Post
Topic
Board Bitcoin Technical Support
Re: BTC Paper Wallet Recovery
by
ETFbitcoin
on 03/10/2023, 10:38:31 UTC
--snip--
I prefer to call this the recovery scam.
--snip--

FWIW, it's actually common term even though the context isn't always about money. Even government use such term[1].

--snip--
Hi! I just want to point out that JS is not a superb language to use for entropy generation. The reason behind my claim is that they usually tend to use user input to generate it. For instance, they tell the user to move their mouse around. This process looks "random" but in my opinion it is not the safest. I don't know whether they (at bitaddress) do something that increases the randomness, but in my opinion, even though bitaddress is commonly used, I would avoid it. Anyway, if OP wants to use it, they should definitely follow your advice and do it properly to diminish all risks.

These days JS have better entropy source[2]. Although still it's not reliable enough since it comes down to,
1. Whether the developer know and actually use it as entropy source.
2. How the browser implement such function.

[1] https://consumer.ftc.gov/articles/refund-and-recovery-scams
[2] https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues