Complete Bitcoin Core Node Portfolio – Security and Recovery Questions

1) What are the secure implementations of a complete node portfolio? Currently, I just know the heart of Bitcoin. Isn't there another one with a graphical interface?

I don't know of any others, apart from Bitcoin Core forks like Knots. See https://bitcoin.org for an overview of the different types of wallet software.

2) Can you use a Ledger device with these full node portfolios?

Yes, although it is currently a complex manual process using command line tools.

3) Many wallet applications like "Ledger Live" use their own servers to verify transactions. What is the case if you are using a full node portfolio like Bitcoin Core? Which servers do you ping during transactions?

Bitcoin Core is a complete node that does not rely on any trusted service. The wallet built into Bitcoin Core (or any other wallet you connect to) polls only your own node.

The node of course needs peers to download blocks and transactions, but all it needs is an honest peer. Since all data is verified locally, it doesn't matter if your peers are trying to mislead you.

4) Can the Bitcoin Core wallet censor your transactions in any way, hide or simulate them, extend them?

If the software you use yourself is malicious, it can do anything, including censoring your transactions or stealing your coins. Bitcoin Core is open source, and many eyes are looking at all the changes, but you need to make sure you're using the official Bitcoin Core binaries from https://bitcoincore.org (or https://bitcoin.org), and verify signatures (see instructions on these sites for doing so), to prevent someone from giving you a modified version.

5) In the core bitcoin, how is the mechanism for recovering funds? Is it "Hierarchical Deterministic", can you still restore your funds with a 24-word mnemonic (also by other HD wallets)?

It uses BIP32 bypass internally, so keys and addresses are deterministic. There is no starting sentence; you must make a backup of its wallet.dat file.

6) If someone, for example, has access to your computer where your main Bitcoin wallet is installed, could that person freely access and trade with it? What security mechanisms are in place for this scenario?

You can protect a Bitcoin Core wallet with an encryption passphrase. No one can send money without having access to the passphrase. Note that there is no way to recover: if you lose the passphrase, your pieces are irretrievably lost.

7) How can you restore funds with Bitcoin Core when you lost your computer where the wallet was installed? What are the different recovery options?
Is the Bitcoin basic wallet compatible with this recovery mechanism listed in github: https://github.com/iancoleman/bip39

You restore the wallet.dat file from the backup. No other options are supported.

Bitcoin core – should you run your own server when using a full node portfolio?

What other full node wallet apps are available to select Bitcoin?

See https://bitcoin.org/en/choose-your-wallet for a reasonable list

Is it mandatory to have an own server when using a full node portfolio

Not really. Some wallets have an API that allows other software to interact with the wallet, but the wallets are generally usable directly for simple use.

What are the advantages / disadvantages in terms of portfolio security

Security is a complicated subject. On the one hand, you want to keep it simple to minimize the exposed attack surface. On the other hand, you may want to take charge of coin mixing or other strategies to improve privacy. Unless you have specific security requirements, the general advice is to keep private keys under your exclusive control on a well-protected computer. Use a hardware wallet for larger amounts or Bitcoin rarely used.

seo – Should the portfolio be separated with the canonical tag?

sorry for my bad English
we have a corporate website, for our portfolio pages Should we separate each page and make them distinct via a canonical tag or not? it is better for the search engine to read them only from our portfolio page.

our portfolios page url: site.net/portfolio
 our portfolio single-page url: site.net/portfolio/62

Thank you for your help

how to generate a new address portfolio? i want to use it by customer

i want to create an exchange site use the API how can i find that my client had a deposit without using any transaction?
i want to create a new address portfolio per customer how can i do
I'm looking for a portfolio that can generate new addresses

Bitcoind Bitcoin-cli in Win 10. Why is the portfolio balance negative despite full synchronization and progress = 1.000000?

I have been running bitcoind for 3 months and it is completely synchronized, I still see a negative portfolio balance. I have reindexed it several times with no result. Could you help me find what is wrong?

enter description of image here

Overview of negative balance:

enter description of image here

transactions – About the hardware portfolio mechanism

A hardware wallet is solely responsible for managing private keys. This includes the generation of addresses (upon receipt) and the signing of transactions (upon dispatch). To do this, he needs some kind of communication with the outside world. There are several hardware wallets on the market, and they don't all work the same. However, the principles are the same.

1) How is the transaction disseminated? Once the transaction is signed, the hardware wallet can export it in raw format. Anyone connected to the Bitcoin P2P network can then broadcast this raw transaction. One way to do this is to bitcoin-cli sendrawtransaction. Another is via a web wallet interface. This is usually provided by the manufacturers of hardware wallets.

2) How does a hardware portfolio question the blockchain? he no. He must have an external source of information on this. It could be a full knot like bitcoind, or a lightweight SPV wallet like Electrum.

Both are common to the fact that the hardware wallet must communicate with something from the outside. Trezor and Ledger do it via USB connected to your phone or computer (some Ledger models also have Bluetooth), Coldcard uses micro SD cards.

portfolio recovery – Is the absence of a version number really a BIP39 defect?

It seemed that the BIP39 was often criticized for not having a version number. However, wasn't the BIP39 supposed to be universal, "one seed covers all uses, one seed saves everything"?

For example, Trezor supports multiple coins / accounts, as well as multiple types of addresses (P2PKH / P2SH-P2WPKH), with a single BIP39 mnemonic phrase. Trezor users can easily switch to SegWit addresses, in other words, without making a new backup.

Electrum, the only Bitcoin wallet whose developers once criticized the BIP39 for its lack of version number, actually used the version number to distinguish the different types of addresses (legacy P2PKH / native P2WPKH). In other words, Electrum doesn't seem to be able to "smoothly" (without making a new backup) to upgrade SegWit, as far as I know.

To be frank, I don't think that's what a "version" number should mean.

EDIT: I tried to reason about this once.

On the one hand, the BIP32 / 39/44/49/84 system offers the possibility of changing wallets, which should be a good property for the security of funds and decentralization, because the user could at any time abandon the implementation of the abandoned / corrupt portfolio (she wants to.

On the other hand, the ease of switching wallets by importing the mnemonic phrase could actually become a security risk – a compromise, all compromises. In other words, the idea of ‚Äč‚Äčseparation between the different objectives / coins / accounts provided by BIP32 / 44/49/84 has in fact been rejected.

Portfolio Recovery with Bip39 Seed

From a list of seeds beep39, is there a way to recover a wallet? In particular, I have a list of ~ 100 seeds – one of which is mine – and I need an automated way to determine who is valid and who has my funds.
Thank you

messages – impreza portfolio show / view the blank page

I have a strange problem. My site is currently in development. I've succeeded the previous developer, and I think it worked for him (I think / hope).

We have a few portfolio pages, but I can not display or view them. If I click Preview for example, I get a blank page. The browser console shows no errors.

Pages and blog articles work perfectly.

I have enabled debugging, deleted cache, disabled all plugins – always the same. And there is nothing in the newspaper.

I do not know where to look next. Any pointer to what I should control or test will be very useful.

Thank you

Portfolio validation methods (centralized, SPV, etc.) – please specify for general ledger and in general

1) ledger: https://bitcoin.org/en/wallets/hardware/ledgernanos/

Variable Validation – Payment validation features are provided by the software portfolio that you use with this device.

2) wasabi: https://bitcoin.org/en/wallets/desktop/windows/wasabi/

Centralized Validation – This portfolio supports a centralized default service. This means trusting a third party to not hide or simulate payments.

3) Simplified Validation (SPV) – This portfolio uses SPV and random servers from a list.

The above community-related definitions for portfolio validation types come from the popular bitcoin website. I can understand all types except the first called Ledger's "Validation variable".


Question: Is it technically correct to define Ledger's validation method as bitcoin.org defines it above?
If not, what is your method of validating Ledger from your knowledge?

And if so, I do not understand their definition. Can you explain from a technical point of view / censorship, what does this mean? How does Ledger use servers for validation, whether it is their own servers or what is the difference with a centralized validation method?

Thank you