Author Topic: Wallet Recovery Service (3rd Party)  (Read 15198 times)

0 Members and 1 Guest are viewing this topic.

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Wallet Recovery Service (3rd Party)
« on: November 12, 2015, 12:59:49 pm »
Offer:
Since some users are unable to rescan the blockchain and recover their funds on their own, I herby offer a
BitShares 1 Wallet Recovery Service

This includes:
  • Rescan of the BitShares 1 blockchain
  • Recovery of funds
  • Export of account(s) transactions
  • Export of Balance overview
  • Export of accounts wif owner and active key -- this compromises your accounts (see below)

Risks:
  • Exposure of your account keys (see below)
  • Exposure of your fund keys
  • Exposure of your vested balance keys

However, I am (arguable) a trusted member of this community for quite some time.
Though it is totally up to you to trust me or not!

Account Keys:
Fortunatelly, there is a way to keep your account names even though you exposed
their keys to me (and me alone). This works by simply putting a new public key
into it's owner authority (and into the active authority).
That way, you can keep your account name(s) and completely lock me out again
from accessing future funds.

Vested Balances:
Since the private keys for vested balances can not be changed, any vested
balance should be considered compromised. However, I will not touch them and
hand over to the customer.

Fee:
  • regular recovery: 10% (minimum $200)
  • offline recovery: 20% (minimum $500)

Procedure:
  • You contact me via pm or this forum thread
  • You deliver any wallet backup file in json format from either the web/light wallet or the BitShares client via mail
  • To secure mywelf from customer claims I will publish the hash of that file
  • You deliver the pass prase on an independent channel (recommendation: GPG encrypted message)
  • I rescan the blockchain, try to recover your funds and claim them in a newly generated and empty account I control.
  • I send you this account name to take a closer look at your funds
  • These funds (minus fee) will be sent to a BitShares-2 account name that you delivered
  • All balance-id keys, and account keys will be delivered to you once you handed over a PGP key.

Remark:
  • The fees apply to the *total* valuation of your wallet (including balances, and vesting balances)
  • The fees are to be payed preferably in BTS
  • If no BTS are available we can discuss an alternative approach
  • This service is brought to you from an individual, independent of Cryptonomex or any other business I work for!

Disputes:
On disputes about whether or not I recovered, reclaimed and forwarded all your
funds to you, I will publish the delivered (encrypted) wallet file for everyone
to see. I will furthermore publish the encrypted wallet file AFTER the rescan
3rd parties to reevaluate.
« Last Edit: July 28, 2016, 07:57:56 am by xeroc »
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline Akado

  • Hero Member
  • *****
  • Posts: 2760
    • View Profile
  • BitShares: akado
Re: Wallet Recovery Service (3rd Party)
« Reply #1 on: November 12, 2015, 01:31:56 pm »
You send the funds back after the owner confirms them, what about vested balances?
https://metaexchange.info | Bitcoin<->Altcoin exchange | Instant | Safe | Low spreads

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #2 on: November 12, 2015, 01:59:20 pm »
You send the funds back after the owner confirms them, what about vested balances?
Vey good question.
The corresponding keys can be handed over as well but should be considered compromised of course.
I could offer a regular BitShares-2 wallet that can be restored in the web wallet .. that would also include the vested balances ..

The fact that those funds are then "compromised" is a risk the customer has to take into consideration as well .. I'll modify the offer accordingly .. Thanks
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline fav

  • Administrator
  • Hero Member
  • *****
  • Posts: 4241
  • No Pain, No Gain
    • View Profile
  • BitShares: fav
Re: Wallet Recovery Service (3rd Party)
« Reply #3 on: November 12, 2015, 02:00:42 pm »
why don't you send them just the new wallet.bin? I mean if I'd trust you with my password and priv keys, it makes not difference
► How-to Buy BitShares: https://goo.gl/i9j2YZ

Offline jamesc

Re: Wallet Recovery Service (3rd Party)
« Reply #4 on: November 12, 2015, 03:44:25 pm »
why don't you send them just the new wallet.bin? I mean if I'd trust you with my password and priv keys, it makes not difference

fyi, wallet.bin will have a unique brainkey in it used to generate all new private keys in that wallet...

Offline merockstar

Re: Wallet Recovery Service (3rd Party)
« Reply #5 on: November 12, 2015, 03:56:41 pm »
why don't you send them just the new wallet.bin? I mean if I'd trust you with my password and priv keys, it makes not difference

fyi, wallet.bin will have a unique brainkey in it used to generate all new private keys in that wallet...

but... that's encrypted... right?

