Questions tagged [security]

This tag should be used for questions regarding security issues with the design or implementation of Bitcoin and related cryptocurrencies.

26 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
4answers
354 views

Store Bitcoins offline

I have some bitcoins and ether at Blockchain.info and I am really scared of losing them. How do I best secure them? Right now I have a paper with the code to restore my wallet, but my coins are still ...
3
votes
1answer
77 views

How the Bitcoin community will handle attacks on a Client's code?

I have some thoughts about the following scenario. The brightest future. The Bitcoin becomes a very popular and liquid currency all over the world. Some serious financial or political parties may ...
2
votes
1answer
135 views

Lightning network hub security?

Reading the whitepaper, I came across a point: nodes wishing to act as effective intermediaries, 'hubs' or not, need high availability and need to operate autonomously. This means they must have ...
2
votes
0answers
94 views

Is the reference client of Bitcoin regularly audited?

I imagine that plenty of eyes have combed through the reference client's source code. But the code is still changing for a variety of reasons (features, patches, improvements, etc). I didn't find ...
2
votes
0answers
246 views

Is there a way to import a private key already protected with the passphrase?

Let's say I have a hot wallet that has passphrase encryption enabled. Then let's say a large withdrawal needs to occur but the hot wallet has insufficient funds and a transfer from cold storage is ...
2
votes
0answers
262 views

Is anyone working on / has implemented a “two-factor paper wallet”?

I just created this wiki page. I'm coining the term here, I think ... not sure what was it called when discussed on Bitcointalk. My question is: Has anyone implemented this "2 factor paper wallet"? ...
1
vote
0answers
46 views

Why Spectre has a “weak” liveness?

According to this article: (https://medium.com/@avivzohar/the-spectre-protocol-7dbbebb707b5) written by one of Spectre's author (Aviv Zohar), it is mentioned that Spectre has weak liveness. What is ...
1
vote
0answers
226 views

How prevent from hacking personal computer and using my jaxx account

It looks like anyone who can hack a computer has direct access to the jaxx wallet stored on the hard drive. Is there any way to block access like requiring a strong password to open the wallet? ...
1
vote
0answers
89 views

Is the Password stored in RAM in clear text after decrypting the MultiBit HD wallet?

After decrypting your wallet in MultiBit HD, is the clear text version of password stored in the RAM?
1
vote
0answers
1k views

How can bitcoins be stolen?

I read about Mt. Gox and how 850,000 bitcoins has been "stolen" from it. I do not understand how someone can steal bitcoins: if MtGox has bitcoins, and MrThief wants to use this bitcoins, then MrThief ...
1
vote
0answers
205 views

Privacy risks with a hardware wallet

I'm trying to understand the privacy risks with a hardware wallet like a Trezor, Ledger, or similar. I understand the common workflow with these wallets is that you use an SPV bitcoin client which ...
1
vote
0answers
41 views

How can I find out if a mining pool has been leaking user information?

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable. The spam is bitcoin related and ...
1
vote
0answers
30 views

Ensure Wallet consistency

I have recently migrated machine. I used the Apple Migration Wizard and when it was finished my new machine's copy of Multibit appears to have my BTC within it. My next task is to wipe the old ...
1
vote
0answers
109 views

Trying to figure out the two-part authentication process. Can anyone give direct instructions?

I'm using btc-e.com verification, in the Finances section. It supplies two key codes and has a square bar code to scan. I've set up my google account for two-part verification, and google is ALSO ...
1
vote
0answers
696 views

Should I run Bitcoind / JSON RPC on a home server connecting to a VPS

I'm debating whether to run bitcoind/ JSON-RPC on a server from my house that takes requests from users on hosted VPS. While I'm not starting a bitcoin poker site, I can explain what I'm doing easier ...
1
vote
2answers
49 views

Is it possible to separate blockchain and wallet functions?

I'm looking for a way to use bitcoin-core in monero-way (It uses separate blockchain daemon and wallet daemon). I'd like to run bitcoin-qt interface on my laptop and connect to external node with ...
0
votes
0answers
30 views

BIP32 HD Wallet vs HMAC vs Hashing

I've been working on a website which will be caring out various cryptographic operations. On the website users can post Ads. Each Ad has a monotonically increasing unique ID. For each Ad, I would like ...
0
votes
0answers
29 views

secure Multi-Party Computation (sMPC) in Enigma?

In Enigma whitepaper (>> Link to the Enigma paper <<), in section 5.1 "Overview of secure multi-party computation", page 4, explains how to divide a secret s into multiple shares, using ...
0
votes
0answers
46 views

How may bitcoins hash algorithm be secured in the future from quantum computing brute forcing?

Other threads already answer very clearly that quantum comps could easily "break" /attack bitcoins chain. Now: Are there any ideas among the bitcoin devs circulating out there, how to save bitcoin ...
0
votes
1answer
2k views

Private key to mnemonic words, is it safe?

Is it safe to do the following? Suppose I do not want the HD wallet, but I do want the convenience of using mnemonic words to remember the private key. I know I can convert the private key's hex ...
0
votes
1answer
249 views

A few security-related questions: how do I automate a web service as much as possible without storing private keys on server?

I'm learning how to use bitcoind, and want to set up a side project that uses bitcoin to learn along the way. I'll be using the json-rpc with PHP on my server. I want to create a service that will ...
0
votes
1answer
264 views

Are DAG-based crypto currencies as secure as proof-of-work based blockchains?

A key feature of blockchain based cryptocurrencies is that they provide inherently secure systems that don't rely on third parties. The newer DAG-based cryptos like Byteball are being touted as ...
0
votes
1answer
169 views

Is there a tutorial on how to set up a secure enviroment and use Electrum?

Which OS to use? How to verify that the OS is secure? How to download and install Electrum securely? There are many methods - binaries, git, homebrew, Ubuntu package, building from source. Is there ...
-1
votes
1answer
43 views

How Spectre tolerates spam transactions?

Spectre is a DAG based (directed acyclic graph) distributed ledger (a structure as an alternative to blockchain based distributed ledger). Is there any mechanism in Spectre to prevent sending spam ...
-1
votes
1answer
2k views

How can I cancel a pending transaction

https://blockchain.info/tx/d2aa8e971dd26a4f4598f57b55e921a62fa376dad1cf25e426b6ba7d79052466?show_adv=true. This transaction was made by some fraudsters on my wallet. I later recovered my wallet. How ...
-1
votes
1answer
40 views

What arguments would one pose to shows Bitcoin is an enabler of crime and not an enabler of crime?

What arguments could be made for Bitcoin being an enabler of criminal activity? For example: Could Bitcoin be used as the backbone of Ponzi Schemes? Are there any consequences for Bitcoin miners who ...