Pages:
Author

Topic: I just made my first Bitcoin ATM withdrawal... 3BTC from my printer. - page 2. (Read 14497 times)

member
Activity: 98
Merit: 10
(:firstbits => "1mantis")
How would one verify an offline wallet, OFFLINE?
sr. member
Activity: 437
Merit: 415
1ninja
I think the question is "how do I know the private key that I can't see actually unlocks the address on the bill?"  This is exactly the problem with any physical bitcoins you can make at home - the person receiving them has to trust that there's not just a happy face under the hologram instead of a privkey.

This.  In reading the wiki:

https://en.bitcoin.it/wiki/Private_key

It says that the private key and the address are mapped one to one.  So the verification would be the same as the "Generate Address" function in the client just using a precreated private key.  I supposed I answered my own question:  Verifying a private key offline is trivial and does not require access to the blockchain to do so.

Cool.


This verification can be done with bitaddress.org on the Wallet Details tab.
legendary
Activity: 1400
Merit: 1005
I think the question is "how do I know the private key that I can't see actually unlocks the address on the bill?"  This is exactly the problem with any physical bitcoins you can make at home - the person receiving them has to trust that there's not just a happy face under the hologram instead of a privkey.

This.  In reading the wiki:

https://en.bitcoin.it/wiki/Private_key

It says that the private key and the address are mapped one to one.  So the verification would be the same as the "Generate Address" function in the client just using a precreated private key.  I supposed I answered my own question:  Verifying a private key offline is trivial and does not require access to the blockchain to do so.

Cool.
But, verifying that coins do indeed exist at the corresponding public key DOES require access to the blockchain (or a trusted service).
sr. member
Activity: 333
Merit: 250
I think the question is "how do I know the private key that I can't see actually unlocks the address on the bill?"  This is exactly the problem with any physical bitcoins you can make at home - the person receiving them has to trust that there's not just a happy face under the hologram instead of a privkey.

This.  In reading the wiki:

https://en.bitcoin.it/wiki/Private_key

It says that the private key and the address are mapped one to one.  So the verification would be the same as the "Generate Address" function in the client just using a precreated private key.  I supposed I answered my own question:  Verifying a private key offline is trivial and does not require access to the blockchain to do so.

Cool.




sr. member
Activity: 437
Merit: 415
1ninja
Windows users can download my current version of the utility and print Bitcoin notes!

is anyone building something similar for mac or linux users?

I am hoping these features get added into BitAddress.org so there is a browser-based platform-independent solution.

I don't have a time frame but I am working on it.

The use case for these fancy paper wallets is the full set of use cases for paper wallets with the addition of being able to give BTC as a gift certificate. Also less likely someone would throw out a paper wallet by accident when it looks like something of value.

I also think there is value in having these paper wallets with you and when you want to buy something with your mobile phone you load the private key with your mobile. That way you don't have to leave too much BTC on your phone or with an online wallet where it can be hacked.
legendary
Activity: 1946
Merit: 1006
Bitcoin / Crypto mining Hardware.
very nice! Can I have them? Cheesy

I'm hoping yes... I'm planning on releasing the source code I used to print these.

Thanks a lot!
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
Windows users can download my current version of the utility and print Bitcoin notes!

link?


Earlier in thread, should be:

https://casascius.com/btcaddress.zip
legendary
Activity: 1904
Merit: 1037
Trusted Bitcoiner
Windows users can download my current version of the utility and print Bitcoin notes!

link?
hero member
Activity: 518
Merit: 500
Manateeeeeeees
Then of course I'd still need a net connection to check the balance...

But still, is offline private key/address verification possible with out the client?

I'm not sure what you mean. Checking that a private key is valid and matches a given public address? This should be possible, but not very useful, since what you'd really be interested in is whether the address holds funds. And even if it did, being offline you could not transfer the funds to a key only you control.

I think the question is "how do I know the private key that I can't see actually unlocks the address on the bill?"  This is exactly the problem with any physical bitcoins you can make at home - the person receiving them has to trust that there's not just a happy face under the hologram instead of a privkey.
legendary
Activity: 2506
Merit: 1010

Even better, the app should require no user intervention besides scanning the Bitcoin note.  In the initial setup of the app, you give the app a Bitcoin address or series of addresses to sweep funds into.  

I have a specific use case where the target bitcoin address is not necessarily my own.

Perhaps I pull up to the automated car wash which accepts bitcoin for payment.  It spits out a ticket with a QR code for me to send my payment to.  

Let's assume I have a smartphone, iPad, or whatever, but no bitcoin wallet on it. I don't even need data service or SMS even. [Edited]

So the price of the wash is 0.8 BTC.  In my wallet today, I carry a few $20s.  So similarly, let's say I carry a few 2.0 BTC banknotes in it.

I pull out a 2.0 BTC bitcoin banknote from my pocket, using this app on my smartphone I scan the banknote for the "From:" then scan the QR code from the pay terminal ticket for the "To:".  

The car wash terminal then spits out a receipt and on the receipt is the change in the form of a QR code, a private key, funded with 1.2 BTC.

So then using the app on my smartphone I scan that "Spend" QR code from the receipt as the "From:" and then scan the "Load" QR code from the next 2.0 BTC bitcoin banknote in my wallet as the "To:".

So this app is just a utility, scan the "From:", scan the "To:", spend the funds, done.   There's never any bitcoins stored in a wallet on my mobile or with an EWallet.
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
Windows users can download my current version of the utility and print Bitcoin notes!

is anyone building something similar for mac or linux users?

I am hoping these features get added into BitAddress.org so there is a browser-based platform-independent solution.
legendary
Activity: 1400
Merit: 1005
The "victim" should be importing it into the client the moment he gets it, and ought to know whether or not it's any good before accepting it.

Not just importing it but spending it (sweep) to another address from the wallet.

Mt. Gox mobile client does this.

A motivated mobile app developer can probably sell a few copies of an app (and/or mobile enabled web-site) that does nothing more than scan the "spend" (private key) of a bitcoin banknote I received, do a second scan for the "load" (on one of my own notes), build a transaction to spend the funds and submit it (e.g., to blockchain's pushtx), and to display the amount + success / failure (i.e., wasn't a double spend.)

This lets me have the value stored on these bitcoin banknotes at all times, with no reliance on an EWallet.  And since the mobile wallet apps and web-based EWallets do not yet have the ability to redeem and sweep, this limited functionality app would at least make these notes functional now, not in some vision of how things could work down the road.
Even better, the app should require no user intervention besides scanning the Bitcoin note.  In the initial setup of the app, you give the app a Bitcoin address or series of addresses to sweep funds into.  If you give it a series, it'll use them each only once, unless it runs out, at which point it'll start at the first address again.  It automatically does the sweeping for you as soon as the private key is scanned.  A one-step receipt.
member
Activity: 98
Merit: 10
(:firstbits => "1mantis")
I am out of black ink but everything printed good to me! Just looks faded since I have all the colors but black Sad
donator
Activity: 1464
Merit: 1047
I outlived my lifetime membership:)
I was thinking of what a scammer would do with the ability to print Bitcoin bills for an in person transaction:

1) Print a bill with a corrupted private key and a real address
2) Keep a copy of the real private key
3) Fund the address
4) Show the person you are paying that the Bitcoin address is funded
5) Walk away with your goods and Bitcoins
6) The victim wont know that the private key is useless until they are online and try and import it

Being able to confirm that the private key actually connects to the address gets you some protection against this.

The other scheme is:

1) Print a bill with a good private key and a real address
2) Import the private key to an online wallet
3) Fund the address
4) Show the person you are paying that the Bitcoin address is funded
5) Right after they see its funded, pretend you are checking a text message, but send the money back to yourself with your phone.
6) Walk away with everything

I'm not sure how to get protection against this one.


The bills aren't meant to circulate. You give the private key away and the new owner transfers the coins immediately or takes your contact info in case they decide to transfer later and it bounces...like a check that has the option of being instantly cashed.
legendary
Activity: 873
Merit: 1000
Windows users can download my current version of the utility and print Bitcoin notes!

is anyone building something similar for mac or linux users?
legendary
Activity: 2506
Merit: 1010
The "victim" should be importing it into the client the moment he gets it, and ought to know whether or not it's any good before accepting it.

Not just importing it but spending it (sweep) to another address from the wallet.

Mt. Gox mobile client does this.

A motivated mobile app developer can probably sell a few copies of an app (and/or mobile enabled web-site) that does nothing more than scan the "spend" (private key) of a bitcoin banknote I received, do a second scan for the "load" (on one of my own notes), build a transaction to spend the funds and submit it (e.g., to blockchain's pushtx), and to display the amount + success / failure (i.e., wasn't a double spend.)

This lets me have the value stored on these bitcoin banknotes at all times, with no reliance on an EWallet.  And since the mobile wallet apps and web-based EWallets do not yet have the ability to redeem and sweep, this limited functionality app would at least make these notes functional now, not in some vision of how things could work down the road.
legendary
Activity: 1400
Merit: 1005
If you corrupt the private key on the bill and keep the real one to yourself, the victim won't know until they import it into the client right?

But if you mathematically prove the private key matches the address, then this scenario isn't an issue.
That's why it would be incredibly stupid of the victim to not immediately move the funds to a different account.

Casascius coins can work well for person-to-person transactions where there is no possibility to move the funds immediately, but these printed bills are only useful when the receiving entity has the ability to create a transaction with the newly acquired private key at the moment the transaction happens.  For example, in a retail store, the clerk would scan the private key, the system would automatically and immediately create a transaction to move the funds to it's main account, the clerk would wait a few seconds to be sure that the new transaction has been properly broadcasted to the network, and then hand the customer his receipt.

Oh, and as long as we're talking about private keys and change addresses, as long as the customer saw the cashier hand him his receipt without scanning a private key, couldn't a change address just be printed on the receipt?  Then, the next transaction that the customer makes, perhaps at a different store, he can just let them scan the new address where he received his change.
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
If you corrupt the private key on the bill and keep the real one to yourself, the victim won't know until they import it into the client right?

But if you mathematically prove the private key matches the address, then this scenario isn't an issue.

The "victim" should be importing it into the client the moment he gets it, and ought to know whether or not it's any good before accepting it.
sr. member
Activity: 333
Merit: 250
If you corrupt the private key on the bill and keep the real one to yourself, the victim won't know until they import it into the client right?

But if you mathematically prove the private key matches the address, then this scenario isn't an issue.
vip
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
I was thinking of what a scammer would do with the ability to print Bitcoin bills for an in person transaction:

1) Print a bill with a corrupted private key and a real address
2) Keep a copy of the real private key
3) Fund the address
4) Show the person you are paying that the Bitcoin address is funded
5) Walk away with your goods and Bitcoins
6) The victim wont know that the private key is useless until they are online and try and import it

Being able to confirm that the private key actually connects to the address gets you some protection against this.

The other scheme is:

1) Print a bill with a good private key and a real address
2) Import the private key to an online wallet
3) Fund the address
4) Show the person you are paying that the Bitcoin address is funded
5) Right after they see its funded, pretend you are checking a text message, but send the money back to yourself with your phone.
6) Walk away with everything

I'm not sure how to get protection against this one.


In each case, Step 4 is where things went wrong.  The person receiving the bill should sweep the address immediately and take control of the funds being presented to him in step 4 by sweeping them to another address, so he will know that the funds are there and can't disappear.
Pages:
Jump to: