Handle a Wasp and you will not get stung! Practice Safe Bitcoin - page 2.

dunand

hero member

Activity: 637

Merit: 502

Quote from: Nyhm on September 04, 2012, 03:20:37 PM

Found instructions on installing (Ubuntu/Linux) software QR readers, one of which can snap a pic from a webcam. Not as convenient as the Wasp.

Summarizing from above (and general Bitcoin practice), it sounds like the ultimate process is:

Download entire block chain into a file (copy the Satoshi client block chain file)
Transfer chain (via air gap) to offline computer
On offline computer, Scan QR into an app that can read the chain, sign a tx, and save tx to file (for all/part of the balance, to some other hot wallet address)
Transfer tx file (via air gap) back to an online computer, and use an app that can send it to the Bitcoin network

Sorry for the newbish question, but can the Satoshi client do offline transactions yet? I'm not seeing it in the bitcoind help list.

You beat me to it. I was using QtQr to scan qr codes with a webcam on ubuntu. Not a Wasp but it's ok if you need to scan something once in a while on a PC.

justusranvier

legendary

Activity: 1400

Merit: 1013

Quote from: casascius on September 04, 2012, 01:36:30 PM

Quote from: justusranvier on September 04, 2012, 01:35:50 PM

I think I still have a CueCat or two laying around somewhere. I wonder if it could be repurposed to read QR codes?

No, CueCat is strictly a 1D scanner

In theory this is not an insurmountable problem (hand-held document scanners are also 1D) but in practice it's probably not worth the trouble. The only reason I ever had one of those things is because Radio Shack gave them away for free.

Nyhm

full member

Activity: 216

Merit: 100

Found instructions on installing (Ubuntu/Linux) software QR readers, one of which can snap a pic from a webcam. Not as convenient as the Wasp.

Summarizing from above (and general Bitcoin practice), it sounds like the ultimate process is:

Download entire block chain into a file (copy the Satoshi client block chain file)
Transfer chain (via air gap) to offline computer
On offline computer, Scan QR into an app that can read the chain, sign a tx, and save tx to file (for all/part of the balance, to some other hot wallet address)
Transfer tx file (via air gap) back to an online computer, and use an app that can send it to the Bitcoin network

Sorry for the newbish question, but can the Satoshi client do offline transactions yet? I'm not seeing it in the bitcoind help list.

Domrada

sr. member

Activity: 254

Merit: 250

Quote from: casascius on September 04, 2012, 02:43:19 PM

Quote from: Domrada on September 04, 2012, 02:24:38 PM

Everyone should use cold storage, but you don't need a $319 scanner. Smartphone works just as well. Or take the 10 secs to type in the key.

If you have lots of somebody else's money, then you need everything reasonable that helps you not get it stolen, including a $319 barcode scanner if it helps lessen the odds of that happening.

Point conceded.

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: Elwar on September 04, 2012, 02:30:18 PM

We have one of those Wasp scanners here at work for inventory management.

The gal that does all of that was pretty excited to see the scanner come in. Apparently it does a lot.

Apparently you can take pictures through its camera/sensor if you use its low-level API, so indeed it can do a lot, though I'll bet the camera is very near-sighted. Otherwise, it can mainly only read barcodes - though it will read nearly any bar code you can throw at it. It's sure nice for things like "thanks for your order, your tracking number is " ... *beep* (scan the package so the tracking number gets typed into the e-mail). It does a fairly good job of reading QR codes directly off my screen too.

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: swissmate on September 04, 2012, 02:09:38 PM

Why is that barcode scanner so expensive?
Am I missing something?

Barcode scanners like anything else come in a wide range of quality and durability and performance and you usually get what you pay for. That happens to be the model I bought, but you might very well find a cheaper option if you look for it.

Quote from: ?? on ??

The concept sounds good but how do I generate a paper wallet without using a 3rd party cloud service?
Is there software I can run on my Windows PC (that works without a network connection) to generate a paper wallet?

Yes, https://casascius.com/btcaddress.zip - binary and source included. Also, bitaddress.org's entire site is a single self-contained javascript html file you can copy locally and run offline.

Quote from: ribuck on September 04, 2012, 02:20:22 PM

How do you make sure you don't have a trojan that's reading the scanned keystrokes?

Spend all the money immediately, sending any unneeded change to a new paper wallet. If the money went where you intended for it to go, you know didn't get stolen. And if it got stolen, at least you have limited your losses to the value of that single address, not your whole purse, and you'll know to clean or reformat your machine before scanning any more.

Quote from: Domrada on September 04, 2012, 02:24:38 PM

Everyone should use cold storage, but you don't need a $319 scanner. Smartphone works just as well. Or take the 10 secs to type in the key.

If you have lots of somebody else's money, then you need everything reasonable that helps you not get it stolen, including a $319 barcode scanner if it helps lessen the odds of that happening.

Elwar

legendary

Activity: 3598

Merit: 2386

Viva Ut Vivas

We have one of those Wasp scanners here at work for inventory management.

