Questions tagged [security]
This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.
879
questions
1
vote
1
answer
30
views
Why is the Generator Point G for secp256k1 curve typically indicated in (y,-x) quadrant?
Generator Point G for the secp256k1 curve is typically indicated below where the curve intersects the y-axis. At x=0, y=sqrt(7) and -sqrt(7), which are both small numbers less than 3, but G is an ...
- 23
1
vote
0
answers
17
views
Which offers more privacy, coinjoin-whirlpool or non-KYC online exchanges?
After buying crypto with fiat on a KYC exchange, instead of just moving the crypto to a wallet, I understand that I should get more anonymity from tracking by putting the coin through coinjoin or ...
1
vote
1
answer
46
views
Is it feasible to calculate EC private key k from public key K for very low values of k?
If an EC private key k is very small, say "1", is it feasible to calculate the private key k from its public key K, since there would only be one step back to generator point G and therefore ...
- 23
5
votes
2
answers
423
views
How much entropy is lost alphabetising your mnemonics?
Yes I know this is a horrible idea and not BIP39 compliant, but please help satisfy my curiosity with this "thought experiment" and applied maths exercise.
Two questions, one for 12 words, ...
- 368
-2
votes
1
answer
38
views
Hello, I'm not new to crypto, but I am quite new to Mining, can someone give me some tips on the best BTC miner as of today?
I am quite afraid of all the things I read on the internet, in seems that there are quite a bit of scams going on and the whole space, specifically crypto mining is quite uncertain.
Anyway, I was ...
2
votes
1
answer
47
views
Can hot wallets be secure?
Hot wallets are generally considered the least secure because their online nature creates an opportunity for hackers to crack them. but is there a way to cryptographically secure the seed generation ...
- 21
2
votes
1
answer
40
views
Is it safer to send bitcoin to multiple addresses when moving to another wallet?
If I decide to move all of my bitcoins from one wallet to another, are there any theoretical benefits to generate multiple addresses in a new wallet and split the bitcoins between them?
It will still ...
- 23
0
votes
0
answers
61
views
Research article about impact of BGP hijacking on bitcoin p2p network
Based on this answer from 2014, bitcoin nodes are vulnerable to BGP hijacking. There was an incident today in which twitter prefix was hijacked and details are shared in 2 blog posts:
https://isc.sans....
- 65
1
vote
1
answer
62
views
Is bitcoin core secure?
Amir Taaki says Bitcoin Core is not secure because of undefined behaviour in this video https://youtu.be/EPpDpULPhHc after 30:00
Is this true and how can we fix this? What are the risks of using ...
- 11
1
vote
1
answer
81
views
Bitcoin private key, key range calculation?
I saw a Bitcoin puzzle on https://privatekeys.pw, on which there are different private key spaces with addresses and then you need to somehow find out the right private key?
Is there a way to ...
- 27
0
votes
0
answers
45
views
How secure are the decentralized nodes?
I colloquially understand the inherent security provided by the decentralized distribution of the nodes that host the bitcoin network. However, is the distribution of the devices which run the nodes ...
- 145
0
votes
1
answer
83
views
Bitcoin.org gpg keys expired?
I was trying to add the keys to a keyring to verify the bitcoin core download, but it looks like the gpg keys are all expired.
- 1
0
votes
1
answer
46
views
Exploit vulnerable projects using RBF policy
If a project is vulnerable to some type of RBF policies, how could an attacker exploit this project?
user103136
1
vote
1
answer
112
views
What is a security model, security assumption, and security guarantee?
I often hear bitcoiners talk about
security models
security assumptions
security guarantees
but I can't find definitions of these terms.
What do these terms mean and how do they relate to each other?...
- 285
0
votes
0
answers
36
views
Claimed Bitcoin before high security
I claimed a paper wallet on Crypto.com before the high security went into affect. I am unable to get into my account and access my currency. Pass phrases, I.D., s.s., were not part of the process at ...
0
votes
1
answer
28
views
Is it possible to realize MitM attack between bitcoin full node and listener of this node?
I have the appication listening bitcoin full node and receiving tx messages. Is it possible to change TxOut value by man in the middle, so I don't detect this changes?
Node I connect is public node, ...
0
votes
1
answer
37
views
Methods to find BTC addresses collisions with less complexity approaches/attemps
I have one question. I'm trying to lower complexity when breaking private keys for BTC.
If we have that an address is a hash160 from priv key, then we can assume that we have 2^96 per each address.
If ...
- 101
1
vote
1
answer
60
views
How does PoW ensure that all the transactions are recorded and that all the transactions are valid?
I just started to study blockchain and bitcoin yesterday and came up with some questions.
If miners can select transactions when creating a block, how is it ensured that all the transactions over ...
- 111
0
votes
1
answer
89
views
Does a 12 word recovery phrase offer the same security as 24 words?
Watching this Q&A with andreas he states that a 12 word recovery phrase offers the same amount of security as a 24 word seed phrase as the output is 128 bits either way.
If this is the case, why ...
- 11
1
vote
1
answer
58
views
If someone cuts a standard Bitcoin private key into two (or more) equal parts, would another person be able to spend the coins after finding one part?
Someone has a standard (non-compressed) bitcoin private key (256 bits) and wishes to store it on paper. Being paranoid about someone finding the sheet of paper, he/she cuts the private key up and ...
- 142
1
vote
0
answers
46
views
How many words are enough to confirm user backed up all words for seed phrase?
If there are 12 words in the seed phrase, is confirming random 3 words enough to ensure user has backed up all words?
Or is it necessary to confirm all words and in the correct order?
If I create a ...
user103136
0
votes
1
answer
34
views
Does an actual transaction happen on the blockchain when you buy btc/usdt?
I was wondering if I buy or sell something on the exchange if coins are actually transfered somewhere of if the exchange just changes values of what belongs to me.
0
votes
1
answer
53
views
do Bitcoin full node onions also relay non-bitcoin traffic?
During the past week or so I am setting up a Bitcoin core full node on Raspberry Pi and making it as secure as possible. In the public mind, the onion sites and Darknet are associated with many things ...
- 3
0
votes
0
answers
39
views
Number of miners and security
Where would one look for thoughtful estimates of the number of miners necessary to provide a reasonable level of security, for various definitions of "reasonable"?
- 137
1
vote
1
answer
145
views
why was syscall sandboxing added in bitcoin core?
I could not understand why this pull request was merged:
https://github.com/bitcoin/bitcoin/pull/20487
According to PR:
Enable filtering of system calls using seccomp-bpf: allow only explicitly ...
user103136
1
vote
1
answer
68
views
Can a node be maliciously programmed to validate all the transactions coming from a specific entity?
In a blockchain there are miner nodes and validator nodes. The job of a validator node is to validate transactions to be included in the mempool, broadcast or propagate the transaction for the other ...
3
votes
0
answers
109
views
How much mining activity is needed for Bitcoin to remain secure?
I'm not looking for a number, but rather for a way to make an estimate taking things like market capitalization and the fact that mining uses ASICs into account. (I assume ASICs are relevant since ...
- 31
-3
votes
2
answers
492
views
How to derive the Private key when the two the nonces are k and k*2
Is the same private key using k and k*2 respectively in two different signatures vulnerable?
If yes How to calculate the key in this case
Here is an example, Both signatures are valid and the nonce of ...
0
votes
0
answers
27
views
There is a problem with file SHA256SUMS.asc [duplicate]
There is a problem with a file SHA256SUMS.asc in https://bitcoin.org/en/download
It consists a lot of strange signatures and no sha256sum strings and no signatures of Wladimir J. van der Laan’s ...
2
votes
2
answers
89
views
If you wanted to privately receive bitcoin from someone, how would you do that?
I do not like to be tracked when receiving or sending bitcoins.
How do you make a secure wallet?
If you wanted to privately get bitcoin from someone, how do you get it?
How do you get the address to ...
- 21
0
votes
0
answers
39
views
Help Unlock Bitcoin Wallet [duplicate]
I have a lot of BTC in my wallet, but a virus infected my old computer. I remember the login, but there is no password and mail (((Is it possible to do something ???
- 1
0
votes
0
answers
27
views
Is this a good recommendation as secure way to generate paper wallet via iOS app for non-technical user?
I have suggested to a non-technical friend to use this as a way to generate a paper wallet using an iphone. I'm trying to see if there are any pitfalls. I have used the air-gapped PC method for myself ...
0
votes
1
answer
53
views
Reusing same address potential security vunerability?
I was watching Andreas Antonopoulos talk about security on youtube. I heard him say something about using the same public address multiple times could increase risk of your private key being cracked ...
- 181
0
votes
1
answer
43
views
What is to prevent someone from giving an old school DDOS attack?
So I'm not talking about on-chain dos attack via means of penny flooding and whatnot. But what happens if the actual nodes are taken offline by an old school distributed denial of service attack via a ...
0
votes
2
answers
39
views
How many characters of an address do I actually need to verify?
Let's assume I want to verify the receive address on the phone. The recipient confirms the first M and last N characters of the address. How big is the computational effort for an attacker to create a ...
- 1
0
votes
1
answer
77
views
bitcoincore with linux (tgz) or arm linux
I am running a node on a raspberry pi 4 model B 8gb with linux as os, should I update bitcoincore with linux (tgz) or arm linux.
0
votes
1
answer
63
views
Why does the locking script for MultSig contain PubKeys instead of PubKeyHash?
I am reading "Mastering Bitcoin" by Andreas Antonopoulos. In the transactions section, the locking script for normal account(single address) is
OP_DUP OP_HASH160 <Cafe Public Key Hash> ...
- 85
0
votes
1
answer
61
views
Why is signature S value is unnecessarily high not safe?
I get frequent warning when sending RawTX to PushTX message
(Non-canonical signature: S value is unnecessarily high)
Why is signature S with a large value dangerous (that is, when the first HEX ...
0
votes
1
answer
63
views
How can I contact Bitcoin.org
I need to contact with some support from "bitcoin.org". Ive tried to found some email adress or contact with them with their web, but its simply impossible. Somebody know how can i contact ...
- 1
0
votes
1
answer
50
views
Best security practices accessing/trading crypto on computer/mobile
I’ve read online with regards to crypto that, as hardware wallet users, we should treat all devices, computer, mobile phone, software, exchanges/wallets, etc. as compromised. That being said, I have ...
0
votes
1
answer
43
views
What’s the safest long-term hardware wallet solution?
Looking for safest hardware wallet solution, for long time storage. Thanks!
- 111
1
vote
4
answers
103
views
If the nodes are what keep Bitcoin decentralized, what if some big internet company spun up 60%+ majority nodes?
If the nodes are what keep Bitcoin decentralized, what if some big internet company spun up 60%+ majority nodes?
What’s stopping them from manipulating the blockchain to change transactions?
- 181
9
votes
4
answers
6k
views
How can Bitcoin.org be hacked?
Suddenly:
The Bitcoin Foundation is giving back to the community!
We want to support our users who have helped us along the years.
Send Bitcoin to this address, and we will send double the amount in ...
- 107
1
vote
0
answers
46
views
What do people mean when they say that Bitcoin are "unconfiscateable"? [duplicate]
So all my Bitcoin are on an encrypted wallet.dat inside a VeraCrypted USB memstick inside a fireproof safe.
While this might stop random a burglar, how does it stop the government from confiscating ...
- 21
3
votes
1
answer
428
views
Why does the TXID have 256 bits when Bitcoin's address security is 160-bit?
Commonly used Bitcoin addresses have the security of 2160 (due to the RIPEMD-160 hash). This means that Bitcoin is based on the fact that 160-bit security is good enough. If someone breaks 160-bit ...
- 31
0
votes
2
answers
204
views
What do they mean by "12/24 words" or "seed words"?
Having read thousands of Bitcoin threads/questions on Reddit, there's constant references to "your 12/24 words" or "seed words".
They never once refer to wallet.dat.
I have used ...
3
votes
1
answer
42
views
Can everyone see "message signatures" I create & verify?
I need to sign and verify messages on a couple of addresses, and I need to write my full name and address as message. Is there any concern that anyone can read the message(name and address) other than ...
- 33
0
votes
2
answers
57
views
How do I get my bitcoin from exchange and put it on the bitcoin network (blockchain)? and how do i do something similar with ethereum?
Currently my bitcoin is store in Exchange. I wonder if I should simply generate bitcoin address and private key in BitAddress and send to this address and safely store the keys that was generated. But ...
0
votes
2
answers
93
views
Why bitcoins storing on a smartphone are considered vulnerable?
Let's suppose, someone stores all their bitcoins in an Android or iOS wallet.
he/she never stores a seed on the phone
he/she uses different addresses for change
wallet and gadget are password ...
user125245
1
vote
1
answer
54
views
Does Bitcoin network require at least one third honest nodes to be secure?
In byzantine generals problem, it is proved that one third or more generals should be loyal, or the problem is unsolvable from a mathematical standpoint.
Does Bitcoin network follow the same rule? How ...
- 23