I ask as somebody who likes to have lots of copies of his wallet backed up in different places...

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #6 on: November 12, 2015, 04:00:28 pm »
why don't you send them just the new wallet.bin? I mean if I'd trust you with my password and priv keys, it makes not difference

fyi, wallet.bin will have a unique brainkey in it used to generate all new private keys in that wallet...

but... that's encrypted... right?

I ask as somebody who likes to have lots of copies of his wallet backed up in different places...
Yes .. all keys stored in any file in any format will only contain an encrypted version of the private key ..
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline DestBest

Re: Wallet Recovery Service (3rd Party)
« Reply #7 on: March 14, 2016, 03:47:34 pm »
Very nice initiative xeroc !  +5%
« Last Edit: March 14, 2016, 04:02:06 pm by DestBest »
BitShares French ConneXion, le portail francophone BitShares.
BitShares French ConneXion, the BitShares french gateway.
www.bitsharesfcx.com

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #8 on: March 14, 2016, 04:00:30 pm »
Very nice initiative xeroc !  +5%

A little typo:
Account Keys:
[...]
That way, you can keep your account name(s) and completely loock me out again
from accessing future funds.
Fixed .. thanks
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #9 on: April 06, 2016, 05:49:47 pm »
Code: [Select]
md5sum wallet.json; sha1sum wallet.json
4d0fb892b1d0ec7ef9eaee99b166f791  wallet.json
5f54991a811fdd63d22ca55f9264e2420760c905  wallet.json
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline tbone

  • Hero Member
  • *****
  • Posts: 634
    • View Profile
  • BitShares: tbone2
Re: Wallet Recovery Service (3rd Party)
« Reply #10 on: April 06, 2016, 06:08:49 pm »
Code: [Select]
md5sum wallet.json; sha1sum wallet.json
4d0fb892b1d0ec7ef9eaee99b166f791  wallet.json
5f54991a811fdd63d22ca55f9264e2420760c905  wallet.json

So is this service ready to go?

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #11 on: April 06, 2016, 08:49:02 pm »
So is this service ready to go?
Always, has been. Was just waiting for the first customers to come. :)
Making good progress on this one.
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #12 on: April 07, 2016, 07:39:58 am »
For sake of completeness :)
---------------------------
As for the accounts of your wallet, you should consider them compromised right now as they are also in the wallet file you have sent me!
This is how you can change their keys to lock me out of them again:

1) Download paperwallet https://github.com/xeroc/graphene-paperwallet/releases
2) Unpack zip file and open index.html in the browser
3) print TWO new key for every account
4) For each account:
      a) go to the permissions page -> active permissions    and *only* add the new public keys from the paper wallet with threshold 1  (do not yet remove the other key)
      b) go to the permissions page -> owner permissions    and *only* add the new public keys from the paper wallet with threshold 1 (do not yet remove the other key)
      c) and click "publish changes"! (at this point I hope they GUI team has fixed a small bug that might cause a "missign authority" bug)
5) Create a new wallet in the wallet management console
6) Import all your private keys using the IMPORT KEYS tool
7) Make a NEW BACKUP (important step) after you have imported all keys also make sure you never forget the passphrase!!!
8) Your accounts should now all appear in the overview page
9) For each account, remove the keys that you don't have the keys installed in the new wallet (e.g. remove the old keys) in a similar way as described in 4.
« Last Edit: April 07, 2016, 07:53:43 am by xeroc »
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline tbone

  • Hero Member
  • *****
  • Posts: 634
    • View Profile
  • BitShares: tbone2
Re: Wallet Recovery Service (3rd Party)
« Reply #13 on: April 07, 2016, 09:32:06 am »
So is this service ready to go?
Always, has been. Was just waiting for the first customers to come. :)
Making good progress on this one.

Oops, I thought this was a new/different service.  I thought this was more like a multi-sig password recovery service for web hosted wallets, something to go along with your upcoming 2FA service.  Maybe you should offer something like that?  Anyway, how is the 2FA service coming along? 


Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12636
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: Wallet Recovery Service (3rd Party)
« Reply #14 on: April 07, 2016, 11:29:09 am »
Anyway, how is the 2FA service coming along? 
Nicely .. there have been some hold ups and issues that forced me refacture the code .. and there still is stuff to be refactured .. but once the last required features is added, i could probably show a MVP on the testnet .. However .. there are some things moving behind the scene that require quite some of my time .. stay relaxed .. it's all BitShares related :)
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH