2

With Bitcoins being that much worth currently, I came to the conclusion of using a unique old computer just for this "use case".

I would like to run Ubuntu with bitcoin-qt (from PPA), but now the paranoia kicks in: what if the client is corrupted? I know that I can check against the MD5/SHsomething, but who guarantees that the client itself is not corrupted due to an error/mistake or even intentionally?

It is said that with PPA, nobody guaratees that the software itself is not corrupted, so I am unsure about transfering quite a lot of money to some software I don't know anything about.

6
  • 2
    If you're really paranoid (not a bad thing) you can just avoid connecting your wallet-hosting (running the software) computer to the internet and avoid this issue entirely. In the end, though, the Bitcoin client is open-source software; no company guarantees that it will work no matter what source you obtain it from. Caveat emptor.
    – BinaryMage
    Apr 3, 2013 at 16:28
  • ok, but is there a way (without internet) to be sure that my current wallet really is valid (and contains the amount of BTC I assume) any more? For this to know, you would need internet, correct?
    – Ice09
    Apr 4, 2013 at 7:56
  • 3
    Armory (an alternate Bitcoin client) has excellent support for offline wallets and superb documentation; I'd suggest you take a look at their page here.
    – BinaryMage
    Apr 4, 2013 at 15:18
  • technically the company who develops the software (be it the original source code developers or a deviation of the original) is responsible for the stability. the entire bitcoin system is open source. if you dont want open source, bitcoin isnt for you.
    – Alex
    Apr 16, 2013 at 16:46
  • you should ask the Askubuntu.com crowd. which is also a stackexchange site.
    – Alex
    Apr 16, 2013 at 16:47

1 Answer 1

1

You can instead directly install from the source code. It is available on the project site along with release signatures.

2
  • You might want to do the deterministic build thing and then also check the hashes and pgp signatures for the executable. Help the distributedness of the build process. Next step of course is that you are trusting the Ubuntu repos, which could still completely pwn you. (As any other distro / OS of course.)
    – Jannes
    Jan 10, 2016 at 15:49
  • @Jannes: Perhaps you should write an answer, I think it would probably be better. :)
    – Murch
    Jan 10, 2016 at 20:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.