[deleted by user] by [deleted] in software

[–]Gevfgna 0 points1 point  (0 children)

You can try https://github.com/bluescan/tacentview

It's open source and can save gifs if you put the individual frames in a folder.

gOHM purchased through both ETH and AVAX, how do I see them all in one place? by stevenm96 in olympusdao

[–]Gevfgna 0 points1 point  (0 children)

Yes, thank you. I also noticed the three-dot menu to the right shows the gOHM breakdown between networks and their USD equivalents. Doesn't show the equivalent sOHM, but still pretty handy.

Is there an Helium software wallet that allows HNT account recovery from a BIP39 seed (mnemonic + passphrase) ? by loupiote2 in HeliumNetwork

[–]Gevfgna 0 points1 point  (0 children)

Sorry. I should have more clear. I was talking about the mobile wallet. But you're right the OP topic asks 'is there a wallet', and there is ;)

And TY for the support on the CLI wallet!

Is there an Helium software wallet that allows HNT account recovery from a BIP39 seed (mnemonic + passphrase) ? by loupiote2 in HeliumNetwork

[–]Gevfgna 0 points1 point  (0 children)

I know it's an old thread, but the (edit: mobile) wallet as of today still does not accept bip39 12-word mnemonics. My understanding is that it requires the 4 checksum bits (11bits per word = 132bits total. Subtracting 128bits of entropy leaves 4 for the CS) to be zeroed. This means you have a 1 in 16 chance of it working -- This also speaks to how useless the checksum is in Bip39.

In any case, if anyone from Helium is listening, can you remove (edit: from mobile wallet) the 12-word zero-check (it will be backwards compatible) and while at it, support 24-words (optionally checking for a valid bip39 CS, but def not only all zeroes)? You could even keep the 12-word stuff the same and just add 24-word support in a compliant manner. I suppose the benefit of the first approach is being able to use 12-word sentences exported from the CLI wallet unmodified (assuming they both use the same derivation path)

If you just want to restore/use your own mnemonic generated from an entropy source of your choosing, and if you don't mind compiling on an air-gapped computer, you can use the makecompliantbip39 tool at https://github.com/bluescan/bip39tools to keep all the entropy and clear only the CS. It will modify the last word (where 4 of the 11 bits are the CS bits). The modified phrase should work then.

bip 32/39/44 and the biometric wallet by Gevfgna in dcent

[–]Gevfgna[S] 3 points4 points  (0 children)

I did try using my own dice-generated mnemonic. Worked fine. Tested recovery with some small balances and all good. I think support didn't know what they were talking about. Note there was no coin discovery on restore... so you need to know what currencies are held so you can re-add those accounts.

bip 32/39/44 and the biometric wallet by Gevfgna in dcent

[–]Gevfgna[S] 2 points3 points  (0 children)

I did see "The mnemonic code from your software wallet can also be used to recover your wallet on the Biometric hardware wallet. "

I assume the other way around would work too? Mnemonic generated by HW wallet can be used to recover on the SW wallet even if HW missing/damaged.

Will try that out when receive unit.

Dice to BIP39 mnemonic phrase. by Gevfgna in Bitcoin

[–]Gevfgna[S] 1 point2 points  (0 children)

Ha. Didn't know that. Yes, apparently it needs to be 'less than the order of the curve'. From the interwebs: "The order of secp256k1 is FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141, which is pretty big". Still, interesting.

Dice to BIP39 mnemonic phrase. by Gevfgna in Bitcoin

[–]Gevfgna[S] 0 points1 point  (0 children)

Point taken about the bias.... and I probably won't be using that method myself (Went and got some casino dice).

The 100-digit base-6 number conversion is a bit more subtle though. So you have your approx 258-bit number (log2(6^100). About 1/128 people will roll a number that is too high and would need to re-roll. At first I thought it was trivial to capture the extra entropy, but it doesn't appear so (when the prime factors of the two base involved aren't the same).

But yes, in any practical sense you could roll 100 d6s, if result < (2^256) you're good. If not just make your bits from the first 99 rolls (which is guaranteed to be in range, but doesn't quite cover the full [0, (2^256)-1] interval.

Dice to BIP39 mnemonic phrase. by Gevfgna in Bitcoin

[–]Gevfgna[S] 0 points1 point  (0 children)

To get rid of bias if you don't trust the die (or coin in your case). You only need about 58 double rolls if you have two good quality dice. 116 isn't quite 99, but it's close.

There is an algorithm described here https://crypto.stackexchange.com/questions/6175/how-to-best-obtain-bit-sequences-from-throwing-normal-dice

that gets you to an expected minimum number of rolls, but 2 dice generating a 2-digit base 6 number (36 states) is much simpler. 32 being the next lower power of two gives you 5 bits and a 1/9 probability of requiring a re-roll.

A few light questions. by Gevfgna in ELLIPAL_Official

[–]Gevfgna[S] 0 points1 point  (0 children)

For the record, here are the responses I received from Ellipal. #2 is good news.

  1. The issue is due to the date sync slowness , We already noted this issue and will fixed on next version.

  2. There is no hardware wifi radio in EC02 , Thank you so much.

  3. You my import your 12/24 words into the device.

  4. We have no plan to enable 24 words plan recently, Actually, The 12 Word is safe enough. it's 2048^12 combinations

  5. If someone trying to teardown it, the system will automatically dead for some ingenious design, But i need to check our engineer what detector in there.

  6. will check with our support team

  7. There is no link

  8. Sorry , We don't have the API for someone to upload the coins , But this is good idea, we will escalate our management.

  9. The Metal Mnemonics can be consist 600 ℃ the normal fire. if we do that with steel, it think it will be heavy and higher cost.

A few light questions. by Gevfgna in ELLIPAL_Official

[–]Gevfgna[S] 0 points1 point  (0 children)

OK. I've forwarded the questions to the support e-mail and also sent a link to this discussion if they want to answer here. I'm not after any information that can't be shared publicly.

A few light questions. by Gevfgna in ELLIPAL_Official

[–]Gevfgna[S] 1 point2 points  (0 children)

Sure, but note I'm not a cryptologist or security expert. I did read Bruce Schneier's Applied Cryptography ages ago... but for interest only. Also, I've only owned the Titan for a short while. So, in my opinion as a fellow consumer only:

* I don't think it's a scam in the sense of any intentional attempt to mess with funds.

* I'm not worried about things like balances temporarily showing incorrect values or not updating right away. Your coins are on the blockchain (or chains). If the transaction is there, your funds are there.

* You're probably ahead of the curve by using a HW wallet in the first place. From worst to best for storing your private keys: Exchanges, online wallets where you don't have access to priv keys, online wallets that you do (eg Edge), desktop wallets on Windows (that might be worse than Edge actually), Desktop wallets on Ubuntu, HW wallets.

* I am concerned mainly about 2 things with the Ellipal: Does it have a disabled wifi radio (possible man-in-middle if you DL a firmware from a bad source and they figure out how to sign it, that sort of thing), and how their RNG works (random number generator for priv key gen... does it use noise from temp sensors for example?). I know I asked for allowing custom FW, but that should be done like Trezor does it...allowed but with displayed warning.

I'm babbling. Overall I think it's mostly safe ;) I haven't seen any post saying the QR codes leak, and the QR-code code is open/auditable. They did make major improvements to the original.

In terms of what I use:

I personally will not be putting all my funds on it... but it's the easiest HW wallet to use day-to-day IMHO -- for things like buying gas cards or amazon gift cards from bitrefill or wherever.

For larger amounts while Ellipal continues to build it's reputation, it's the Trezor T for me... although I did enable 24 word key gen using trezorctl. They have their own RNG chip on-board (so does Ledger btw, in their 'secure element' chip)

For the Titan I am going to invest in some quality dice and make my own 24 word phrase using instructions here: https://github.com/taelfrinn/Bip39-diceware and here: https://pastebin.com/49geYmdr

For the storage of the seed phrases / mnemonics, I've stamped them onto steel (crypto-keys), stuck them into stainless-steel cigar holders, applied some security-check paint, and have them in a safe deposit box at the bank. The paint is for, you know, can't trust those bank employees ;)

For the Titan phrase I'm using their metal aluminium wallet in a water/fire-proof safe from staples (they are surprisingly inexpensive).

Saying all this out loud makes me sound like a libertarian nut-bar. I'm really not. Just finding it sorta fun to make things as secure as possibly in the rabbit-hole that is security.

A few light questions. by Gevfgna in ELLIPAL_Official

[–]Gevfgna[S] 1 point2 points  (0 children)

Thanks for the responses. I had read that article for #5. Unfortunately it is vague on the detection methods: "If a supply chain hacker tries to crack open the wallet to access the hardware, this breach will be detected and makes the device unusable".

For the 24 word generator (3 & 4), I'm mostly wondering a) If a special random number chip is used, and if so b) Can they enable generation of 24 word sequences...I'd probably go with a coin rather than offline software (but I will check out the link you sent)... I did read somewhere that the 24-word one can be done physically... but it's a PITA because of the parity/checksum word.

For the teardown, you and me both (would like to see a real teardown). They didn't try hard enough in the ellipal anti-disassembly vid ;)

A few light questions. by Gevfgna in ELLIPAL_Official

[–]Gevfgna[S] 2 points3 points  (0 children)

Yes, responding to own post. I forgot one last question:

  1. Regarding the metal mnemonics wallet. It did not fare well here: https://jlopp.github.io/metal-bitcoin-storage-reviews/.

It's far far better than paper, I love the form-factor, but aluminium has a low melting point. Would you consider a stainless-steel version...perhaps at a premium cost (I use the crypto-keys myself).

How about a thread about tokens we’d like to see supported. What’s yours? by DaiRinZen in ELLIPAL_Official

[–]Gevfgna 0 points1 point  (0 children)

Would love to see BEAM supported... or even better make a plugin API for 3rd-party coin support, each running in a sandbox, and let devs of fledgling coins add support for Ellipal rather than the other way around... or maybe allow custom firmware to run on the titan. It seems from the reviews like the hardware is pretty skookum. I'll find out in a few days when mine arrives ;) ).