Ninjastic
PostEdited versionsQuotes to this post
Post
Topic
Board Altcoin Discussion
Re: lisk paper wallet generator malware
by
Sharma
on 26/05/2016, 11:29:29 UTC
Quote from: x13 on May 26, 2016, 10:52:00 AM
The problem for paper wallets is actually not about a virus but rather about whether the created key pairs are stored or not. if they get stored by the site owner in any way then he could access your Lisk to every time. This is the actual risk using paper wallets.

Quote from: tonk997 on May 26, 2016, 10:19:33 AM
You can never say for certain, but that link leads to a page with a download you can use offline. The downloaded file was scanned by virustotal which says it's clean.

https://www.virustotal.com/en/url/f2515e6b1a37330aacb2045d24a53a2ccad13e762dadc9d7fe0a9468d1016085/analysis/

This is the download link to the file.

https://github.com/rferro/liskpaperwallet/archive/v1.3.0.tar.gz

Virustotal scans a file through most of the best virus scanner softwares then gives the results as a list. Just because it says a file is clean doesn't mean it is, there are always viruses it misses.

If I used that file (it's a gzipped offline webpage) I would do it in an offline virtual machine to be safe.

you can always download the sourcecode and run if from an offline machine, the thing is that you can never be sure if the generated keys are truely completely random. If there's an error in the algorithm, it might make your private keys vulnerable, even if generated offline.