Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

27
votes
1answer
311 views

How would Monero verify transactions on a 2-way pegged sidechain?

From my understanding, in order to retrieve tokens on a side-chain, you would have to send your XMR to some address that would then be unlocked when you burn the side-chain tokens. How could Monero ...
4
votes
1answer
399 views

Security differences between using Monero on PureOS and QubesOS

The new Librem laptops available for purchase with Monero offer an option to add a QubesOS operating system to any order. For Monero use exclusively, what are the security differences between PureOS ...
4
votes
1answer
115 views

Securely funding a Monero physical coin

Assume that someone who ordered a physical coin from smoothie either: Lost the funding instructions Received the instructions but wants to verify them in case they were replaced in a MITM attack ...
0
votes
1answer
40 views

Does the Monero executable for Windows not have a code signing certificate?

I was getting really nervous about using the Monero wallet. It seemed like the download page was ww.getmonero.org/downloads, which I thought was weird. Additionally, the executable for Windows wasn't ...
4
votes
0answers
207 views

Security risk due to bad random number generator when creating transactions

I've noticed such risk mentioned in this answer to another question, where a presentation (page 28) by Nicolas T. Courtois, studying Monero cryptography, was referred to. I'm interested to better ...
2
votes
0answers
201 views

2-factor authentication key format for Kraken

Does anyone know how to format the string that you type into the Google Authenticator app in order to generate 2FA codes for Kraken? For context, the following URL is highly relevant:— https://github....
2
votes
0answers
133 views

Will the MyMonero app support Android versions older than 6.0 (Marshmallow)?

I understand that the Bitcoin Breadwallet only supports Android versions 6.0 and above because of its support for hardware encryption inside the device. With privacy and security being a core focus ...
1
vote
0answers
75 views

Why did I get an 'using an untrusted daemon' warning?

I'm running a full node and I followed every security step to set up the node on my computer. Everything was going great until today when I realized that a view-only wallet created the day before was ...
1
vote
0answers
43 views

Improvements on generating monero wallets securely?

My current process of generating monero wallets: Use an air-gapped RaspberryPi Use monero-wallet-cli to generate a wallet Record mnemonic on paper only Record partial address for reference on paper (...
1
vote
0answers
52 views

Borromean signatures in monero commiting to an empty string?

In the codebase, the Borromean signatures to reduce the size of range proofs seem to sign an empty string,which is different from the paper by Maxwell et al. Is it true? Thanks for any answer.