Search content
Sort by

Showing 20 of 127 results by joan
Post
Topic
Board Development & Technical Discussion
Re: Vanity bitcoin addresses: a new way to keep your CPU busy
by
joan
on 01/07/2011, 08:30:35 UTC
It should dump a message in the log every 100K attempts though.
Post
Topic
Board Development & Technical Discussion
Re: Command Line and JSON-RPC
by
joan
on 30/06/2011, 22:21:26 UTC
Unknown key type: bestblock
This error is not related to your problem. It's just that the wallet contain a new type of data that the bitcointools is not aware of. (namely, the most recent block that this wallet was synchronized with)

Do you have a thread where you describe the scenario that led to hung transactions ?
edit: I assume this is the one. My advice would be to wait a bit for the import/export private keys feature to be formally released in an official version. Then you can dump your keys to a text file and import back the relevant ones to a fresh wallet.
Post
Topic
Board Development & Technical Discussion
Re: Claim the coins challenge - The typo scenario
by
joan
on 30/06/2011, 20:15:59 UTC
Output:Found: 5JjNVWPaRTPg1i4etqfPHPnsDZ1Js5qBYXFH9G4jC2Drb6kERsm

Awesome! And thanks.
(And also D'Oh! but of course Grin)

So if there is a single error and it's not in the checksum, we just test len(privkey)*58 candidates.
For 2 errors we would test (if I'm not mistaken…) [(len*(len-1))/2]*58, still under 100,000 candidates, nice.
Post
Topic
Board Bitcoin Discussion
Re: Virwox.com CSRF
by
joan
on 30/06/2011, 19:44:45 UTC
The only responsible thing to do after they didn't respond to his report was to make the vulnerability public. So this was the right thing do.
He didn't mention that he had contacted them.

@cuddlefish: Could you please clarify if you contacted them prior to the full disclosure, and how long. Thanks!
Post
Topic
Board Off-topic
Re: *~ Warning ! NEW Type P2P Virus infect MBR ~*
by
joan
on 30/06/2011, 16:40:19 UTC
Wow, a malware that disable other malwares to keep low profile. Brilliant  Grin
Post
Topic
Board Development & Technical Discussion
Re: Is it at all possible to associate an IP address with a Bitcoin address?
by
joan
on 30/06/2011, 16:16:47 UTC
Another approach would be a "node-id attack" where the attacker would somehow control your neighboring nodes in the P2P overlay.
This way the attacker can distinguish between transactions you created vs transactions you are merely routing.
This can be achieved by exploiting the server responsible for the mapping of nodes.

(No sure if such an attack is possible on Bitcoin, you can decide to bypass the irc channel and only connect to trusted nodes)
Post
Topic
Board Project Development
Re: Bitcoin Off-The-Grid (BOTG): secure savings script v0.1.1
by
joan
on 30/06/2011, 14:55:32 UTC
I have imported and redeemed successfully the following "vanity" privkey generated by casascius.
Code:
5HtNFUCKiNGPiECEoFGoDDaMNCoCKSuCKiNGSHiT3Viwnu6QQby
1Kv4AcDNkRjhAYvPo3w8RnDw8Jb6Pgq579
0.05 BTC
I Posted a related challenge for when the person makes a typo while writing the privkey down.
Post
Topic
Board Development & Technical Discussion
Claim the coins challenge - The typo scenario
by
joan
on 30/06/2011, 14:39:22 UTC
This challenge is related to import/export of private keys and wallet and creating "off the radar" addresses.
I don't know if it can be done. (I still have the correct private key of course)

Scenario:
- I used a tool or the client to generate a completely off the radar address.
- I wrote the private key on a piece of paper and stored it in a safe.
- I secured some of my savings to the corresponding address.
- We are now some years later and I want to import it back and spend my savings.

Unfortunately, it looks like I made a typo while writing down the private key ! This is all the information that I have left :

privkey: 5JjNVWPaRTPg1i4etqfPHFnsDZ1Js5qBYXFH9G4jC2Drb6kERsm
addr: 18j6vJ39JFtHtgwNninSk4L61VzRhXBmoc (bbe)
balance: 0.10 BTC

hints:
- The address is valid, the privkey has a typo, the typo is not in the checksum bytes.

I don't know if this can be done due to the double SHA256 used for integrity check. Maybe we should have correcting codes instead (A non working destination address due to a typo is not very critical, but a non working privkey is).

Idea:
Maybe we could have a validateprivkey rpc call like there is a validateaddress. This way I might have checked earlier and realized the backup wasn't valid.

Reference threads
- Private key and wallet export/import
- Bitcoin Off The Grid (shell script to generate privkeys)
Post
Topic
Board Development & Technical Discussion
Re: Vanity bitcoin addresses: a new way to keep your CPU busy
by
joan
on 29/06/2011, 21:17:04 UTC
If mining hardware was instead dedicated to generating new addresses; how long do you think would it take till someone stumbled on an existing address that had more BTC stored than what the person would have earned by mining?

(…)

Their are 2^160 possible addresses. Lets say 2^32 (4 billion) people use Bitcoin and each generate 2^16 (65 thousand) address. That gives us 2^48 total addresses out of 2^160 possible. The probability of a generated address matching one of these is 1/(2^112).

The probability for two addresses to match is much higher than 1/(2^112) though. It's more complex than doing 2^160/2^48. Check the Birthday attack.
Also, TiagoTiago mentionned using current mining resources to generate addresses, so I guess it's fair to say that the 2^16 figure is underestimated, that would be more like… 2^16 per second. (But there is not 4 billion miners, yet)

While we are on probabilities, and I'm by no means an expert in these, someone mentioned in a previous page of this thread that to find the "1Kahlahan…" vanity address (8 fixed chars) would take roughly 1.28e14 attempts.
I think this is underestimated. (It seems to come from the intuitive 58^8).
My own computation gives me 2.99e+15, which is an order of magnitude higher. (I decode the base58 and do the maths on the hash160).
Post
Topic
Board Hors-sujet
Re: après la fermeture de l'internet?
by
joan
on 29/06/2011, 20:45:19 UTC
Post
Topic
Board Development & Technical Discussion
Re: Insecure local private keys problem definition (and brainstorming)
by
joan
on 28/06/2011, 10:27:36 UTC
You have probably seen the topics on wallet encryption and brainstorming?

Split private keys
[PULL] Wallet Private Key Encryption
Coinsplit

PS: ECDSA is a signing only algorithm, you can't use it for encryption.
Post
Topic
Board Meta
Re: Limit Signature by Lines instead of Characters?
by
joan
on 27/06/2011, 07:35:06 UTC
I wish there was an option to disable images in signatures (I thought SMF had it, but it's just a general disable signatures)
I just went to see the option today as well…
Currently I hide them on a per case basis with ad block.
Post
Topic
Board Beginners & Help
Re: Segfault when starting bitcoind
by
joan
on 27/06/2011, 00:38:17 UTC
It has been fixed, you should pull again.
Post
Topic
Board Discussions générales et utilisation du Bitcoin
Re: papion
by
joan
on 26/06/2011, 09:52:41 UTC
On commence à y voir plus clair:
- Papion a été empoisonné.
- Souffrant d'amnésie, il ne sait plus vraiment qui il était avant.
- Certains souvenirs reviennent par bribes.
- Notemment une forte connexion avec Bitcoin.

Ma théorie:

Papion = Satoshi.

Expliquerait pourquoi Satoshi a disparu de la circulation depuis plusieurs mois. Ils devaient l'avoir kidnappé et drogué.
// Musique de The Bourne Identity
Post
Topic
Board Development & Technical Discussion
Re: Vanity bitcoin addresses: a new way to keep your CPU busy
by
joan
on 26/06/2011, 08:58:26 UTC
Should apply cleanly to bitcoin-0.3.23.
I admit I haven't tried, but I think this would not apply smoothly to what's currently in the git repo (which I think is what SgtSpike is using?). As mentioned, the sources have been reorganized.
GenerateNewKey() for example is now in the class CKeyStore, not global to main.h / rpc.cpp. This is where GenerateNewKey(std::string vanity) should be too.

I do have some kind of patch too but I haven't worked out the threading yet. So it just hangs until it finds a match, which is not very nice.
SgtSpike, I think you are under Windows, do you use TortoiseGit? It will make things easy when you want to create/apply patches.
Post
Topic
Board Bitcoin Discussion
Re: Camp BX Hacker / Compliance Security Audit
by
joan
on 25/06/2011, 19:29:01 UTC
Don't forget the scale tests, you might need it Wink
Post
Topic
Board Development & Technical Discussion
Re: [ANN] Bitcoin "No Forced TX Fee" mainline client fork
by
joan
on 25/06/2011, 19:09:32 UTC
Many one should be happy for such change so that you may then ask a pull request then.
IIRC, fee is the only known mechanism to protect against the "penny flooding" attack.

@OT, Didn't someone point that simply returning true has broader impact that just removing the fee?

Post
Topic
Board Bitcoin Discussion
Re: Become more Anonymous with this Bitcoin Patch
by
joan
on 25/06/2011, 18:05:54 UTC
It needs to be a dropdown, with the balance available on each bitcoin address.  This information is available to the bitcoin client.
I concur.
The new tab is maybe not really needed. A dropdown list on the send dialog should be enough to keep it simple and still usable.
What if I need several input addresses to complete the transaction ?
Post
Topic
Board Discussions générales et utilisation du Bitcoin
Re: Bitcoins perdu dans la nature ....
by
joan
on 25/06/2011, 16:56:03 UTC
Quand tu perds 10 euro ou même qu'il est brûlé, tu vas à la banque même avec le billet brûlé et ils t'en donne un autre.
Va à la banque en disant que tu as égaré un billet de 10€, on verra s'ils t'en donnent un Grin

Pour un bitcoin perdu, normalement la logique veux que si le propriétaire vient se plaindre, la banque doit lui redonner le bitcoin, techniquement il dépense le bitcoin et si il est un fraudeur il y a detection d'une double transfert et donc la transaction est annulé.
Il n'y a pas de banque dans Bitcoin. Le système est complètement décentralisé, tu es ta propre banque si tu préfère. Ça évite par exemple que ton compte soit gelé ou fermé.
L'impossibilité du double transfert est intégrée dans la technologie, et non corrigé après coup. Toutes les transactions sont irréversibles.

Maintenant comme le système est anonyme et que le numéro de série du compte lié change tout le temps je sais pas comment les devs font pour detecter qui est qui.
La notion d'individu n'existe pas au niveau du système monétaire bitcoin. Tu contrôle un certain nombre d'adresses et tu peux dépenser ce qui a été envoyé vers ces adresses parce que tu possède les clés secrètes correspondantes.
Je te conseille d'aller voir le wiki ou de lire le papier de Satoshi Nakamoto.
Post
Topic
Board Discussions générales et utilisation du Bitcoin
Re: Bitcoin et fiscalité (Belgique)
by
joan
on 25/06/2011, 16:28:19 UTC
Donc j'avais dit que non tu ne dois rien déclarer car tu n'as pas signé de contrat qui te lie à des règles à respecter.
Ah Ouf ! Parce que l'autre jour j'ai fais du travail au « black » et je me demandais s'il fallait que je déclare quelque chose. Mais comme je n'ai pas signé de contrat, c'est bon ! J'ai rien à craindre.