Bitcoin Forum

https://globenewswire.com/news-release/2018/06/19/1526755/0/en/Bitfi-and-McAfee-Announce-First-Truly-Unhackable-and-Open-Source-Crypto-Wallet.html

I particularly enjoy this feature - 'The private key only exists for a fraction of a second, just long enough to approve the transaction and is never stored anywhere' - because a full second is no good.

Have they taken a seemingly impossible leap in security or will this be a bit of a nothing? Truly unhackable is a bold and impossible claim I would've thought.

Does this mean that we need to type the password/seed/whatever everytime we want to sign a transaction? If not, then it doesn't matter since the password/seed/phrase/whatever that generates the private key is stored in the device.

From what I've read so far, the device seems to be able to provide this ''unhackable" feature until the human factor in the creation of the secret phrase sets in. The secret phrase to be memorized consist of 34 characters including a minimum of 3 special characters but you will be amazed at how users will be lazy to create strong secret phrases.

I'm pretty sure that this claim is just pure marketing.Nothing is 100% unhackable.I'm actually curious if the 1 year warranty means a warranty that the wallet never gets hacked or a warranty for the device like warranty of phones/computers etc..

Take any claims by McAfee with a pinch spoonful cupful bucketful of salt. He is a proven liar, scammer, con-artist and criminal, who charges $105,000 to pump-and-dump shitcoins.

This phrase in particular stood out to me: "The user-created phrase is impossible for others to guess but easy for the wallet holder to memorize." This doesn't mean your wallet isn't hackable.
Relevant XKCD (https://xkcd.com/538/):

https://imgs.xkcd.com/comics/security.png

I don't really see how anyone can make an unhackable claim for hardware or software. New holes can't be accounted for.

You're right about the human factor though. I'd say it was better to force 24 word seeds on people. Their own practices are always too slack. Perhaps the device will insist on some minimum standard. Otherwise it'll be no better than a brain wallet.

Exactly. If their claim of unhackable relies on the human factor, then basically almost any existing secure wallet is unhackable - provided the human user practises fullest possible measures to protect themselves.

But we all know the human factor is rationally lazy. All the countless threads of people getting hacked, or sending btc to the wrong address, or just signing up for a service that later they discover they don't know how to use.

It's not unhackable by any means if it still relies on humans to do the exact opposite of what they're naturally inclined to.

I'm not surprised that we see one more hardware wallet on market, regarding the potential that cryptocurrency has in the future and one of the biggest problem this industry have is security, such wallet would be a perfect solution. Is it possible that they managed to make it perfect and unhackable and easy for use? I think that we will not know is that true until wallet come into use.

I check Bitfi site and at first glance it does not look nothing special, and there is no info about company what is common practice, rather strange if you ask me. John McAfee as a partner of this company is not surprising me, he repeatedly warned of wallets security.

Wallet is looking as Ledger Blue, with a price of 120$ + 15$ for shipping (USA) or 25$ for other countries and with possible custom tax, this wallet will be one of the most expensive on the market.

Until it's hacked, rather.

Information about themselves is indeed a bit thin on the ground. Trezor had a huge amount of track record to draw on as Slushpool.

If I was looking to position myself in such a trust vital area I would not be using John Mcafee as my vouch.

If it wasn't McAeat-himself (https://bitcointalk.org/index.php?topic=2027514.0), I would have believed it.
That guy has been using his social-media celebrity status as a Marketing tool for ICOs and crytocurrency-related stuffs, yeah right, who wouldn't.

So, this is essentially a brainwallet right? ???

This is (IMHO) a "Bad Idea"™... It has been proven that humans are incredibly bad at choosing "strong" passwords.


I especially like the way they claim everything is secured by a single passphrase... that also needs a 2nd "anchor" like a social security number, or phone number or email address or "salt"... soooooo, that's two things you need to remember then? ::)

This single passphrase+salt approach isn't exactly revolutionary either... they're basically just replicating WarpWallet (https://keybase.io/warp) but using a dedicated hardware device.


