Search content
Sort by

Showing 10 of 10 results by alexkrypto
Post
Topic
Board Bitcoin Discussion
Re: Questions to achieve full anonymity
by
alexkrypto
on 08/06/2020, 08:36:24 UTC
Thanks for your response, but how does running a full node or EPS is any better than using Trezor with TOR browser?

Even if the server get logs, it will have addresses of TOR which is hard to trace back to me, correct me if i am wrong.

Another thing, even if I run a full node, at the end, it needs to use internet to broadcast transactions, right? so if i use my IP address without TOR / VPN then it doesn't really achieve anonymity, right?

when you use Trezor which is an HD wallet you can have multiple addresses that you would keep separate.
lets consider this scenario as an example:
* address1 is for payments you receive for your online jobs
* address2 is for buying groceries
* address3 is for trading
* address4 is for buying VPN,...
(when addressN is used the change is send to addressN_1 then addressN_2,...).

now when you use Trezor with something like Electrum with or without Tor and even without spending any coins (just updating balance) the Electrum node can know and log that address1, address2, address3, address4,... that weren't linked together in any way before are linked. address3 is linked to your real IP (since you were using a centralized exchange) now all addresses 1 to m are linked to your identity without even being linked together.

but if you used your own node with or without Tor other nodes on the network have very little ways of knowing if addresses 1 to m are linked together. and even little ways of knowing if a transaction coming from a certain address belongs to you. because all they see is a full node "relaying" transactions that may or may not originate from that node.

Thanks for the explanation. Your assumption is one of the addresses is linked to my identity. What if none of addresses is not linked to my identity?. I dont need to use full node. Tor will be sufficient, am I right?

I still don't get this part "but if you used your own node with or without Tor other nodes on the network have very little ways of knowing if addresses 1 to m are linked together."
My node will broadcast transaction so if it uses my own node without Tor then anyone with little investigation and analysis can link it to me because the IP address (of my node) belongs to me which comes from my ISP
Post
Topic
Board Bitcoin Discussion
Re: Questions to achieve full anonymity
by
alexkrypto
on 08/06/2020, 08:00:21 UTC
you will never achieve "full anonymity" when using bitcoin because it is not designed that way. everything you do is increasing your privacy to the point that you can be almost certain that you are anonymous. if you want full anonymity then you must use physical cash with some additional steps!!

- Why do we need to run Bitcoin full node or EPS (Electrum Personal Server) to provide full anonymity. How is it any different from using Trezor with Tor browser, or using Trezor with Electrum running on Tor?
to hide your IP address. technically a third party can figure out which transactions belong to you when you create and broadcast a transaction even though there are methods to make it harder. so using TOR would hide your IP and makes it even more difficult to figure out who you are even if they could find which transaction came from you.
running your own full node compared to using another node through your Electrum client also removes the fact that you have to send all your addresses to that node and it can link them all together.


I am sorry. I still try to get my head around your explanation and please bear with me. If I don't use full node or EPS, my node will have to broadcast the transactions, so if i use my IP address (without VPN or TOR), my transactions will be leaked to ISP, right?

Lets assume, i use VPN / TOR and full node, the transactions will be broadcast using TOR address, but then how is it any different from not using full node and just use TOR and let a third party broadcast the transactions?. The third pary who broadcast the transactions won't be able to link my transactions to me because I am using VPN and TOR, and the IP address received on third party is coming from TOR.


Quote
- Which way is better? generating seed phrase using ian coleman offline then restore it on trezor to ensure Xpub is not leaked to ISP or any VPN, or to use Electrum offline with Trezor to generate seed phrase?
keys must be generated offline on an air-gap computer and never online. if it is online then you have more things to worry about than your privacy.

This is an interesting "if it is online then you have more things to worry about than your privacy.". Can you please elaborate on this more? . Are you saying generating seed phrase using Trezor or Ledger while i am online could lead to something worse than privacy? I am interested to hear your thoughts on this since you brought it up
Post
Topic
Board Bitcoin Discussion
Re: Questions to achieve full anonymity
by
alexkrypto
on 08/06/2020, 07:50:10 UTC
P.S. I only mention parts which haven't mentioned by other member.

- Why do we need to run Bitcoin full node or EPS (Electrum Personal Server) to provide full anonymity. How is it any different from using Trezor with Tor browser, or using Trezor with Electrum running on Tor?

To avoid the possibility server log set of your addresses, which can be used to trace you. Your anonymity could gone completely even if one address is linked with your identity.


Thanks for your response, but how does running a full node or EPS is any better than using Trezor with TOR browser?

Even if the server get logs, it will have addresses of TOR which is hard to trace back to me, correct me if i am wrong.

Another thing, even if I run a full node, at the end, it needs to use internet to broadcast transactions, right? so if i use my IP address without TOR / VPN then it doesn't really achieve anonymity, right?
Post
Topic
Board Bitcoin Discussion
Merits 8 from 4 users
Topic OP
Questions to achieve full anonymity
by
alexkrypto
on 07/06/2020, 11:21:15 UTC
⭐ Merited by ETFbitcoin (3) ,Royse777 (2) ,LoyceV (2) ,o_e_l_e_o (1)
I've a few questions that I hope someone can help me out


- Why do we need to run Bitcoin full node or EPS (Electrum Personal Server) to provide full anonymity. How is it any different from using Trezor with Tor browser, or using Trezor with Electrum running on Tor?

- If this is the case with Bitcoin where I have to run Bitcoin full node or EPS to achieve full anonymity, does this apply to Ethereum as well and I have to run Ethereum full node, or it is sufficient to use TOR browser when receiving or sending ETH?

- Do I need to worry about Xpub being transmitted any time when making transactions or just making sure during initialising it for the first time it does not get leaked?

- Which way is better? generating seed phrase using ian coleman offline then restore it on trezor to ensure Xpub is not leaked to ISP or any VPN, or to use Electrum offline with Trezor to generate seed phrase?
Post
Topic
Board Bitcoin Discussion
Re: 3 seed words + passphrase
by
alexkrypto
on 06/06/2020, 06:01:51 UTC

[/quote]

Bank's storage can be a valid place since it may be opened only by you or with your death certificate, afaik.

[/quote]

I thought the whole point of Bitcoin is be your own bank. If you have to store your seed in a bank storage, what is the point of having Bitcoin in the first place?
Post
Topic
Board Bitcoin Discussion
Re: 3 seed words + passphrase
by
alexkrypto
on 06/06/2020, 05:50:24 UTC
"!Went>P@r!$&be$tmem0ryev_r" is a good password, but a 12-word or 24-word random seed is more secure. As @pooya87 stated, a password must be weakened in order to be memorizable. Your idea may work for you, but it cannot be recommended for general use.

That's not true.

!Went>P@r!S-Be$tMem0ryEv_r     is more secure than 12-word random seed
Post
Topic
Board Bitcoin Discussion
Re: 3 seed words + passphrase
by
alexkrypto
on 06/06/2020, 05:35:30 UTC
No, i am not suggesting to create your password like this. you can create something like !Went>P@r!$&be$tmem0ryev_r

Something that you can create that reflect to your experience and easy to remember and hard to crack

And how is it easy to remember? If it's some sort of substitution scheme, like replacing O with 0, then it's easy to crack, if it's truly random (which can only be generated by some rng and not human mind), then it's really hard to memorize and you will forget it unless your repeat it multiple times per day every single day.

Compared to that, mnemonic seeds have guaranteed sufficient entropy and they are easy to remember because our brains are good at remembering natural words in sequences.


Don't you think it is easy to remember such password !Went>P@r!S-Be$tMem0ryEv_r

Well, you're right and wrong at the same time.

Right if you were referring to a traditional way of accessing "username" & "password" on servers, and the hackers can sense your way of creating password is like this.

But with Crypto, it is a different story. First, the hacker needs:

1- to figure out that the public key on blockchain belongs to YOU.
2- then he needs to figure out whether the public key was created based on BIP39 or legacy way (private key only per each public key).
3- then need to know that your way of creating passwords is like this.

You REALLY think it is easier to remember 12 random words (in order) THAN creating a strong password of your choice???

In terms of guaranteed sufficient entropy, you can your own and test it on http://rumkin.com/tools/password/passchk.php

Test for example, !Went>P@r!S-Be$tMem0ryEv_r
Post
Topic
Board Bitcoin Discussion
Re: 3 seed words + passphrase
by
alexkrypto
on 06/06/2020, 05:27:44 UTC
Something that you can create that reflect to your experience and easy to remember and hard to crack

then that's another problem. almost always, these two can not be achieved together.
people aren't known to be able to create strong passwords. to be able to remember their passwords they always end up with weak ones that could be guessed in most cases.
and if the password were strong (truly random) then it can't be memorized over long term. they still have to write it down so that they won't forget it (after like in a year), and if they are writing it down then why not use the method that is already tested and is considered safe meaning BIp-39?


They can be achieved. I already gave you an example. I can also give you another example like !Went>P@r!S-Be$tMem0ryEv_r

Go check http://rumkin.com/tools/password/passchk.php

You will see,such password achieve more than 128 bits.


Well, the problem with BIP39 is actually many:

1- losing it
2- confiscating it by government
3- robbed by nagger
4- forgetting where you stored seed phrase
5- not easy to cross board and can be confiscated by airport police officers.
6- extracted by hackers if they get access to your hardware wallet for a few minutes https://blog.kraken.com/post/3662/kraken-identifies-critical-flaw-in-trezor-hardware-wallets/
7- Government seize your hardware wallet and extract your seed phrase. So easy to extract your seed https://donjon.ledger.com/Unfixable-Key-Extraction-Attack-on-Trezor/

I am not referring to Trezor only but also Ledger can have the same issue in the future.

Now, do you understand why seed phrase is extremely dangerous?
Post
Topic
Board Bitcoin Discussion
Re: 3 seed words + passphrase
by
alexkrypto
on 05/06/2020, 05:51:59 UTC
these "words" are actually representing the "entropy" that is used to generate the individual private keys. so unless you can come up with a way to generate the same level of security entropy (at least 128-bits) using 3 words, it won't work.


You can do it using https://iancoleman.io/bip39/ and i understand you wont achieve 128 bits, this is where the passphrase with strong password is extremely important.

are you really suggesting that memorizing 3 words + something like
Code:
J\{m^"<Aw2ATdn)V96

is easier than memorizing this:
Code:
legal winner thank year wave sausage worth useful legal winner thank yellow
i'm not convinced!

No, i am not suggesting to create your password like this. you can create something like !Went>P@r!$&be$tmem0ryev_r

Something that you can create that reflect to your experience and easy to remember and hard to crack
Post
Topic
Board Bitcoin Discussion
Topic OP
3 seed words + passphrase
by
alexkrypto
on 05/06/2020, 05:21:04 UTC
I want to ask what is the dangerous of creating a seed phrase that generate 3 words only + passphrase (strong password 18 characters)? Is it safe? Is it possible to lose the funds this way? If yes, how?

The idea is, people just need to memorise 3 words + passphrase (of their choice) (strong password) rather than worrying that the (seed phrase 12 or 24 words) is stolen or lost. Any reason why this cannot be practical or recommended?

I understand that seed phrase can easily be guessed by a hacker but then he needs to be able to crack the 18 characters (combination of lower, upper case, number, special characters such as * ? >< !@#}|_-&^%$)