Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 827. (Read 4671660 times)

legendary
Activity: 1105
Merit: 1000
Edit: It looks like I'm a little late to the party, but hey! I posted pics.

I was able to sync bytecoin full client with less than 4G of ram, but could not with the monero full client. Is the dev team still active ? How come this has not ported to monero ?

I think a more interesting question is 'How long did it take?'

I got my node synced from scratch in about 3 hours.


Assuming you have an SSD, sync time should be almost completely dominated by your internet connection and the peer(s) you happen to connect to.

On my machine actual chain processing only takes around 11 minutes IIRC.
hero member
Activity: 649
Merit: 500


Why not MyMonero as a secure online service instead of Poloniex? Smiley
 
 
That's not a bad idea.  Perhaps quarters, with 25% on Poloniex and 25% on MyMonero.   I feel pretty safe from the user end considering that Polo has 2 factor authentication and is KYC compliant, but precautions are always a good thing. 

If Polo gets hacked or disappears you say goodbye to your XMR.
If someone hacks MyMonero they will only be able to see those funds. If MyMonero is kaput you will still be able to get your Moneros.

OTOH

If you lose your Polo pass. Support will help you get back in.
If you lose your seed words bye, bye Moneros. The guys behind MyMonero won't be able to do anything about it.


You just have to ask yourself who do you trust more. Yourself or some guys running a crypto exchange.

Also, there is fluffly's historical advice for the paranoid android:

Hey everyone,

What security measures do you recommend for your cold storage keys. I was thinking more about measures to prevent hacking/theft of the keys. Should i be paranoid to the point of creating the wallet in an air gap and never look into it until I need it? (Lets not go into the "Ruiu says badBIOS leaps air gaps" territory).

Regarding backup I'm doing the _strongly encrypt your files and stored them in offline and online sources and don't forget the deterministic seed_ routine. If anyone as further thoughts on backup that would be appreciated also.


Remember, rockets are old school. We are going to the moon in a space elevator. Keep calm and get some moar.

Peace!

My suggestion is as follows:

1. Take any machine you have lying around, even your normal workstation. You may find it easier to use an older computer that has no wifi or bluetooth if you're particularly paranoid.
2. Create a Linux or Windows bootable disk, and make sure you have the Monero binaries on the same disk or on a second disk (for Linux make sure you have also downloaded copies of the dependencies you will need, libboost1.55 and miniupnpc for instance).
3. Disconnect the network and/or Internet cables from your machine, physically remove the wifi card or switch the wifi/bluetooth off on a laptop if possible.
4. Boot into your bootable OS, install the dependencies if necessary.
5. Copy the Monero binaries to to a RAM disk (/dev/shm in Linux, Windows bootable ISOs normally have a Z: drive or something)
6. Don't run the Monero daemon. Instead, using the command line, use simplewallet to create a new wallet.
7. When prompted for a name, give it any name, it doesn't really matter.
8. When prompted for a password, type in like 50 - 100 random characters. Don't worry that you don't know the password, just make it LONG.
9. Write down (on paper) your 24 word mnemonic seed.
10. Write down (on your phone, on paper, on another computer, wherever you want) your address and view key.
11. Switch off the computer, remove the battery if there is one, and leave it physically off for a few hours.

There you go - the wallet you've created was created in RAM, and the digital files are now lost forever. If some magical hacker manages to somehow get the data, they will lack the long password to open it. If you need to receive payments, you have the address, and you have the view key if needed. If you need access to it, you have your 24 word seed, and you can now write out several copies of it so that you have an offsite copy (eg. a bank deposit box). Due to the nature of the key you can write it as part of something else - eg. write a fake love letter to your wife so that the 24 words on the left hand side are your key or whatever. Then write a bunch of extra love letters. That way, if your deposit box is ever discovered, it'll be disregarded as unimportant love letters.
hero member
Activity: 649
Merit: 500
Edit: It looks like I'm a little late to the party, but hey! I posted pics.

I was able to sync bytecoin full client with less than 4G of ram, but could not with the monero full client. Is the dev team still active ? How come this has not ported to monero ?

I think a more interesting question is 'How long did it take?'

I got my node synced from scratch in about 3 hours.



hero member
Activity: 798
Merit: 1000

2) Do not enter any passwords or store unencrypted keys wallets etc on any computer where Microsoft Windows is the host (even in a GNU/Linux virtual machine) or on any virtual Microsoft Windows guest. This is critical. Windows malware is a very common cause for lost coins!
3) Run your own full node or nodes with an encrypted wallet.


I just want to clarify please, your are saying not to write down instructions to recreate your password or the password itself anywhere within the windows or virtual machine accessed through windows. Does this mean that virtual machine in general is considered some what severley compromised and it be more prudent to just boot to straight to linux? Thanks for your help.

If you're concerned with windows malware then yes. It is better to not boot to windows at all. The point being made though is to make extra sure that no plain text passwords or password clues are being stored in the windows environment.
legendary
Activity: 1276
Merit: 1001
I built from source. It does not use a lot of ram as the prebuilt binary, but its not fast at all. Load avg is about 5. Maybe its heavy on IO and my encrypted drive is slow.

You can look at the outout of "top". Near the top, you should see a line starting with "%Cpu(s):
If you get a high % in the wa field, you're waiting on I/O. If you get lots in us, it's busy CPU crunching in user space.

legendary
Activity: 2968
Merit: 1198
LMDB sync from scratch in just over 3 hours, and daemon using only 60MB to 100MB RAM. DB is so small I can't find it. What a difference!

LMDB? Did you just say its possible to sync monero chain from scratch in 3 hours ? I have spent 2.5  days syncing with bitmonerod and still not get to half, how can I enable that LMDB thing?

You have to build from source (github).

Of course, your sync speed will depend on hardware and bandwidth. But in virtually all cases it will be much faster than the older version.



I built from source. It does not use a lot of ram as the prebuilt binary, but its not fast at all. Load avg is about 5. Maybe its heavy on IO and my encrypted drive is slow.

That could be.
legendary
Activity: 1078
Merit: 1002
Bitcoin is new, makes sense to hodl.
LMDB sync from scratch in just over 3 hours, and daemon using only 60MB to 100MB RAM. DB is so small I can't find it. What a difference!

LMDB? Did you just say its possible to sync monero chain from scratch in 3 hours ? I have spent 2.5  days syncing with bitmonerod and still not get to half, how can I enable that LMDB thing?

You have to build from source (github).

Of course, your sync speed will depend on hardware and bandwidth. But in virtually all cases it will be much faster than the older version.



I built from source. It does not use a lot of ram as the prebuilt binary, but its not fast at all. Load avg is about 5. Maybe its heavy on IO and my encrypted drive is slow.
legendary
Activity: 2968
Merit: 1198
LMDB sync from scratch in just over 3 hours, and daemon using only 60MB to 100MB RAM. DB is so small I can't find it. What a difference!

LMDB? Did you just say its possible to sync monero chain from scratch in 3 hours ? I have spent 2.5  days syncing with bitmonerod and still not get to half, how can I enable that LMDB thing?

You have to build from source (github).

Of course, your sync speed will depend on hardware and bandwidth. But in virtually all cases it will be much faster than the older version.

legendary
Activity: 1078
Merit: 1002
Bitcoin is new, makes sense to hodl.
LMDB sync from scratch in just over 3 hours, and daemon using only 60MB to 100MB RAM. DB is so small I can't find it. What a difference!

LMDB? Did you just say its possible to sync monero chain from scratch in 3 hours ? I have spent 2.5  days syncing with bitmonerod and still not get to half, how can I enable that LMDB thing?
sr. member
Activity: 478
Merit: 250

2) Do not enter any passwords or store unencrypted keys wallets etc on any computer where Microsoft Windows is the host (even in a GNU/Linux virtual machine) or on any virtual Microsoft Windows guest. This is critical. Windows malware is a very common cause for lost coins!
3) Run your own full node or nodes with an encrypted wallet.


I just want to clarify please, your are saying not to write down instructions to recreate your password or the password itself anywhere within the windows or virtual machine accessed through windows. Does this mean that virtual machine in general is considered some what severley compromised and it be more prudent to just boot to straight to linux? Thanks for your help.
hero member
Activity: 795
Merit: 514
Not everyone wants to be their own bank.  Most people honestly want others to take responsibility for things for them.  

I truly think this is crypto's greatest flaw, and it will likely never be remedied. Few people are comfortable being solely responsible for securing their wealth, and even those who are I'd bet are more afraid of losing their keys or fucking something up than becoming victims of theft.

Centralized banking has its benefits, and it's up to us to diversify according to our risk tolerance.
sr. member
Activity: 478
Merit: 250
we' mostly kidding. But there exists the reality that these supposedly reliable exhanges get cleaned out regularly. Usually there are small warning signs that most ignore. Then in happens, moral levels in the in the community are low because every feels bad. The exchange typically fucking dies. This would especially hurt if it was your only exchange with decent volume. And this is adds to he stigma of people on the fence about be BTC, how many looks at each other and say" actually lets not buy any fucking btc, it all goes missing". I'm mostly making conversation and its not about you, but its fun to learn how to make a secure wallet that you understand and feel safe about it. If you have a big position you should definitely take controll of it and be the only one with private keys.
sr. member
Activity: 350
Merit: 250
Be your own bank = you need to deal with the security yourself. ArticMine steps are pretty much identical to mine, I can't believe people store crypto in Windows machines, unless its in an encrypted format and never decrypted not even for test. Mymonero is perfect for a hotwallet, anything else (poloniex included) I would not trust.
legendary
Activity: 2282
Merit: 1050
Monero Core Team
This is what I do. I started with Bitcoin back in 2011 then added Namecoin and then Monero. I have not lost any crypto currency nor fiat for that matter to either computer hacks or "Goxed" exchanges (including Mt Gox itself). By the way I still keep my Mt Gox Yubikey on my keychain as a powerful reminder to not leave funds in an exchange longer than is strictly necessary for trading.

Here is what I do
1) Install GNU/Linux as the host. If one is using Windows XP or Windows 7 migrating to Ubuntu is way easier for non techs than migrating to Windows 8.x or Windows 10.
2) Do not enter any passwords or store unencrypted keys wallets etc on any computer where Microsoft Windows is the host (even in a GNU/Linux virtual machine) or on any virtual Microsoft Windows guest. This is critical. Windows malware is a very common cause for lost coins!
3) Run your own full node or nodes with an encrypted wallet.
4) Make multiple backups of the Keys files for Monero: wallet.bin.keys together with wallet.bin.address.txt as well as the Monero words.  For Bitcoin (reference client)  wallet.dat etc.
5) Get Encryption software either use the tools built into GNU/Linux or for the not so tech minded use Truecrypt.  Yes this is still good and easy to use https://www.grc.com/misc/truecrypt/truecrypt.htm
6) Store these encrypted backups in many different safe places one can think of using as many varied technologies and locations as one can think of. These can range from multiple computer hard drives, usb hard drives, optical media, floppy disks, online email accounts, online services, bank safety deposit boxes, with friends, relatives etc. The NSA shared folders in Windows 10, iCloud etc are perfectly fine for this, remember it was encrypted on GNU/Linux!
7) Regularly test these backups on a second node on a different computer to make sure everything works. Perform a dummy run on a simulated house burns down scenario, disaster etc. Can you get your coins after fleeing a disaster etc?
Cool Use mobile wallets / online wallets for minimal daily spending amounts only say under 200 XMR equivalent at current exchange rates.
9) Consider Estate planing.
10) Be creative. A 5.25 in floppy disk in a bank safety deposit box can be very effective. If the safety deposit box is compromised, the obsolete technology will slow down an attacker long enough in order for the rightful owner to empty the wallet. On the other hand the executor of your estate has ample time to figure out how to read the floppy disk. This can work to store encryption passwords for example.
hero member
Activity: 770
Merit: 504
OK, ok, ok!  Don't fuck me up.   Cheesy  
  
But consider this: think of me as a bridge between a normal person and the crypto geniuses as yourselves.  Now, if this is the way *I* see it by default you can imagine how the average person sees it by default.  
  
Not everyone wants to be their own bank.  Most people honestly want others to take responsibility for things for them.  
  
Until we have a solution that's easier than banks and resides on people's mobile phones, crypto banks will always exist because there is profit to be made.  
  
To understand human preferences and how to pierce the mass market you need to understand why we keep choosing glossy and simple solutions over more advanced and technically superior ones...  Time and time again.  
  
 If we make Monero glossy, easy, and make it a status symbol to transact in Monero (have people assign ephemeral qualities to Monero ownership), *then* we are looking at true mass acceptance.  
  
Until then, humans will keep going for the easy solution because humans hardware has not had the chance to catch up to the radical changes that have happened around them in the past century and we are pretty much still running a fork of caveman software.
legendary
Activity: 1260
Merit: 1008

With the reduced memory requirements is it time for me to set up my dedicated full node? 

I saw a brand new HP Intel Celeron laptop with 2GB of memory on sale at Best Buy last night for $179.  It was too good of a deal so I bought it.  I've been planning to create a Monero "pretty-secure" wallet station for a while so I'm not holding all my coins on Poloniex. 
 
The ultimate plan for the savings is to hold a third in a secure online service (currently Poloniex), a third on a full node running on a laptop only used to run that full node (with an encrypted backup), and a third in cold storage. 
 
Thoughts?  Also, this little thing came with Windows 8.  I've never used a Linux distro before, but I was thinking about trying it for this project. 
 
(also, I would obviously only play around with test amounts of coins until I am very confident in my abilities to send/receive Monero on a direct level)

Duuuuudeeeee! Cmon that is just so wrong on another level. As others have said no matter the login security or whatever perception you have on their compliance exchanges have proven to be unreliable. Keeping control of your own funds is one of the main draws to crypto in the first place. I was there when Polo had it's first incident and was honestly impressed with how it was handled.

However when there are other legitimate options such as MyMonero or MoneroMoo's http://moneroaddress.org/ these options should be taken advantage of. I realize and understand you may want to trade on Polo thus requiring a balance however when that balance is 1/3 , 1/2 or 1/1 of your total holdings you begin to swim in dangerous waters. Maybe your level of risk is higher and you feel fine completely trusting an exchange, but I'd hate to see a staunch supporter as yourself get burned so early into the Monero economy.


I know. This shit blows my mother-f**in mind. Cryptocurrency, invented to keep the banks out of our finances... and what do people do? Create new banks (and call them exchanges). HURTS MAH BRAIN!

and yes AP - get that fresh new PC of yours running linux, without a doubt.
hero member
Activity: 583
Merit: 500
Bitcoin for all & all for Bitcoin

With the reduced memory requirements is it time for me to set up my dedicated full node? 

I saw a brand new HP Intel Celeron laptop with 2GB of memory on sale at Best Buy last night for $179.  It was too good of a deal so I bought it.  I've been planning to create a Monero "pretty-secure" wallet station for a while so I'm not holding all my coins on Poloniex. 
 
The ultimate plan for the savings is to hold a third in a secure online service (currently Poloniex), a third on a full node running on a laptop only used to run that full node (with an encrypted backup), and a third in cold storage. 
 
Thoughts?  Also, this little thing came with Windows 8.  I've never used a Linux distro before, but I was thinking about trying it for this project. 
 
(also, I would obviously only play around with test amounts of coins until I am very confident in my abilities to send/receive Monero on a direct level)

Duuuuudeeeee! Cmon that is just so wrong on another level. As others have said no matter the login security or whatever perception you have on their compliance exchanges have proven to be unreliable. Keeping control of your own funds is one of the main draws to crypto in the first place. I was there when Polo had it's first incident and was honestly impressed with how it was handled.

However when there are other legitimate options such as MyMonero or MoneroMoo's http://moneroaddress.org/ these options should be taken advantage of. I realize and understand you may want to trade on Polo thus requiring a balance however when that balance is 1/3 , 1/2 or 1/1 of your total holdings you begin to swim in dangerous waters. Maybe your level of risk is higher and you feel fine completely trusting an exchange, but I'd hate to see a staunch supporter as yourself get burned so early into the Monero economy.
legendary
Activity: 2968
Merit: 1198
Word to the wise: hold your own private keys.

And hold them safely.

legendary
Activity: 3766
Merit: 5146
Note the unconventional cAPITALIZATION!


Why not MyMonero as a secure online service instead of Poloniex? Smiley
 
 
That's not a bad idea.  Perhaps quarters, with 25% on Poloniex and 25% on MyMonero.   I feel pretty safe from the user end considering that Polo has 2 factor authentication and is KYC compliant, but precautions are always a good thing. 

There is plenty of evidence that storing ANY amount of crypto in a place where someone else holds the private keys is a recipe for disaster. Exchanges which lost coins had 2FA as well.

Word to the wise: hold your own private keys.
hero member
Activity: 770
Merit: 504
Also, off-topic shout out to TrueCrypt...  I don't know if the Cryptonote people are the same ones behind the incredible TrueCrypt program, but I've been using it for a decade and it was my first foray into the word of encryption.  
  
In 2005 the idea that I could create a plausibly deniable hidden volume that would be lost forever  was about the coolest thing  I could ever imagine.  
  
So much thank-you to whatever heroes were behind that marvel.
Jump to: