Quote from: seriouscoin on January 23, 2014, 02:56:00 PM

Quote from: xabbix on January 07, 2014, 10:12:29 PM

The Cold Pi image can now be downloaded freely, please have a look here:

http://coldpi.com/manuals/install-image.html

Regarding the security issues that were raised earlier in this thread, I've also included bitaddress.org's source code (that can be verified via md5 checksum against the current version on github) so you can now basically generate a new key via the bitaddress.org HTML file and import it into Armory.

By doing so you eliminate my ability to mess around with the Armory key generation function and my ability affect the randomness of the process.

Since the device is not intended and should never be connected to the internet, other than to mess around with the randomness of the genkey function I cannot do much more to gain profit.

Just to state the obvious, I have not infected the Raspberry Pi with any malicious software and have not made any code changes to either the Armory client, Raspbian OS or bitaddress.org HTML file.

Correct me if i'm wrong but you CANT import a wallet created by other client to Amory. To do what you said above, you have to make a new wallet in Armory then import the privatekey/address to that wallet.

So what happens if that wallet was created not by random key generator? can you touch those imported addresses?

You can import a private key into your Armory wallet. Even if I had generated the wallet myself (which I don't, and if you install the image you can see that you'll get the 'create your new armory wallet' splash screen. Also you can check and see that there's no ~/.armory directory before you launch Armory for the first time).

If you choose to import a private key from bitaddress.org's html, as far as I know, there's nothing I could do beforehand to get your coins. However if you choose to 'sweep' the address, that will move the funds to the Armory generated address which is something you would like to avoid if you do not trust me.