info, I have my private keys. They cannot run away with the money!

You have your private keys, but who else does as well?

Do you check the html/javascript every time you use the site?

I'm not saying they're doing anything nefarious, but what's to stop a rogue employee (or group of employees, or anyone capable of faking an SSL certificate) from modifying the javascript and stealing the private keys?
sr. member
Activity: 672
Merit: 271
blockchain.info is probably going to be the next MtGox...

I have raised an issue with blockchain.info about the not confirming the transaction for all users in that payout.

I thought there would have been more on here asking about it.

Where would you suggest I store my BTC thats not on my local computer ?

Is there a way to store BTC on paper ?

Thanks
full member
Activity: 157
Merit: 100
blockchain.info is probably going to be the next MtGox...
Bold statement. You just speculating or have some specific information?
Mostly speculating. They like to portray themselves as more secure, when they're really not.

How so? With Blockchain.info, I have my private keys. They cannot run away with the money!
newbie
Activity: 1
Merit: 0
Are there still problems with NMC payouts? The last payout I received was on 2014-03-08. I have no received any NMC payouts since then. My Eligius options were good before and I went ahead and re-signed the signature for them but still nothing. Can anyone shed some light on what is going on?

I've been lurking on this thread and haven't seen any indication as to why I haven't received a payout yet. Sorry if I missed something.

Thanks,

KodiakX
sr. member
Activity: 476
Merit: 250
I hate to sound like such a noob jackass and ask this way, but does anyone care to explain to me how I mine namecoins on Eligius? My host machine is Ubuntu 12.04 running CGMiner 4.0.0 and I have the bitcoin qt wallet 0.8.6.
Go to: http://eligius.st/~wizkid057/newstats/mystats.php, put in your mining wallet address and go to configurable options and enter your NMC wallet and sign the message and save...done!

So all I need is a NMC address? No configuring anything on my side and nothing extra to run?
Nope nothing extra to set up, once you enter your address and save the results you'll be mining NMC... the changes may take an hour or so to be applied, but that's it.

Thanks...
hero member
Activity: 616
Merit: 500
I got Satoshi's avatar!
I hate to sound like such a noob jackass and ask this way, but does anyone care to explain to me how I mine namecoins on Eligius? My host machine is Ubuntu 12.04 running CGMiner 4.0.0 and I have the bitcoin qt wallet 0.8.6.
Go to: http://eligius.st/~wizkid057/newstats/mystats.php, put in your mining wallet address and go to configurable options and enter your NMC wallet and sign the message and save...done!

So all I need is a NMC address? No configuring anything on my side and nothing extra to run?
Nope nothing extra to set up, once you enter your address and save the results you'll be mining NMC... the changes may take an hour or so to be applied, but that's it.
sr. member
Activity: 476
Merit: 250
I hate to sound like such a noob jackass and ask this way, but does anyone care to explain to me how I mine namecoins on Eligius? My host machine is Ubuntu 12.04 running CGMiner 4.0.0 and I have the bitcoin qt wallet 0.8.6.
Go to: http://eligius.st/~wizkid057/newstats/mystats.php, put in your mining wallet address and go to configurable options and enter your NMC wallet and sign the message and save...done!

So all I need is a NMC address? No configuring anything on my side and nothing extra to run?
hero member
Activity: 616
Merit: 500
I got Satoshi's avatar!
I hate to sound like such a noob jackass and ask this way, but does anyone care to explain to me how I mine namecoins on Eligius? My host machine is Ubuntu 12.04 running CGMiner 4.0.0 and I have the bitcoin qt wallet 0.8.6.
Go to: http://eligius.st/~wizkid057/newstats/mystats.php, put in your mining wallet address and go to configurable options and enter your NMC wallet and sign the message and save...done!
sr. member
Activity: 476
Merit: 250
I hate to sound like such a noob jackass and ask this way, but does anyone care to explain to me how I mine namecoins on Eligius? My host machine is Ubuntu 12.04 running CGMiner 4.0.0 and I have the bitcoin qt wallet 0.8.6.
Jump to: