Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id 933D5D05 for ; Wed, 1 Aug 2018 09:58:47 +0000 (UTC) X-Greylist: whitelisted by SQLgrey-1.7.6 Received: from mail-wr1-f66.google.com (mail-wr1-f66.google.com [209.85.221.66]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id AC8077B0 for ; Wed, 1 Aug 2018 09:58:45 +0000 (UTC) Received: by mail-wr1-f66.google.com with SMTP id e7-v6so19472643wrs.9 for ; Wed, 01 Aug 2018 02:58:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=aZd4Y/FVjLLORHe5PQMKM5C0rvrKFYDKyJXYN4rF06o=; b=sjKBsZ39UkS8OWmsZ8BS17ZQ/MuKI7QB584P8kMeUweENMLCWy2Nd+Bk89yluGfa/J jwt9W/o+9x6Hmvx980vxI9pOUdsPclK9CxN+WtTL+ErTRVcpL+n6TamcOT63Jy2GG5IW qmZmkaNcOxzXIBNu41ai+UbBybgIaFE1dYcrxV+It1Q8+99mTYDHH2VjnMZA56uHlMk8 bhIog1ojWiBHh8am+JS2tvfe9tX4MASWmtaCEcAoCk5BxjCSs38ZAmcvUzMvnhN1ejGh 1pIezoFvVn9iI7m1/BDxFRGIjHQ+VZF/BkkJ0BO0zaOcaSPdJW1jlXy20etFChpiDHzQ OZ4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-language; bh=aZd4Y/FVjLLORHe5PQMKM5C0rvrKFYDKyJXYN4rF06o=; b=iAWscpXQdfhX2Z8XwQgXrHDvavA/REw6GdB2WrGiRpK3SqDRDRJg0uU15+j70daKkV pepP7Nyse9bSxi9RNxsTvJdfCFuD68t+r4dNEv/MCoeKPCuvtcgfnZBT3wfMqsb2ARas hXlBHHVyk9DmtUYQvKXSgEr/dZ+88NikQ2nzZ0QsvZSF/wmFtT4v/ohE8Y4AOp530kmr ShF2j+dDLb2wFaWZ9EbQDuQQavB8EAD/TE5ZW4n1MrMsOspSm8Um+ktkPRk1Im8HyBs1 /rh9YMw4SsbB6tOHvk5+CNs0Lq2NoYOPCG2lCyVVIvngCa4JSYJSH4LdvJrHZPjwocV6 NBtQ== X-Gm-Message-State: AOUpUlE+CnrTNBWKcApsZK4mZg8TCP/jO1mze25TnAmF1r42bzxZV3cK lAK9Y8HJbZgiYChXBHd61aFSS1ST X-Google-Smtp-Source: AAOMgpflY6fLPaowpa/UIicjOFSxBvD/oZQu8rl61IhyVJOBw2v/G+H0QiG4UB6Acg6nzF08paTMIg== X-Received: by 2002:adf:8385:: with SMTP id 5-v6mr23678431wre.13.1533117524020; Wed, 01 Aug 2018 02:58:44 -0700 (PDT) Received: from ?IPv6:2a01:cb1d:44:6500:9d6d:71b2:cb71:cb17? ([2a01:cb1d:44:6500:9d6d:71b2:cb71:cb17]) by smtp.googlemail.com with ESMTPSA id z3-v6sm20889445wru.27.2018.08.01.02.58.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 01 Aug 2018 02:58:43 -0700 (PDT) To: Marcel Jamin , bitcoin-dev References: From: Aymeric Vitte Openpgp: preference=signencrypt Autocrypt: addr=vitteaymeric@gmail.com; prefer-encrypt=mutual; keydata= xsFNBFdW8uABEAC7HJScbB2d/lmYoY5Cn9loEjJwfLs1LC3om030bWFGiH3Ceo5XeHUT94rw Pi+HaHU8ea94425SXIFsnqp/ouoT/8Ffn6vED0OoRmK0jE4fqDApXSpoL2mHX9PAGdUItMtD YrxBiBZNfMkctEsm4NrQ4TCvB3Yrm6Fc69inXJjUoYgPw5tHafEeI8Qwh0j99JZZDKcAqIra JF3MPc59rATz0qOJtRP9EpsPVFwjJe13zN6CHILwiVgrL8EtT5WKCVO6ATxh60LHi8+MwPxV V31zp/NNI5Hck+XocEMO98ZvUu9X8ZxmnOk/+9pBxXEwUqSGUNWdmPJLncpI23Usce3u/MOo M2C4T4rD4J0XrXiyBvbeTvwq4qVNlyggeWzlBH+YpEYgDctPq4gNh4eoTtAkf8URtBeke5bQ CGdaZt/jxv8nvmxs9V/iSyg5ldJLQktHStXOo0OZ7FEB2C6Ggtymm4hm2MHYg07Q1MGJrFLa oJZkJ3JeXnVsZMam7ypQtld6rRa96CvH+llXwux6aQ5hKdzmBBMQ10LlkZhkExgTawbeqdiG RMP2DjD5go6TPdAHS4NN34SBkrTWLqgWOjN/lnG77bbLnpMl0P+xBTuqw1oSXaDbcdHE2nGY lRno/ZZIfr+1Bq56DZLBX/WpnAT4f5WtofL4CxQM9SbG6byyewARAQABzSJBeW1lcmljIFZp dHRlIDxheW1lcmljQHBlZXJzbS5jb20+wsF/BBMBCAApBQJXVvLgAhsjBQkJZgGABwsJCAcD AgEGFQgCCQoLBBYCAwECHgECF4AACgkQKh17NCYnrDm3WhAAlYmgtSmtfqjBvQMqkmtqiQJA aZkzFZWt6+zroduHH5/Tp8jh73gFqCUyRrl/kcKvs2+XQhfrOwk1R6OScF25bpnrZSeuyJnZ MZu4T0P2tGS8YdddQvWUHMtI9ZnQRuYmuZT23/hgj1JnukuGvGLeY0yDUa1xFffPN39shp5X FPMcpIVOV3bs+xjAdsyfRyO3qJAD1FGiR7ggJeoaxUbKZ6NtcVUPPRMjVTKfopkuDwKY318m BE0epfxSZ/iRhsJ0/sREUWgbgq4/QvCFwBKzgz7fTikGmf8OELWSdofmXs7gOtmMc3el8fJu W8PVa/OsIQHDmwSzvxmE8ba5M8bdwOYEraTWFArIymAAtRXKxmuYpkqKfeSlbCwae3W+pgNT 8nKYRVAFlMtIxYkmPYyMTk9kCscmSqugGWbWdnqe/dhVaa31xa1qO1tDH24D2/tjCJRQt4Jk AEWNSmjCmjfeArMEFTGlZwMTAjVXErLSPbLOsZiZhD9sjvSbfzrtJiMli2h9+Dvds+AJk1PM O8LW7cCNyFoCk4OdAxzJHobZ25G+uy4NSQEHgxLC2iuh/tugz1tOHnQczPc/3AkVVI9A5DF1 gbVRBJh6rI7sAcwuR76uoOs0Rpp7r6I66xqU/5eq8g1OsJp89tw0ppSIa0YmaxNqQZ0l3rVX o/ZwpBjtNQTOwU0EV1by4AEQANhlz3Ywff4dY1HTdn05v0wVUxZzW2PUih+96m6EhpUrD9BT vxriKtbgxm/zl+5YAlThbrk9f0QyVTHJ95Z1/M5qjuksP9Zn3qZ/8ylANDkN2s3z8Bq/LJA+ u7+APhMqyFWK0FqNCOogClvijiKPEzkU6tmDGO6wZ5pR/u8Fdq7DGQgwgyGZZc7qstte0M7l yx7bVRlPBqvd6kyX3YubQHzkctf46nFjiYZgKawdWFsA3PCdSBupbhixL5d/t1UK9ZTiQJcf 0uhHzT06qwolFrm/ugkLDHtE4Zo3BuKch47Sms8P2hJ08gABxeJHg0ZgkIUy/Xf4nHbDCBJw T8tE8pWYWA2ECiPNo0TOCMVOueEzISUNKINfCuFHSbMQU39hgt3ofxODbAjOiO3e/iu1ptck AkuVBdtjOBP4tHRGxVrbf5EuAV5U5xtiSxMwMgojg0GIXZjnT/8uvWqcLqtJILRMmmu+WNvD oxuiJzcTJhDai9oujmxQwcpMvgrBB89KSTDyitO5XVjZqaR7Zxvvn3rM4bAms/lotv9+pTyh spazTIxb80u0ifJ6y1RxAkxQCfWwps1i3VbsM6OKX78aUyOf5V4ihXF57M37tOqPRwFvz6a+ AIIhUNMTLo2H+o6Vw9qbX8SUxPHPs6YpJ8lWQJ9OMWHE+SbaDFAi/D5hYRubABEBAAHCwWUE GAEIAA8FAldW8uACGwwFCQlmAYAACgkQKh17NCYnrDmk4Q/9Fuu0h5HvIiO3ieYA2StdE7hO vv2THuesjJDsj6aQUTgknaxKptJogNe3dDyIT+FHxXmCw0Nrbm9Q3ryl80z/G9utfFNO3Gwc q31QW3n3LJHnpqdrV3WsRzT5NwJMVtiIAGRrX8ZomtarWHT0PeEHC2xBdFzRrJtmkrwer0Wc 0nBzD7vk1XEXC9nODbmlgsesoHFgRwQBst3wClCbX1gv8aSfxQNpaf9UBC8DmyrQ621UXpBo PvcFEtWxV44vJfP0WOLCCN0Pzv2F2I66iKo7VMqbr5jlNAXJN9I1hXb7qwYJmBC9j5oeEoqv A9d44WWpxrdAr8qih4Nv89k9+9F6NoqORY3FGuVDKiW8CVhCmGT7bIvNeyicVBZFipXqPcKL VFduO2c5Ubc2npMWLUF1k9JJc9tH75l3+F/0RbYVTzGAZ+zSaudwR6h8YiCN2DBZGZkJEZbh 3X/l6jtijMN/W9sPHyyKvm/TmeEC27S3TqZPZ8PUQLxZC70V6gMbenh01JdSQsn5t8Ru0RNh Blt0g7IyZyIKCE9b+TyzbYpX6qgqEBUHia5b0vyPtQacWQlZ8uqnghAqNkLluEsy7Q/7xG6M wXUYEDsFOmB9dKOzcAOIhpxlVjSKu5mzXJ11sEtE8nyF5NJ/riCA7FGcjlki3zIpzQUNo9v7 vXl2h6Tivlk= Message-ID: Date: Wed, 1 Aug 2018 11:58:43 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------A80A0C7BEEDFF1D8FB9FDFCA" Content-Language: fr X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on smtp1.linux-foundation.org Subject: Re: [bitcoin-dev] bitcoin-transactions X-BeenThere: bitcoin-dev@lists.linuxfoundation.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Bitcoin Protocol Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Aug 2018 09:58:47 -0000 This is a multi-part message in MIME format. --------------A80A0C7BEEDFF1D8FB9FDFCA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit You are right, that's what I have been saying for online services that ask for private keys, and even the seeds The problem is that people can't refrain to put their keys for example to get "free" coins, typically they try to use bitcoin-transactions, don't succeed and go put their seeds in an online service At least it gives an alternative, private keys are optional and the tool will output the command to use with bitcoin-transactions, and if they want to