Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [bitcoin]

BitCoin is a distributed crypto-currency. General questions about bitcoin, other crypto-currencies and their environment not directly relating to security are better suited for bitcoin.stackexchange.com

Filter by
Sorted by
Tagged with
0 votes
0 answers
135 views

Is openssl enc safe enough for securing a Bitcoin recovery phrase?

Is openssl enc considered secure enough to protect a bitcoin recovery passphrase? An attacker might get the encrypted text and invest several thousand dollars in computing power trying to decrypt it. ...
Rafael's user avatar
  • 113
0 votes
1 answer
174 views

Is a one-time, paper wallet Bitcoin transaction anonymous if you never link personal info? Can one begin with anonymity/end with anonymity too?

Say I buy bitcoins from someone with cash (no bank, name, trace, etc.) and have them send it to a paper wallet/offline address. Yeah, there's a "trace" but to WHAT/WHO? It's bought with cash,...
Ergo Not's user avatar
0 votes
1 answer
2k views

How do I turn an 88 byte ECDSA public key into a 65 byte uncompressed or 33 byte compressed key for use with bitcoin

In my situation my private key is in an HSM. I cannot access it for use with the various bitcoin golang libraries. Most of the functions require the private key "in-use". Although in my case,...
Pete's user avatar
  • 3
0 votes
2 answers
485 views

Are Bitcoin Scam Recovery business a scam? [closed]

I have an acquaintance that has lost USD 10k - 20k in a Cryptocurrency Investment scam. I strongly suspect he is about to get involved in what in my mind would be a "Crypto Currency Scam ...
davidgo's user avatar
  • 611
0 votes
0 answers
112 views

WordPress, a Security Risk for Bitcoin Application?

Asked this question on Bitcoin SE was told to post it here. I'm developing a custom Bitcoin service. Besides for the core application (which is written in PHP) I'm going to install a blog for updates ...
Design X's user avatar
24 votes
4 answers
8k views

How does this Bitcoin scam work?

Lately I have been receiving messages from accounts on Discord telling me that I have won 1 BTC in a giveaway. This is obviously not true, but I have a hard time seeing how these accounts will get ...
Daniel's user avatar
  • 343
3 votes
0 answers
781 views

A bitcoin miner is getting install on my web server with the apache2 process [duplicate]

For a few weeks, someone, probably a bot keep installing a bitcoin miner on my server, I find it because it is taking all the CPU. The process name is kdevtmpfsi located at /tmp/kdevtmpfsi, there's ...
christianb35's user avatar
0 votes
1 answer
566 views

secp256k1 GPG key?

Given that secp256k1 is used to underpin the entire Bitcoin network (worth $174B as of today) -- it appears to offer demonstrably better security than other EC curves as no one has yet taken the ...
Jonathan Cross's user avatar
0 votes
0 answers
115 views

Multi-Boot & BIOS Attack Vector Risks For Bitcoin Wallet Storage

I'm trying to emulate a cold storage computer for crypto assets with a multi-boot computer. If I have multi-OS boots & the 'cold storage' boot is never connected to the internet when it is booted,...
Emily's user avatar
  • 121
-1 votes
1 answer
193 views

What is the need of consensus by proof of work when digital signature is already being used in blockchain

I am learning about how Bitcoin works under the hood. I am unable to understand why consensus is needed if digital signature is already being used. By my understanding, consensus is used by nodes to ...
shekhar's user avatar
0 votes
0 answers
126 views

Emulating crypto currencies cold storage using Tails + disconnected computer?

Problem: I need cold storage protection for crypto currencies while traveling. I'll only have 1 computer. Does this solution work? Tails on an SD card that is only ever inserted into hardware when ...
Emily's user avatar
  • 121
1 vote
1 answer
272 views

Multiple outbound TCP/8333 connections containing the EICAR test string

An IPS / IDS / UTM detects 50 connections from a single client containing Virus/Worm Eicar test string within half an hour. The destinations are IP addresses all around the world on port TCP/8333. A ...
Esa Jokinen's user avatar
3 votes
2 answers
3k views

Strange GET request to my web application

I developed a Django application for a school project and I hosted it on an EC2 instance to test and learn the environment. During inspection of the logs, I found the following GET request, "GET /...
Emre's user avatar
  • 133
0 votes
1 answer
388 views

Why don't call center scammers accept bitcoins?

I've watching few YouTube channels which call scam call centers mostly based in India and waste their time basically Including a channel called Kitboga and another one called The Hoax Hotel. A common ...
Lynob's user avatar
  • 185
43 votes
2 answers
13k views

Does this mean Target's twitter was successfully attacked?

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the ...
Oddthinking's user avatar
  • 1,849
0 votes
1 answer
219 views

Is it safe to store user's secure pass-code in database with encrypted form while creating bitcoin wallet?

I would like to create a Bitcoin Wallet. Part of the process is to store public and private keys in encrypted form in server database. All keys I am storing is encrypted using user's passcode. 1) ...
Sagar Shah's user avatar
4 votes
1 answer
365 views

What does "by continuing you agree to share resources" on a website mean?

I recently encountered this message on a website: "By continuing you agree to share resources. Your browsing speed will not be affected." When I get 'learn more', it redirected to me an obscure ...
WorldGov's user avatar
  • 333
4 votes
3 answers
310 views

I want to hire someone on Upwork to install a bitcoin trading bot on a cloud server. What vulnerabilities should I watch out for?

Context I tried installing Tribeca (a bitcoin trading bot) myself yesterday, but messed it up somehow, as I'm not very familiar with Docker/Git/NPM/mongoDB technologies (a little knowledge is ...
user29357's user avatar
3 votes
1 answer
560 views

How is the bitcoin block header data padded for SHA256 hashing?

I see that a block contains 80 bytes. SHA256 expects integral multiples of 64 bytes as input. How are the remaining 48 bytes calculated?
user170174's user avatar
0 votes
1 answer
495 views

Preventing fraud in bitcoin mining pools [closed]

So bitcoin mining pools are very common, almost no one mines alone, because of the great difficulty in mining a block. So mining in a pool has pretty much been the standard. However, how do people ...
James's user avatar
  • 135
1 vote
1 answer
174 views

Are eavesdropping attacks possible on Ledger Nano S hardware wallets?

Regarding the Ledger Nano S hardware wallet for cryptocurrencies, I've heard it claimed that the private keys for the wallet are securely stored on the physical device and protected even if the PC is ...
Simon East's user avatar
-3 votes
1 answer
159 views

Trace the other end of a bitcoin transaction [closed]

What possible ways/methods that someone with a lot of resources can track the location of the person on the other side of a bitcoin transaction?
jason steph's user avatar
2 votes
1 answer
193 views

Is hardware wallet such as Ledger safe from being hacked by its manufacturer?

Ledger is hardware wallet which assumed to be secured from remote hackings or hackings by malwares, but how about Ledger company itself? How difficult for the company to get access to our confidential ...
fronthem's user avatar
  • 133
1 vote
1 answer
668 views

CoinHive Bitcoin Mining [closed]

2 clients (call them Client R and Client B) reported users of their websites complaining about their anti-viruses detecting a trojan called: CoinHive.js. This seem to be a bitcoin mining malware, that ...
Jurgen Cuschieri's user avatar
7 votes
3 answers
17k views

What is coin hive virus?

My Kaspersky Internet Security said it detects a trojan at (do not go to the link below, my KIS said it's trojan): https:// coinhive.com/lib/coinhive.min.js The Trojan name is Trojan.JS.Miner.d. ...
123iamking's user avatar
0 votes
1 answer
252 views

FooCoin, a BitCoin on an encrypted smartphone OS = flawed? [closed]

Please help me with a theoretical Bitcoin equivalent called FooCoins that are encrypted inside small phone electronics that are difficult to modify and hack, using a closed source OS. BitCoins use ...
bandybabboon's user avatar
5 votes
3 answers
210 views

Is blockchain security dependent on number of transactions in time?

I have a basic understanding of how blockchain technologies works. I know that in depends on the ledger where are transactions recorded and can be effectivelly verified. No one should be able to ...
user1563721's user avatar
  • 1,119
2 votes
1 answer
246 views

Is it possible to "steal" someone else's ransomware bitcoin payment? [closed]

I'm not too sure if this belongs on security.SE, so feel free to close or migrate to a different SE. It seems that many ransomwares use Bitcoin as currency (for good reason), and tell you to send X ...
Kevin's user avatar
  • 123
80 votes
5 answers
14k views

Why are ransomware attackers not tracked down via bitcoin transactions?

A bitcoin transaction has details of the incoming address as well as the outgoing address (where the bitcoins are being transferred), so my question is why that outgoing address has not done anything ...
Ashmika's user avatar
  • 889
4 votes
1 answer
202 views

Unidirectional Data Transmission to a Smartphone

Unidirectional Data Transmission to a Smartphone I'm going to use an old Android phone to store sensitive data (e.g., Bitcoin wallet private key), with no SIM card and WiFi and Bluetooth turned off. ...
anton_'s user avatar
  • 41
1 vote
1 answer
497 views

BlockChain private key leakage

I am trying to learn blockchain by learning and analysing source code of bitcoin from here. https://github.com/bitcoin/bitcoin . I can see that encryption is relying on Operating system internal ...
Shailendra Bhardwaj's user avatar
2 votes
1 answer
198 views

What are likely outcomes of being infected by cryptocurrency miner malwares (like Adylkuzz)?

This week, most media spent a lot of time talking about the very famous WannaCry attack. However, another malware infected a lot of computers using the same vulnerability, and was less mediatized : ...
Kaël's user avatar
  • 362
0 votes
1 answer
191 views

Who owns this bit coin address? [closed]

If I have a bit coin address, how do I find out user info? I see there is a http://bitcoinwhoswho.com but I did not get any information back on my user. Here is what the address kind of looks like (...
userJoe's user avatar
  • 93
1 vote
0 answers
393 views

Why isn't there any Cryptocurrency for fuzzing well-known softwares?

Looks like automated fuzzing is a great idea to find security vulnerabilities, bugs: http://seclists.org/oss-sec/2017/q1/471 , ex.: syzkaller ( https://news.ycombinator.com/item?id=13705833 ) For the ...
PeterBill's user avatar
6 votes
3 answers
1k views

Are the online bitcoin wallets secure?

I have an online bitcoin wallet. I sometimes read news about some online bitcoins wallet websites getting hacked. For sure when this happens, all the bitcoins of all of the users are stolen. Articles ...
OscarAkaElvis's user avatar
0 votes
3 answers
298 views

How do I implement Multikey encryption? [closed]

I'm looking for an algorithm, by which I can encrypt a piece of data with n keys and that to decrypt I can use any of them. I think I remember bitcoin using something similar for blocks, but now I ...
Tlaloc-ES's user avatar
  • 101
2 votes
0 answers
420 views

Attacking Bitcoin's blockchain?

The blockchain is a shared public ledger on which the entire Bitcoin network relies. All confirmed transactions are included in the block chain. Because the integrity and the chronological order of ...
user34445's user avatar
  • 503
3 votes
2 answers
1k views

Input password to Bitcoin CLI

I'm new to bitcoin and I'm very concerned about keeping my wallet secure. As I prefer CLIs over GUIs for many reasons including security, I'm learning how to use the bitcoin-cli command on GNU/Linux. ...
e18r's user avatar
  • 153
7 votes
2 answers
768 views

If the bitcoin network was cracking bcrypt, what cost factor would you use?

Since the best example of pooled resource to crack hashes is the bitcoin network, currently churning through 2.14 ExaHashes/s. I want to ask, if the resources of this network were pointed towards ...
Amin Shah Gilani's user avatar
4 votes
1 answer
340 views

Did Mt. Gox lose their own or customers bitcoins?

I understand bitcoin superficially, and the concept of the blockchain. When I heard about Mt. Gox, I assumed that they had lost their own money. But apparently, they lost their customer's money. ...
misterelliot's user avatar
3 votes
2 answers
339 views

Being anonymous with bitcoin

In the recent ransomware attacks, attackers have asked the targeted organizations to pay them in bitcoins. How can they be anonymous if they deal in bitcoins? Can they convert bitcoins to any other ...
Sandhya Tiwari's user avatar
1 vote
1 answer
986 views

How to verify the authenticity of a download?

On the bitcoin.org website it says: verify your download using signatures I have found some vague instructions on how to do this, but was wondering if anyone has written clear and concise step by ...
oshirowanen's user avatar
3 votes
1 answer
6k views

Why isn't Internet DNS based on blockchain? [closed]

Aside from the fact that verisign makes a lot of money doling out certificates from a central location.
Rob Truxal's user avatar
6 votes
3 answers
736 views

Why is DARPA interested in secure messaging platform using blockchain technology?

DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework. The following is the Objective paragraph from ...
user2065276's user avatar
3 votes
1 answer
2k views

How can I check the integrity of a Bitcoin tarball with GPG?

I plan on running several so called Full node servers with bitcoind (Bitcoin Core daemon). All servers are running GNU/Linux Debian Stretch. How do I verify integrity of the downloaded tarball with ...
Vlastimil Burián's user avatar
25 votes
2 answers
4k views

How could Craig Wright obtain Satoshi Nakamoto's private key? [closed]

Some of the earliest Bitcoin transactions were signed with a private key most people collectively believe belonged to Satoshi Nakamoto. However, many publications propose Craig Wright may have ...
steampowered's user avatar
  • 1,847
3 votes
2 answers
206 views

What are the benefits to adding a bitcoin blockhash UID notation to one's OpenPGP key?

Example: Notation data: [email protected] 000000000000000011d9f6931e65f814c6f3b221736b0c45f25e0365a3d156fa As seen here: https://sks-keyservers.net/pks/lookup?op=vindex&search=...
Jonathan Cross's user avatar
0 votes
1 answer
181 views

Unique human view count system without captcha on Pay Per click system, using cryptographic proof of work

I have a system that will be paying users per unique view on a page. I need to prevent 80% of fraudulent automated traffic from being counted. I need to avoid captcha.I would like to implement a ...
ROCK's user avatar
  • 96
7 votes
1 answer
983 views

Bitcoin and criminals [closed]

The Bitcoin System depends on anonymity, all money transactions are encrypted then recorded in the system. So how are criminals, who use bitcoin for illegal trading, arrested by governments?
user5670635's user avatar
1 vote
0 answers
605 views

Curve25519xsalsa20poly1305 key derivation

I'm working on batch-encryption of files, for a small project of mine. The files are stored encrypted on a removable drive, and the keys are stored on a trustful server. For enhanced safety, I'd like ...
Perceval's user avatar