And when you sustain an accidental head injury and suffer from memory loss... what then? ???

Honestly, their entire marketing spiel is so flawed. There are risks involved in EVERYTHING. Anyone with even just basic experience of Risk Management understands this... that's why it is called Risk Management and not Risk Elimination. :P


And what happens when some junior intern at Bitfi uploads the wrong image to the update servers? or if/when Bitfi servers gets hacked and bad code is uploaded? There is no way for a user to NOT get the corrupt update ::)  Forced updates are not a great idea, IMHO.


Still, it is good to see competition in the Hardware Wallet space... and I commend them for trying a different approach. Just not very impressed with their hyperbolic marketing :P

I've just spent 5 minutes looking in to this a bit more, and it gets even worse:


For anyone not familiar with the Diceware method, it is simply a method of generating a list of random words. They recommend at least 6, but probably 7 words, to ensure your phrase is "unhackable". So basically you are trading a 24-word seed phrase for a 6-word brain wallet. This is honestly one of the worst ways you could possibly secure your coins.

---

Not just a head injury. There are hundreds of physical and mental illnesses out there that can cause memory loss. Brain wallets are for the brainless.

That's pretty much all you need to know about this to know how stupid it would be to use one. It's so so easy to think that you've remembered a phrase and then you forget it one day.

Major technological breakthroughs!? It's a brain wallet, and a poor one at that. If anything, it's a step backwards.

120$ and it went that fast? even the Trezor T model didn't go that fast. It seems like John McAfee can tweet about literally anything, and It will get sold.

They never actually mentioned anywhere how many units were in the first batch (at least, not in any of the stories I could find)... it could have been 10 units (or 10,000) :P

I'm guessing the total was closer to the first number than the second

He's a huckster so you're probably right but he does have an awful lot of rabid fans at the moment.

I do find it strange though that someone who's pinned everything on being Security and Privacy Man makes this unhackable claim. I can't imagine any truly clued up programmer would ever assume their creation was stone cold guaranteed to be impregnable.

Based on that image i do completely agree on that thing where anyone can able to slam us a cheap wrench and asking forcefully about on your keys. We might not think of on that way but last resort would be like that one specially when someone do have info about on your crypto holdings.
Here we go again with unhackable thing proposed or introduced by Mcafee. This thing doesnt exist yet anything can really be hacked when keys are created.If its  brainwallet then the risk would always be tied up.

McAfee is a complete sellout. Just take a look at his Twitter profile and you'll know.
He uses his public image as an asset to help promote ICOs. (https://mcafeecryptoteam.com/effect.html)

I would take this guy's claim with a grain of salt. Overall, its just a marketing tactics to keep themselves ahead of the competition. (Trezor, Keepkey, Ledger - all of them I use and recommend BTW)


Oh boy! If that's the case, then a simple keylogger will be able to read all the phrases everytime a user types them in. ::)

Having a leap in form of security measures is good but claiming its ''unhackable'' is really an overstretched even bitcoin in which gave the impression that its fool proof, there have been discussions about the effect of the existence of Quantum computer could do to the blockchain. The best is to say its going to be difficult. Aside that saying a software is unhackable is an indictment to all of the existing wallets providing a far reaching satisfaction for people to keep their bitcoin and other crypto currency safe over the years.

I think addition of McAfee to the name is making it seems more popular but that name does not carry any weight from where I stand and I am sure its the same for other people too. Forgetting the human factor in any development is being overly confident which I see happening here. And the feature of private key existing for seconds is what I am not seeing as a special feature because normally when you want to send a transaction on say Electrum, you don't have any business with your private key, enter the necessary details then send without any issue. With this feature now, it means to copy your private key for claiming fork purposes its now a problem.

Who would be the one to take his recommendations seriously? Yet we do already know on the bullshit things that he had done into this cryptomarket and now he do propose another hardware wallet.Its better to set aside and dont pay attention on this and i bet no one would be interested, unless if you are a die hard fan of him.  ;D

I like the part of the wallet enabling users to view all their coins balances at once and quickly switch from one currency to another, whether for personal or business use. But, can a wallet which users can access their wallet using a secret phrase that calculates private keys be unbackable? Could this be oneif McAfee game?

