Could you open the ticket for me? I am a new contributor and I do not
know how this works.
I already proposed writing more documentation about the problem. Look
through my emails with the title “Electrum doc wrt. avoiding the
negative effects of DoS [was: Re: Article: Bitcoin over Tor isn't a
good idea].” I was told that I should write the documentation in the
Electrum Wiki [
https://electrum.orain.org/wiki/Main_Page] which I do
not think is a good idea because this problem is specific to Tails.
I love bitcoin, but including it in Tails was premature. This
technology is revolutionary, but even the top bitcoin developers will
tell you that it is still experimental. Tor works with viewing websites
with HTTPS/SSL, but it is not designed for the bitcoin protocol.
Bitcoin is especially unsuited for Tails because using it in the most
decentralized or secure way requires a lot of persistent diskspace.
Since it is already installed, you have three options:
1. Remove Electrum from Tails. Many users have already transferred
money to their wallets in Tails. I am not sure how you would transition
away from including this software. Also, it makes Tails look bad.
2. Keep Electrum installed in “the world's most secure operating system”
with a major vulnerability. It is unlikely that there will be a simple
solution for all users anytime soon.
3. Test my solution. I understand that the developers are busy and I
wish that I could contribute more, but this option seems like the
best option to me.
On Sun, 8 Mar 2015 16:08:04 +0000
Minoru <minoru@???> wrote:
> Thanks Thomas White. I also remembered one more:
> 56ckl5obj37gypcu.onion. That makes five Electrum servers that can be
> accessed by a Tor hidden service. Jurre, do you think that we could
> add this “feature” to the roadmap for Tails targeted for Tails 1.4
> [https://labs.riseup.net/code/projects/tails/roadmap#Tails_1.4]?
>
>
> On Sun, 8 Mar 2015 14:52:52 +0000
> Minoru <minoru@???> wrote:
>
> > Jurre,
> >
> > Thanks for the quick reply. Technically, this is more of a feature
> > than a bug. I actually emailed the Tails-bugs email address about
> > the Electrum SPV vulnerability and they said that they like to
> > focus on problems with Tails specifically, not software built on
> > top of Tails. Also, yes, I would love to help Tails. That is why I
> > have been emailing about Electrum. However, I can only contribute
> > “documentation” about how bitcoin works and propose solutions to
> > problems. Someone else would need to write the code.
> >
> >
> > On Sun, 8 Mar 2015 14:37:10 +0000
> > Minoru <minoru@???> wrote:
> >
> > > I was able to find three Electrum servers that support Tor hidden
> > > services:
> > > electrumupzx5w5f.onion
> > > kngqe2mrt4wnpxtt.onion
> > > k33y7ns2ma65xgtr.onion
> > > I have not received a reply to my last email
> > > [https://mailman.boum.org/pipermail/tails-dev/2015-March/008302.html]
> > > about my proposal for a complete solution to the DoS problem using
> > > trusted Electrum servers connected by a Tor hidden service.
> > > Sajolida, do you have any updates about giving users the option to
> > > connect Electrum to .onion servers? Could we present a dialogue
> > > like the warning about Tails persistence before the client starts
> > > up?
> > >
> > > Cheers,
> > > Minoru
>
