Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.
31

As the operator of the site I will try and answer the first question. Server Side The site currently runs on 4 dedicated servers, hosted in a locked cabinet. All servers run behind a dedicated cisco security appliance with intrusion detection. On the servers themselves various "booby traps" are set to alert the webmaster if an intrusion is detected. The ...


20

I am the operator of My Wallet which is a similar javascript based wallet service. I will try and keep this answer as impartial as possible. The Website Owner is Malicious The website operator is free to change the javascript code at any time so if they are so inclined can change the code to uploaded your unencrypted keys or intercept your password. If ...


16

Because Mt.Gox has to abide by anti money laundering laws they require at least some form of identification. Although this is a requirement for Fiat to Bitcoin conversion there is no need to link your normal bitcoin transactions to your Bank Account / Identity. Wallet services that deal solely with bitcoin do not need to comply with AML laws and hence ...


15

First, transfer out older coins, gathering as few inputs as possible. The client does this automatically, and exchanges will typically have a vast supply of old outputs they can claim. Second, combine transactions (using 'sendmany'), sending funds to more than one destination at a time. If you have a single, large, old transaction output you can claim, use ...


14

I'm the owner of StrongCoin. Ben has detailed just about every possible risk with StrongCoin. You can read about how we handle server security in our FAQ. It's not in my interests to defraud my customers, I'm pretty easy to trace and I don't fancy having angry users knocking on my door So with Bitcoin like cash there are risks with storage, I lost a ...


12

Accuracy not guaranteed Blockchain.info Wallets are json files. The json file is encrypted using AES (crypto-js) before the browsers asks that it be stored on the server. The wallet file is embedded in the login page as a html data attribute, the browser decrypts the file with the provided password and extracts a list of private keys and addresses. The ...


10

Essentially it boils down to the tradeoffs between security and convenience. Instawallet is incredibly convenient, but not all that secure (as no password is required, and if you lose the URL, you lose the ability to spend the funds.) Paytunia was a great shared (hosted) EWallet for a beginner, and there is a mobile app (for Android). A new version of ...


9

Sorry to dig up and old question but I just wanted to add a link to My Wallet provided by blockchain.info I guess the thing that separates My Wallet from other e-wallet providers is that the site aims to feel more like an actually bitcoin client rather providing disposable addresses. I tried to design the site to be easy to use and it should seem familiar ...


8

If you are missing the first word and you know the rest of the 11 words, there are 2048 possible mnemonics but only ~128 of them are valid. Using Python and this library you can print all the valid ones with this simple script: from btctools.HD import check, WORDS phrase = "{x} decrease enjoy credit fold prepare school midnight flower wrong false already" ...


7

It seems like the project was abandoned, but you might be able to recycle the code. During the last days I started hacking together a little online-wallet and thought some of you might be interested. It is based on the bitcoind RPC API for handling accounts and adds custom labels stored in database. If you want to send coins to a labeled ...


7

There are two types of EWallets, hosted (shared) EWallets and hybrid EWallets. With hosted EWallets, all the coins are shared (all customers funds are combined) in the host's EWallet. Examples of this are Paytunia.com, Instawallet.org, EasyWallet.org, WalletBit.com, as well as the online wallets with the exchanges, such as MtGox.com, Bitfloor, etc. ...


7

If you want to keep your private keys secret (on your phone, that is), I'd recommend Bitcoin Wallet for Android The app also does not imply any trust in single servers, as it manages the block chain on-device.


7

I have recently created a Faucet and an eWallet for the TestNet. It is very basic, but serves its purpose.


7

Try using bitwasp. It seems to provide a lot of features you need. Try it and let us know if it works. https://github.com/Bit-Wasp/BitWasp https://bitcointalk.org/index.php?topic=109223.0


6

That address only receives deposits to your account. Otherwise, they'd have no idea what account to credit when funds wound up in that address. But you can't use blockexplorer to monitor your balance, only to monitor the total amount of deposits you've made. InstaWallet will remove funds from that account as they wish to aggregate your funds with other ...


