Search content
Sort by

Showing 20 of 25 results by agent13
Post
Topic
Board Bitcoin Discussion
Re: [ANN] Bitcoin blockchain data torrent
by
agent13
on 08/12/2013, 23:42:38 UTC
Forgot to mention...  the following python util, linearize.py, was checked into the bitcoin repo today:

     https://github.com/bitcoin/bitcoin/tree/master/contrib/linearize

This tool may be used to recreate bootstrap.dat byte-for-byte identical with the bootstrap.dat in this torrent.

If you are running bitcoind locally, create bootstrap.dat locally, then start seeding the torrent immediately at 100%!



The linearize python script does not appear to have a method to accept a starting block height. I was not sure if Bitcoin-QT would recognize a bootstrap file not starting at block height 1. But it seems it does. This appears to work -


Quote
def get_blocks(settings):
        rpc = BitcoinRPC(settings['host'], settings['port'],
                         settings['rpcuser'], settings['rpcpass'])

        outf = open(settings['output'], 'wb')

        for height in xrange(settings['max_height']+1):
            if height > 249999:
                sys.stdout.write(str(height) + "\n")

It generated a 3GB bootstrap between 250-270k which Bitcoin-QT accepted.
Post
Topic
Board Bitcoin Discussion
Re: [ANN] Bitcoin blockchain data torrent
by
agent13
on 05/12/2013, 13:28:03 UTC
Will bitcoin-qt only recognize a bootstrap.dat file starting at block 1?

is it possible to use the python util to create a new bootstrap.dat starting at block 250001 ? For example - to update an off-line PC which has only had previous access to the 250k bootstrap.dat.

Creating a new 10gb+ file up to 270k+ seems silly when I only need to create the difference between the two (and easier to transfer to off-line PC).

Thanks.
Post
Topic
Board Bitcoin Technical Support
Re: Signing transactions off-line with Bitcoin-QT
by
agent13
on 05/12/2013, 06:33:13 UTC
It is not simply "signing", it is spending valid payments you have previously received.

To clarify - I would only be redeeming outputs that were previously generated on this off-line Bitcoin-QT instance. I would not be redeeming outputs that other third-parties may have sent me, but rather outputs that I have only signed myself. I gain no further information by downloading the blockchain, other then seeing which block my transactions were accepted in.

I suspect Bitcoin-QT won't let me spend unconfirmed outputs though? I know of at least one web-wallet that allows this. I would simply like to use the core-dev client instead, off-line.
Post
Topic
Board Bitcoin Technical Support
Topic OP
Signing transactions off-line with Bitcoin-QT
by
agent13
on 05/12/2013, 00:04:45 UTC

If a transaction simply contains a list of inputs and outputs and are not tied to tied to specific blocks.. it seems to me that Bitcoin-QT should be able to sign a transaction (and subsequent transactions) without having the updated blockchain. Or, will Bitcoin-QT not spend unconfirmed outputs?

If it could spend unconfirmed outputs, then you should be able to perform a transaction and dump the raw transaction output... burn it to CD and copy the transaction to an on-line Bitcoin-QT installation and re-broadcast it. Could this work?

Post
Topic
Board Bitcoin Discussion
Re: Richard Stallman on good things and bad things about Bitcoin
by
agent13
on 01/12/2013, 08:31:53 UTC

Legend.

http://www.youtube.com/watch?v=9sJUDx7iEJw

"Hoarders can get piles of money,
That is true, hackers, that is true.
But they cannot help their neighbors;
That's not good, hackers, that's not good."

Spend your coin.
Post
Topic
Board Service Announcements
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
by
agent13
on 01/12/2013, 08:09:23 UTC
v2.6.2 support input of a private key in base6 format which shall be defined as:
99 characters (1,2,3,4,5,0) where 1=1 and 6=0

This allows you to create a private key with physical randomness with 99 rolls of a die. Use 3 dice and do 33 rolls.
Then enter the 99 character string into the wallet details tab of bitaddress.org and you've got yourself a truly randomly generated bitcoin wallet.


If throwing 3 dice... would need to ensure you don't introduce any bias such as reading from lowest to highest. Would be best to read dice from left to right as they fell.

This is nice. The hex format can be confirmed with this I think -

echo 'obase=16; ibase=6; 0123450123450123450123450123450123450123450123450123450123450123450123450123450 12345012345012345012' | bc

Nice to not have to rely on computer rng.




Post
Topic
Board Bitcoin Technical Support
Re: Dice-generated random numbers and conversion into private/public key pair
by
agent13
on 01/12/2013, 08:06:31 UTC
Bitaddress.org now also supports base6 dice-generated private keys:
https://bitcointalk.org/index.php?topic=43496.msg3586486#msg3586486

This is nice. The hex format can be confirmed with this I think -

echo 'obase=16; ibase=6; 0123450123450123450123450123450123450123450123450123450123450123450123450123450 12345012345012345012' | bc

A nice way to input dice throws directly into bitaddress and not have to rely on computer rng.


Separate question - can bitcoin-qt import base16 directly?




Post
Topic
Board Off-topic
Re: Cloudflare sites relinquishing SSL private keys?
by
agent13
on 01/12/2013, 06:43:12 UTC
Why this was moved to "Off-topic" I do not understand. I originally posted Economy/Marketplace. Many Bitcoin sites use Cloudflare.
Post
Topic
Board Off-topic
Re: Cloudflare sites relinquishing SSL private keys?
by
agent13
on 01/12/2013, 06:41:57 UTC
You don't need to install a CA cert, you just paste your ssl private key to cloudflare.

That is my point. Cloudflare then sees the unencrypted data. Apparently this is of no concern?
Post
Topic
Board Off-topic
Topic OP
Cloudflare sites relinquishing SSL private keys?
by
agent13
on 30/11/2013, 20:30:05 UTC
Is it correct that in order for a site to utilize Cloudflare to protect them from DDOS on port 443 (SSL), that site must install their CA signed cert (private key) on Cloudflare's servers? I think Cloudflare did a deal with a CA to even stream-line this process.

Regardless of how data between Cloudflare and the site's real IP is subsequently proxied, does this effectively mean that said site must implicitly trust Cloudflare and any parent it may be answerable to? Is this a MITM scenario?

Due to the nature of SSL and CA infrastructure in general, I don't think there is a way around this natively. Is there a way for a third-party to filter (ie from flood) your SSL data securely? If not, perhaps some JS crypto could fill the gap between site and user? Of course, secure JS delivery has its own problems under such a scenario..
Post
Topic
Board Development & Technical Discussion
Re: Could private keys in memory be inadvertently sent to swap? (disk)
by
agent13
on 28/11/2013, 09:36:26 UTC
I like using Ubuntu with Bitcoin-QT. I also play with bitaddress etc offline. The default Ubuntu installer creates a swap partition. It provides an option to encrypt the user folder, but not swap. Might someone have a link to a how-to to resolve this concern?.. ie, encrypt the swap partition? Or, what might be the best way to tackle this in Ubuntu?

Thanks.
Post
Topic
Board Development & Technical Discussion
Topic OP
Could private keys in memory be inadvertently sent to swap? (disk)
by
agent13
on 27/11/2013, 11:58:09 UTC

If you have Bitcoin-qt open or another client etc, is it possibly Linux might swap the memory (and keys) to swap? (and therefore to disk). Even though you might have wallet.dat encrypted, could the keys inadvertently be dumped to disk? How could this be avoided? Perhaps just have a lot of RAM so swapping is not needed? This could technically even occur with javascript key generators correct? Is it possible to zero-fill the swap partition after exiting the client?

Post
Topic
Board Development & Technical Discussion
Re: How to use BIP38 to encrypt a pre-determined private key?
by
agent13
on 27/11/2013, 06:26:29 UTC
The output is always the same if you supply a private key. I tested it.

Enter the same private key and passphrase into bitaddress and bit2factor. You will get a different result, but they both produce the same unencrypted result.

Post
Topic
Board Development & Technical Discussion
Re: How to use BIP38 to encrypt a pre-determined private key?
by
agent13
on 27/11/2013, 02:28:38 UTC


bit2factor.org looks interesting for encrypting prior keys. Is it considered safe and who wrote it? There is a random element to the BIP38 process, so the output is always different.
Post
Topic
Board Bitcoin Technical Support
Re: Dice-generated random numbers and conversion into private/public key pair
by
agent13
on 20/11/2013, 05:39:13 UTC


I approve of the "generate a shitload of entropy and hash it" method.  The reason I recommended my method is because it could be done with pen&paper, without any external functions.  You can actually get a full hex private key without touching any external scripts or figuring out how to securely/privately execute hashes.  Can be useful in some situations for people with nil programming experience.



But will Bitcoin-QT import a private key directly? (not WIF) I am aware it has no checksum etc. Or would I need to rely on additional tools to ensure I generate the correct WIF key (example - bitcoin-bash-tools and bitaddress JS).


Roll the dice 100 times. Write down the sequence.

Example:

3315135445366124436162446626244624624266466466622442224426424444624626624246264 464464662624246262224

Then you use that as the brain wallet passphrase in bitaddress.org


If I append "1", "2", "3" etc to the original series of rolls (seed) - sha256sum(3315135445366124436162446626244624624266466466622442224426424444624626624246264 4644646626242462622241) .. does this constitute a "secure" method for generating a series of addresses?


Another way to do this, for "perfect" entropy calculation is to roll six-sided dice and write down bits.  Then convert those directly to a private key.

So, about 150 rolls of the dice?





Hello there

Note above. Would some one know if above method for generating private keys from a dice-generated seed be "secure" ?



Post
Topic
Board Bitcoin Technical Support
Re: Dice-generated random numbers and conversion into private/public key pair
by
agent13
on 16/11/2013, 00:47:49 UTC


I approve of the "generate a shitload of entropy and hash it" method.  The reason I recommended my method is because it could be done with pen&paper, without any external functions.  You can actually get a full hex private key without touching any external scripts or figuring out how to securely/privately execute hashes.  Can be useful in some situations for people with nil programming experience.



But will Bitcoin-QT import a private key directly? (not WIF) I am aware it has no checksum etc. Or would I need to rely on additional tools to ensure I generate the correct WIF key (example - bitcoin-bash-tools and bitaddress JS).


Roll the dice 100 times. Write down the sequence.

Example:

3315135445366124436162446626244624624266466466622442224426424444624626624246264 464464662624246262224

Then you use that as the brain wallet passphrase in bitaddress.org


If I append "1", "2", "3" etc to the original series of rolls (seed) - sha256sum(3315135445366124436162446626244624624266466466622442224426424444624626624246264 4644646626242462622241) .. does this constitute a "secure" method for generating a series of addresses?


Another way to do this, for "perfect" entropy calculation is to roll six-sided dice and write down bits.  Then convert those directly to a private key.

So, about 150 rolls of the dice?

Post
Topic
Board Development & Technical Discussion
Topic OP
Secure generation of addresses using dice
by
agent13
on 15/11/2013, 09:08:31 UTC
Discussion of off-line secure computing, paper wallets, backups etc are beyond the scope of this post. I am aware of what steps to take. I also give these steps a lot of attention.

-----

I would like to create a bitcoin address using dice. I don't want to trust software and/or hardware RNG. I don't want to memorize anything. Therefore, I don't think Diceware is appropriate. I also want to prove to myself that my manual RNG is good. I also want to minimize potential issues with the human factor (me). I want to keep things simple.

Should I roll the equivalent of 256 bits of entropy with a standard dice (# of rolls?), and sha256 hash it for the secret exponent? What is a secure method for generating the bitcoin address from there?

I would then import the private key into Bitcoin-QT for spending (out of scope).


1. Is this a good approach?

2. If I append "1", "2", "3" etc to the original series of rolls (seed).. does this constitute a "secure" method for generating a series of addresses?

Post
Topic
Board Bitcoin Discussion
Re: Safest Wallet
by
agent13
on 07/11/2013, 20:00:16 UTC

Does Armory sit on top of Bitcoind (ie RPC), or does Armory include a re-write of the Bitcoin crypto fundamentals?

Are there any concerns with Armory primarily being developed by a single person?
Post
Topic
Board Altcoin Discussion
Re: Namecoin was stillborn, I had to switch off life-support
by
agent13
on 21/10/2013, 07:38:21 UTC
So it is dead or can it be salvaged?  Sorry, not technical here.
I think it can be salvaged. A particular block, well in the future, will have to be chosen. After that block, every name will have to be recomputed to determine its correct ownership under the new, correct, rules. At that time, all names will revert to their correct owners, and from then on, the exploit will be impossible. It's just going to take the Namecoin community to come together, agree on the new rules and block number, get the work done on time, and so on.


Say I have some .bit registrations. Currently they could be stolen from me? Under above scenario, stolen registrations might be returned to me? - roll back name updates to the block date of the vulnerability announcement? (or thereabouts)

Post
Topic
Board Development & Technical Discussion
Re: Data mining the blockchain
by
agent13
on 28/09/2013, 01:47:07 UTC
reserved