Pieter Wuille [ARCHIVE] on Nostr: 📅 Original date posted:2013-05-07 📝 Original message:On Tue, May 07, 2013 at ...
📅 Original date posted:2013-05-07
📝 Original message:On Tue, May 07, 2013 at 02:16:41PM +0200, Adam Back wrote:
> Hi
>
> Three minor security/other issues:
>
> 1. please a way to unlock the wallet without displaying wallet password in
> console screen (console unlock wallet, to import priv key); or
I think the general solution here is providing a feature-reach Python RPC client,
which can do things like remember passwords, command history/tab completion,
perhaps even batch lookups of compound commands (getblock $(getblockhash X, for
example, ...). The naive RPC client built into bitcoind is not a good fit for
many features, as they can much more efficiently be developed outside of the
core binary,
> 2. a button to import a private key (and option to transfer it to another
> key - if you are not the sole controller the private key)
I'm quite opposed to any per-key fiddling in the GUI. This will inevitably lead
to (even more) people misunderstanding how wallets work and shooting themself in
the foot. I don't mind an expert mode ("coin control") that enables such features,
but in general, we should for entire-wallet export and import rather than
individual keys.
Import & sweep an address is something else, that sounds safe to.
> 3. a UX way to transfer BTC off a specific adress (eg choose from
> address), rather than having to spend the entire wallet onto a new
> address, just to get BTC off a specific address. Doing it that way has
> problems: creates more network traffic/bigger packets, higher fees (if
> any transactions are young/low confirmation), and generally damages
> privacy as all your funds end up linked.
This belongs in coin control, IMHO.
--
Pieter
Published at
2023-06-07 14:56:40Event JSON
{
"id": "e5b0f6a0917d4661dcb47446510acc2272280fd16b8b5d61084fe7294db7949d",
"pubkey": "5cb21bf5d7f25a9d46879713cbd32433bbc10e40ef813a3c28fe7355f49854d6",
"created_at": 1686149800,
"kind": 1,
"tags": [
[
"e",
"dceb090145c2ebd6073f9959fd803b8d5d0477c98fddd9498ee25b7a2df1f0c3",
"",
"root"
],
[
"e",
"cd0f2b6ea3d3da44a7f349c900a60d8238b38840c0fac1e7d18421ff16e5a6e6",
"",
"reply"
],
[
"p",
"30217b018a47b99ed4c20399b44b02f70ec4f58ed77a2814a563fa28322ef722"
]
],
"content": "📅 Original date posted:2013-05-07\n📝 Original message:On Tue, May 07, 2013 at 02:16:41PM +0200, Adam Back wrote:\n\u003e Hi\n\u003e \n\u003e Three minor security/other issues:\n\u003e \n\u003e 1. please a way to unlock the wallet without displaying wallet password in\n\u003e console screen (console unlock wallet, to import priv key); or \n\nI think the general solution here is providing a feature-reach Python RPC client,\nwhich can do things like remember passwords, command history/tab completion,\nperhaps even batch lookups of compound commands (getblock $(getblockhash X, for\nexample, ...). The naive RPC client built into bitcoind is not a good fit for\nmany features, as they can much more efficiently be developed outside of the\ncore binary,\n\n\n\u003e 2. a button to import a private key (and option to transfer it to another\n\u003e key - if you are not the sole controller the private key)\n\nI'm quite opposed to any per-key fiddling in the GUI. This will inevitably lead\nto (even more) people misunderstanding how wallets work and shooting themself in\nthe foot. I don't mind an expert mode (\"coin control\") that enables such features,\nbut in general, we should for entire-wallet export and import rather than\nindividual keys.\n\nImport \u0026 sweep an address is something else, that sounds safe to.\n\n\u003e 3. a UX way to transfer BTC off a specific adress (eg choose from\n\u003e address), rather than having to spend the entire wallet onto a new\n\u003e address, just to get BTC off a specific address. Doing it that way has\n\u003e problems: creates more network traffic/bigger packets, higher fees (if\n\u003e any transactions are young/low confirmation), and generally damages\n\u003e privacy as all your funds end up linked.\n\nThis belongs in coin control, IMHO.\n\n-- \nPieter",
"sig": "68487914d8f68be6e43596458393088dd87d81f1f4aaadaf705f3d9d97b9f17d9893d48bdba294ce878264d895a8887449ba2ae31ccd5bfcdd6b4807cebcd1ac"
}