Search content
Sort by
Showing 20 of 436 results by pointbiz
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
is this still a safe wallet / way to generate keys offline?
Yes.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
⭐ Merited by danda (2)
https://github.com/pointbiz/bitaddress.org/issues/291
My comments are above.
If you used version 2.7 or newer nothing to worry about.
My comments are above.
If you used version 2.7 or newer nothing to worry about.
I received a DM about this thread.
bitaddress.org has never been hacked.
For many years it's been hosted on github.com
I have no indication that my github has been compromised.
I have no indication that my domain registrar account or DNSSEC has been compromised.
I have a script that monitors the checksum of bitaddress.org and received no alerts of any issue.
If the site was compromised then there would be proof in the form of a malicious version of the code. As people saw with BitcoinPaperWallet.com when it was sold to a scammer.
I've been offered $2000 for my domain but I'm not selling for any price.
It's always better to use the code from github because they'll be faster to react to a DNS seizure than I will.
My guess about OP is
1) malicious crypto browser extension
2) IT guy monitoring which PC connects to bitaddress.org and then monitor which printer that PC used and reprint whatever is in the memory of the printer.
bitaddress.org has never been hacked.
For many years it's been hosted on github.com
I have no indication that my github has been compromised.
I have no indication that my domain registrar account or DNSSEC has been compromised.
I have a script that monitors the checksum of bitaddress.org and received no alerts of any issue.
If the site was compromised then there would be proof in the form of a malicious version of the code. As people saw with BitcoinPaperWallet.com when it was sold to a scammer.
I've been offered $2000 for my domain but I'm not selling for any price.
It's always better to use the code from github because they'll be faster to react to a DNS seizure than I will.
My guess about OP is
1) malicious crypto browser extension
2) IT guy monitoring which PC connects to bitaddress.org and then monitor which printer that PC used and reprint whatever is in the memory of the printer.
⭐ Merited by LoyceV (12) ,vapourminer (5) ,RickDeckard (2) ,odolvlobo (2) ,BlackHatCoiner (1) ,NotFuzzyWarm (1)
This address provides me no privacy.
It's not straightforward to spend from an address with so many UTXOs.
The Bitcoin mission is far from complete. Fiat still exists. Everyone needs Bitcoin for savings they just don't know it yet.
I'll leave my public proof of HODL intact.
I'm not selling. Not those Bitcoins, not for fiat. And I'm not selling bitaddress.org
I'm around. Paying it forward. Donating to projects with the right ethos like Bluewallet.io and btc-rpc-explorer.
Run your own Bitcoin Core, run your own Electrumx, run your own Bitcoin block explorer. For the sovereignty and privacy.
It's not straightforward to spend from an address with so many UTXOs.
The Bitcoin mission is far from complete. Fiat still exists. Everyone needs Bitcoin for savings they just don't know it yet.
I'll leave my public proof of HODL intact.
I'm not selling. Not those Bitcoins, not for fiat. And I'm not selling bitaddress.org
I'm around. Paying it forward. Donating to projects with the right ethos like Bluewallet.io and btc-rpc-explorer.
Run your own Bitcoin Core, run your own Electrumx, run your own Bitcoin block explorer. For the sovereignty and privacy.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
bitaddress.org is down due to DDOS attack. I am looking for new hosting.
OK good to know. Was wondering why it was down. Needed to make some paper wallets ;-)
You can download the zip from Github here:
https://github.com/pointbiz/bitaddress.org/archive/v3.3.0.zip
Or the raw HTML here:
https://raw.githubusercontent.com/pointbiz/bitaddress.org/v3.3.0/bitaddress.org.html
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
Hi all. If i generate a wallet from zip archive is there any chance that someone generate same address and private key?
No chance. There are more private keys than grains of sand on earth.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
Anyone can guarantee for using these service? I mean, how if site got hacked 
To be safe It is highly recommend using this software on a computer that is offline, and stays offline.
That wouldnt help against all attacks. E.g. the code could be altered in a way to use only a specific section of all possible keys. Thus they would appear random, while they not actually are. If you want to make sure you are not fucked, read the code or trust in others that have done so.
Download from github for the most security. Random number generator is fine it's been peer reviewed.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
at https://bitaddress.org The url is :-
https://www.bitaddress.org/bitaddress.org-v3.3.0-SHA256-dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194.html
I'd expect the Sha256 Hash of the downloaded file to be dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194
However, after downloading the file and checking it with a Sha256 CRC it gives a Sha256 Hash of
739DDD62F01F06DDA02E7E69AEA9AF7526AB2349F02372619B92C5A952E02E6B
Where did I make a mistake.
https://www.bitaddress.org/bitaddress.org-v3.3.0-SHA256-dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194.html
I'd expect the Sha256 Hash of the downloaded file to be dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194
However, after downloading the file and checking it with a Sha256 CRC it gives a Sha256 Hash of
739DDD62F01F06DDA02E7E69AEA9AF7526AB2349F02372619B92C5A952E02E6B
Where did I make a mistake.
You must save the page as "HTML only" otherwise the browser returns a version with different spacing and HTML tags the browser slightly alters.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
v3.3.0
https://www.bitaddress.org/bitaddress.org-v3.3.0-SHA256-dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194.html
- remove support for IE8
- small translations updates for hu and pt-br
https://www.bitaddress.org/bitaddress.org-v3.3.0-SHA256-dec17c07685e1870960903d8f58090475b25af946fe95a734f88408cef4aa194.html
- remove support for IE8
- small translations updates for hu and pt-br
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
v3.2.3
https://www.bitaddress.org/bitaddress.org-v3.2.3-SHA256-c9a0bb3ed50aa75a5ae9c606d81e3fd41a4ff686ad38ad5379e2402f481e79a4.html
- wallet details: show error when checksum validation fails
- wallet details: show error when private key outside of curve range
https://www.bitaddress.org/bitaddress.org-v3.2.3-SHA256-c9a0bb3ed50aa75a5ae9c606d81e3fd41a4ff686ad38ad5379e2402f481e79a4.html
- wallet details: show error when checksum validation fails
- wallet details: show error when private key outside of curve range
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
I think you have to add his PGP key to your keyring, or you have to sign his key first.
Yeah he has to sign my key or Web of Trust
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
Got another quick question, trying to test the PGP and SHA256 of the files.
Here is what I did following the first post in this thread with the updated signatures.
IN the end I get a WARNING however
Here is what I did following the first post in this thread with the updated signatures.
Quote
wget https://www.bitaddress.org/pointbiz_bitaddress.org.asc
gpg --import pointbiz_bitaddress.org.asc
wget https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
sha256sum bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
wget -qO- https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html.sig | gpg -d
gpg --import pointbiz_bitaddress.org.asc
wget https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
sha256sum bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
wget -qO- https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html.sig | gpg -d
IN the end I get a WARNING however
Quote
Detached signature.
Please enter name of data file: bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
gpg: Signature made Sun 21 Aug 2016 05:56:51 PM MDT using RSA key ID 63974F5A
gpg: Good signature from "pointbiz <pointbiz@bitaddress.org>"
gpg: aka "ninja <ninja@bitaddress.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A
Please enter name of data file: bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
gpg: Signature made Sun 21 Aug 2016 05:56:51 PM MDT using RSA key ID 63974F5A
gpg: Good signature from "pointbiz <pointbiz@bitaddress.org>"
gpg: aka "ninja <ninja@bitaddress.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A
In the original post I put my key fingerprint
527B 5C82 B1F6 B2DB 72A0 ECBF 8749 7B91 6397 4F5A
There is an issue on github where I also list the fingerprint and on bitaddress.org
If one of the 3 doesn't match then something has happened.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
If I want to make more than one private key with Bitaddress, do I need to reload the page each time and keep moving the mouse to generate the randomness or is doing it once enough for multiple private keys?
If I use one of these private keys, can some "hacker" generate any other of my private keys since he can reverse engineer the randomness?
If I use one of these private keys, can some "hacker" generate any other of my private keys since he can reverse engineer the randomness?
You don't have to reload the page. No, a hacker cannot correlate the keys from one session as they are all random and not deterministic.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
v3.2.2
- version bump for unix line endings
The grunt build process already forces UNIX line endings. In this case I built in a branch and pushed to git. Then auto-merged the pull request and pulled to local master. After the pull to local master bitaddress.org.html had DOS line endings.
I updated the process I use to sign to re-build before sign to enforce the UNIX line endings so even in a scenario like above I will avoid this in the future.
v3.2.2
- version bump for unix line endings
The grunt build process already forces UNIX line endings. In this case I built in a branch and pushed to git. Then auto-merged the pull request and pulled to local master. After the pull to local master bitaddress.org.html had DOS line endings.
I updated the process I use to sign to re-build before sign to enforce the UNIX line endings so even in a scenario like above I will avoid this in the future.
That verified.
The ZIP linked to on the homepage (second line below) goes 404: Not Found.
Code:
Thanks. Release created at Github. The zip link now works.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
https://www.bitaddress.org/bitaddress.org-v3.2.2-SHA256-f4d047c264a2b71946de319482a9365e56d8d7289dd85a352da3b1448b7647df.html
v3.2.2
- version bump for unix line endings
The grunt build process already forces UNIX line endings. In this case I built in a branch and pushed to git. Then auto-merged the pull request and pulled to local master. After the pull to local master bitaddress.org.html had DOS line endings.
I updated the process I use to sign to re-build before sign to enforce the UNIX line endings so even in a scenario like above I will avoid this in the future.
v3.2.2
- version bump for unix line endings
The grunt build process already forces UNIX line endings. In this case I built in a branch and pushed to git. Then auto-merged the pull request and pulled to local master. After the pull to local master bitaddress.org.html had DOS line endings.
I updated the process I use to sign to re-build before sign to enforce the UNIX line endings so even in a scenario like above I will avoid this in the future.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
gpg: Signature made Sun Aug 21 12:40:40 2016 PDT using RSA key ID 63974F5A
gpg: BAD signature from "pointbiz <pointbiz@bitaddress.org>" [unknown]
gpg: BAD signature from "pointbiz <pointbiz@bitaddress.org>" [unknown]
I think the issue is DOS line endings. I'm going to re-release.
Re: [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key
I'd already updated all the keys & also specifically imported your public key before doing the --verify
gpg: key 63974F5A: "pointbiz <pointbiz@bitaddress.org>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
gpg: key 63974F5A: "pointbiz <pointbiz@bitaddress.org>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
OK. Which file returned bad "CHANGELOG.txt.asc" or "bitaddress.org-v3.2.1-SHA256-ca6a34d4ac6742dc8cebfbe0089e28392b6ee9b33b05eaa68c9e00b00e355f48.html.sig"?