Let's just keep our fingers cross cause there are a lot smart people on this forum which will find out if the wallet is real unbackable. However, I believe the wallet producer and John McAfee have their name to protect.

John McAfee has no name to protect anymore. He's dragged his own name through the mud so many times now that it's worth nothing. He offers paid promotion on his twitter account, among other things. He's no longer a name people trust.

Sound's Good but in my opinion to launch the 'unhackable' is tense to impossible.

Yes, I also say that in this super first growing technology world, anything can happen...

If it happen everybody will be benefited.

You're right about that cause he has messing several time due to his false prediction and price manipulation. But, I was talking about security.

And someone will tell me where the concept of safe wallet begins and where it ends?
How can we be sure that the creator of the solution has not left any "emergency gate"?

The theme of this thread is that there is no 100% safe wallet. I'd say the safest possible option is a correctly created paper wallet, but they're also not practical if you want to spend from them.

As for back doors, look for something open source and hope that enough people have checked the code if you yourself don't have enough knowledge.

The opinion of someone who knows a thing or two - https://twitter.com/matt_odell/status/1015954872691290113

https://twitter.com/officialmcafee/status/1018898446659477504

Confirmation here that this basically a brain wallet.

https://twitter.com/icryptomarty/status/1018900159244259329

And no mention or advice on how to come up with a secure phrase. Maybe there's something in the box. Probably not.

"It has to be your own phrase. Just choose a phrase you can't forget."

So... just like a password then?

Seriously, what a shit show. He is one step away from advising people to save their password as plain text in their email or Dropbox so they don't forget it.

Everywhere i keep reading the wallet is using an open source bitfi algorithm to calculate the private keys.
Did actually anyone find the source code yet? Their github (https://github.com/Bitfi (https://github.com/Bitfi)) is empty.  ::)

I am quite interested in whether only the concept of the wallet is pure shit, or whether the algorithm also is just a pseudo-algorithm, just to call it an algorithm.

---

Please, keep away from this wallet.

You shouldn't care about a backdoor, but about the mechanism itself. It is insecure by design.
Your brain will be able to create an entropy of like 10-20 bits. Thats far away from 256 created by an proper algorithm.

https://twitter.com/officialmcafee/status/1020350194506924034

"We created a simple, foolproof way to use the brain as the wallet. The http://Bitfi.com  wallet is the transcriber between the inner brain and the outer world of digital currencies. Until someone discovers a means of hacking the brain, your money is safe."

And there it is finally in plain English straight from the source. I cannae believe no one who associates with him hasn't taken him aside and whispered something but it would probably turn into a firefight.

I'm not going to post that XKCD comic yet again, because at this point it goes without saying. If you are still naive enough to want to use a brainwallet, you can easily make one for free without buying in to this scam.

Why roll out the wrench thing when 999,999 times out of a million it'll be some brat who cracks your shitty entropy from thousands of miles away who you'll never know a single thing about?

That's the prime problem with this. Since lots of people claim to have bought it I'd like to hear from an owner about whether there's some provision or advice for this from the manufacturer. The whole thing seems... weird. I can't believe it hasn't been brought up by someone in the design and build process.

Well yeah, that too. Also how many people do you think will be lazy enough to reuse a password or phrase that they also use elsewhere online? The whole thing is just ridiculous.

Most.

Because John Mcafee himself told them it was unhackable. He just forgot to add the wee caveat about that other gaping security hole.

I just noticed Bitfi have addressed this here - https://bitfi.com/guide.html but it still makes far more sense to force a seed on people instead. They can't be trusted to come up with anything themselves.

And when did people ever listen to good advice??!? ??? :P

A brainwallet by any other name... is still a brainwallet! ::)

QFT

My passphrase is was "John Mcafee is a has been fucking retarded moron that burned out every brain cell he ever had 2 decades ago and is living in a fantasy world" but it's already been taken.

