Skip to main content
12 votes
Accepted

How do I use cold transaction signing?

You need to have a cold and hot wallet pair for the same account. In the hot wallet, make a transaction. It doesn't have the spend key, so instead of actually sending the transaction to the Monero ...
user36303's user avatar
  • 34.8k
10 votes
Accepted

Minimum recommended user knowledge requirements

Every user has a different background and intended use case for Monero. There is no officially defined knowledge set that is recommended to all users. Instead, there are basic user guides and ...
Smart Kid's user avatar
  • 6,563
7 votes
Accepted

Cloud storing wallet.keys encrypted files

Your wallet.keys file should be perfectly safe in the cloud as long as your passphrase to unlock it remains secure. You are correct about the use of Chacha8 to protect the file. As long as the file ...
guesswhoiam's user avatar
  • 1,010
6 votes

How do I use cold transaction signing?

First, we assume you have a fully-synced node and fully-refreshed watch-only wallet on the hot computer. Also, we assume you have wallet software on the cold computer (don't need the node, just monero-...
JollyMort's user avatar
  • 19.9k
6 votes

Laptop has to go to service center - delete GUI?

Your password should keep it protected but its probably advisable to at least delete your wallet (found in "C:\Program Files\Monero wallet" I think) as a malicious person could still copy, and brute ...
ferretinjapan's user avatar
5 votes

Laptop has to go to service center - delete GUI?

Excellent question. Little anecdote: I just read in the local newspaper today that people who bought a "new" laptop, are occassionally given a "refurbished" laptop, containg holiday pictures from a ...
dpzz's user avatar
  • 4,539
5 votes
Accepted

How to Properly Generate a Monero Brain Wallet?

A brain wallet should always be created offline, preferably on a computer that will never touch the Internet once you decide to use it for a key generator. Make sure any JavaScripts you are using can ...
skaht's user avatar
  • 1,576
4 votes
Accepted

Source code history "immutability"

If history is rewritten, you will not be able to pull over an existing tree (it's a bit more complicated, but in the general case where you're only ever on master, it holds). This is the "fast forward"...
user36303's user avatar
  • 34.8k
3 votes

Does Monero protect against timing analysis?

This is somewhat related to the Temporal Associations, described in MRL4 here, and temporal alignment, described in this SE question. To specifically answer your questions: However, if UserA ...
Ginger Ale's user avatar
  • 5,676
2 votes

How to Properly Generate a Monero Brain Wallet?

I remember reading somewhere, I think it was fluffypony mentioning one could use for example words from a letter to a loved one seed for a Monero wallet. But from playing with https://xmr....
JollyMort's user avatar
  • 19.9k
2 votes

Kovri operational security example(s) - file permissions

The third point is about general operating system security with regards to which system users have read, write and executable permissions on files and folders in the kovri data path. setfacl (or chmod)...
jtgrassie's user avatar
  • 19.1k
2 votes

Laptop has to go to service center - delete GUI?

If it's a hardware issue not related to the hard drive, I would just remove the hard drive before sending it in. You are giving your laptop to complete strangers and who knows what their security is ...
user1089's user avatar
2 votes

Would this be considered good OpSec?

It's fine for the HDD to have the blockchain installed on it as long as it has no ties to your wallet, Keep the wallet keys on the persistent storage.
Joss Bird's user avatar
  • 561
1 vote

Security differences between using Monero on PureOS and QubesOS

PureOS is based on Debian, Qubes is mostly based on Xen (a hypervisor). So when you install Qubes you are essentially installing a custom Xen version with added goodies. PureOS on the other hand is ...
dxiri's user avatar
  • 49
1 vote

In what ways can a wallet connected to a malicious remote node be abused?

If we want to run wallets against potentially adversarial remote nodes, what problems can we run into? I'm interested in both points addressing privacy and opsec, as well as technical challenges ...
Maxithi's user avatar
  • 577

Only top scored, non community-wiki answers of a minimum length are eligible