Samurai wallet DOJO and Whirlpool guide please. #71
-
Hi, can you write a guide on Samurai wallet Dojo, whirlpool and whirlpool-CLI installation please? |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
agree. the latest Samourai with Sentinel are the best onchain tools for Android available. |
Beta Was this translation helpful? Give feedback.
-
Dojo (without using docker) does not use the Context and refs:https://code.samourai.io/dojo/samourai-dojo/-/issues/160 --> (10 months since they said: "I will try to find some time to implement this in the future") https://x.com/PavelTheCoder/status/1608797010085445632 --> Dojo coder answer: "If your device gets compromised, you should worry about more things than your RPC creds. Cookie auth adds little to no security in Dojo's case" Doc about the importance of using cookie files instead of RPC user/password: https://github.com/Kixunil/security_writings/blob/master/cookie_files.md As I said: https://twitter.com/twofaktor/status/1603355742056189956: "It will not be supported in my guide until this is resolved" |
Beta Was this translation helpful? Give feedback.
Dojo (without using docker) does not use the
.cookie
RPC authentication method with Bitcoin Core, which means a security risk. The curiosity that an organization focused on privacy (intimately united to security) doesn't consider a priority to integrate this into the Dojo code.Context and refs:
https://code.samourai.io/dojo/samourai-dojo/-/issues/160 --> (10 months since they said: "I will try to find some time to implement this in the future")
https://x.com/PavelTheCoder/status/1608797010085445632 --> Dojo coder answer: "If your device gets compromised, you should worry about more things than your RPC creds. Cookie auth adds little to no security in Dojo's case"
Doc about the importance…