Questions tagged [bitcoin]

BitCoin is a distributed crypto-currency. General questions about bitcoin, other crypto-currencies and their environment not directly relating to security are better suited for bitcoin.stackexchange.com

0
votes
0answers
44 views

Multi-Boot & BIOS Attack Vector Risks For Bitcoin Wallet Storage

I'm trying to emulate a cold storage computer for crypto assets with a multi-boot computer. If I have multi-OS boots & the 'cold storage' boot is never connected to the internet when it is booted,...
-1
votes
1answer
64 views

What is the need of consensus by proof of work when digital signature is already being used in blockchain

I am learning about how Bitcoin works under the hood. I am unable to understand why consensus is needed if digital signature is already being used. By my understanding, consensus is used by nodes to ...
0
votes
0answers
40 views

Emulating crypto currencies cold storage using Tails + disconnected computer?

Problem: I need cold storage protection for crypto currencies while traveling. I'll only have 1 computer. Does this solution work? Tails on an SD card that is only ever inserted into hardware when ...
1
vote
1answer
42 views

Multiple outbound TCP/8333 connections containing the EICAR test string

An IPS / IDS / UTM detects 50 connections from a single client containing Virus/Worm Eicar test string within half an hour. The destinations are IP addresses all around the world on port TCP/8333. A ...
2
votes
1answer
340 views

Is Plaid safe, if I change the password after deposit?

Many services, like Coinbase or Robinhood, use Plaid to deposit money from Bank. I understand the fact that Plaid store my login and password, somewhere... somehow... who really knows. A lot of people ...
0
votes
2answers
577 views

Strange GET request to my web application

I developed a Django application for a school project and I hosted it on an EC2 instance to test and learn the environment. During inspection of the logs, I found the following GET request, "GET /...
0
votes
1answer
255 views

Why don't call center scammers accept bitcoins?

I've watching few YouTube channels which call scam call centers mostly based in India and waste their time basically Including a channel called Kitboga and another one called The Hoax Hotel. A common ...
44
votes
2answers
13k views

Does this mean Target's twitter was successfully attacked?

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the ...
0
votes
1answer
144 views

Is it safe to store user's secure pass-code in database with encrypted form while creating bitcoin wallet?

I would like to create a Bitcoin Wallet. Part of the process is to store public and private keys in encrypted form in server database. All keys I am storing is encrypted using user's passcode. 1) ...
4
votes
1answer
206 views

What does “by continuing you agree to share resources” on a website mean?

I recently encountered this message on a website: "By continuing you agree to share resources. Your browsing speed will not be affected." When I get 'learn more', it redirected to me an obscure ...
4
votes
3answers
219 views

I want to hire someone on Upwork to install a bitcoin trading bot on a cloud server. What vulnerabilities should I watch out for?

Context I tried installing Tribeca (a bitcoin trading bot) myself yesterday, but messed it up somehow, as I'm not very familiar with Docker/Git/NPM/mongoDB technologies (a little knowledge is ...
3
votes
1answer
170 views

How is the bitcoin block header data padded for SHA256 hashing?

I see that a block contains 80 bytes. SHA256 expects integral multiples of 64 bytes as input. How are the remaining 48 bytes calculated?
0
votes
1answer
255 views

Preventing fraud in bitcoin mining pools [closed]

So bitcoin mining pools are very common, almost no one mines alone, because of the great difficulty in mining a block. So mining in a pool has pretty much been the standard. However, how do people ...
1
vote
1answer
61 views

Are eavesdropping attacks possible on Ledger Nano S hardware wallets?

Regarding the Ledger Nano S hardware wallet for cryptocurrencies, I've heard it claimed that the private keys for the wallet are securely stored on the physical device and protected even if the PC is ...
-3
votes
1answer
84 views

Trace the other end of a bitcoin transaction [closed]

What possible ways/methods that someone with a lot of resources can track the location of the person on the other side of a bitcoin transaction?
2
votes
1answer
103 views

Is hardware wallet such as Ledger safe from being hacked by its manufacturer?

Ledger is hardware wallet which assumed to be secured from remote hackings or hackings by malwares, but how about Ledger company itself? How difficult for the company to get access to our confidential ...
1
vote
1answer
567 views

CoinHive Bitcoin Mining [closed]

2 clients (call them Client R and Client B) reported users of their websites complaining about their anti-viruses detecting a trojan called: CoinHive.js. This seem to be a bitcoin mining malware, that ...
3
votes
0answers
376 views

How to securely print private key and protect against attacks on printer itself?

