Search content
Sort by

Showing 20 of 5,483 results by mocacinno
Post
Topic
Board Beginners & Help
Re: Bitcoin payments in an online store
by
mocacinno
on 23/07/2025, 06:02:14 UTC
As said in my first post, and repeated several times, btcpayserver is great... BUT... it's a seperate setup you have to do (they do have docker images). It's not resource friendly, at least it wasn't when i last set it up.
It required a full node, nbxplorer and on top of that btcpayserver... The resource requirements forced me to quit using btcpayserver when i shut down my dedicated host.

Don't get me wrong: if you want to setup a big store and you plan on accepting a couple thousand dollars in crypto each month, btcpayserver is the way to go. But if you're just testing the waters, and you might (or might not) accept one or two small payments in crypto a month, btcpayserver might not be worth the hassle...

If you're a small operation, you can always use btcpayserver hosted by a thirth party, but then you're trusting somebody else again, and it might not always be free...

I have seen other posts saying there's an integration of payment gateways in shopify. It listed bitpay... I can only say that bitpay is not wel liked in the community. Here's a small list (not mine): https://debitpay.directory/anti-bitcoin/, so if you chose a gateway instead of going non-custodial, please do your homework. Not all gateways are equal!
Post
Topic
Board Beginners & Help
Re: Bitcoin payments in an online store
by
mocacinno
on 18/07/2025, 12:23:24 UTC
i helped setup wordpress with woocommerce for a friend of mine, there were tons of ready made plugins that allowed you to accept crypto. Some used a free payment gateway, some a paying gateway and others were completely non-custodial (there were some where you had to give a list of addresses that could be funded, others allowed you to import your master public key, and they derived addresses when needed).
Post
Topic
Board Hardware wallets
Re: Ledger Live breach, potential stolen assets
by
mocacinno
on 18/07/2025, 12:07:13 UTC
I'm having a really hard time not shouting out "i told you so"... When the recovery feature was introduced, this was the exact scenario i put foreward, but a lot of people still decided to trust this company.
Sad, very sad...
Post
Topic
Board Games and rounds
Re: ♻️ CCE.Cash 🎁 FREE RAFFLE 🎁 $30 in BTC!
by
mocacinno
on 18/07/2025, 06:50:02 UTC
slot #: 5
BTC address: bc1q50udcgfdyqanp56m9dkcqkxy5fayjc74vw9px7
Post
Topic
Board Bitcoin Discussion
Re: Taproot is live — anyone noticed any real difference yet?
by
mocacinno
on 17/07/2025, 11:42:13 UTC
taproot isn't exactly new... I made my first taproot wallet in the middle 2023, so over 2 years ago.
Post
Topic
Board Electrum
Merits 9 from 3 users
Re: question about safety
by
mocacinno
on 17/07/2025, 09:19:05 UTC
⭐ Merited by pooya87 (5) ,hosemary (2) ,ABCbits (2)
Hello...i use electrum from long time, and i am remember how once my funds where completly stolen (i simply clicked to  ,,send,, write my password and all my balance was sent to other address) it was very clever hack and many people lost their funds that way. After that i moved to ledger but i dont like the ledger honestly, too much overprotection too messed up, too slow. So now i am back to electrum and i use 2fa code + very strong password. My question is , is that safe enough or what can i do to improve the security? Are there still cases of stolen funds from electrum? The nightmare of loosing all my balance still gives me goosebumps honestely .

Sorry to hear what happened to you. There is no 100% guarantee as long as you use a desktop wallet on an online machine, and i personally wouldn't use 2fa in electrum since it's fee based (and i don't like that).

Do you have an old laptop or desktop machine laying around per chance? If you really want security, and you don't want to use a hardware wallet, you probably could look into an airgapped setup
Post
Topic
Board Games and rounds
Re: 🐳 Whale.io | Bitcoin Price Prediction ' July 27 🎁 Prize $100!
by
mocacinno
on 15/07/2025, 13:43:38 UTC
$109825
Post
Topic
Board Beginners & Help
Re: Looking for Friends
by
mocacinno
on 14/07/2025, 08:58:42 UTC
I have never ever pushed or promoted any kind of crypto to my friends or family. They know i hold a limited amount of BTC, and if they have questions, i'm certainly willing to answer them.

If you push your friends towards invisting in BTC and in a couple of months there's a bear market and they lose 50% of their investment because they have weak hands and sell when the price drops? Who will they blame? Who will be the black sheep for the rest of their lives? Short answer: it'll be you...
Post
Topic
Board Hardware wallets
Re: Creating seed phrase, addresses. Broadcasting all addresses?
by
mocacinno
on 19/06/2025, 05:33:56 UTC
--snip

I wanted to chip in because i don't feel like enough emphasis has been put on the answer of this question...

If you'd extend your seed phrase with a long passphrase and share said seedphrase (minus the passphrase) online, you'd go from having a wallet that would require trillions and trillions of years using a whole server farm to bruteforce to a wallet that could be bruteforced in a couple of days/months/years by somebody who has a couple GPU's laying around.
It's not just "not adviseable", it's really "not done". It's the equivalent of securing your physical gold by laying it on a public bus seat with a "do not touch" stuck to it while you're away versus storing it in for knox.

I asked mostly to understand better the strength of the passphrase. Are you sure it's really as weak as you make it sound? If I use a password manager to generate a random passphrase that is extremely strong with 200+ bits of entropy, you think it can be brute forced in 2-3 years with a couple GPU?
--snip--

you are right, if you create a passphrase with that much entropy, it would be hard to crack it. You do know that if you use all characters from a common keyboard, if my calculations are correct you'd need a password that's at least 31 characters long?
I was more or less talking about "common" passwords... Most people tend to make passwords that are between 8 and 12 characters long, often times not using ALL characters on their keyboards (usually a combo of lower case, upper case, numbers and a small subset of special characters). Most of these can be cracked with a couple of years if you have a (small) GPU farm.

This being said, i still would never share my seed phrase... The seed extension passphrase comes on top of the seed phrase itself. Somebody trying to bruteforce your seed phrase would have to try each combination of seed words with each combination passphrase in order to rob you. In case one of them gets leaked the other one should be able to protect you, but this won't be the case if you give away your seed phrase willingly.

Personally, i'd advice you not to let your seedphrase touch any machine that will ever be online. Certainly don't keep the seed phrase extension password together with the seed.
Post
Topic
Board Hardware wallets
Re: Creating seed phrase, addresses. Broadcasting all addresses?
by
mocacinno
on 18/06/2025, 05:00:27 UTC
--snip--
Can I without worry share my seed phrase publicly online if I only use a hidden wallet which uses a strong passphrase?

I wanted to chip in because i don't feel like enough emphasis has been put on the answer of this question...

If you'd extend your seed phrase with a long passphrase and share said seedphrase (minus the passphrase) online, you'd go from having a wallet that would require trillions and trillions of years using a whole server farm to hack to a wallet that could be bruteforced in a couple of years by somebody who has a couple GPU's laying around.
It's not just "not adviseable", it's really "not done"
Post
Topic
Board Hardware wallets
Merits 1 from 1 user
Re: Creating seed phrase, addresses. Broadcasting all addresses?
by
mocacinno
on 17/06/2025, 11:49:10 UTC
⭐ Merited by Charles-Tim (1)
--snip--
I have also read 2 things that seem contradicting. There is a popular scam where they sell used hw wallets after they have copied the seed phrase so they can recover it later when the new owner puts money into it. That's why they officially warn to never buy second hand hw wallets. But I've also read you can create new seed phrase and private keys.
--snip--

I just wanted to elaborate on Charles-Tim's answer a bit.
The problem here is dual, and not contradicting...

If you buy a second hand hardware wallet that was NOT tampered with, it is usually possible to just wipe it and generate a new seed phrase. If you'd do this, you'd be safe.
If you buy a second hand hardware wallet that was tampered with, the RNG might be intentionally broken (or the complete system might be replaced), so it would not matter if you'd receive an unitialised wallet or a pre-initialised wallet (by the bad actor). If you re-initialised said wallet, you'd always end up with derived private keys that could also be found by the bad actor, since the botched RNG would only be able to make a certain well-known preset list of seeds.
Post
Topic
Board Bitcoin Discussion
Merits 5 from 2 users
Re: Tricking an early bitcoin core application to reproduce a 2010 address!!
by
mocacinno
on 17/06/2025, 05:31:44 UTC
⭐ Merited by LoyceV (4) ,ABCbits (1)
The other posters in this thread are 100% correct... Sure, you can run a 2009-2010 era node, sure you can generate "old" addresses, but always with a random private key, so the odds of generating exactly the same key satoshi did are sooooo small that in reality those odds are ~0.

If you don't believe us, why don't you try for yourself? You don't need windows XP, just some machine that can run docker... Just set back your system's clock, grab my docker image of bitcoin core v2.7 (this was the earliest version that wasn't gui-only...), log in to the container, start bitcoind and generate addresses...

Code:
docker pull mocacinno/btc_core:v0.2.7
Post
Topic
Board Beginners & Help
Re: [WARNING] Cryptojacking via infected Docker containers.
by
mocacinno
on 30/05/2025, 13:40:14 UTC
Since i notice docker is fairly popular option to run self-hosted Bitcoin node and other Bitcoin program, people also should know that Docker have major security implication. As explained on https://unix.stackexchange.com/a/607852, anyone who can access docker effectively have root (a.k.a. admin) access.

The solution is already in the stackexchange discussion: podman... Podman can run under an unprivileged user. You can even go as far as creating multiple unprivileged users and have each user run it's own container (eventough i did not test this setup myself).
Post
Topic
Board Bitcoin Discussion
Re: Storing your seed phrase in a password manager? Yes or no?
by
mocacinno
on 28/05/2025, 07:24:13 UTC
Post
Topic
Board Development & Technical Discussion
Re: docker images of most (historical) bitcoin core versions back to v0.2.0 in 2009
by
mocacinno
on 21/05/2025, 09:53:55 UTC
    update:
    • a repo used for older v0.2.x versions no longer exists, but the necessary packages were moved to other repo's, i modified all impacted Dockerfiles, everything builds again

    Wouldn't it make more sense for you to simply fork the repositories to your own github account instead of pointing it to someone else's?

    Github has seemingly unlimited file storage, and short of a DMCA takedown, the files aren't going anywhere.[/list]

    Those are package repo's (not github repo's), some of them are Gb's of (binary) rpm packages, sometimes even providing regular patches. I'm not sure github would approve if i cloned those into a github repo Wink
    Post
    Topic
    Board Development & Technical Discussion
    Re: docker images of most (historical) bitcoin core versions back to v0.2.0 in 2009
    by
    mocacinno
    on 16/05/2025, 11:04:14 UTC
    update:
    • a repo used for older v0.2.x versions no longer exists, but the necessary packages were moved to other repo's, i modified all impacted Dockerfiles, everything builds again
    • i rebuilt all images with the latest suse BCI, so the container images have the latest patches
    • i tagged v29.0 as latest, since it seems stable
    • i modified the documentation using nice badges, so in the future you can look at the documentation to find of when a certain version was last built, wether the build was succesfull and how big the image is... For example: v29.0 (latest) documentation
    • eventough i made dockerfiles for sles 15 sp7, it's very likely the branches will never be merged. Suse just released sles 16 BCI's, so i guess i'll probably jump to sles 16 instead of 15 sp7 (16 will have much longer support)
    Post
    Topic
    Board Bitcoin Discussion
    Re: Will EU ban Bitcoin?
    by
    mocacinno
    on 07/05/2025, 07:20:38 UTC
    How do they intend to ban anonymous crypto account especially for a private holder, a private crypto Holder is probably using decentralized wallet, you can barely even Identify who the owner is or neither can you have access the content of the wallet. My bitcoin asset is my private property and i will not go out to start telling anybody about my assets, so not to start attracting government agencies. The decentralized nature of Bitcoin has placed the EU plan inconsequential, this threat can only work for the fizzle minded. If the EU are looking what to control, they should focus on fiat, if they had this kind of focus and strict rules on fiat, I believe by now no EU funds will be misappropriated or diverted.

    Sure, they can't ban crypto in itself, but they can ban about every usecase you have... Force strict KYC/AML for all vendors accepting crypto, force strict KYC/AML for each and every exchange, ban everything that has some remote link to privacy (like mixers)... Sure, you can still make a wallet, but if they strictly controll every way you spend your funds, crypto is reduced purely to p2p transactions, limiting the scope immensely.
    Post
    Topic
    Board Bitcoin Discussion
    Re: Will EU ban Bitcoin?
    by
    mocacinno
    on 07/05/2025, 06:34:30 UTC
    In my personal opinion, as a person living in West Europe the EU never liked crypto... They're always trying to make the rules more strict, force more KYC/AML, restrict us whenever they can.  Will they back down? My gut feeling says they won't. They don't like what they cannot controll.

    But then again, i don't have a crystal ball to predict the future, i could be completely wrong.
    Post
    Topic
    Board Bitcoin Discussion
    Re: Is it too easy to spend bitcoin in your country?
    by
    mocacinno
    on 29/04/2025, 13:14:56 UTC
    There are so many different rules in different countries, sometimes even BTC is banned, yet there are still BTC transactions in these countries. How does it work? Is it easy to sell btc in your country, or to buy something with it? What have you bought, for example? Or what are you planning to buy?

    It's not illegal, but not that many physical stores accept BTC... Online i did use BTC, i've bought tons of stuff. I once payed about ~1BTC for a laptop on caseking, fasttech was also a big favorite of mine, and offcourse tons of services... I don't think i ever payed for a VPN using any FIAT form of payment.
    Post
    Topic
    Board Beginners & Help
    Re: Need a good web wallet for fees
    by
    mocacinno
    on 24/04/2025, 13:00:56 UTC
    I would not trust any wallet that pays transaction fees in your place... It would mean they'd lose money each time you created a transaction, which would basically mean they'd have to have some other kind of revenue originating from you... This would probably mean they'd (selectively) scam or bombard you with ads/sell your info.
    I wouldn't trust a web wallet, exchange wallet or casino wallet anyways, but one that would brand itself completely free would raise an extra suspicion....