Show HN: Sixty Large – wallet generator for cryptocurrencies

http://www.sixtylarge.com

by arasmussen • 12 years ago

24 22 12 years ago

ck22• 12 years ago

Amazing but the only good wallet generator is one that runs offline.

arasmussen• 12 years ago

Technically, it does run offline. If you pop open your developer console, you'll notice it isn't making any requests. All of the wallet generation is done on client side, no public address or private key ever touches our server. After the page loads, it'll still work with no internet connection.

salibhai• 12 years ago

Just an idea: provide a zip file version for the paranoid, put it on github

quasque• 12 years ago

This can run offline if you download all the files, as all the computation is done client-side.

However due to the use of require.js (http://requirejs.org) the script files aren't directly linked from the main page. You need to grab the following files, put them in their respective directories locally, and then edit the main page so all the src and href attributes are relative rather than absolute to root (e.g. src="js/lib/require.min.js"):

http://www.sixtylarge.com/index.html

http://www.sixtylarge.com/img/favicon.png

http://www.sixtylarge.com/css/styles.css

http://www.sixtylarge.com/img/sl-logo.svg

http://www.sixtylarge.com/img/hamburger.svg

http://www.sixtylarge.com/js/main.js

http://www.sixtylarge.com/js/script.js

http://www.sixtylarge.com/js/coinList.js

http://www.sixtylarge.com/js/coins.js

http://www.sixtylarge.com/js/secretKeyGenerator.js

http://www.sixtylarge.com/js/seedRNG.js

http://www.sixtylarge.com/js/util.js

http://www.sixtylarge.com/js/walletGenerator.js

http://www.sixtylarge.com/js/lib/analytics.js

http://www.sixtylarge.com/js/lib/bitcoinjs-min.js

http://www.sixtylarge.com/js/lib/jquery-2.1.0.min.js

http://www.sixtylarge.com/js/lib/require.min.js

And there you have it, a nifty offline wallet generator without the risks of running code that could change unexpectedly (especially as there is no https version so greater risk of MITM).

bitJericho2• 12 years ago

Too bad it's not sent securely.

ChrisClark• 12 years ago

It's not sent at all. Everything seems to be generated locally.

adambard• 12 years ago

The code to generate keys locally is still sent over an unsecured connection.

pmorici2• 12 years ago

I agree with the other comment that says that the only good wallet generator is one that runs off line but even if you wanted to use an online one this site isn't even secured with HTTPS no way I would trust this for anything.

justizin• 12 years ago

see the above comment where no data is sent to their server.

sp3322• 12 years ago

But since the content isn't delivered over HTTPS, it could be MITM'd to include malicious code that does send your keys somewhere.

pmorici2• 12 years ago

I assumed it didn't, if it did that would be even worse. The problem assuming you trust the creators of that site is that since the connection is unsecured the javascript could be modified for a compromised version w/o you knowing. Even if you watch your connection like a hawk and make sure it doesn't send any data out it could generate a key that might look random but is really based on some shared secret only the attacker knows.

ryanmcbride• 12 years ago

The fact that it handles dogecoin is a huge plus for me, but I'm gonna wait a while before I jump onboard to make sure it's actually safe.

lozf• 12 years ago

Just use http://www.dogecoinpaperwallet.org/ -- at least it's been around longer and based on code that's been discussed before.

kordless2• 12 years ago

A few things that bother me:

- no QR codes

- no link to a Github repo where I can download it

- no randomization function to seed the generator

Additionally, I think best practices should dictate none of these paper wallet generators should display their functionality while they are connected to the Internet. All of us have a duty to build software that is secure and has clear intent. Users get confused easily.

As an aside, I gave the retired couple next door a paper wallet last night for letting me borrow their printer. I put $10 on it for ink. The husband is an ameuter astronomer and used to code, so he's technical. The wife said she's been watching for news about Bitcoin. She said that she heard something about "that mount place" and hoped they were OK. I told her to get some popcorn.

kordless2• 12 years ago

I should have said 'should NOT display functionality when connected'.

gojomo• 12 years ago

Except for the altcoin support, the classic BitAddress.org seems much better, in features/security/review/offline-ability/etc:

https://bitaddress.org

https://github.com/pointbiz/bitaddress.org

Show HN: Sixty Large – wallet generator for cryptocurrencies

Related Stories