The question is in the title, but below are my thoughts on this. As we know there are various possible attacks on printer, so it is not very secure to print high security things like private keys for ...
7
votes
3answers
15k views

What is coin hive virus?

My Kaspersky Internet Security said it detects a trojan at (do not go to the link below, my KIS said it's trojan): https:// coinhive.com/lib/coinhive.min.js The Trojan name is Trojan.JS.Miner.d. ...
0
votes
1answer
131 views

FooCoin, a BitCoin on an encrypted smartphone OS = flawed?

Please help me with a theoretical Bitcoin equivalent called FooCoins that are encrypted inside small phone electronics that are difficult to modify and hack, using a closed source OS. BitCoins use ...
5
votes
3answers
115 views

Is blockchain security dependent on number of transactions in time?

I have a basic understanding of how blockchain technologies works. I know that in depends on the ledger where are transactions recorded and can be effectivelly verified. No one should be able to ...
2
votes
1answer
157 views

Is it possible to “steal” someone else's ransomware bitcoin payment? [closed]

I'm not too sure if this belongs on security.SE, so feel free to close or migrate to a different SE. It seems that many ransomwares use Bitcoin as currency (for good reason), and tell you to send X ...
79
votes
5answers
13k views

Why are ransomware attackers not tracked down via bitcoin transactions?

A bitcoin transaction has details of the incoming address as well as the outgoing address (where the bitcoins are being transferred), so my question is why that outgoing address has not done anything ...
4
votes
1answer
108 views

Unidirectional Data Transmission to a Smartphone

Unidirectional Data Transmission to a Smartphone I'm going to use an old Android phone to store sensitive data (e.g., Bitcoin wallet private key), with no SIM card and WiFi and Bluetooth turned off. ...
1
vote
1answer
315 views

BlockChain private key leakage

I am trying to learn blockchain by learning and analysing source code of bitcoin from here. https://github.com/bitcoin/bitcoin . I can see that encryption is relying on Operating system internal ...
2
votes
1answer
130 views

What are likely outcomes of being infected by cryptocurrency miner malwares (like Adylkuzz)?

This week, most media spent a lot of time talking about the very famous WannaCry attack. However, another malware infected a lot of computers using the same vulnerability, and was less mediatized : ...
0
votes
1answer
105 views

Who owns this bit coin address? [closed]

If I have a bit coin address, how do I find out user info? I see there is a http://bitcoinwhoswho.com but I did not get any information back on my user. Here is what the address kind of looks like (...
1
vote
0answers
296 views

Why isn't there any Cryptocurrency for fuzzing well-known softwares?

Looks like automated fuzzing is a great idea to find security vulnerabilities, bugs: http://seclists.org/oss-sec/2017/q1/471 , ex.: syzkaller ( https://news.ycombinator.com/item?id=13705833 ) For the ...
5
votes
3answers
986 views

Are the online bitcoin wallets secure?

I have an online bitcoin wallet. I sometimes read news about some online bitcoins wallet websites getting hacked. For sure when this happens, all the bitcoins of all of the users are stolen. Articles ...
0
votes
3answers
113 views

How do I implement Multikey encryption? [closed]

I'm looking for an algorithm, by which I can encrypt a piece of data with n keys and that to decrypt I can use any of them. I think I remember bitcoin using something similar for blocks, but now I ...
2
votes
0answers
334 views

Attacking Bitcoin's blockchain?

The blockchain is a shared public ledger on which the entire Bitcoin network relies. All confirmed transactions are included in the block chain. Because the integrity and the chronological order of ...
3
votes
2answers
599 views

Input password to Bitcoin CLI

I'm new to bitcoin and I'm very concerned about keeping my wallet secure. As I prefer CLIs over GUIs for many reasons including security, I'm learning how to use the bitcoin-cli command on GNU/Linux. ...
6
votes
2answers
472 views

If the bitcoin network was cracking bcrypt, what cost factor would you use?

Since the best example of pooled resource to crack hashes is the bitcoin network, currently churning through 2.14 ExaHashes/s. I want to ask, if the resources of this network were pointed towards ...
4
votes
1answer
265 views

Did Mt. Gox lose their own or customers bitcoins?

I understand bitcoin superficially, and the concept of the blockchain. When I heard about Mt. Gox, I assumed that they had lost their own money. But apparently, they lost their customer's money. ...
3
votes
2answers
250 views

Being anonymous with bitcoin

In the recent ransomware attacks, attackers have asked the targeted organizations to pay them in bitcoins. How can they be anonymous if they deal in bitcoins? Can they convert bitcoins to any other ...
1
vote
1answer
415 views

How to verify the authenticity of a download?

On the bitcoin.org website it says: verify your download using signatures I have found some vague instructions on how to do this, but was wondering if anyone has written clear and concise step by ...
3
votes
1answer
5k views

Why isn't Internet DNS based on blockchain? [closed]

Aside from the fact that verisign makes a lot of money doling out certificates from a central location.
6
votes
3answers
593 views

Why is DARPA interested in secure messaging platform using blockchain technology?

DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework. The following is the Objective paragraph from ...
2
votes
1answer
2k views

How can I check the integrity of a Bitcoin tarball with GPG?

I plan on running several so called Full node servers with bitcoind (Bitcoin Core daemon). All servers are running GNU/Linux Debian Stretch. How do I verify integrity of the downloaded tarball with ...
26
votes
2answers
4k views

How could Craig Wright obtain Satoshi Nakamoto's private key? [closed]

Some of the earliest Bitcoin transactions were signed with a private key most people collectively believe belonged to Satoshi Nakamoto. However, many publications propose Craig Wright may have ...
3
votes
2answers
111 views

What are the benefits to adding a bitcoin blockhash UID notation to one's OpenPGP key?

Example: Notation data: blockhash@bitcoin.org 000000000000000011d9f6931e65f814c6f3b221736b0c45f25e0365a3d156fa As seen here: https://sks-keyservers.net/pks/lookup?op=vindex&search=...
0
votes
1answer
108 views

Unique human view count system without captcha on Pay Per click system, using cryptographic proof of work

I have a system that will be paying users per unique view on a page. I need to prevent 80% of fraudulent automated traffic from being counted. I need to avoid captcha.I would like to implement a ...
7
votes
1answer
888 views

Bitcoin and criminals [closed]

The Bitcoin System depends on anonymity, all money transactions are encrypted then recorded in the system. So how are criminals, who use bitcoin for illegal trading, arrested by governments?
1
vote
0answers
209 views

Curve25519xsalsa20poly1305 key derivation

I'm working on batch-encryption of files, for a small project of mine. The files are stored encrypted on a removable drive, and the keys are stored on a trustful server. For enhanced safety, I'd like ...
1
vote
1answer
3k views

How to encrypt with ECDSA?

Suppose there's a transaction in the blockchain in which a given address transfers bitcoins to whoever. I need to encrypt a message so only the owner of that address will read it. I have his public ...
3
votes
2answers
400 views

Is it secure to create a Bitcoin address from a private key generated by Rand() instead of cryptographic elliptic curve

I am writing a C++ application that creates a Bitcoin address. I am having a hard time installing openssl for windows and making it work for visual studio. So, I am asking myself, if I create a ...
1
vote
0answers
48 views

Let users sign in with eIDs - do I need government authorisation? (scope: all nation-states) [closed]

I've decided to launch a crypto-basic income system. Crypto UBIs are pretty popular now. For me, it seems like an open nation-state ID should exist by now (2015). However, Mike Hearn, Bitcoin core-...
-1
votes
3answers
463 views

What stopping someone from offering distributed and encrypted email? Just like Bitcoins [closed]

Basically Email service that is ran over a network, so it's not owned by any one entity. Everyone can use it and send email to someone else. All messages travel through a web of interconnected users....
4
votes
2answers
197 views

How to securely derive a second password specific to an user

I'm giving each of my users an unique Blocktrail wallet that is protected by two API keys (which the server knows) and one passphrase (unique to each wallet). I want the wallet's passphrase to be ...
32
votes
5answers
3k views

How can I explain “zero knowledge proof” to an end user?

A ZKP allows proof of knowing the answer to a secret, without actually disclosing what that answer is. Is there any analogy that can help people put this concept into everyday practice? A "lie to ...