Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

Filter by
Sorted by
Tagged with
2
votes
1answer
206 views

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...
2
votes
1answer
70 views

PoloniexTradeGUI trading application

What features does PoloniexTradeGUI offer? How does it secure login credentials? Have any Monero core team members reviewed the code?
2
votes
1answer
141 views

Features and security of new GUI compared to the command line wallet

For those that like the official command line wallet and are comfortable using it, is there any reason to switch to the GUI once released? Does the GUI contain any new features that the command line ...
2
votes
1answer
136 views

What is an airdrop attack?

I just came across this thread on Twitter discussing Zcash and Monero usage in Dark-Net Markets. This quote bothers me: too much risk that an "airdrop attack" deanonymizes a chain like Monero ...
2
votes
1answer
560 views

Best practices to keep Monero wallet secure

I'm using a read-only wallet on a computer connected to the Internet, a dedicated local server for the Monero node and I keep on a USB key the full wallet as cold storage to use it only in case. Also, ...
2
votes
1answer
427 views

Monero RPC over SSL for client and server

I am trying to setup an RPC connection between monerod and monero-wallet-cli over SSL. For monerod, the recommended way seems to be to use nginx as a reverse proxy and add SSL support there. How do I ...
2
votes
2answers
194 views

Monero Wallet with Key File

I have been using KeePass password manager, and one option for login is a password + a key file. Would it be possible to incorporate this layer of protection to monero-wallet-cli as a safer ...
2
votes
1answer
69 views

Does using a remote node compromise the whole wallet?

If I'm using Tails and I use a remote node, does that compromise the whole wallet at some point in the future? For example, can the node determine my Monero wallet address or identify my wallet ...
2
votes
1answer
41 views

Migrating Monero Fork from Test to Production

When migrating from Test to Production of a Monero Fork, what needs to be considered? For example, launching the Seed Nodes in "--restricted-rpc" mode.
2
votes
1answer
88 views

Is Hybrid mobile wallet is as just secure than native

For example in the future we will be able to have an implementation that would allow a light wallet to connect to a remote server. Does a hybrid appp (e.g. Ionic ) is just safer than native? One good ...
2
votes
0answers
207 views

2-factor authentication key format for Kraken

Does anyone know how to format the string that you type into the Google Authenticator app in order to generate 2FA codes for Kraken? For context, the following URL is highly relevant:— https://github....
2
votes
0answers
136 views

Will the MyMonero app support Android versions older than 6.0 (Marshmallow)?

I understand that the Bitcoin Breadwallet only supports Android versions 6.0 and above because of its support for hardware encryption inside the device. With privacy and security being a core focus ...
1
vote
3answers
478 views

Why Are Mining Passwords 'x'

In any of the 'get started mining' type sites, I see that password is always x. In xmr-stak, it seems to suggest putting in 'mostly empty or x' as a password. Does this really mean I should be using ...
1
vote
1answer
58 views

Mitigating Risks of Forking Monero

When Forking Monero on GitHub, the code base becomes a public repository. The benefit of Forking as opposed to cloning into a private repository is that the link to the original code base is ...
1
vote
1answer
40 views

Backup and Disaster Recovery for Monero Fork

For a clone of Monero in a production environment, what files/directories to be backed up and and what intervals?
1
vote
2answers
58 views

Why AVs reject miners?

I have been trying to install miners on my windows, but mostly detected as a threat by AVs. Why are most of the miners blocked by Antivirus programs? Is there any miner which has no problem with ...
1
vote
1answer
61 views

Will there be security vulnerable if you left your wallet address and password in public?

So usually we got no password or x as password but my wallet got an password but since usually there isn't a password for wallet I'm wondering if I left my wallet address and its password in public ...
1
vote
1answer
77 views

Should I keep monerod instances active on mining rigs?

Does it help the Monero network if I keep monerod instances active on different rigs? Or is it not useful?
1
vote
1answer
64 views

Should I use a hardware wallet?

I hear a lot about hardware wallets and I would like to know if, in terms of security and functionality, it makes sense to switch to one of them. Thanks in advance for answers.
1
vote
1answer
61 views

Will the Multisig Messaging System improve Monero security and performance?

I'm trying to understand the incoming MMS (Multisig Messaging System) in Monero. Reading the MMS User Manual, I am thinking that MMS could improve both the security and performance in the next Monero ...
1
vote
1answer
147 views

Does Monero (XMR) or Pirate (ARRR) offer better privacy and security?

