Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

1
vote
1answer
28 views

Is it okay to host a node that connects on the clearnet?

There is some concern in regulatory bodies about governing Monero in the future. Does this have implications for people hosting nodes at home on personal computers and connecting on the clearnet, ...
0
votes
1answer
30 views

Suspicious connections - Having issues with the GUI under Debian by connection to a public remote node - PC hangs

Having a Windows client with local node - works perfect. When trying to connect with the Debian client to a remote node (eu.node.moneroworld.com at port 18089) the pc hangs immediately and cinnamon ...
1
vote
1answer
106 views

Can I run monero desktop wallet over Tor?

Can I use desktop version of monero wallet https://getmonero.org/downloads/ over Tor ? I read Web version mymonero.com is rejecting Tor connections. Does desktop wallet work over Tor ?
1
vote
1answer
35 views

Backup and Disaster Recovery for Monero Fork

For a clone of Monero in a production environment, what files/directories to be backed up and and what intervals?
2
votes
1answer
30 views

Migrating Monero Fork from Test to Production

When migrating from Test to Production of a Monero Fork, what needs to be considered? For example, launching the Seed Nodes in "--restricted-rpc" mode.
1
vote
1answer
45 views

Mitigating Risks of Forking Monero

When Forking Monero on GitHub, the code base becomes a public repository. The benefit of Forking as opposed to cloning into a private repository is that the link to the original code base is ...
0
votes
1answer
39 views

lost my phone with 2FA code

I lost my phone, so I lost my 2FA code too. Now I have new phone and I cant to login to the my wallet in step 2. where I need to get 2FA code from Authenticator. I am using Monero app on iphone. I ...
2
votes
1answer
89 views

What is an airdrop attack?

I just came across this thread on Twitter discussing Zcash and Monero usage in Dark-Net Markets. This quote bothers me: too much risk that an "airdrop attack" deanonymizes a chain like Monero ...
0
votes
2answers
72 views

SSL usage in Sumokoin/Monero

There is this merge: https://github.com/sumoprojects/sumokoin/pull/63 that enables SSL for Sumokoin (can be used also for Monero). What is it used for? I guess For SSL communication between RPC-...
0
votes
1answer
206 views

monerov windows wallet gui.exe showing up as Trojan

Why is moneorv windows wallet gui.exe being quarantined as Trojan.BitCoinMiner by malwarebytes ?
0
votes
0answers
37 views

Improvements on generating monero wallets securely?

My current process of generating monero wallets: Use an air-gapped RaspberryPi Use monero-wallet-cli to generate a wallet Record mnemonic on paper only Record partial address for reference on paper (...
0
votes
1answer
82 views

Monero Gui didn't create .keys file for wallet, it crashed, wasn't able to restore wallet, is it lost?

My Monero Gui was freezing every 10 seconds when I clicked on it so I just killed the process, after trying to reopen multiple times I killed the monerod daemon process as well When opening again the ...
1
vote
1answer
55 views

Offline Signing 2/3 Multisig

Interested in weather offline signing for 2/3 Multisig wallets is possible in this setup. I have three computers Airgapped from the internet, and a USB. I imagine i can pull down some outputs for ...
3
votes
1answer
48 views

Where can I find the random public key R=rG in a Tx?

I've read the white paper of Monero(CryptoNote v2.0) and a problem confuses me. This paper says that when Alice sends coin to Bob, she uses P = Hs(rA)G + B as a destination key and packs value R = rG ...
6
votes
2answers
297 views

Why does Monero use a 256 bit seed?

Apparently, ECC 256 bit keys have a bit strength of 128 bits. See https://crypto.stackexchange.com/questions/26791/how-many-bits-of-entropy-does-an-elliptic-curve-key-of-length-n-provide And ...
15
votes
2answers
4k views

How can individuals safeguard themselves and the community against a key reusing fork?

Regardless of the true intention behind the MoneroV developers, it forking off the existing Monero blockchain poses danger to the privacy of Monero users. While the MoneroV forking date has been put ...
1
vote
2answers
52 views

Why AVs reject miners?

I have been trying to install miners on my windows, but mostly detected as a threat by AVs. Why are most of the miners blocked by Antivirus programs? Is there any miner which has no problem with ...
15
votes
2answers
4k views

What is MoneroV, and how is it different than Monero?

I have heard of an upcoming airdrop called MoneroV. Can someone explain the relationship between Monero and MoneroV, and explain their differences?
1
vote
1answer
56 views

Will there be security vulnerable if you left your wallet address and password in public?

So usually we got no password or x as password but my wallet got an password but since usually there isn't a password for wallet I'm wondering if I left my wallet address and its password in public ...
3
votes
1answer
56 views

How could you lower the risk of accepting zero confirmation transactions?

As far as I heard monero nodes don't add double spent tx to their txpool (source), so if I connect to enough nodes it should be possible to lower the risk of a double spend attack right? (I could also ...
-5
votes
1answer
514 views

How can I make a coin using Monero? [closed]

I am developing a coin using the Monero git code, so I want to know what is the setup we need to follow to create our own coin using Monero. Coin development Coin Api development Coin explore Coin ...
1
vote
1answer
436 views

Best practices to keep Monero wallet secure

I'm using a read-only wallet on a computer connected to the Internet, a dedicated local server for the Monero node and I keep on a USB key the full wallet as cold storage to use it only in case. Also, ...
6
votes
1answer
175 views

Can a remote node know my wallet address?

When I connect my wallet to a remote node, does it know my wallet address? What information about a connecting wallet is revealed to the remote node?
3
votes
1answer
42 views

When using a foreign remote node does the transaction signing happen on my wallet or on the node?

I don't understand the architecture of Monero wallet(s) - on OSX or on Android. When I choose not to run my own full node/daemon and use (foreign) remote node instead, how does the security of ...
3
votes
1answer
425 views

How to setup own remote Monero node with maximum security / anonymity?

I'm interested in setting up my own remote monero node for personal use on a home computer running OSX. According to this guide all I need to do is setup an SSH-connection with a command line which ...
1
vote
3answers
328 views

Why Are Mining Passwords 'x'

In any of the 'get started mining' type sites, I see that password is always x. In xmr-stak, it seems to suggest putting in 'mostly empty or x' as a password. Does this really mean I should be using ...
0
votes
1answer
425 views

QUESTION : is it safe to use a remote monero demond (monerd)

hello everyone i don't know about professional part of monero so my question may sound crazy excuse for that i've seen some pool and .. provide a remote daemon for their users so they can use ...
0
votes
0answers
110 views

How to use monero-wallet-cli in a safe way?

I'm thinking on a best way to use a Monero wallet in a safe way. I'm using monero-wallet-cli on USB card and connecting it to a Linux machine only at needs. Is this a good way to keep it safe or is ...
0
votes
1answer
69 views

Should I keep monerod instances active on mining rigs?

Does it help the Monero network if I keep monerod instances active on different rigs? Or is it not useful?
9
votes
1answer
429 views

Are Confidential Transactions in Monero perfectly binding or hiding?

Bitcoin contributor Pieter Wuille recently commented on Reddit: Bulletproofs and the Pedersen commitments they operate on are perfectly hiding, but not perfectly binding. This roughly means that ...
3
votes
1answer
166 views

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...
4
votes
1answer
426 views

Is Monero in I2P secure now, and how do I do it?

First I'd like to say I love this project and I wanna support it and use it as best I can, but I'm a little bad with computers, and with English, so please excuse me. I am interested to set a Monero ...
4
votes
1answer
284 views

Security differences between using Monero on PureOS and QubesOS

The new Librem laptops available for purchase with Monero offer an option to add a QubesOS operating system to any order. For Monero use exclusively, what are the security differences between PureOS ...
4
votes
1answer
224 views

Cold transaction signing with GUI

Is it possible to safely complete a cold transaction signing process with the official GUI instead of the CLI process described here?
1
vote
0answers
49 views

Borromean signatures in monero commiting to an empty string?

In the codebase, the Borromean signatures to reduce the size of range proofs seem to sign an empty string,which is different from the paper by Maxwell et al. Is it true? Thanks for any answer.
3
votes
1answer
2k views

How can I change the wallet password?

I'm curious if there is a way to change the official CLI or GUI wallet password.
2
votes
0answers
175 views

2-factor authentication key format for Kraken

Does anyone know how to format the string that you type into the Google Authenticator app in order to generate 2FA codes for Kraken? For context, the following URL is highly relevant:— https://github....
3
votes
1answer
700 views

Difference between --rpc-bind-ip 0.0.0.0, or loopback, or actual IP

I run a node from home. I use --rpc-bind-ip as a daemon flag, with my internal/LAN IP address as the argument. With this setup, I can access my node from wallets on different computers inside my LAN....
5
votes
1answer
78 views

Kovri operational security example(s) - file permissions

The Kovri User Guide has a Step 2. (Recommended) Operational security. It is currently as follows: Consider creating a designated kovri user and run kovri only using that user If using Linux, ...
6
votes
1answer
378 views

Is CryptoNight the hash function which plays the role of the “random oracle”?

Is CryptoNight the hash function which plays the role of the "random oracle" in the random oracle model under which certain properties of CryptoNote are mathematically proven in the original paper? Or ...
3
votes
1answer
65 views

Backward compatibility and updates

The current plan is for bi-annual updates (hard forks) "for the forseeable future". What is the policy or plan for: Backward compatibility for existing daemons and wallet versions? For how long will ...
5
votes
1answer
129 views

Do multisig addresses share the same space as regular addresses and produce the same types of keys?

Let me word it another way. Can a normal Monero seed produce the same address as a multisig wallet? And, if so, would that mean that the private spend key generated by that wallet would be able to ...
4
votes
1answer
122 views

Proof of payment method comparison

How does the method of proofing a Monero payment following this pull request differ from the former process? Is revealing key derivation easier or more difficult than revealing the tx secret key? ...
2
votes
0answers
113 views

Will the MyMonero app support Android versions older than 6.0 (Marshmallow)?

I understand that the Bitcoin Breadwallet only supports Android versions 6.0 and above because of its support for hardware encryption inside the device. With privacy and security being a core focus ...
7
votes
1answer
317 views

How to Connect a a Monero Wallet to a Monero-Based Website and How to Keep it Safe?

I'm hoping to create a Monero-based website based on the work by 'TheKoziTwo' (https://github.com/TheKoziTwo/xmr-integration). I'm nearing the end of the project and I'm now hoping to connect the ...
4
votes
2answers
196 views

Cryptonote bug question

Assume someone is exploiting DigitalNote, Dashcoin, or Bytecoin. Apparently, they could issue large amounts of those coins to manipulate that individual coin value. But what keeps them from ...
3
votes
1answer
227 views

Can someone spend my xmr if they steal my Wallet folder?

Assume they don't know anything about my password and seeds.If a hacker opens my windows account and copy the monero wallet folder,can they steal my monero coins?
4
votes
2answers
214 views

Is a mnemonic seed wallet just as secure (random)

I understand you can use a 24+1 word mnemonic seed to generate your 256 bit private key. Is the number of possibilties of the 24 words the same as the 256 bits? So: are there 2^255 possible 24 word ...
6
votes
3answers
763 views

Can a One-Time public key be used for more than one payment?

If I understand correctly, every new payment will ideally have a different one-time public key for increased privacy. However, could a one-time public key receive Monero more than once (as in ...
5
votes
3answers
690 views

Is making a key image public equal to giving the monero in that output away?

So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address. If you then give out all key images ...