Bitcoin !! i dont get it !!

[Intrinsic]

Here is the interesting part, if yall missed, it is subtle:
All your private keys are stored in plaintext by Microsoft in a folder on your harddrive if you use their API's ?

ok i checked it out on one of my systems...
.. and i did find a key(long hexadecimal string) even tho i NEVER use any code that uses ms API's for encryption! I little snooping and i concluded the key i found is indeed encrypted.

Good Right? nope not at all:

The machine has to boot at startup. It has to read wherever you've put the key and get the PRIVATE key out of it (in order to be able to decrypt communications encrypted by the PUBLIC key that you give out to everyone and send to them as part of TLS etc.).

So then that machine, when powered on, without requiring passphrases, has enough information to boot, log in at the service account user (e.g. "httpd" or equivalent), read the keystore and get the PRIVATE key out of it.

Game over. It might be more tricky but still game over. Encryption is useless if you're storing the credentials on the same disk and you are booting from it without supplying external information (e.g. dongle, manual login, etc.). It's either storing the key in plain text or it's storing it somewhere where it can get to using no more information than is contained on its default storage devices.

And, thus, why most OS's don't try to "obfuscate" access to it, because that's just pretending to actually be secure. Fact is, if you have enough info to boot up and decrypt SSL encrypted with your private key, you have enough information that the key is effectively plain-text.

[bentech]

encryption has always been useless IF they have physical access to the device,
because as youve gathered; in order to authenticate your key, it must have a copy to compare to

encryption is for security during transmission


but once you know this,
you get to be additionally pissed off whenever the fake news comes around to the next story about someone the law is threatening concerning encrypted data

if they have his computer, its a ruse

[Intrinsic]

if they have his computer, its a ruse.

not if you have memorized your passphrases, private key ect, and don't have a hard record of it anywhere. as i was trying to say up there. Do not automate things for convenience as ms wants you to do. game over.

if MS api's did not store any of it any where except in volatile RAM. Then after one turns off the machine it is lost for ever, except for the user which has mesmerized it or stores it completely separate, say safe deposit box. But not on the drive platter with the associated public key! which is common advice and common sense. why ms does it .. well ms has never shown any real concern about users security. And i suspect MS has been in bed with the feds (NSA?) for a long time, notice how law suites against ms are always end up as a slap on wrist and business as usual, as if someone high up is protecting ms's monopoly.

** api = Application Program Interface... subroutines for programmers to use such as drawing windows, refresh, polling the keyboard, ect... so their code should still work when a newer version of windows comes out, sorta like BIOS on steroids.

[bentech]

its ALWAYS has to be on the drive platters

that is IF it want to verify the person logging it has authorization


there is a copy on the drive platters
so if youve physical control of the drive

you dont need to break the encryption
you blunt force a serious shortcut

hell
even bluntforce is an extreme exageration

[Intrinsic]

its ALWAYS has to be on the drive platters
What!? no. It could and should be done RAM. i don't follow you.
look at this way, one could have a ram drive. RAM drive are treated and behave the same as a hard drive to the OS
but is volatile storage and disappears (into the bit bucket as they say) when power is turned off.

unlike the new(ish) NAD solid state drives which are RAM too, but static ram, meaning the retain their state with or without power. dynamic memory needs power.
Hard drive are a static memory too, just not random acess memory,

so you type in private key from yer brain memory, it goes into right from the keyboard into ram even if only at first to a buffer
The public key is uploaded into ram. computation occurres, no permanent record kept.

I'm positive that ms's encryption subroutines work in ram too, that is why it bizarre they would then write the private key to the hard drive afterwards?? AND not tell ya!

that is IF it want to verify the person logging it has authorization.
No that is not how private/public keys work, just for that reason.

Wait unless ya mean a like a single pass word for say opening an encrypted hard drive or file; As opposed to private/public keys.
I was talking about generating and using private keys kind of encryption, the kind the ransomware is using.
They assumed, and rightfully so imo, the important private key wouldn't be save on the host machine IN PLAIN TEXT. who would of thunk.

[bentech]

what im saying is that the server cant authenticate a password unless it has a copy of it
and its copy cant be kept in encrypted space on the disc

so if youve got physical access to the disc
you know that the password is located in a small percentage of allocated disc space

[Intrinsic]

Since I’m new to this game, I cant explain this well, that is I have a hard time myself, but the point I do know that is whole point is not needing to store the private key, just the public half, on the computer jes for that reason But read up on public/private key encryption, maybe you can fare better at it with a layman explanation.

Ya don’t need to store it to check against the public key, verifies cause they are mathematically linked. No need to store the private key, only the public key.

Sorry for the poor explanation

Try this:
http://en.wikipedia.org/wiki/Public-key_cryptography
and this
http://www.comodo.com/resources/small-b ... cates2.php

[dill786]

by dill786 » Tue Nov 05, 2013 8:06 pm

I dont understand how it gets valued !???? right now 1 bitcoin is worth £145 sterling.

bitcoin value as of today !!
1 Bitcoin equals
5873.27 British Pound

which is $7762.11 (USD)

[dill786]

1 Bitcoin equals
8724.30 British Pound



i had the chance to buy some when 1 bitcoin was £145.00

fuck man i should have listened to my instinct.

no point in crying over spilt milk now !!

[bentech]

I got advised to buy bitcoins back in 11'
and I had some money then too!

but the process was to complicated and I didn't really have much of an urge

mistake

I read that its headed to at least 25,000 in the next couple years

[dill786]

man throws away his hard drive by mistake containing £75 million pounds worth of bitcoins

http://www.dailymail.co.uk/news/article ... llion.html

[bentech]

According to new research from Chainalysis, a digital forensics firm that studies the bitcoin blockchain, 3.79 million bitcoins are already gone for good based on a high estimate—and 2.78 million based on a low one. Those numbers imply 17% to 23% of existing bitcoins, which are today worth around $8,500 each, are lost.

http://fortune.com/2017/11/25/lost-bitcoins/

[bentech]

The twin brothers who gained notoriety for suing Mark Zuckerberg over the claim that they started Facebook have done remarkably well in the wake of Bitcoin's record gains. From a report:
Cameron and Tyler Winklevoss won $65 million from the Facebook lawsuit, and invested $11 million of their payout into Bitcoin in 2013, amassing one of the largest portfolios of Bitcoin in the world -- 1 percent of the entire currency's dollar value equivalent, said the twins at the time. Their slice of the Bitcoin pie is now worth over $1 billion after Bitcoin surged past $10,000 last week to now trade at $11,100, according to CoinDesk.

https://www.theverge.com/2017/12/4/1673 ... ires-surge

[dill786]

really simple explanation on bitcoin currency

on $10,000 ( 1 bit coin) it can get you over $80,000 in interest in a year..

[dill786]

fucking madness

https://www.youtube.com/watch?v=QReUkg6EWf8

[dill786]

has anyone bought bitcoins on the forum??

is it an easy procedure?