On Sat, Jun 30, 2012 at 3:12 AM, Eugen Leitl <eugen@leitl.org> wrote:

... 1. Create a VM for this purpose (if you are paranoid, this is a simple "unzip" of a VM template) ... 4. Generate the keys, using the "Wallet Details", using a secret key phase; copy the address on a memory stick

unless a newly started VM has poor entropy, then keys generated there are potentially weak. there should be some fun new concerns along this angle soon... (and plenty of bad precedent already) ;)