I have read several comparisons between Monero and Pirate. Can someone please explain to me the objective pros and cons about their privacy offerings? Is one more secure than the other? What are the ...
1
vote
1answer
36 views

Is it okay to host a node that connects on the clearnet?

There is some concern in regulatory bodies about governing Monero in the future. Does this have implications for people hosting nodes at home on personal computers and connecting on the clearnet, ...
1
vote
1answer
40 views

Suspicious connections - Having issues with the GUI under Debian by connection to a public remote node - PC hangs

Having a Windows client with local node - works perfect. When trying to connect with the Debian client to a remote node (eu.node.moneroworld.com at port 18089) the pc hangs immediately and cinnamon ...
1
vote
1answer
1k views

Can I run monero desktop wallet over Tor?

Can I use desktop version of monero wallet https://getmonero.org/downloads/ over Tor ? I read Web version mymonero.com is rejecting Tor connections. Does desktop wallet work over Tor ?
1
vote
1answer
81 views

Offline Signing 2/3 Multisig

Interested in weather offline signing for 2/3 Multisig wallets is possible in this setup. I have three computers Airgapped from the internet, and a USB. I imagine i can pull down some outputs for ...
1
vote
0answers
106 views

Why did I get an 'using an untrusted daemon' warning?

I'm running a full node and I followed every security step to set up the node on my computer. Everything was going great until today when I realized that a view-only wallet created the day before was ...
1
vote
0answers
47 views

Improvements on generating monero wallets securely?

My current process of generating monero wallets: Use an air-gapped RaspberryPi Use monero-wallet-cli to generate a wallet Record mnemonic on paper only Record partial address for reference on paper (...
1
vote
0answers
56 views

Borromean signatures in monero commiting to an empty string?

In the codebase, the Borromean signatures to reduce the size of range proofs seem to sign an empty string,which is different from the paper by Maxwell et al. Is it true? Thanks for any answer.
0
votes
2answers
109 views

SSL usage in Sumokoin/Monero

There is this merge: https://github.com/sumoprojects/sumokoin/pull/63 that enables SSL for Sumokoin (can be used also for Monero). What is it used for? I guess For SSL communication between RPC-...
0
votes
1answer
345 views

monerov windows wallet gui.exe showing up as Trojan

Why is moneorv windows wallet gui.exe being quarantined as Trojan.BitCoinMiner by malwarebytes ?
0
votes
1answer
59 views

Monero transfer privacy

If I want a transaction to be private, is it safe to follow a path like: Coinbase > MorphToken (using Windows) > Official Monero (using Tails) > destination
0
votes
1answer
58 views

lost my phone with 2FA code

I lost my phone, so I lost my 2FA code too. Now I have new phone and I cant to login to the my wallet in step 2. where I need to get 2FA code from Authenticator. I am using Monero app on iphone. I ...
0
votes
1answer
147 views

Monero Gui didn't create .keys file for wallet, it crashed, wasn't able to restore wallet, is it lost?

My Monero Gui was freezing every 10 seconds when I clicked on it so I just killed the process, after trying to reopen multiple times I killed the monerod daemon process as well When opening again the ...
0
votes
1answer
552 views

How to set up password on xmrpool.net mining pool?

I'm new to mining and I don't know how to set up a password and a username on xmrpool.net mining pool. Can anyone help me to do this?
0
votes
1answer
41 views

Would an attacker knowing the block-heights of my wallet's transactions weaken my privacy/security?

Let's say I'd go through all the transactions in my wallet, write down their block-heights and store this list somewhere insecure. Could my privacy or security be compromised by this in any way (...
0
votes
1answer
50 views

Does the Monero executable for Windows not have a code signing certificate?

I was getting really nervous about using the Monero wallet. It seemed like the download page was ww.getmonero.org/downloads, which I thought was weird. Additionally, the executable for Windows wasn't ...
0
votes
1answer
833 views

QUESTION : is it safe to use a remote monero demond (monerd)

hello everyone i don't know about professional part of monero so my question may sound crazy excuse for that i've seen some pool and .. provide a remote daemon for their users so they can use ...
-4
votes
1answer
718 views

How can I make a coin using Monero? [closed]

I am developing a coin using the Monero git code, so I want to know what is the setup we need to follow to create our own coin using Monero. Coin development Coin Api development Coin explore Coin ...