4 ms·

Hey John - I came here to ask the same question. How is that possible. Same happened to me. >> leads to the "end" page, it's not as I though a "big jump" from

Hey John - I came here to ask the same question. How is that possible. Same happened to me. >> leads to the "end" page, it's not as I though a "big jump" from some random page... thus I suspect it's simply addresses that are low entropy, at the end of the range.

danuker 5y ago
Possible causes are caching or random seeding using integer seconds.
- bspammer 5y ago
  Or someone implementing their own bitcoin client and using a predictable key for fun
ORioN63 5y ago
They're the trivial wallet addresses (close to the beginning and end of the search space). I would expect them to be used for debugging and testing in the early days.
- ricardobeat 5y ago
  What makes them trivial, how are they generated?
  - bspammer 5y ago
    > A private key is basically just a number between 1 and 2^256 It's like saying "I'm gonna pick a random number between 1 and a trillion", and then picking 999,999,999,995. Probably not a smart idea given that you don't want anyone else to be able to guess your number.
    - grumple 5y ago
      But the values are generally generated pseudo randomly by machine. This seems similar to the birthday problem, where the odds of encountering a value in a given range is higher than you'd expect.
      - bspammer 5y ago
        The birthday problem means that the number of values you have to choose to have a 50% chance of a collision scales approximately with the square root of the size of the space. [0] 2^(256/2) is way, way bigger than the number of used bitcoin addresses, which is about 33 million according to this csv [1]. [0] https://en.wikipedia.org/wiki/Birthday_attack#Mathematics https://en.wikipedia.org/wiki/Birthday_attack#Mathematics [1] https://bitkeys.work/download.php https://bitkeys.work/download.php
      - FabHK 5y ago
        1. yes, generally and ideally the private key is generated pseudo randomly. But at the beginning or for testing, people might have manually picked a private key. 2. the birthday problem basically halves the exponent security wise. The rule of thumb: If you have N possible outcomes, then after around sqrt(N) guesses the probability of a collision approaches 0.5. So, for birthdays, it's 365 outcomes, so with 19 or 20 people your risk of collision already approaches a half. For BTC private keys, there are 2^256 possible, so with 2^128 guesses you'd approach a likely collision. Fortunately, that's still 1e38, so if you check 1e10 per second, you'd still need 1e20 years to get there.
  - johncolanduoni 5y ago
    ECDSA private keys can be arbitrary strings of random bytes of a certain length (unlike RSA, where we need to find prime factors). The first page is roughly the equivalent of using a low single digit number as your password.

danuker 5y ago

Possible causes are caching or random seeding using integer seconds.

bspammer 5y ago
Or someone implementing their own bitcoin client and using a predictable key for fun

ORioN63 5y ago

They're the trivial wallet addresses (close to the beginning and end of the search space). I would expect them to be used for debugging and testing in the early days.

ricardobeat 5y ago
What makes them trivial, how are they generated?
- bspammer 5y ago
  > A private key is basically just a number between 1 and 2^256 It's like saying "I'm gonna pick a random number between 1 and a trillion", and then picking 999,999,999,995. Probably not a smart idea given that you don't want anyone else to be able to guess your number.
  - grumple 5y ago
    But the values are generally generated pseudo randomly by machine. This seems similar to the birthday problem, where the odds of encountering a value in a given range is higher than you'd expect.
    - bspammer 5y ago
      The birthday problem means that the number of values you have to choose to have a 50% chance of a collision scales approximately with the square root of the size of the space. [0] 2^(256/2) is way, way bigger than the number of used bitcoin addresses, which is about 33 million according to this csv [1]. [0] https://en.wikipedia.org/wiki/Birthday_attack#Mathematics https://en.wikipedia.org/wiki/Birthday_attack#Mathematics [1] https://bitkeys.work/download.php https://bitkeys.work/download.php
    - FabHK 5y ago
      1. yes, generally and ideally the private key is generated pseudo randomly. But at the beginning or for testing, people might have manually picked a private key. 2. the birthday problem basically halves the exponent security wise. The rule of thumb: If you have N possible outcomes, then after around sqrt(N) guesses the probability of a collision approaches 0.5. So, for birthdays, it's 365 outcomes, so with 19 or 20 people your risk of collision already approaches a half. For BTC private keys, there are 2^256 possible, so with 2^128 guesses you'd approach a likely collision. Fortunately, that's still 1e38, so if you check 1e10 per second, you'd still need 1e20 years to get there.
- johncolanduoni 5y ago
  ECDSA private keys can be arbitrary strings of random bytes of a certain length (unlike RSA, where we need to find prime factors). The first page is roughly the equivalent of using a low single digit number as your password.