I checked that address - no funds! You liar!

The address that corresponds to "correct horse battery staple" (also from XKCD) has had almost 16 BTC (http://almost 16 BTC) in it over the years. All the most common passwords (123456 (https://www.blockchain.com/btc/address/1565qkBbLcuFP78f7MFKkK8jtHGDwdSgvX), password (https://www.blockchain.com/btc/address/16ga2uqnF1NqpAuQeeg7sTCAdtDUwDyJav), qwerty (https://www.blockchain.com/btc/address/1M8gvPDG58RvoLb1prNF8svWUb3vT3md5a), monkey (https://www.blockchain.com/btc/address/145d1kjpDo55zVWTUVphYXm8ovNfMw55Jn)) have held varying amount of Bitcoin over the years, as have a bunch of obvious Bitcoin-related ones (satoshi (https://www.blockchain.com/btc/address/1ADJqstUMBB5zFquWg19UqZ7Zc6ePCpzLE), bitcoin (https://www.blockchain.com/btc/address/1E984zyYbNmeuumzEdqT8VSL8QGJi3byAD), blockchain (https://www.blockchain.com/btc/address/1bZ3M7i8zLWpGVzpnLy7ci6VWGky1jGBP)).

People are awful at security.

someone guessed and stole that years ago! :)

My passphase is just God now. :P

Not sure if you are trolling, but the address that links to "god" (https://www.blockchain.com/btc/address/1KxmSmcMTmPvU1qSLYpJLrqnSzBoQ53NXN) had about $100 of Bitcoin transferred through it less than 12 hours ago.  :D

Hah, I was joking as "God" is/was the most common admin password ever.

wow this is interesting, Im going to keep an eye on this. I only have a ledger right now but am very interested in this "unhackable" wallet.

BUT the bigger question is: if one of these wallets does get hacked will mcafee eat his own penis???

Did you even read the previous posts? Delete it from your "to buy" list.
It's basically a brainwallet which has a horrible history in terms of security and compared to ledger, Mcafee's endorsed "unhackable" wallet is a joke.

---

I've seen that too.
Actually, I have an Electrum Wallet named "Collision Tester" which contained the private keys of the most common brainwallet passphrases like Satoshi, free bitcoins, free bitcoin, etc.
But unluckily, I never got the chance to transfer the funds since it's impossible to monitor the wallet 24/7 manually.

* this device has three flaws in design:

- human factor
- weak algorithm
- self update mechanism

Please, do not use this wallet.

That one is a little bit worrying.

It appears they're saying you can't turn down updates and indeed there is no such thing as an update, you get the latest and livest version every time you fire it up.

In that case that makes their servers a stunningly tempting target and you have no protection from a nefarious party feeding you something unhelpful.

I get the feel they're trying to invent the wheel while barrelling down the highway and at some point they're going to miss something extremely gaping and obvious.

A security researcher's review here - https://rya.nc/bitfi-wallet.html

Overall it doesn't seem as screamingly bad as it first appeared, but there are still plenty of holes and the developers appear to lack diligence in quite a few areas.

"I strongly advise against using one of these devices. While Bitfi is perhaps not an outright scam, the design is inferior to that of hardware wallets where the device really is needed (or the backup of the seed) along with the passphrase in order to spend the coins. The fact that they're using a lot of the same techniques to sell devices that have been used to sell snake oil so many times in the past makes me very concerned. I've notified Bitfi of these issues, however they showed no interest in fixing them."

Haha, wow. If anyone wasn't already convinced not to buy this wallet, then this surely has to be the nail in the coffin? Why would you trust a company behind any product that show no interest in closing security holes and flaws?

They'll just think it's, like, his opinion, man.


More gold - "Kerckhoffs's Principal in essence says that a properly designed system should still be secure even if the attacker knows everything except the key. Here, Bitfi engages in some misdirection, claiming to be "open source", however their "source code" is just a PDF largely made of formulas copy/pasted from the description of scrypt and BIP32. A number of people called them out on this, and in response a comment on reddit, a user going by Bitfi-Team replied:

We never said we were providing full open source code. We clearly state that our wallet is open source. Just check our website before you spew garbage. But if you want the code, do some math. Don't be lazy."

