TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

bcwallet: A /dev/wallet for Bitcoin

58 点作者 midas大约 9 年前

4 条评论

ecma大约 9 年前
You realize that &#x2F;dev&#x2F; is for devices, not developers, right? The title of the OP is fairly misleading because of that.<p>Otherwise, an interesting project. I&#x27;d be interested to know why you chose Python and if&#x2F;how you protect against code poisoning on the user&#x27;s machine.
评论 #11332209 未加载
vessenes大约 9 年前
This is just a public service announcement: depending on implementation of a standard hierarchical wallet, leaking a list of public addresses and a _single_ private key can leak unlimited forward private keys, especially if the public addresses are sequentially generated ones. This was true for some implementations of BIP32, for instance.<p>I don&#x27;t know if blockcypher&#x27;s wallet is vulnerable to this attack, but it&#x27;s not uncommon for an HD wallet developer&#x27;s response to this to be &quot;You should never leak a single private key, everyone knows this.&quot;<p>In practice, I have found developers to find this property surprising.
评论 #11331789 未加载
评论 #11331592 未加载
gizi大约 9 年前
bcwallet is a cli with an interactive user interface. I never use a cli program that possibly could start waiting for user input. It could cause a &quot;halting problem&quot; in the script that incorporates it. That is literally a show stopper. Waiting for user input in a commandline script, is bug. It is not a feature. That bcwallet thing is simply full of bugs.<p>Browsers and things like that are valid interactive user interfaces. The cli&#x2F;shell mostly exists to test stuff so that you can add it to a script, which you can add again to another script, ad nauseam ;-)<p>The actually interesting part in all of this has been done by bitmerchant.<p>Unfortunately, bitmerchant has no simple cli program attached. You need to deal with python instead, even if you have nothing to do with python. That is also a show stopper. Please, also learn haskell, ocaml, perl, lua, and two other undecisive motherfuckers, just because you want to incorporate one or two cli actions written in another scripting vernacular, into your own script.<p>I don&#x27;t want to know in what it was written. If I cannot ignore in what it was written, I will probably avoid using it.<p>So, we almost had a functioning solution.<p>Of course, a simple man page would have been phanthastick. But ok, we are not going to incessantly demand that people work for free! ;-)
buss大约 9 年前
This looks great! (And I&#x27;m glad my library, bitmerchant, is getting some use!)
评论 #11332172 未加载