MIME-Version: 1.0
Sender: weiwu.zhang@realss.com
In-Reply-To: <31430A55-57AD-4648-8D6D-DE2A45CC013C@vandermeer.frl>
References: <31430A55-57AD-4648-8D6D-DE2A45CC013C@vandermeer.frl>
From: Weiwu Zhang <a@colourful.land>
Date: Thu, 18 Jan 2018 09:07:53 +0800
Message-ID: <CAEvpD62pd_s17VoGw8B+=3_cmMq2cWneAR0MZ_CT_7DqooBnLQ@mail.gmail.com>
To: Ronald van der Meer <ronald@vandermeer.frl>, 
	Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Subject: Re: [bitcoin-dev] Suggestion to remove word from BIP39 English
	wordlist
Precedence: list

2018-01-09 19:20 GMT+08:00 Ronald van der Meer via bitcoin-dev
<bitcoin-dev@lists.linuxfoundation.org>:
> After reviewing some bitcoin improvement proposals, I noticed that one of=
 the words that can be found on the BIP39 English wordlist is =E2=80=9Csato=
shi=E2=80=9D.
> I suggest removing this word from the list so it=E2=80=99s less obvious t=
hat it=E2=80=99s a bitcoin seed when found by a malicious third party.

If a malicious third party discovers a word list that look like a
seed, they would try using it as Bitcoin seed first anyway, with or
without finding the word 'satoshi' in it. The security threat is that
a malicious third party may index what they found and test every
occurrence of 'satoshi' for a lead to a seed.

For example, a hard-disk recycling service would add this word to
their salvage tools. Any successfully hacked gmail account will be
'satoshi' tested too.

So I see this as a reasonable improvement:)