I dunno, ask Microsoft. :P


That is pure Gold, apparently the moron doesn't know what open sauce means. :)

 Thank you for review...
I cancelled buy bitfi ;D :D

https://twitter.com/cybergibbons/status/1023667374153773057

More fun.

The innards are basically a low end Android phone with plenty of parts missing and no important - ie secure - ones added.

Just... WOW. ::) :-\

It essentially confirms ALL the worst assumptions made about this device... and then adds some more. The entire thing is a basically snake oil wrapped up with a nice $120.00 bow

::) ::) ::)


My condolences to anyone who bought one.

https://www.reddit.com/r/Bitcoin/comments/92dnf8/bitfis_hardware_wallet_is_terrible
https://rya.nc/bitfi-wallet.html

They're currently trying to throw shade on me, claiming I'm out to get them due to some perceived personal slight.

This is false - I engaged on a very similar crusade when the now defunct ether.camp site was offering brain wallets without explaining what they were.

The siren call of brain wallets is strong, but we must fight back.

Well, the opinion of every single person in crypto worth listening to on this corroborates your conclusions. They can screech all they want. That's not going to convince anyone.

I think "screech" is a good description of their social media "strategy".

https://twitter.com/OverSoftNL/status/1024684201575108615

Bring on so much shrillness that checking their and Mcafee's Twitter accounts will cause your speakers to shatter.

So assuming it can be rooted, and most likely third parties will be selling compromised versions, what steps are needed to gain someone's funds assuming they use a compromised device from the off? Would it be very straightforward or are there are some steps that would be considerably harder?

As there's nothing on board I presume that also means there's nothing to stop you being fed whatever someone wants you to see and everything you do going straight to them.

Since this wallet is auto-updating itself each time it has an internet connection, you don't really need to sell compromised versions.
You would just need to find a vulnerability and use an exploit to compromise ALL devices which are logging in (auto updating) their wallet within the trame frame of the beginning of your attack and the end of your attack (when bitfi wallet server gets shut down).

But, assuming it can be rooted.. it would really be straight forward to create a malicious version which will serve as a backdoor. This is nothing compared to an attack on a ledger nano s / trezor.

https://mobile.twitter.com/OverSoftNL/status/1025000286119780353 (https://mobile.twitter.com/OverSoftNL/status/1025000286119780353):

"So yeah: you don't need a BitFi device to run a BitFi wallet.
I repeat: there's nothing in that device that is required for the BitFi app to function. There's NO secure element. They could've released it on the Play Store as an app."

Maybe this is a good thing - instead of forking out hundreds of dollars for what is essentially an unsecure old android phone, you can just download the APK and run it on any device with an android emulator.  ;D

But why would you want to? :)

So you can hack it and claim the $250,000 bounty of course! (Except you couldn't, because they will never pay out, because the bounty is just a scam marketing trick for their scam wallet.)

The latest development: https://www.bitguru.co.uk/crypto-news/15-year-old-kid-hacks-john-mcafees-unhackable-cryptocurrency-hardware-wallet/ (https://www.bitguru.co.uk/crypto-news/15-year-old-kid-hacks-john-mcafees-unhackable-cryptocurrency-hardware-wallet/)

15 year old installs and plays DOOM on the wallet.

That guy has been 15 for what feels like several years now.

Not too impressed with that tweet. As the article says, you post a bounty and then start dropping gangsta tweets? Eh?

i veyr well understand the importance of security in this technology and most especially in these days where the activities of hackers are everywhere and have become a challenge to the technological framework as well as the investor. that a wallet is unhackable is indeed a strong claim.

Honestly I hope this is really true of this unhackable bitfi wallet by macafee. I have never seen anyone like it. Although I haven't seen it or used it or try to test it. but I see that macafee us very confident about its security and boastful of it always. I hope its as its said to be.

https://twitter.com/danielgallagher/status/1029094497593053184?s=21

'Hey @p0isoNz, just wanted to let you know the team went ahead and consolidated all the Bitcoin on your insecure @Bitfi6 wallet and moved it to the next address it will generate so you can quickly secure your funds. We also payed the transaction fees. No thanks needed!'

Not totally sure about the circumstances regarding this one. It looks like the owner of the wallet posted some of his details, but it adds to the rich tapestry of failure. It doesn't look like a flat out grabbing of coins from afar yet.



Have you read anything so far that convinces you it's anything other than horseshit?

gentlemand, everytime a post from you in this thread pops up on my watchlist, I actually get a tinge of excitement. Watching serial scammer McAfee and his shills getting repeatedly wrecked is just too fun.

I doo agree... It may sound impossible thou... But if it's true, it would be a huge breakthrough in the crypto world. Imagine an unhackable wallet? Many will gain trust and confidence in investing cryptocurrency. Nobody will worry about hackers if this statement is true.

I keep waiting for John's team of SEALs on crack and bath salts to bust through my ceiling and start pulling on their pop guns. Luckily he's made them so strung out they'll be seeing quadruple so I only have a 1 in 4 chance of being hit.

That's a tough choice of words because in the cyber world there's no such thing as unhackable even hardware wallet are no exception because it will always has flaws and bugs. There are even proven research and guide on how to hack hardware wallet through MITM or you can intercept data traffics and get the private keys.

That's mean ledger, trezors are hackable? Then I don't think John Mcafee & Bifti can make unhackable hardware wallet. Because hackers are smart too. They will be making a new way to hack. But it is really very tough for them to hack hardware wallet. Sorry to say, This man, John Mcafee, He talks too much than work.

I don't think either of them have ever claimed to be unhackable. Anybody who does is an idiot.

Real hardware wallets will have their code carefully checked by their users and it's in everyone's interest to disclose any vulnerabilities they find.

As it stands there are two guaranteed ways for a hacker to get to the funds on your hardware wallet.

1 - you store the seed for the hardware wallet insecurely such as in a file kept online.

2 - the computer you use it with is infected and replaces the address you want to send to on your computer's screen through the wallet app. That's why you need to check the addresses on the screen of the hardware wallet itself which will always be correct.

Neither of them are actual hardware wallet hacks.

Not entirely, but that also doesn't mean they are unhackable. It depends on how stupid/knowledgeless a person is.

Okay so this entire unhackable wallet is a big fail. Oh well, what else could one expect from John stupid as fuck McAfee. I swear I'll lose my mind if he doesn't eat his dick in 2020, if bitcoin doesn't reach a Million $ until then.

Also, did you people hear that he no longer accepts money for promoting shitcoins?

Wonderful, we have a crypto version of Kim Kardashian here, just wait for a video of McAfee fapping get leaked.  ::)

https://twitter.com/cybergibbons/status/1028987435873648640

https://thenextweb.com/hardfork/2018/08/13/bitfi-cryptocurrency-wallet-bounty/

https://cointelegraph.com/news/unhackable-wallet-reportedly-breached-hackers-claim-to-meet-bounty-conditions

I am particularly reassured by this quote.

“As of now, we have no evidence that our device can be hacked and if someone succeeds in doing so then we will immediately put out a fix to all devices to address the vulnerability that was discovered and it will be unhackable once again.”

Who knew it was all so simple?

They misunderstood the unhackable concept.  ::)  I think if your dick is on the line, you lose some sleep and that causes

 some severe delusional ideas about the meaning of basic concepts, and added to that, some schedule 7 drug use.  ::) We all

know Mr McAfee is not all together at all times. I have never see any Trezor or Ledger being hacked, so I figure they pulled

that out of their bunghole.  ::)

Most of the hacks we hear about are being being lax with their security. Nothing is truly unhackable because people are well .... people and will screw it all up.