put directly their keys, then... "Move your coins by yourself" refers more to "don't get trapped by your wallet(s) or things that you don't master like multisig, segwit, bech32, etc" As I said the idea would be to end up with an offline tool should some people support/finance the effort Le 01/08/2018 à 07:45, Marcel Jamin a écrit : > IMHO you should almost never publish a service that asks users for > private keys. > > A warning isn't enough. Your server might get compromised. > > "Move your coins by yourself" isn't even correct if your server is > involved. > > On Tue, 31 Jul 2018 at 13:26, Aymeric Vitte via bitcoin-dev > > wrote: > > I know this list is not to advertise personal projects but > https://peersm.com/wallet might be of some interest, this is the web > interface for https://github.com/Ayms/bitcoin-transactions since > apparently quasi nobody succeeds to use it > > As far as I know (and surprisingly) this is the only online tool that > converts bech32 addresses (Sipa's one does not output something > understandable by everybody, the tool is using his code), the only one > that converts from any address to any address, maybe the only one that > decodes simply redeem scripts and probably the only one that allows to > create transactions by its own (the advanced mode is not > implemented for > now but will be soon) > > Ideally it should be an offline tool if there is some incentive to do > so, so of course it is not advised to use his private keys for now > > Maybe they are mistaken but some users are reporting invalid bech32 > addresses from their Electrum wallet, after segwit, bech32 confusion > seems to be the topic of the moment > > Regards > > Aymeric > > -- > Bitcoin transactions made simple: > https://github.com/Ayms/bitcoin-transactions > Zcash wallets made simple: https://github.com/Ayms/zcash-wallets > Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets > Get the torrent dynamic blocklist: http://peersm.com/getblocklist > Check the 10 M passwords list: http://peersm.com/findmyass > Anti-spies and private torrents, dynamic blocklist: > http://torrent-live.org > Peersm : http://www.peersm.com > torrent-live: https://github.com/Ayms/torrent-live > node-Tor : https://www.github.com/Ayms/node-Tor > GitHub : https://www.github.com/Ayms > > _______________________________________________ > bitcoin-dev mailing list > bitcoin-dev@lists.linuxfoundation.org > > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev > -- Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions Zcash wallets made simple: https://github.com/Ayms/zcash-wallets Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets Get the torrent dynamic blocklist: http://peersm.com/getblocklist Check the 10 M passwords list: http://peersm.com/findmyass Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org Peersm : http://www.peersm.com torrent-live: https://github.com/Ayms/torrent-live node-Tor : https://www.github.com/Ayms/node-Tor GitHub : https://www.github.com/Ayms --------------A80A0C7BEEDFF1D8FB9FDFCA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

You are right, that's what I have been saying for online services that ask for private keys, and even the seeds

The problem is that people can't refrain to put their keys for example to get "free" coins, typically they try to use bitcoin-transactions, don't succeed and go put their seeds in an online service

At least it gives an alternative, private keys are optional and the tool will output the command to use with bitcoin-transactions, and if they want to put directly their keys, then...

"Move your coins by yourself" refers more to "don't get trapped by your wallet(s) or things that you don't master like multisig, segwit, bech32, etc"

As I said the idea would be to end up with an offline tool should some people support/finance the effort


Le 01/08/2018 à 07:45, Marcel Jamin a écrit :
IMHO you should almost never publish a service that asks users for private keys.

A warning isn't enough. Your server might get compromised.

"Move your coins by yourself" isn't even correct if your server is involved.

On Tue, 31 Jul 2018 at 13:26, Aymeric Vitte via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org> wrote:
I know this list is not to advertise personal projects but
https://peersm.com/wallet might be of some interest, this is the web
interface for https://github.com/Ayms/bitcoin-transactions since
apparently quasi nobody succeeds to use it

As far as I know (and surprisingly) this is the only online tool that
converts bech32 addresses (Sipa's one does not output something
understandable by everybody, the tool is using his code), the only one
that converts from any address to any address, maybe the only one that
decodes simply redeem scripts and probably the only one that allows to
create transactions by its own (the advanced mode is not implemented for
now but will be soon)

Ideally it should be an offline tool if there is some incentive to do
so, so of course it is not advised to use his private keys for now

Maybe they are mistaken but some users are reporting invalid bech32
addresses from their Electrum wallet, after segwit, bech32 confusion
seems to be the topic of the moment

Regards

Aymeric

--
Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions
Zcash wallets made simple: https://github.com/Ayms/zcash-wallets
Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets
Get the torrent dynamic blocklist: http://peersm.com/getblocklist
Check the 10 M passwords list: http://peersm.com/findmyass
Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms

_______________________________________________
bitcoin-dev mailing list
bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev

-- 
Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions
Zcash wallets made simple: https://github.com/Ayms/zcash-wallets
Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets
Get the torrent dynamic blocklist: http://peersm.com/getblocklist
Check the 10 M passwords list: http://peersm.com/findmyass
Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms
--------------A80A0C7BEEDFF1D8FB9FDFCA--