How to steal Bitcoins that are protected by weak passphrases

Post by 3pt14159 » Sun, Mar 09, 2014, 2:39 PM UTC

nwh wrote: post #23

nadaviv wrote: post #21

Earlier quoted context omitted.

"correct horse battery staple" is a reference to xkcd [0]. Its not meant to be "random" and not meant to be used by anyone. I assume that people who send funds to that address are fully aware that anyone can access them. [0] http://xkcd.com/936/

I doubt it, they've sent almost 5BTC over 2300 transactions to that address so far. I personally know somebody who got caught out with it, and another with the static change address in the transaction view of the same site.

Post by crystaln » Mon, Mar 10, 2014, 8:58 PM UTC

nshepperd wrote: post #73

crystaln wrote: post #37

Deterministically generating wallets is just dumb. It's the exact opposite of randomly generating wallets. We spend all this time on making things cryptographically secure and then mess it up by using a tiny subset of the keyspace. Why would anyone find this to be a good idea?

It's trivial to use a "large" subset of the keyspace if you have any clue whatsoever about information theory. Just pull ten words uniformly at random from a list of the 4096 most common, hash them, and you've got yourself a 120 bit key right there. (Or even hash them another 128 times to give yourself an effective 7 bits of extra security.) However, obviously idiots who will pick a 2 word passphrase should not be en…

Post by TrainedMonkey » Wed, Mar 12, 2014, 5:48 PM UTC

kordless wrote: post #56

TrainedMonkey wrote: post #53

Earlier quoted context omitted.

Observable universe.

I'd l̶i̶k̶e̶ t̶o̶ will drink beers with you someday.