Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

Filter by
Sorted by
Tagged with
4
votes
0answers
212 views

Security risk due to bad random number generator when creating transactions

I've noticed such risk mentioned in this answer to another question, where a presentation (page 28) by Nicolas T. Courtois, studying Monero cryptography, was referred to. I'm interested to better ...
9
votes
1answer
3k views

How does Monero privacy and security compare to ZCoin?

How does Monero (XMR) privacy compare to ZCoin (XZC)? Can ZCoin protect the privacy of transaction amounts like Monero will do with RingCT, or are ZCoin transaction amounts visible similar to Monero ...
4
votes
1answer
84 views

Code that checks for 'rogue block'

I read recently about, for lack of a better term, a rogue block that was recorded into the blockchain that forked the chain but it didn't split exactly. I read that there is some code in later ...
9
votes
1answer
475 views

Is it possible for an adversary to shut Monero down?

Imagine a government wants to ban XMR. Is it possible for them to do so? Only possible options, nothing like turning off the internet. And if it is possible, what could be done against that? Thank ...
5
votes
1answer
64 views

What is novault and what is its connection to Monero?

What is the primary purpose of novault? Is it safe to use? Is the tool meant to be used just Monero or does it had wider applications?
10
votes
4answers
785 views

Is a Monero key backdoor possible?

Recently an article was published stating the possibility of the NSA or some other malicious organization creating backdoor undetectable Diffie-Hellman keys (source) to allow snooping. Is Monero at ...
6
votes
1answer
216 views

Is there any connection between botnets PhotoMiner and Linux.Lady?

Is there any known connection between PhotoMiner and Linux.Lady aside from them both mining Monero? They both also seem to target open ports, FTP server ports in the case of PhotoMiner and Redis ...
35
votes
1answer
2k views

How vulnerable is Monero to Quantum Computing?

Elliptic curve cryptography, which is used in Monero, is vulnerable to QC. Would Monero be more vulnerable than Bitcoin, because the addresses contain public keys, not hashes of public keys? What ...
7
votes
1answer
148 views

Issue with unforgeability proof of ASNL in RingCT paper

In the RingCT paper, proof of theorem 5.1 (The Aggregate Schnorr Non-linkable ring signature is unforgeable under the discrete logarithm assumption), it is assumed by contradiction that there exists ...
2
votes
2answers
190 views

Monero Wallet with Key File

I have been using KeePass password manager, and one option for login is a password + a key file. Would it be possible to incorporate this layer of protection to monero-wallet-cli as a safer ...
4
votes
2answers
160 views

If I'm running a full node and wallet on my local network can someone get my wallet information?

If someone connected to my WIFI could they get information about my wallet or steal from me?
5
votes
1answer
186 views

If I have a vanity address does it decrease my wallets security?

I've seen some people with vanity Monero addresses like 43COINxxxxxx. Does having a vanity address like this increase its susceptibility to getting cracked and view/spend keys getting found?
7
votes
5answers
448 views

Does having a separated daemon add security risks to Monero?

For example, what if someone created malware to get in between the two programs (wallet and daemon), pretending to be the daemon and logging all the info before sending it along to the real daemon? I ...
17
votes
1answer
361 views

Can Kovri be blocked in e.g. China?

And if so, is there a way around it with something like the meek pluggable transport from the Tor project?
4
votes
2answers
781 views

How to Properly Generate a Monero Brain Wallet?

I remember reading somewhere, I think it was fluffypony mentioning one could use for example words from a letter to a loved one seed for a Monero wallet. But from playing with https://xmr.llcoins.net/...
6
votes
3answers
165 views

After major coin issuance, what must the minimum XMR price be to incentivize network security?

I'm curious about the tail emission and transaction fees after major coin issuance. What is the minimum value that 1 XMR must sustain as an incentive for miners to continue maintaining network ...
2
votes
1answer
317 views

Can my Monero Wallet be accessed from computer if the Wallet file name and password is known?

Sorry if this is a stupid question. I was using mymonero.com to store the XMR that I bought, but after seeing advice that it is safer to store using the simple wallet, I downloaded the warptangent ...
5
votes
1answer
182 views

Hard Fork Replay Attacks? [duplicate]

When the Ethereum fork happened a few months ago, users were cautioned to protect against so called "replay attacks". A replay attack, as far as i understand it, is when a transaction occurs on one ...
6
votes
2answers
164 views

Why isn't simplewallet relatively safe with a very strong password?