I dont believe on john mcafee. I think he's a business man who use crypto community for his own benefit and also i do read a news that its been hacked and we know who is mcafee he just a person who are always being too much in anything that he promoted.

McAfee partnered with hardware wallet company Bitfi last month to launch the first "truly unhackable and open-source crypto-wallet," according to CoinTrust. Hardware wallets are cryptocurrency wallets that store your private keys in a secure hardware device.McAfee and Bitfi are very confident about their crypto-wallet's security.

Highly overconfident, as the wallet is utter garbage security wise. It's like they *tried* to make it insecure.

Does anyone know how the private key is generated?

I'm really hoping (but really not, for the sake of their customers) that it's something stupid and obvious, like a single SHA256 of the passphrase.

it will be very interesting to see it in practice! Now it's very popular to create your own wallets! the more so if he did it, then this wallet will be popular well.

I wrote up the algorithm here last month: https://rya.nc/bitfi-wallet.html

how it works? why the hardware wallet is unhackable? what method that they use? im very curious about the system that lock that hardware wallet, it seems like from the future that we can't hack it

Is it true that the hardware wallet cannot be hack or unhackable? Because I doubt about it because there are so many hackers that very smart to hack it. Remember, there is no such a perfect wallet that unhackable. But, or maybe the right word is the wallet is very hard to hack. We will see this news. I hope it's true and it will be a breakthrough for wallet development.

It's not. Read the goddam thread before making a post. It's just a brain wallet with a shit, unsafe and easily hackable hardware that can be compared with a cheap android phone.

Hacking the Bitfi. Part 1 (https://www.pentestpartners.com/security-blog/hacking-the-bitfi-part-1/)
‘Unhackable’ Bitfi hardware rooted within a week (https://nakedsecurity.sophos.com/2018/08/06/unhackable-bitfi-hardware-rooted-within-a-week/)

https://twitter.com/officialmcafee/status/1035913209881022464

The shiller in chief has upped the game considerably and now claims to have 20 million dollars in a wallet and will fly the chief hacker out to obtain it.

https://twitter.com/cybergibbons/status/1035902907902820352

And the hacker is willing to have a go if they come to London.

I don't really see why anyone needs to travel anywhere since there's this new thing out called the internet but there you go.

Probably because he wants him to hack his personal device (loaded with $20 mil). Anyways, I wouldn't travel to McAfee's house to humiliate him + pocket $20 mil (or even $100 mil) knowing what he is capable of doing[1].
that guy is crazy...

[1] https://en.wikipedia.org/wiki/John_McAfee

Guess so, but the remote hack is the one people should be more concerned about, not evil maids and that. It's not as if the world is infested with experts peeking through your window looking for hardware wallets.

I would guess that without physical access no one will be able to access coins, though obviously physical access is part of hacking too.

I would happily turn up at Mr. McAfee's door along with a few of these.

https://i.imgur.com/OxgnYQ4.png

He also uses his public image as his own cell phone wallpaper.

https://i.imgur.com/LYJqhXw.png

What a twat!

https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/ (https://techcrunch.com/2018/08/30/john-mcafees-unhackable-bitfi-wallet-got-hacked-again/)

It's been hacked again.

This time the private keys are extracted in less than 2 minutes. In response, Bitfi have ignored the issue and instead decided just to end their security bounty program, presumably in the hope that people will stop just constantly hacking their "unhackable" wallet.

Lol, they won the Pwnie Award!

https://www.pentestpartners.com/content/uploads/2018/08/pwnie1.png

https://www.pentestpartners.com/security-blog/bitfi-research-receives-pwnie-award-for-lamest-vendor-response/

Coming next (probably): McAfee and Bitfi threatening the Pwnie Awards, all the judges, My Little Pony and Hasbro.

Seriously though, this hack isn't something that can be patched with a firmware upgrade. They would need to recall all the wallets and build a new product from scratch. If you are unfortunate enough to own one of these, I suggest you try for a refund.

He's such a clown, this dude is correct.

https://mobile.twitter.com/VessOnSecurity/status/1036668139185098752?p=v