Hot answers tagged

11

You need to have a cold and hot wallet pair for the same account. In the hot wallet, make a transaction. It doesn't have the spend key, so instead of actually sending the transaction to the Monero network, it will save the necessary information to a file called unsigned_monero_tx (no choice of name for now). Next step is to transfer that information to the ...


10

Every user has a different background and intended use case for Monero. There is no officially defined knowledge set that is recommended to all users. Instead, there are basic user guides and tutorials to help new users choose an appropriate wallet for their needs and get started mining Monero. Generally, the Monero community advises against the use of ...


7

Your wallet.keys file should be perfectly safe in the cloud as long as your passphrase to unlock it remains secure. You are correct about the use of Chacha8 to protect the file. As long as the file remains encrypted, wallet.keys will not leak any data. Renaming it should not be a problem, but to be safe I would keep a backup of the original file (prior to ...


6

First, we assume you have a fully-synced node and fully-refreshed watch-only wallet on the hot computer. Also, we assume you have wallet software on the cold computer (don't need the node, just monero-wallet-cli). Using watch-only wallet, command export_outputs <filename>. There will be a file with <filename> created in the working folder*. Copy ...


6

Your password should keep it protected but its probably advisable to at least delete your wallet (found in "C:\Program Files\Monero wallet" I think) as a malicious person could still copy, and brute force it. Alternatively you could simply generate a wallet on a new machine, and transfer them.


5

Excellent question. Little anecdote: I just read in the local newspaper today that people who bought a "new" laptop, are occassionally given a "refurbished" laptop, containg holiday pictures from a previous customer … That is scary, and therefore, you shouldn't trust any service center. I think you have 2 options: Safely erase then entire disk one of the ...


5

A brain wallet should always be created offline, preferably on a computer that will never touch the Internet once you decide to use it for a key generator. Make sure any JavaScripts you are using can be initiated offline. Agree that there is a huge computing penalty for having to scan a blockchain for a given viewkey to identify associated stealth ...


4

If history is rewritten, you will not be able to pull over an existing tree (it's a bit more complicated, but in the general case where you're only ever on master, it holds). This is the "fast forward" mode. If history you already have is rewritten, git will fetch the new data, but will complain that it can't fast forward, and leave you with your master ...


3

This is somewhat related to the Temporal Associations, described in MRL4 here, and temporal alignment, described in this SE question. To specifically answer your questions: However, if UserA broadcasts that TX at 8:00PM, is there any record of that? The broadcast of the transaction isn't stored in the blockchain, but its time of inclusion into the ...


2

It's fine for the HDD to have the blockchain installed on it as long as it has no ties to your wallet, Keep the wallet keys on the persistent storage.


2

The third point is about general operating system security with regards to which system users have read, write and executable permissions on files and folders in the kovri data path. setfacl (or chmod) can be used to set permissions on existing files / directories and umask is used to set permissions for newly created files in a directory. Which users / ...


2

If it's a hardware issue not related to the hard drive, I would just remove the hard drive before sending it in. You are giving your laptop to complete strangers and who knows what their security is like. There are too many stories about employees at computer repair shops snooping in other people's files, copying private pictures and uploading them to the ...


2

I remember reading somewhere, I think it was fluffypony mentioning one could use for example words from a letter to a loved one seed for a Monero wallet. But from playing with https://xmr.llcoins.net/addresstests.html I realized that it is not possible to enter just any text in the mnemonic seed; I dont know what exactly he mentioned but I'd guess ...


1

If we want to run wallets against potentially adversarial remote nodes, what problems can we run into? I'm interested in both points addressing privacy and opsec, as well as technical challenges related to consuming potentially malicious data. There are two categories of risks with malicious nodes. The first, most dangerous type of risks are the permanent ...


Only top voted, non community-wiki answers of a minimum length are eligible