Very new to crypto-currency. From what I understand the only way to gain access to my wallet funds is: get my mnemonic seed. get my key file + password. lets say my password is a huge strong ...
5
votes
1answer
88 views

Can I enter a password & wallet file name through JsonRPC?

This would be the ideal circumstance for programming monero-wallet-cli - however, this raises the same concern that running the client with the password supplied via an argument monero-wallet-cli --...
5
votes
1answer
638 views

When will KeepKey support Monero? [closed]

I asked this of keepkey about a year ago and I only have gotten a standard response saying they are evaluating the support of alts. Is anyone aware of progress made to support Monero?
6
votes
3answers
126 views

Is it possible to integrate anti-keylogger in monero wallet?

Is it possible and make sense to integrate anti-keylogger directly into monero wallet, so keyloggers can't read and steal seed/password?
13
votes
1answer
457 views

Could Monero help me to implement a safe election for a small group of students?

The problem I am in charge of implementing a secure, secret election for a small group of students on my school. I have a list linking valid student IDs to emails, and I want each one of them to vote ...
3
votes
1answer
231 views

How to transfer synced blockchain along with another OS on a USB

So, I am considering switching my current OS to Qubes and I am currently running Lubuntu 14.04 LTS. I figured since Qubes is a lot more secure of an OS, I wanted to install it on my laptop as my main ...
6
votes
0answers
130 views

Can we use Coinshuffle++ insights to improve privacy in relaying Monero transactions? [closed]

Coinshuffle is a communication protocol that allows for a number of peers to privately collaborate in making a Bitcoin coinjoin transaction in such a way that they all provide their addresses for the ...
10
votes
6answers
1k views

What are some ways I can disguise my mnemonic seed?

I'm thinking of storing my mnemonic seed on a few pieces of paper in secure locations, but I'm worried other people might find one of them and steal my funds. What are assume ways I can disguise this ...
5
votes
1answer
90 views

What technique(s) should be used to secure funds in my wallet(s)?

So I know that there might not be a straight forward answer besides having a cold and hot wallet available that you can access with your own daemon and simplewallet. But I feel like there might be ...
13
votes
3answers
5k views

Is it safe to share a daemon with a roommate?

Are there any security concerns with sharing a Monero daemon with a roommate to send or receive transactions? If we each person has their own wallet, encrypted with a very strong password what are ...
5
votes
1answer
95 views

LMDB conversion vs downloading from scratch

What are the speed and security differences between a pre LMDB (0.8.6) to LMDB (0.9.4) conversion vs syncing the blockchain from scratch? I have a Linux Ubuntu desktop with 8GB RAM a 512 GM SSD and a ...
12
votes
2answers
280 views

Number of Monero block explorers and their unique features

How many Monero block explorers are currently known to exist? What unique features separate one block explorer from another? What differences do they have in terms of privacy and security ...
3
votes
1answer
288 views

TLS and authentication for RPC

TLS and authentication for RPC has been completed in the Monero dev branch for quite some time. Has it been reworked to fully address any conflicts with net_skeleton's license so that it will be ready ...
5
votes
1answer
298 views

Is the entropy for the mnemonic seed and the private spend key exactly the same?

Since one is just another representation of the other, is the entropy for the mnemonic seed and the private spend key exactly the same? Are there any security benefits of using one over the other for ...
9
votes
1answer
357 views

What cryptographic assumptions is Monero based on?

Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
10
votes
1answer
55 views

Has Monero published a definitive, concise threat model?

I2P's threat model consolidates various aspects of garlic/onion threat modeling into one document. Does Monero have a similar document and, if so, where can this document be found?
13
votes
2answers
158 views

Security concerns with OpenAlias

As I understand it if someone is able to hack my DNS server and edit my TXT DNS record on a FQDN (fully qualified domain name) they could alter the Monero address that the associated with my OpenAlias ...
14
votes
1answer
77 views

What security risks are associated with accepting Instant Transactions?

If a merchant decides to accept a Monero payment the moment it appears in the memory pool (before confirmation) what risks are being assumed? Based on the probability of these risks being exploited, ...
47
votes
1answer
2k views

Why was I2P chosen over Tor for native Monero integration?

Tor is currently much more popular than I2P. Why was I2P chosen (Kovri project) over Tor for native Monero integration?
5
votes
1answer
94 views

What potential security risks are associated with sharing my view key?

Is it safe to share my view key with my accountant or business partner? Can a view key be used to steal my funds?