6

Mt. Gox operates a hosted (shared) EWallet. That means that the bitcoin address provided to you for making deposits is not your address, it is instead Mt. Gox's address that they will monitor and credit your account for for any coins received at that address. But to withdraw, you are entirely at Mt. Gox's mercy. Their terms of service, shown when you ...


6

Mt Gox is large enough to attract regular hackers. I had my account liquidated recently by a thief. Whereas I think some of their extra security apps might be beneficial (e.g. Yubikey) I thought a $25 investment to protect a $50 account was silly. Now I'm $50 lighter, so maybe it was not as unwarranted as I first thought. Bottom line: Mind your security. My ...


6

I would recommend VirCurEx. You can use it as a wallet or trade between different currencies.


6

I'd recommend to read up on Bitcoin to understand what you're doing. Then you can find an overview of wallets on bitcoin.org, but for a quick start, the fastest way to get started is: Desktop (Windows/Mac/Linux) : Electrum or MultiBit Android : Bitcoin Wallet by Andreas Schildbach iOS : Bread Wallet Windows phone : Get an Android phone instead These are ...


6

I built a dedicated testnet wallet during a weekend hackathon http://testnetwallet.com


5

I agree with the answers of both Ian and Ben. Let me point out that I like the StrongCoin service. As former CEO of Hushmail, I would like to add some relevant information because Hushmail is like an encrypted wallet for email and we faced a similar set of issues. The other risks that need to be addressed with services such as StrongCoin are: Spoofed ...


5

Update: I ceased to be affiliated with the MultiBit project in May 2016. MultiBit is now wholly owned by KeepKey LLC and only the MultiBit HD wallet is supported. The comment below from 2011 refers to the old MultiBit Classic wallet which nobody should be using any more. MultiBit HD is its direct replacement and remains a viable Bitcoin wallet (subject to ...


5

One piece of technology that may provide an answer lies in federated servers, made possible by fellowtraveller's Open Transactions libraries. This is the same M of N signing that David Perry is talking about in his answer. As a small e-wallet provider, you would join up with some colleagues, forming a network of wallet operators. Using the scripting ...


5

My solution in Open-Transactions is to create a voting pool between participating transaction servers. (I noticed people discussing the project here so I wanted to make sure it's clear that this has only been proposed -- I haven't coded it yet.) When Alice bails into an OT server, instead of sending her BTC directly to the server, she would send it to the ...


5

This chart comparing all major desktop clients is pretty good, and is well maintained by a bitcointalk regular: http://dre.natverk.org/compare.htm Discussion about it here: https://bitcointalk.org/index.php?topic=83768.0 Nothing about e-wallets, though.


5

The loss refers to a few things, all centered around the simple fact that using an online wallet creates a SPOF (single point of failure). Consider effects on your balance when: Online wallet operator incompetence enables Accidental deletion of private keys for addresses in which your balance is stored. Security vulnerabilities in proprietary code may let ...


5

I tested it by creating a secure wallet on BitGo. They gave a multisig address for deposits. 2/3 of keys are needed to withdraw Bitcoins. BitGo holds one key, you get private key and backup key. You don't need to printed private key to withdraw Bitcoins. the passphrase is enough (apparently the key is derived form the passphrase). BitGo cannot do Bitcoin ...


5

If it is a web wallet that holds your private keys, then it is certainly possible that the service is staking your coins for you, but this may or may not be a feature that the developers of the particular web wallet have implemented. It is also possible that the web wallet creators take the stake as a payment for their service, which I hope the service would ...


4

It all depends on your definition of what an online wallet is. You can make an online wallet service where the server side only knows your public keys and does all the heavy lifting required to track the block chain including the bookkeeping necessary to determine which transactions belong to your wallet. The client side is the only entity that has your ...


4

It isn't free, but: - http://www.microthosting.com/bitcoin-servers.html http://en.bitcoin.it/wiki/BitCoinD_Cloud_Hosting


Only top voted, non community-wiki answers of a minimum length are eligible