Post
Topic
Board Service Announcements
Re: ColdPi - Offline bitcoin wallet on a Raspberry Pi
by
bitmagi
on 04/01/2014, 20:18:45 UTC
I know you are probably doing this with good intentions, but it seems a lot of people are putting a lot of trust in these kind of products without thinking about the security possibilities.

If I wanted to steal some bitcoin this would be a fantastic way to do it.  I could modify the armory source to stash any PKs loaded to an obscure location on the SD card.  I could then modify one of the standard linux daemons to wait for an internet connection and then send the contents of this obscure PK file to myself.  I know that this is theoretically an offline wallet but I can see many people in a moment of weakness establishing an internet connection  just long enough to download and install one of their favorite apps that doesn't come in your bundle.

Again, I doubt this is the case, but people really shouldn't be running software on anything that they haven't personally verified the source/binaries.  When setting up an environment verify the OS, the bitcoin client and any other tools that you will need.  There isn't any way to do that with this, a whole lot of blind faith in an anonymous entity is required.