Quote from: BlackHatCoiner on August 07, 2022, 04:06:54 PM

Quote from: LoyceV on August 07, 2022, 03:33:39 PM

I'm pretty sure people still use them. Even better if they use something they use much heavier encryption (such as WarpWallet).
The idea of simply remembering your money is appealing to me (but I don't dare risk it for a large amount).

What I don't understand is why don't they use the hash function millions of times to make their brain wallet even more secure?

I'm pretty sure some people do that. And I'm pretty sure some others are searching for it too.

But isn't that what WarpWallet was created for? 524,288 times scrypt, followed by 65,536 times pbkdf2. A simple manual "brute-force" tells me that "satoshi" was used to deposit 0.0003 BTC in 2015. It wasn't moved out instantly (only after 7 blocks).
If you use a decent password, and your email as salt, it's much more secure than regular brainwallets. My own (very inaccurate) estimate: a million times more secure because of the heavy encryption, and another factor one million because of the email address that makes it impossible to brute-force everyone's wallet at once.

Quote from: PawGo on August 07, 2022, 04:40:00 PM

Honestly speaking, I have asked Loyce to prepare list of tx ids and launched search on that. The result is surprising! (I mean it is surprising how many wallets were using that method). Each of that values generates address which was used in the past.

The first one I checked lost 7.72 BTC in 2014 (valued almost $3k).

Quote from: PrimeNumber7 on August 07, 2022, 09:54:29 PM

The scope of realistic brain wallets is very small when compared to all potential private keys. Requiring an adversary to do a million times more work might sound like a lot, but compared to all potential private keys, it really is not.[/quote]
If you're the only one who uses 1,276,816 rounds of hashing, the number of potential wallets that can be found is limited to only your wallets, vs many different wallets that all use only one round.