BitShares Forum

Main => General Discussion => Topic started by: toast on December 04, 2014, 01:43:22 am

Title: Today I almost lost $5k of various bitassets.
Post by: toast on December 04, 2014, 01:43:22 am
rm -r ~/Library

(http://i.imgur.com/HtGpTZ5.gif)

Always make backups, AND REMEMBER THAT YOU HAVE THEM AND WHERE THEY ARE.
Title: Re: Today I almost lost $5k of various bitassets.
Post by: islandking on December 04, 2014, 01:44:31 am
What happened? Did you almost lose your private keys?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: Ander on December 04, 2014, 04:21:39 am
I'm very glad that it is just *almost*
Title: Re: Today I almost lost $5k of various bitassets.
Post by: bitmarket on December 04, 2014, 08:18:07 am
Question.  I know the wallets are deterministic which means i I back up my wallet it will back up future transactions too.
But, if I back up my wallet, then I create a new TITAN address and send money to it.....Are those funds backed up or not?   Do I need to do a new back up?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 08:36:57 am
Question.  I know the wallets are deterministic which means i I back up my wallet it will back up future transactions too.
But, if I back up my wallet, then I create a new TITAN address and send money to it.....Are those funds backed up or not?   Do I need to do a new back up?
The wallet has a WALLET MASTER PRIVATE KEY ... that one is used to derive any account private key that is created from within the wallet ... from the account private keys all TITAN keys are derived ..

so you really only need the WALLET MASTER KEY ... which can not be dumped with wallet_dump_private_key .. but is part of the backup.json file ... take a look in to the json file and you will see the ecrypted key in the first few lines ..
Title: Re: Today I almost lost $5k of various bitassets.
Post by: lakerta06 on December 04, 2014, 08:39:31 am
so you really only need the WALLET MASTER KEY ...

isn't that also encoded with your wallet password? so you also need to not forget your password? :)
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 08:55:57 am
so you really only need the WALLET MASTER KEY ...

isn't that also encoded with your wallet password? so you also need to not forget your password? :)
right! ... wallet master key + passphrase .. those should be backed up .. preferably in two distinct locations :)
Title: Re: Today I almost lost $5k of various bitassets.
Post by: monsterer on December 04, 2014, 09:08:49 am
Is a bitshares brainwallet currently possible?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 09:44:50 am
Is a bitshares brainwallet currently possible?
Quote
delegate (locked) >>> help wallet_create
Usage:
wallet_create <wallet_name> <new_passphrase> [brain_key]                                              Creates a wallet with the given name
Creates a wallet with the given name
.. though IIRC it's not thoroughly tested yet ..

//edit: also I wouldn't advice to use brainwallets unless you REALLY REALLY know what you are doing entropy-wise
Title: Re: Today I almost lost $5k of various bitassets.
Post by: monsterer on December 04, 2014, 10:08:43 am
.. though IIRC it's not thoroughly tested yet ..

//edit: also I wouldn't advice to use brainwallets unless you REALLY REALLY know what you are doing entropy-wise

Ahh, interesting - so how does this work? Do you only the brainkey to recover everything, or do you still need the wallet unlock password as well?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 10:24:14 am
.. though IIRC it's not thoroughly tested yet ..

//edit: also I wouldn't advice to use brainwallets unless you REALLY REALLY know what you are doing entropy-wise

Ahh, interesting - so how does this work? Do you only the brainkey to recover everything, or do you still need the wallet unlock password as well?
I am not 100% sure  .. but my guess would be that the brainwallet is used to generated the private key .. something similar to HASH(brainwallet) .. or maybe 2 rounds of a hash ..
and the passphrase is used to store the key on the disk encrypted. ... so I'd say the brainwallet should be sufficient .. but you can give it a try by creating two different wallets with same brainkey and different passphrases and check if they result in the same account keys ..
Title: Re: Today I almost lost $5k of various bitassets.
Post by: monsterer on December 04, 2014, 10:45:15 am
I am not 100% sure  .. but my guess would be that the brainwallet is used to generated the private key .. something similar to HASH(brainwallet) .. or maybe 2 rounds of a hash ..
and the passphrase is used to store the key on the disk encrypted. ... so I'd say the brainwallet should be sufficient .. but you can give it a try by creating two different wallets with same brainkey and different passphrases and check if they result in the same account keys ..

Ahh, so in this case the brainwallet key is more of a recovery thing rather than a cold-storage AND recovery thing?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 11:01:11 am
Its the master key to ALL your funds ... AND ALL your accounts
Title: Re: Today I almost lost $5k of various bitassets.
Post by: monsterer on December 04, 2014, 11:04:13 am
Its the master key to ALL your funds ... AND ALL your accounts

I understand that, but there is a definite difference between brainwallet online and brainwallet offline storage. This appears to be online, since your private keys are still on your machine?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: hadrian on December 04, 2014, 12:16:09 pm
rm -r ~/Library

(http://i.imgur.com/HtGpTZ5.gif)

Always make backups, AND REMEMBER THAT YOU HAVE THEM AND WHERE THEY ARE.

Advice to all - if you've lost something think back to when you last remember having it and then retrace your steps. It may be that you left it in a pocket and will find it in a garment in the laundry basket. Also check behind cushions and down the back of your armchair. If it's your glasses, they may be on the top of your head.

@toast - where did you find your BitAssets? I bet you got distracted and put them down on the side when the phone rang...
Title: Re: Today I almost lost $5k of various bitassets.
Post by: xeroc on December 04, 2014, 12:18:56 pm
The difference here is that with a wallet generated from the brainkey you need to scan the blockchain and figure out which DERIVED key hold a balance ... while with coldstorage privatekey you get either access to a balance directly .. or an account (which may hold a balance in its direct address or holds balances in TITAN derived key balances)

So bruteforcing the above brainkey can be much more difficult as you have to regenerate titan keys too before you can check the balances ...
Title: Re: Today I almost lost $5k of various bitassets.
Post by: educatedwarrior on December 05, 2014, 02:38:48 am
I lost over 30K in Bitshares.... I'm sure everyone knows my story by now.  Haven't reclaimed it yet ....
Title: Re: Today I almost lost $5k of various bitassets.
Post by: monsterer on December 05, 2014, 09:09:43 am
Am I right in the assumption that you only need to back up your wallet once (unlike bitcoin), because all the accounts use deterministic addresses from the master?
Title: Re: Today I almost lost $5k of various bitassets.
Post by: davidpbrown on December 05, 2014, 10:01:17 am
Given the importance of backups, I wonder that users need a prompt about making backups when they create a wallet. Average user might also save that on the same computer, so pushing them to put it an encrypted copy on USB or elsewhere might be helpful.
Title: Re: Today I almost lost $5k of various bitassets.
Post by: Riverhead on December 05, 2014, 01:50:25 pm
Am I right in the assumption that you only need to back up your wallet once (unlike bitcoin), because all the accounts use deterministic addresses from the master?

I typically create new backups frequently and restore them onto another machine to test. Yes, you are technically correct but why risk it? With a really strong pass phrase (at least eight words with capitalization, spaces, and punctuation as well as some fake or misspelled words) the wallets are nearly impossible to crack (if they could be cracked we'd all be hosed anyway). So I backup my wallet frequently and just put it on my Dropbox account. If you're paranoid just zip the file and then rename it to something like mom_at_beach.jpg and throw it in your pictures folder with everything else.