Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

2
votes
1answer
300 views

Can my Monero Wallet be accessed from computer if the Wallet file name and password is known?

Sorry if this is a stupid question. I was using mymonero.com to store the XMR that I bought, but after seeing advice that it is safer to store using the simple wallet, I downloaded the warptangent ...
5
votes
1answer
86 views

Can I enter a password & wallet file name through JsonRPC?

This would be the ideal circumstance for programming monero-wallet-cli - however, this raises the same concern that running the client with the password supplied via an argument monero-wallet-cli --...
5
votes
1answer
610 views

When will KeepKey support Monero? [closed]

I asked this of keepkey about a year ago and I only have gotten a standard response saying they are evaluating the support of alts. Is anyone aware of progress made to support Monero?
13
votes
1answer
452 views

Could Monero help me to implement a safe election for a small group of students?

The problem I am in charge of implementing a secure, secret election for a small group of students on my school. I have a list linking valid student IDs to emails, and I want each one of them to vote ...
6
votes
3answers
124 views

Is it possible to integrate anti-keylogger in monero wallet?

Is it possible and make sense to integrate anti-keylogger directly into monero wallet, so keyloggers can't read and steal seed/password?
7
votes
2answers
628 views

How do full nodes vs miners secure the network differently?

If I run a full node I am supposedly contributing to network security by keeping a copy of the blockchain If I mine (via pool or solo) I contribute to the network through verification of blocks How ...
3
votes
1answer
226 views

How to transfer synced blockchain along with another OS on a USB

So, I am considering switching my current OS to Qubes and I am currently running Lubuntu 14.04 LTS. I figured since Qubes is a lot more secure of an OS, I wanted to install it on my laptop as my main ...
7
votes
3answers
989 views

How to change password on a wallet created with simplewallet?

I have created a wallet using simplewallet, but I am not satisfied with the password. How do I go about changing the password on the wallet? (I am running monero.linux.x64.v0-9-4-0)
6
votes
0answers
123 views

Can we use Coinshuffle++ insights to improve privacy in relaying Monero transactions? [closed]

Coinshuffle is a communication protocol that allows for a number of peers to privately collaborate in making a Bitcoin coinjoin transaction in such a way that they all provide their addresses for the ...
10
votes
6answers
1k views

What are some ways I can disguise my mnemonic seed?

I'm thinking of storing my mnemonic seed on a few pieces of paper in secure locations, but I'm worried other people might find one of them and steal my funds. What are assume ways I can disguise this ...
11
votes
5answers
995 views

Can we practically compensate full nodes

Is it practical to compensate full nodes in the Monero network? The nodes that aren't mining The primary issue with non-Proof of Stake methods is the sybil attack, but requiring full nodes to already ...
27
votes
1answer
306 views

How would Monero verify transactions on a 2-way pegged sidechain?

From my understanding, in order to retrieve tokens on a side-chain, you would have to send your XMR to some address that would then be unlocked when you burn the side-chain tokens. How could Monero ...
5
votes
1answer
89 views

What technique(s) should be used to secure funds in my wallet(s)?

So I know that there might not be a straight forward answer besides having a cold and hot wallet available that you can access with your own daemon and simplewallet. But I feel like there might be ...
13
votes
3answers
5k views

Is it safe to share a daemon with a roommate?

Are there any security concerns with sharing a Monero daemon with a roommate to send or receive transactions? If we each person has their own wallet, encrypted with a very strong password what are ...
6
votes
1answer
209 views

Is there any connection between botnets PhotoMiner and Linux.Lady?

Is there any known connection between PhotoMiner and Linux.Lady aside from them both mining Monero? They both also seem to target open ports, FTP server ports in the case of PhotoMiner and Redis ...
23
votes
3answers
8k views

Does Monero have any mobile wallets available?

Mobile usage is growing very fast worldwide. Monero transactions should be easy to conduct from any device Does Monero have any Android or iOS wallets available? If there are no mobile wallets today,...
3
votes
1answer
249 views

TLS and authentication for RPC

TLS and authentication for RPC has been completed in the Monero dev branch for quite some time. Has it been reworked to fully address any conflicts with net_skeleton's license so that it will be ready ...
5
votes
1answer
260 views

Is the entropy for the mnemonic seed and the private spend key exactly the same?

Since one is just another representation of the other, is the entropy for the mnemonic seed and the private spend key exactly the same? Are there any security benefits of using one over the other for ...
9
votes
1answer
349 views

What cryptographic assumptions is Monero based on?

Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
12
votes
2answers
262 views

Number of Monero block explorers and their unique features

How many Monero block explorers are currently known to exist? What unique features separate one block explorer from another? What differences do they have in terms of privacy and security ...
9
votes
1answer
147 views

What are specific security threats to a Monero GUI?

As the release of the official Monero GUI approaches, I would like to ask the best ways to secure our systems against possible theft. Apart from keyloggers catching your mnemonic seed or password, I ...
27
votes
3answers
6k views

What are the primary differences between Monero and Bitcoin?

Addressing each of the following factors, what are the major differences between Monero and Bitcoin? Privacy (including any limitations privacy may have on auditability) Scaling (including blockchain ...
5
votes
1answer
87 views

LMDB conversion vs downloading from scratch

What are the speed and security differences between a pre LMDB (0.8.6) to LMDB (0.9.4) conversion vs syncing the blockchain from scratch? I have a Linux Ubuntu desktop with 8GB RAM a 512 GM SSD and a ...
10
votes
1answer
53 views

Has Monero published a definitive, concise threat model?

I2P's threat model consolidates various aspects of garlic/onion threat modeling into one document. Does Monero have a similar document and, if so, where can this document be found?
14
votes
1answer
76 views

What security risks are associated with accepting Instant Transactions?

If a merchant decides to accept a Monero payment the moment it appears in the memory pool (before confirmation) what risks are being assumed? Based on the probability of these risks being exploited, ...
13
votes
2answers
154 views

Security concerns with OpenAlias

As I understand it if someone is able to hack my DNS server and edit my TXT DNS record on a FQDN (fully qualified domain name) they could alter the Monero address that the associated with my OpenAlias ...
23
votes
3answers
695 views

Monero private key collision

Assuming a properly working RNG what are the chances of creating a Monero private key that is identical to one created by someone else (it corresponds and controls funds sent to the same XMR address)? ...
59
votes
3answers
7k views

How does Monero privacy and security compare to Zcash?

How does Monero privacy compare to Zcash? What are the key security risks associated with each design? Since important Monero improvements are in active development and Zcash has yet to launch, ...
15
votes
2answers
8k views

What is the safest method to create a Monero wallet for cold storage?

If I want to create a Monero wallet in the most secure manner possible, what are the best practices in doing so? Are there any written user guides or video demonstrations of this process?
23
votes
3answers
6k views

What privacy or security trade offs are associated with not running your own full node?

If I choose to use a webwallet such as mymonero.com or connect to a Monero node run by someone else to make transactions, what are the unique privacy and security concerns I will face (compared to if ...
47
votes
1answer
2k views

Why was I2P chosen over Tor for native Monero integration?

Tor is currently much more popular than I2P. Why was I2P chosen (Kovri project) over Tor for native Monero integration?
5
votes
1answer
90 views

What potential security risks are associated with sharing my view key?

Is it safe to share my view key with my accountant or business partner? Can a view key be used to steal my funds?
35
votes
1answer
2k views

How vulnerable is Monero to Quantum Computing?

Elliptic curve cryptography, which is used in Monero, is vulnerable to QC. Would Monero be more vulnerable than Bitcoin, because the addresses contain public keys, not hashes of public keys? What ...