The gal that does all of that was pretty excited to see the scanner come in. Apparently it does a lot.

justusranvier

legendary

Activity: 1400

Merit: 1013

Quote from: ribuck on September 04, 2012, 02:20:22 PM

How do you make sure you don't have a trojan that's reading the scanned keystrokes?

If the QR code is used to transfer an entire transaction instead of just an address then the transaction can be generated on a computer with absolutely no network access.

Then someone would need physical access to the computer containing the cold wallet in order to steal bitcoins.

Domrada

sr. member

Activity: 254

Merit: 250

Everyone should use cold storage, but you don't need a $319 scanner. Smartphone works just as well. Or take the 10 secs to type in the key.

ribuck

donator

Activity: 826

Merit: 1060

How do you make sure you don't have a trojan that's reading the scanned keystrokes?

Nyhm

full member

Activity: 216

Merit: 100

Quote from: casascius on September 04, 2012, 01:58:38 PM

Quote from: Nyhm on September 04, 2012, 01:56:22 PM

Enlightening tutorial! Do you use bitcoind importprivkey to retrieve your paper balances (when scanning in the private keys)?

Yes, I patched it to remove the rescan after each key so I can import many keys without such a long wait. (I must do a manual -rescan however).

BlockChain.info allows fast import of private keys and can even import QR private keys through a web cam (though it doesn't scan anywhere near as quickly as the handheld scanner)

Multi-import is a good idea. This would be good to get into the Satoshi client (import several keys, _then_ initiate a rescan). I wrote a simple command-line sweep program to send private key balances to a specified address, but it has to download/crawl the entire chain (saves nothing to disk).

I like your process a lot. I'm going to look for a Linux QR scanning application that can snap the picture from a webcam (I don't have the BTC or USD for the Wasp), so I can feed it to my sweeper. I'll check out your paper wallet QR generator tool, too.

Then again, if I lost all the bitcoins I have in the world, I'd only be out 3.5btc!

swissmate

sr. member

Activity: 364

Merit: 250

Why is that barcode scanner so expensive?
Am I missing something?

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: Nyhm on September 04, 2012, 01:56:22 PM

Enlightening tutorial! Do you use bitcoind importprivkey to retrieve your paper balances (when scanning in the private keys)?

Yes, I patched it to remove the rescan after each key so I can import many keys without such a long wait. (I must do a manual -rescan however).

BlockChain.info allows fast import of private keys and can even import QR private keys through a web cam (though it doesn't scan anywhere near as quickly as the handheld scanner)

Nyhm

full member

Activity: 216

Merit: 100

Enlightening tutorial! Do you use bitcoind importprivkey to retrieve your paper balances (when scanning in the private keys)?

mufa23

legendary

Activity: 1022

Merit: 1001

I'd fight Gandhi.

Great concept. I need to start doing this. Or at least, start using Paper Wallets

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: justusranvier on September 04, 2012, 01:35:50 PM

I think I still have a CueCat or two laying around somewhere. I wonder if it could be repurposed to read QR codes?

No, CueCat is strictly a 1D scanner

justusranvier

legendary

Activity: 1400

Merit: 1013

I think I still have a CueCat or two laying around somewhere. I wonder if it could be repurposed to read QR codes?

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: greyhawk on September 04, 2012, 01:30:57 PM

Why does this thing cost a bajillion dollars, when I can get the exact same functionality from a Motorola DS4208 for half that price?

Probably to pay for their retail marketing budget and to help them make their Lexus payment. If you can get one for half the price, by all means, do it. The Wasp one is by no means the best, and the ability to read QR codes and pretend to be a keyboard is commonplace. (Of course, a critical requirement is to read 2D barcodes like QR Code, am pointing this out solely lest anyone buy a 1D barcode scanner and expect it to work)

greyhawk

hero member

Activity: 952

Merit: 1009

Why does this thing cost a bajillion dollars, when I can get the exact same functionality from a Motorola DS4208 for half that price?

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: Stephen Gornick on September 04, 2012, 01:10:13 PM

Quote from: casascius on September 04, 2012, 12:58:53 PM

The way this scanner works is, if I point it at a QR code and squeeze the trigger, it types whatever's in that code on my computer by pretending to be a USB keyboard.

The Requirements on the site you linked to describes only Windows systems.

Just to ensure that I am understanding this correctly. This works no different from a USB keyboard. So this should work from any computer, tablet, etc, that can handle a USB keyboard and this simply works like there is a second keyboard that is plugged in. There are no drivers necessary for nearly any operating system released in the past decade or so. All that is needed is an open USB port on the computing device (or port on a USB hub connected to the device).

Does that accurately describe how this is used?

Yes, it will scan into Linux and Mac OS natively (I have tested it) as long as the scanner is in keyboard emulation mode (set by scanning a special configuration barcode out of the manual). They may have special features or integration API's that only work with Windows, but the keyboard emulation I use is OS agnostic. There are no drivers when in keyboard emulation mode - the host machine thinks it is truly a keyboard.

Topic: Handle a Wasp and you will not get stung! Practice Safe Bitcoin - page 2. (Read 6319 times)