Pages:
Author

Topic: HOWTO: create a 100% secure wallet - page 81. (Read 276221 times)

newbie
Activity: 2
Merit: 0
August 27, 2012, 02:51:09 PM
As a so-called newbie, I'd like to say thanks for putting time into writing this.
member
Activity: 148
Merit: 10
August 27, 2012, 08:28:50 AM
I feel like this is obvious, but I can not send coin to the address on the hard disk when it is not running on the computer right? whenever you wanna make a deposit, you load up the disk, re install btc client again, deposit your coins from one wallet to the savings wallet, and then copy it back on the disk?
hero member
Activity: 868
Merit: 500
August 27, 2012, 08:25:09 AM
Is there any way to get a wallet onto an iPhone or iPad?
newbie
Activity: 8
Merit: 0
August 27, 2012, 07:30:43 AM
thx for advices Smiley
newbie
Activity: 19
Merit: 0
August 26, 2012, 09:46:57 PM
Thanks , good info just what I was thinking about yesterday, funny too!!  Smiley
member
Activity: 61
Merit: 10
August 26, 2012, 11:51:37 AM
Thanks for the post. Trying all this stuff out now
newbie
Activity: 51
Merit: 0
August 25, 2012, 11:48:40 PM
Very useful post, thank you!
newbie
Activity: 26
Merit: 0
August 25, 2012, 06:10:07 PM
Thanks for the post.
newbie
Activity: 7
Merit: 0
August 24, 2012, 06:02:38 PM
Good Post
hero member
Activity: 756
Merit: 500
August 23, 2012, 11:00:09 AM
You'll need bodyguards too so someone doesn't beat the crap out of you for the passsword.  Or you could learn Kung Fu!
newbie
Activity: 6
Merit: 0
August 23, 2012, 10:53:04 AM
This is very useful information thanks a lot. I have my encrypted wallet on my everyday Linux box but now I see that its security is not the best, I better start now making some changes to guard my precious coins  Grin. Cheers.
hero member
Activity: 616
Merit: 500
Portland Bitcoin Group Organizer
August 22, 2012, 09:55:00 PM
Thanks, useful stuff.
newbie
Activity: 48
Merit: 0
August 22, 2012, 09:48:11 PM
Thanks for the guide...best security practices...here I come!
sr. member
Activity: 358
Merit: 250
August 22, 2012, 12:46:17 PM
Do people tend to use Armory?  I have recently created an offline wallet which is proving very useful.  You can also produce paper back ups which will be nice when I lose the numerous USB sticks which currently hold my back ups!
legendary
Activity: 2128
Merit: 1002
August 22, 2012, 12:55:01 AM
i never have understand why BlockChain.info is necessary, you can do everything without it...

BlockChain.info provides a valuable service. You don't have to wait for a blockchain to load, you just see what is happening live on BlockChain.info

BlockChain.info also allows me to do periodic backups (auto) to my google drive. nifty.
newbie
Activity: 6
Merit: 0
August 21, 2012, 07:54:21 PM
i didn't bother to read EVERY thread on here, but a thing to beware of with linux USB / live CDs: if your encryption requires high-quality random numbers, you might not want to generate random keys after booting from a USB boot / live CD; apparently that's not a good choice because the environment is more predictable. Anyone out there ever even take advantage of this flaw? I sure haven't; I've only had wikipedia entertain me with these thoughts Smiley

Honestly, it surely doesn't matter, but for those that love being paranoid: beware of generating keys after freshly booting from a live CD / USB.

As for creating a "100% secure wallet", I don't think it's possible to quantify or measure the % of security that a wallet is under. Keep in mind that your wallet isn't exactly secure if even YOU lose access to it! (It's no longer secure--it is useless!)

im totally lost  Huh

Computers don't actually generate random numbers - they don't have the hardware for that. Instead, they use a function that has been shown to produce an evenly distributed, unpredictable result, as long as you don't know the number they start with, also known as the 'seed' - many generators use various information from your computer's memory as the seed. Since a Live CD / USB tends to boot up nearly the same each time (since you don't have a lot of user installed programs starting up every time you do), the actual variation of the seed is lowered, meaning that someone with a sufficiently complicated algorithm and some knowledge has a higher chance of generating the same keys.

Just do some stuff to change the state of your memory before you start generating keys - play some solitaire, pop open a text editor and mash on your keyboard for a while, save that file somewhere... whatever. Of course, you only need to generate keys occasionally, so you mainly want to be careful when generating your original wallet file.
newbie
Activity: 17
Merit: 0
August 20, 2012, 01:34:39 PM
i didn't bother to read EVERY thread on here, but a thing to beware of with linux USB / live CDs: if your encryption requires high-quality random numbers, you might not want to generate random keys after booting from a USB boot / live CD; apparently that's not a good choice because the environment is more predictable. Anyone out there ever even take advantage of this flaw? I sure haven't; I've only had wikipedia entertain me with these thoughts Smiley

Honestly, it surely doesn't matter, but for those that love being paranoid: beware of generating keys after freshly booting from a live CD / USB.

As for creating a "100% secure wallet", I don't think it's possible to quantify or measure the % of security that a wallet is under. Keep in mind that your wallet isn't exactly secure if even YOU lose access to it! (It's no longer secure--it is useless!)

im totally lost  Huh
full member
Activity: 151
Merit: 100
August 20, 2012, 10:39:46 AM
Most secure would be brain-wallet, have a long phrase and using SHA256 once or combinations, you can generate a privatey key. Use bitaddress.org to see the public address and private key in any format.

Now you can use any thin client e.g. blockchain.info or electrum command line to send btc, benefit with this approach is that  you are not tied to any computer, don't have to worry about backing up or securing devices too much.

newbie
Activity: 13
Merit: 0
August 19, 2012, 10:19:05 AM
man o man so many new things to learn, i'm starting to get data overload.
I got a question though, in your example you use ubuntu live cd. As a greener then green greenhorn so am i , now i got to the point were im gonna download the BTC client, and i stumble upon this thing called PPA.
Securitywise it sounds like a possible leak to me? So can we/i trust these and why, or do we use older version or something. Plz advice
newbie
Activity: 23
Merit: 0
August 19, 2012, 07:22:09 AM
Here's what I've done.

I'm using a mac. I have created an 128bit AES encrypted dmg file of 4Gb. I've put inside all my bitcoin folder and symlinked it to my bitcoin app folder into 'Applications'.

Everytime I need to do a transaction, I mount the dmg and running the bitcoin-bt app from the encrypted folder. I know this can be a bit slow at times; but I don't mind. As an extra measure I've also encrypted my wallet.dat file, just in case.

Cheers.



Thanks for this!
Pages:
Jump to: