Topic: How do you run altcoin wallets/software you don't necessarily trust? (Read 994 times)
Virtual Machine. VirtualBox is free.
June 17, 2013, 03:05:41 PM
VM.
June 17, 2013, 02:55:14 PM
look at the source and compile it yourself! Safest option imo 
June 17, 2013, 02:10:29 PM
On linux, I run the daemon with an apparmor profile. Any suspicious activity like file access outside the wallet directory will be denied and logged.
June 17, 2013, 05:57:51 AM
run them first on the wife's/kids pcs... 
nothing important on there
seriously, use any old shit pc other than your own, for testing, watch processes, netstat, some logs etc
you have no idea of what kind of malicious code someone might be running from a new wallet.
Don't ever think that an antivirus scan will save you either.
VM is ok if you can stand the clutter I guess.. just not for me
nothing important on there
seriously, use any old shit pc other than your own, for testing, watch processes, netstat, some logs etc
you have no idea of what kind of malicious code someone might be running from a new wallet.
Don't ever think that an antivirus scan will save you either.
VM is ok if you can stand the clutter I guess.. just not for me
June 17, 2013, 05:00:40 AM
This is why I wish alt coins would manage their source code properly. All these altcoins seem to just do one big initial commit which is a copy of the litecoin source, rather than properly forking the litecoin repo and keeping all the history there. Litecoin did a proper fork of bitcoin, which means you can cryptographically confirm that they have based it on the same code as bitcoin, and then can also clearly see what patches they have added on top.
When they just do one giant code dump in an initial commit, you can do a diff to compare with litecoin, but when this comes back with 800,000 lines, I'm not about to sit there reading it all to work out why its so different to my litecoin tree (eg. could be a older or newer litecoin version - hard to tell without proper git history).
When they just do one giant code dump in an initial commit, you can do a diff to compare with litecoin, but when this comes back with 800,000 lines, I'm not about to sit there reading it all to work out why its so different to my litecoin tree (eg. could be a older or newer litecoin version - hard to tell without proper git history).
June 17, 2013, 04:56:35 AM
C$
June 17, 2013, 04:54:40 AM
just run a virtualbox locally using a linux distro like ubuntu/mint
you don't have to spend any money
you don't have to spend any money
yes, separate local VM per altcoin looks like a good and very affordable solution, vps offers automatic setup and backups and a high level of failover though
thanks all
June 17, 2013, 04:47:57 AM
just run a virtualbox locally using a linux distro like ubuntu/mint
you don't have to spend any money
you don't have to spend any money
June 17, 2013, 04:39:53 AM
to be super safe operate them in a VM session run at least one antivirus in it, if it is setting off all sorts of alarm bells just delete that VM a start a new one or clone from a clean one for each new coin or what ever it is you do not trust.
June 17, 2013, 04:33:37 AM
Mine I install on vps.
One dedicated VPS instance for every altcoin?
Yes, Separate vps instance per altcoin. One windows azure account can get you up to 20 vps.
Oh, pretty cool, thanks
EDIT: but also pretty expensive
http://www.windowsazure.com/en-us/pricing/calculator/?scenario=virtual-machines June 17, 2013, 04:32:25 AM
Mine I install on vps.
One dedicated VPS instance for every altcoin?
Yes, Separate vps instance per altcoin. One windows azure account can get you up to 20 vps.
June 17, 2013, 04:31:08 AM
Mine I install on vps.
One dedicated VPS instance for every altcoin?
June 17, 2013, 04:29:58 AM
It's possible, but it's usually from unknown sources, i.e. someone else compiles from source, adding in their own malicious part.
VM's are usually the easiest way to test.
VM's are usually the easiest way to test.
June 17, 2013, 04:29:46 AM
First scan via virustotal. Then I install on vps.
June 17, 2013, 04:28:10 AM
Do you install the binaries? Compile from source? Read the source (
)? Install every wallet on a dedicated system or in a separate VM?
I'm concerned some of the plethora of altcoins might actually contain malware and steal your other wallets if you install it on the same system.
Are there any known cases of that sort?
)? Install every wallet on a dedicated system or in a separate VM?I'm concerned some of the plethora of altcoins might actually contain malware and steal your other wallets if you install it on the same system.
Are there any known cases of that sort?
Jump to: