Post
Topic
Board Service Announcements (Altcoins)
Re: ZelCore wallet
by
bob123
on 02/10/2018, 08:19:25 UTC
The combination of the username+password generates the private key in Zelcore. Nothing is stored on servers. If you combine a very strong user name and password, I'm no expert but it's seems it pretty secure, [...]


You are wrong. It is wrong to assume it 'pretty secure'.
You need a proper source of entropy to create a truly random private key.

If all the private key is based on is the 'entropy' of a human brain, you already lost. This is BY FAR less secure.
The key space to bruteforce is only a small percentage of the overall space in this case.



Quote
So.. your wallet basically is a brainwallet.

No it is NOT brainwallet, where did you get that idea from?  There is no phrases to pick, you must make your own login and password. They are hashed together to generate private key and there is no third party involved.

You do realize that you don't have to pick a 'phrase' for a brainwallet, but pick something. And with a login and a password, you are effectively choosing everything which the private key will be based on.

This is the pure definition of a brainwallet.



Quote
So.. your wallet basically is a brainwallet.

2nd You are totally wrong... it is not brainwallet at all.

 Roll Eyes

All of these jr. to member accounts claiming this do either not know what a brainwallet actually is or are somehow related to this wallet.
For me, this seems very fishy.


I would NOT RECOMMEND anyone to download/try/use this wallet!

Security-wise it creates an extremely weak private key (against bruteforcing) compared to a 'proper' desktop-/mobile-/hardware- and even online-wallets.
Additionally it is closed-source. So NO WAY to verify that there is no malware and/or backdoor.