Post
Topic
Board Wallet software
Re: Brute Force And Seed Phrase Security Questions
by
Cazemiro
on 09/03/2021, 18:49:07 UTC
But how do you know there is 30 million bitcoin addresses with balance on them?  Where did you find this information out?
Loyce has generated a list of all addresses with a balance from Blockchair's data dumps. There are 30 million entries. See: List of all Bitcoin addresses with a balance

So you telling me some seeds would include seeds that repeat itself more than twice?
Yes. There is no rule against words being repeated.

then say the word is OVER.  I'm not sure if OVER is a word in the word list or not. So wouldn't OVER written 12 or 24 times be a possible seed?
The word "over" is indeed in the BIP39 list. However, the word over repeated 12 times is not a valid seed phrase, because the final word of each BIP39 phrase contains a checksum within it, and the checksum would be incorrect in this case. However, the phrase
Code:
over over over over over over over over over over over ostrich
Is perfectly valid. Or if you want to go with 24 words, the valid phrase would be:
Code:
over over over over over over over over over over over over over over over over over over over over over over over nothing

First off... this is possible for electrum or nano ledger s to generate this seed right?  Because if so, wouldn't you not want this seed since it repeats itself every word except Dog?
Yes, it is entirely possible to generate this seed phrase. I do agree though, that if my wallet generated a seed phrase with 11 repeating words, I'd probably create another one.


Okay didn't know there were that much addresses with a balance.

Okay so OVER is a word... again i had no idea it was or not... but you say having OVER written like this


over over over over over over over over over over over ostrich

over over over over over over over over over over over over over over over over over over over over over over over nothing




Is actually valid... that is crazy.  But if it was someone who just created a wallet, wouldn't they probably not think that much of it though... but it looks weird?


I gotta assume ppl who when they got their seed... if it repeated once or twice, they probably get a new seed? 


Well im surprised how someone can't just hit a 12 word seed then... I would thought it wouldn't take that much time to hit even one.  But you sure nobody has found a balance this way though?  I have to assume some do but its only if they got a portion of the seed?  I mean if someone found a bitcoin address this way, wouldn't it be not safe for them to say hey i found a working seed though?

Only for education purpose, it's possible to create a seed with only one word.

Example:
action action action action action action action action action action action action

And have a lot of similar cases.
 
Using the word action and the site iancoleman, the time to crack is only 65 years, in this case not so secure...
https://iancoleman.io/bip39/

Answering your question, is 100% safe the Mnemonic Code.