thefrog



Offline



Activity: 393

Merit: 250







Sr. MemberActivity: 393Merit: 250 Re: ★★ DigiByte ★★ [DGB] ✈ DigiShield ✔ Multi-Algo v3.0.1 coming soon! August 15, 2014, 08:41:23 PM #10745

Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.

Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.

DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.



If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.



You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network.





Quote from: ycagel on August 15, 2014, 08:34:28 PM

Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.



YC



Quote from: thefrog on August 15, 2014, 08:03:19 PM Quote from: tdcooper99 on August 15, 2014, 07:51:27 PM Quote from: ycagel on August 15, 2014, 04:35:39 PM



http://www.coindesk.com/bter-nxt-bitcoin-exchange-hack/



YC

More and more stories like this. Important we take it nice and easy on providing the most secure for DGB in its current and future state:YC

I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!



I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!

This can happen to any coin. If people are dumb and keep al the coins in exchanges.

It's like asking for something like this to happen.

Don't be lazy, download the wallet, set reasonable passphase on it, and be safe.

This can happen to any coin. If people are dumb and keep al the coins in exchanges.It's like asking for something like this to happen.Don't be lazy, download the wallet, set reasonable passphase on it, and be safe. TheFrog,Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.YC First rule, set a really really good pass phrase.Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network.

ycagel



Offline



Activity: 910

Merit: 1000







Hero MemberActivity: 910Merit: 1000 Re: ★★ DigiByte ★★ [DGB] ✈ DigiShield ✔ Multi-Algo v3.0.1 coming soon! August 15, 2014, 08:44:51 PM #10746

This needs to be stickied! A few silly questions:



1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?



2.At what point do you create new addresses? How does that affect encryption? In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally? What about if you did a wallet import on a new DGB wallet upgrade?



3.How do you dump the private key? Where do you do that function?



4.Do you have a VM for each address? How do you secure those?



Thanks in advance! Awesome contributions!



YC



Quote from: thefrog on August 15, 2014, 08:41:23 PM

Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.

Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.

DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.



If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.



You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network.





Quote from: ycagel on August 15, 2014, 08:34:28 PM

Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.



YC



Quote from: thefrog on August 15, 2014, 08:03:19 PM Quote from: tdcooper99 on August 15, 2014, 07:51:27 PM Quote from: ycagel on August 15, 2014, 04:35:39 PM



http://www.coindesk.com/bter-nxt-bitcoin-exchange-hack/



YC

More and more stories like this. Important we take it nice and easy on providing the most secure for DGB in its current and future state:YC

I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!



I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!

This can happen to any coin. If people are dumb and keep al the coins in exchanges.

It's like asking for something like this to happen.

Don't be lazy, download the wallet, set reasonable passphase on it, and be safe.

This can happen to any coin. If people are dumb and keep al the coins in exchanges.It's like asking for something like this to happen.Don't be lazy, download the wallet, set reasonable passphase on it, and be safe. TheFrog,Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.YC First rule, set a really really good pass phrase.Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network. TheFrog,This needs to be stickied! A few silly questions:1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?2.At what point do you create new addresses? How does that affect encryption? In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally? What about if you did a wallet import on a new DGB wallet upgrade?3.How do you dump the private key? Where do you do that function?4.Do you have a VM for each address? How do you secure those?Thanks in advance! Awesome contributions!YC

thefrog



Offline



Activity: 393

Merit: 250







Sr. MemberActivity: 393Merit: 250 Re: ★★ DigiByte ★★ [DGB] ✈ DigiShield ✔ Multi-Algo v3.0.1 coming soon! August 15, 2014, 09:07:26 PM #10747 Quote from: ycagel on August 15, 2014, 08:44:51 PM

This needs to be stickied! A few silly questions:



1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?





You can also create so called 'Paper wallets', using a generator that will create new, not ever seen, public / private address pay.

Please do NOT use any paper wallet generator you find online for DGB, as I tried and ended up with private keys that could not be imported !

Someone should look into creating a new, working paper wallet generator for DGB, that works.

I tried this one SD card - the one you use in your phone/camera - MicroSD, SD. The point was more like to have at least 2 copies on 2 different digital medias. You could even burn the wallet.dat on a DVD every time you make a backup. Or 2 DVDs, different brands.You can also create so called 'Paper wallets', using a generator that will create new, not ever seen, public / private address pay.Please do NOT use any paper wallet generator you find online for DGB, as I tried and ended up with private keys that could not be imported !Someone should look into creating a new, working paper wallet generator for DGB, that works.I tried this one https://github.com/patricklodder/dgbaddress.org



Different locations - physical locations. Like have one copy at home, in your vault, the other copy at your work place, third copy at your parents in law house and so on. Postage is cheap, so send one copy to your best buddy across the country.

So if you loose one copy, you still got the other ones.



2.At what point do you create new addresses?

After installation, a default address is created for you. So this is the first address you get in your wallet.

You can create as may addresses as you want, for example one for payouts from exchanges, the other one for payouts from your friends and so on.



How does that affect encryption?

Encryption is set on the whole wallet, so once you set Encrypt Wallet and set the pass phrase, all the coins in the wallet are encrypted.

Meaning - if you want to spend some coins, you will have to unlock the wallet with your pass phrase.



In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally?

Wallet does not have to be unlocked to receive funds.

It's just the sending you have to authorize using your passphrase.



What about if you did a wallet import on a new DGB wallet upgrade?

This can be done either by importing the wallet.dat file (in case, it is encrypted, you will be asked for the passphrase for that wallet, which you are trying to import), or it can be done by importing the privkey for each address in your old wallet.



Go to console of your wallet and type 'help', will give you all the commands that can be used.



3.How do you dump the private key? Where do you do that function?

Console -

digibyted listaccounts

digibyted getaddressesbyaccount <account you got from above>

digibyted dumpprivkey <address you got from above>



do this for every account and accounts' address.



4.Do you have a VM for each address? How do you secure those?

No, VM is a virtual machine, which you create for example by using free virtualbox software.

You set you an isolated virtual machine, with OS you like (windows, linux..), install the wallet software and you solely that virtual machine to use your wallet. Not doing anything in the virtual machine, just use the wallet, as you normally would.

Benefit is that you isolate physically your day to day computer from your 'special' computer that has the wallet software installed.



Thanks in advance! Awesome contributions!



YC



Quote from: thefrog on August 15, 2014, 08:41:23 PM

Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.

Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.

DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.



If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.



You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network.





Quote from: ycagel on August 15, 2014, 08:34:28 PM

Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.



YC



Quote from: thefrog on August 15, 2014, 08:03:19 PM Quote from: tdcooper99 on August 15, 2014, 07:51:27 PM Quote from: ycagel on August 15, 2014, 04:35:39 PM



http://www.coindesk.com/bter-nxt-bitcoin-exchange-hack/



YC

More and more stories like this. Important we take it nice and easy on providing the most secure for DGB in its current and future state:YC

I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!



I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!

This can happen to any coin. If people are dumb and keep al the coins in exchanges.

It's like asking for something like this to happen.

Don't be lazy, download the wallet, set reasonable passphase on it, and be safe.

This can happen to any coin. If people are dumb and keep al the coins in exchanges.It's like asking for something like this to happen.Don't be lazy, download the wallet, set reasonable passphase on it, and be safe. TheFrog,Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.YC First rule, set a really really good pass phrase.Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network. TheFrog,This needs to be stickied! A few silly questions:1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?2.At what point do you create new addresses?How does that affect encryption?In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally?What about if you did a wallet import on a new DGB wallet upgrade?3.How do you dump the private key? Where do you do that function?4.Do you have a VM for each address? How do you secure those?Thanks in advance! Awesome contributions!YC

ycagel



Offline



Activity: 910

Merit: 1000







Hero MemberActivity: 910Merit: 1000 Re: ★★ DigiByte ★★ [DGB] ✈ DigiShield ✔ Multi-Algo v3.0.1 coming soon! August 15, 2014, 10:44:22 PM

Last edit: August 15, 2014, 11:01:29 PM by ycagel #10749



Another question:



When creating multiple addresses, can you take coins from one address and send it to another within your global wallet?



Thanks,

YC



Quote from: thefrog on August 15, 2014, 09:07:26 PM Quote from: ycagel on August 15, 2014, 08:44:51 PM

This needs to be stickied! A few silly questions:



1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?





You can also create so called 'Paper wallets', using a generator that will create new, not ever seen, public / private address pay.

Please do NOT use any paper wallet generator you find online for DGB, as I tried and ended up with private keys that could not be imported !

Someone should look into creating a new, working paper wallet generator for DGB, that works.

I tried this one SD card - the one you use in your phone/camera - MicroSD, SD. The point was more like to have at least 2 copies on 2 different digital medias. You could even burn the wallet.dat on a DVD every time you make a backup. Or 2 DVDs, different brands.You can also create so called 'Paper wallets', using a generator that will create new, not ever seen, public / private address pay.Please do NOT use any paper wallet generator you find online for DGB, as I tried and ended up with private keys that could not be imported !Someone should look into creating a new, working paper wallet generator for DGB, that works.I tried this one https://github.com/patricklodder/dgbaddress.org



Different locations - physical locations. Like have one copy at home, in your vault, the other copy at your work place, third copy at your parents in law house and so on. Postage is cheap, so send one copy to your best buddy across the country.

So if you loose one copy, you still got the other ones.



2.At what point do you create new addresses?

After installation, a default address is created for you. So this is the first address you get in your wallet.

You can create as may addresses as you want, for example one for payouts from exchanges, the other one for payouts from your friends and so on.



How does that affect encryption?

Encryption is set on the whole wallet, so once you set Encrypt Wallet and set the pass phrase, all the coins in the wallet are encrypted.

Meaning - if you want to spend some coins, you will have to unlock the wallet with your pass phrase.



In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally?

Wallet does not have to be unlocked to receive funds.

It's just the sending you have to authorize using your passphrase.



What about if you did a wallet import on a new DGB wallet upgrade?

This can be done either by importing the wallet.dat file (in case, it is encrypted, you will be asked for the passphrase for that wallet, which you are trying to import), or it can be done by importing the privkey for each address in your old wallet.



Go to console of your wallet and type 'help', will give you all the commands that can be used.



3.How do you dump the private key? Where do you do that function?

Console -

digibyted listaccounts

digibyted getaddressesbyaccount <account you got from above>

digibyted dumpprivkey <address you got from above>



do this for every account and accounts' address.



4.Do you have a VM for each address? How do you secure those?

No, VM is a virtual machine, which you create for example by using free virtualbox software.

You set you an isolated virtual machine, with OS you like (windows, linux..), install the wallet software and you solely that virtual machine to use your wallet. Not doing anything in the virtual machine, just use the wallet, as you normally would.

Benefit is that you isolate physically your day to day computer from your 'special' computer that has the wallet software installed.



Thanks in advance! Awesome contributions!



YC



Quote from: thefrog on August 15, 2014, 08:41:23 PM

Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.

Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.

DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.



If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.



You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network.





Quote from: ycagel on August 15, 2014, 08:34:28 PM

Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.



YC



Quote from: thefrog on August 15, 2014, 08:03:19 PM Quote from: tdcooper99 on August 15, 2014, 07:51:27 PM Quote from: ycagel on August 15, 2014, 04:35:39 PM



http://www.coindesk.com/bter-nxt-bitcoin-exchange-hack/



YC

More and more stories like this. Important we take it nice and easy on providing the most secure for DGB in its current and future state:YC

I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!



I agree. And for the record... DEFINITELY not in favour of a rollback!! Seriously? I didn't know this was possible. Oops... something has happened with our coin that we don't like .... lets just roll the blockchain back a few hours to fix it. Er... NO! That makes me seriously nervous! Theft sucks... but lets make it secure then... not just say oh well, roll back time!

This can happen to any coin. If people are dumb and keep al the coins in exchanges.

It's like asking for something like this to happen.

Don't be lazy, download the wallet, set reasonable passphase on it, and be safe.

This can happen to any coin. If people are dumb and keep al the coins in exchanges.It's like asking for something like this to happen.Don't be lazy, download the wallet, set reasonable passphase on it, and be safe. TheFrog,Couldn't agree more. We all need to do a bit more investigating on how to secure coins more important even on a wallet? Does anyone know anything about this? I know there was a conversation about paper wallets, cold storage, etc.YC First rule, set a really really good pass phrase.Make a digital backup, USB and SD card, store them in different locations. DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.Second rule, 'dumpprivkey' - dump your private key to any address you have. Print 4 copies of it, put it in a sealed envelope and have friends family bank vault keep each.DO THIS WHENEVER YOU ADD NEW ADDRESS TO YOUR WALLET.If you have couple of hours to sped, for gods' sake set up a VM on your machine and install separate machine ONLY FOR YOUR WALLET, and use only this virtual machine whenever you need to send coins. Don't use it for chat, internet, facebook, -- fill whatever 'mainstream' software you use on your day to day computer.You don't have to keep your wallet online to receive coins. It's just when you want to spend them, the wallet has to be synchronized with the network. TheFrog,This needs to be stickied! A few silly questions:1.USB backup I get. What is a SD card? Since they are physical storage devices, what do you mean store them in different locations?2.At what point do you create new addresses?How does that affect encryption?In other words, if you create a new address, does your old passphrase work and will you still be able to send and receive coins normally?What about if you did a wallet import on a new DGB wallet upgrade?3.How do you dump the private key? Where do you do that function?4.Do you have a VM for each address? How do you secure those?Thanks in advance! Awesome contributions!YC Thank you so much! I will read this post a few times to make sure the maximum level of protection is there. Good details. I typically do not keep any DGB on an exchange ever. Heard too many horror stories with that!Another question:When creating multiple addresses, can you take coins from one address and send it to another within your global wallet?Thanks,YC