From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id 521C11017 for ; Thu, 18 Jan 2018 01:07:56 +0000 (UTC) X-Greylist: whitelisted by SQLgrey-1.7.6 Received: from mail-qt0-f176.google.com (mail-qt0-f176.google.com [209.85.216.176]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id A38FC14E for ; Thu, 18 Jan 2018 01:07:55 +0000 (UTC) Received: by mail-qt0-f176.google.com with SMTP id z11so573231qtm.3 for ; Wed, 17 Jan 2018 17:07:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=realss-com.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-transfer-encoding; bh=oZBbTpQ7u6inhnq14UemdICu+ZgJGLjysD/CVxioQT8=; b=vWEJO9oUZt8p0SexAvntBHmiSepPXcd6jyhVZevQeHFAXgjPyE3IbTMRPiA4APUEVR TFNIOjhUuPnzWsYv+RrBfBAlNvMX1hGY/AptnGvamn9M/As3ngbxHNV+Vun/NyQ19Xny clx7Z0+fNhwyJDLq7Ae7AkxH0OBpka59ODUYy6DsdETpmVWaH59x9lZ/ulNdeosHKCUN 6WqwQoP7qdiBkDoSnkqab8FhS74dDYCaKVc05+gnZT7jQ32LuVwknK1KqG2g19lMFupK 8XZKuWmKOeKM/AXSD09envj96H0FXhaICpPmEYaGRFQHIUDj/xmZVWHUS6yKiW4tHgRz eR0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:content-transfer-encoding; bh=oZBbTpQ7u6inhnq14UemdICu+ZgJGLjysD/CVxioQT8=; b=hykXkkAv6rRyGU+uPSDI1f2gYZq6Oa7TkdcuK7oIzsi2Ki2OLRTCHT7Y3PkWPtYyYX OOkBBRw5Dbb0Pb9L9fVEZrZGtZGOTyxYUzFNKma4ds9cdY0uRXeWk0aIIdEA82G3r2xF gRUSDfmaZ0c3TcUhl2NaC6bVHrDQGhWaLiY4uAthqsISuBC8YTN2LAN6tYht/1DMRKid xlt+2LCVSN3C5tRfsvfIqMmT7xlYSRB3WyBz+RmRa6W0KI/3xflPLR2TSYBDUGtg7GjX RYkQD4kCm0JZ0iFVKcBmysuTDBbXS4TF6U8+4lwc1MoHC6gxw7+vAGzSa+UoWsr2ae6w pc2g== X-Gm-Message-State: AKGB3mI2/Sw01bMxChdw+lBNu5KdzDkDU8ZWJNFljhMG9iJd/fPTgmNi TWsx3e7Y5ZbAPNy4yekJBlcAQXvs8SXFokwcThA21SHh X-Google-Smtp-Source: ACJfBouz8lk3rgGoAupk1g8cJ+2kbeFRWJYBqBpDk+pkb+HJI4vhFNTXJOQpjhRRYgTm0UI8WOsdWI7jxLqy1D900LU= X-Received: by 10.55.131.135 with SMTP id f129mr61082079qkd.105.1516237674521; Wed, 17 Jan 2018 17:07:54 -0800 (PST) MIME-Version: 1.0 Sender: weiwu.zhang@realss.com Received: by 10.12.212.9 with HTTP; Wed, 17 Jan 2018 17:07:53 -0800 (PST) X-Originating-IP: [66.96.208.58] In-Reply-To: <31430A55-57AD-4648-8D6D-DE2A45CC013C@vandermeer.frl> References: <31430A55-57AD-4648-8D6D-DE2A45CC013C@vandermeer.frl> From: Weiwu Zhang Date: Thu, 18 Jan 2018 09:07:53 +0800 X-Google-Sender-Auth: WBlVAFFBsqDMObkaF1Jl-kNNvoE Message-ID: To: Ronald van der Meer , Bitcoin Protocol Discussion Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on smtp1.linux-foundation.org X-Mailman-Approved-At: Thu, 18 Jan 2018 01:09:47 +0000 Subject: Re: [bitcoin-dev] Suggestion to remove word from BIP39 English wordlist X-BeenThere: bitcoin-dev@lists.linuxfoundation.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Bitcoin Protocol Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Jan 2018 01:07:56 -0000 2018-01-09 19:20 GMT+08:00 Ronald van der Meer via bitcoin-dev : > After reviewing some bitcoin improvement proposals, I noticed that one of= the words that can be found on the BIP39 English wordlist is =E2=80=9Csato= shi=E2=80=9D. > I suggest removing this word from the list so it=E2=80=99s less obvious t= hat it=E2=80=99s a bitcoin seed when found by a malicious third party. If a malicious third party discovers a word list that look like a seed, they would try using it as Bitcoin seed first anyway, with or without finding the word 'satoshi' in it. The security threat is that a malicious third party may index what they found and test every occurrence of 'satoshi' for a lead to a seed. For example, a hard-disk recycling service would add this word to their salvage tools. Any successfully hacked gmail account will be 'satoshi' tested too. So I see this as a reasonable improvement:)