Pages:
Author

Topic: [Price drop] Create secure paper wallets with an Ubuntu Live USB 0.02BTC each (Read 5873 times)

legendary
Activity: 1382
Merit: 1122
legendary
Activity: 1382
Merit: 1122
Yeah you can use md5 instead of sha1 if that's what you're asking.
Is that the hash of the iso file from the Ubuntu website? I'm not sure how somebody would verify that after you've put it onto a memory stick :/

I have a file that was created when I made the live USB and that's the title. I wasn't sure if it was something that was already done automatically.
sr. member
Activity: 322
Merit: 250
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
Yeah there's nothing stopping you signing it with a Bitcoin address instead of a PGP key.

Not sure what the best way to checksum every file on the disk would be, possibly something like

Code:
find / -type f -print0 ! -name "sums.txt" | xargs -0 sha1sum > sums.txt

After that, people can verify everything with

Code:
sha1sum -c /path/to/sums.txt

You will also need to sign sums.txt with your Bitcoin address otherwise it would be a bit worthless. Good luck Smiley

I'll try that out when I'm at a computer and sign it here. Is that code for Windows or Linux?

Just run it in the Terminal on Linux. It might take a while to run.

All I got with that was a whole lot of Permission Denied and Invalid Argument. It was pretty much instant because it just flew through everything and didn't have anything it was able to compute I suppose.

Edit: I have a file called MD5SUMS, is that a checksum that's useful?

Yeah you can use md5 instead of sha1 if that's what you're asking.
Is that the hash of the iso file from the Ubuntu website? I'm not sure how somebody would verify that after you've put it onto a memory stick :/
legendary
Activity: 1382
Merit: 1122
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
Yeah there's nothing stopping you signing it with a Bitcoin address instead of a PGP key.

Not sure what the best way to checksum every file on the disk would be, possibly something like

Code:
find / -type f -print0 ! -name "sums.txt" | xargs -0 sha1sum > sums.txt

After that, people can verify everything with

Code:
sha1sum -c /path/to/sums.txt

You will also need to sign sums.txt with your Bitcoin address otherwise it would be a bit worthless. Good luck Smiley

I'll try that out when I'm at a computer and sign it here. Is that code for Windows or Linux?

Just run it in the Terminal on Linux. It might take a while to run.

All I got with that was a whole lot of Permission Denied and Invalid Argument. It was pretty much instant because it just flew through everything and didn't have anything it was able to compute I suppose.

Edit: I have a file called MD5SUMS, is that a checksum that's useful?
sr. member
Activity: 322
Merit: 250
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
Yeah there's nothing stopping you signing it with a Bitcoin address instead of a PGP key.

Not sure what the best way to checksum every file on the disk would be, possibly something like

Code:
find / -type f -print0 ! -name "sums.txt" | xargs -0 sha1sum > sums.txt

After that, people can verify everything with

Code:
sha1sum -c /path/to/sums.txt

You will also need to sign sums.txt with your Bitcoin address otherwise it would be a bit worthless. Good luck Smiley

I'll try that out when I'm at a computer and sign it here. Is that code for Windows or Linux?

Just run it in the Terminal on Linux. It might take a while to run.
legendary
Activity: 1382
Merit: 1122
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
Yeah there's nothing stopping you signing it with a Bitcoin address instead of a PGP key.

Not sure what the best way to checksum every file on the disk would be, possibly something like

Code:
find / -type f -print0 ! -name "sums.txt" | xargs -0 sha1sum > sums.txt

After that, people can verify everything with

Code:
sha1sum -c /path/to/sums.txt

You will also need to sign sums.txt with your Bitcoin address otherwise it would be a bit worthless. Good luck Smiley

I'll try that out when I'm at a computer and sign it here. Is that code for Windows or Linux?
sr. member
Activity: 322
Merit: 250
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
Yeah there's nothing stopping you signing it with a Bitcoin address instead of a PGP key.

Not sure what the best way to checksum every file on the disk would be, possibly something like

Code:
find / -type f -print0 ! -name "sums.txt" | xargs -0 sha1sum > sums.txt

After that, people can verify everything with

Code:
sha1sum -c /path/to/sums.txt

You will also need to sign sums.txt with your Bitcoin address otherwise it would be a bit worthless. Good luck Smiley
legendary
Activity: 1382
Merit: 1122
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?

You definitely sound like you know a lot more about what you're talking about than I do. I don't have a PGP key per se but I have old bitcoin addresses that I've staked here on bitcointalk.

Any suggestions for how I could checksum every file? I've never done it before.
sr. member
Activity: 322
Merit: 250
Don't trust me. In fact - don't trust anyone, ever. Scan the USB with your favourite anti-virus software. Do any other tests to make sure you're 100% safe.
Maybe you could checksum every file on the memory stick and then sign that with a PGP key so that people know that nothing has been tampered with?
legendary
Activity: 1382
Merit: 1122
I can do pretty much whatever Linux distribution you'd like, for example I have both a 32bit and a 64bit Linux mint 18.1 USB currently. I can also give an in depth guide for starting up a live USB (no hard drive even needed in the computer)! Mint is a little more user friendly for Windows users IMO.
legendary
Activity: 1382
Merit: 1122
interested

Send me a PM and we'll work out the details.
hero member
Activity: 854
Merit: 658
rgbkey.github.io/pgp.txt
If someone knows how to use ubuntu to generate addresses offline, then they know how to use the deadass simple USB installer for ubuntu and they can make their own.

That's exactly what these are for.

I offer a guide with step by step instructions showing how you can create paper wallets for people who don't know how or don't have the time/knowledge to create live USBs. I also offer a guide on how to securely create vanity Paper wallets. Something I couldn't find anywhere.

If you already know how to create paper wallets and create an Ubuntu stick then this isn't the product for you although I'm sure you're well aware of that. Nice signature.
Alright, I can respect that business model. I didn't read far enough to see that you were also offering instructions. I'm not always a cynic, I promise Tongue

EDIT: Although if you don't, you might want to add instructions on how to live-boot from the USB.
legendary
Activity: 1382
Merit: 1122
If someone knows how to use ubuntu to generate addresses offline, then they know how to use the deadass simple USB installer for ubuntu and they can make their own.

That's exactly what these are for.

I offer a guide with step by step instructions showing how you can create paper wallets for people who don't know how or don't have the time/knowledge to create live USBs. I also offer a guide on how to securely create vanity Paper wallets. Something I couldn't find anywhere.

If you already know how to create paper wallets and create an Ubuntu stick then this isn't the product for you although I'm sure you're well aware of that. Nice signature.
hero member
Activity: 854
Merit: 658
rgbkey.github.io/pgp.txt
If someone knows how to use ubuntu to generate addresses offline, then they know how to use the deadass simple USB installer for ubuntu and they can make their own.
legendary
Activity: 1382
Merit: 1122
Is there a video of this in action? Does it boot quickly?

I don't have a video but I'm sure you could find one on YouTube. It doesn't take long to boot at all. On a Windows computer you hit F12, choose to boot the USB. It takes you to some options to either install or try Ubuntu and from there it loads it. It's very straightforward.
newbie
Activity: 23
Merit: 0
Is there a video of this in action? Does it boot quickly?
legendary
Activity: 1382
Merit: 1122
Can you also provide a cheaper virtual alternative? Maybe a payivy link, so we don't have to pay a premium for shipping such a small thing?

I was thinking of this but it just creates more work for whoever buys the file. Installing Ubuntu onto a USB isn't as easy as dragging and dropping it, so there would need to be extra instructions. This could be pretty arduous for a beginner, which is who I'm thinking will have the most interest in this product.

If I can find a way I'll definitely upload that. It's a nice idea in theory but might not be possible (for me to do at least).

You could include instructions, like just provide the iso file and maybe a something like VCD (Virtual Clone Drive). Then it's pretty much drag and drop.

Just asking, is there anything different provided, besides just a ubuntu OS and an optional bunch of files? Is the OS a private fork?

I think you're overestimating my technical abilities Wink. There is no private fork, it's your normal Ubuntu 16.04. I've never heard of a VCD but I'll have a look into it and see how easy that would be for me to implement. My whole idea here is to make it easy for newbies to create paper wallets.
legendary
Activity: 1232
Merit: 1030
give me your cryptos
Can you also provide a cheaper virtual alternative? Maybe a payivy link, so we don't have to pay a premium for shipping such a small thing?

I was thinking of this but it just creates more work for whoever buys the file. Installing Ubuntu onto a USB isn't as easy as dragging and dropping it, so there would need to be extra instructions. This could be pretty arduous for a beginner, which is who I'm thinking will have the most interest in this product.

If I can find a way I'll definitely upload that. It's a nice idea in theory but might not be possible (for me to do at least).

You could include instructions, like just provide the iso file and maybe a something like VCD (Virtual Clone Drive). Then it's pretty much drag and drop.

Just asking, is there anything different provided, besides just a ubuntu OS and an optional bunch of files? Is the OS a private fork?
legendary
Activity: 1382
Merit: 1122
I have some 64 bit Ubuntu 16.04 versions in stock. I got some really tiny USBs (great for cheap shipping).

Post or PM if you're interested! Pics will be updated ASAP!
hero member
Activity: 1316
Merit: 503
Despite your recommendation to run it through an antivirus, I still think it wouldn't be too hard to add a line or two to the code in the version of bitaddress/vanitygen that would either a) send the info to some server somewhere or b) bias the generation of addresses.

In order to truly ensure that it was secure, you would need to get a copy of everything on the usb from a reputable source and perform a diff to ensure that no malicious code was added inside it. And at that point, just downloading it from the source would be easier.

How would it send information to a server if you never connected your computer/laptop to the internet?

(Unless you use a wired connection and leave the ethernet cable in Tongue)
Pages:
Jump to: