|
I have never really been a person who cares about the design aspect of software as much as I favor a fully functional, easy-to-use, and bug-free platform. An online casino that looks good but functions badly is of no use to me. I am interested in sports betting, and if the odds are higher than what I can find locally in my neighborhood, that's all I care about. I am not that into casino games, but they are all basically the same, no matter how the site looks.
|
|
|
|
With attacks like this it would not be that hard for someone with unlimited funds like gov. to make bitcoin almost unusable for most people  You might have meant it as a joke but it's not. The enemies of Bitcoin can't easily attack the decentralized ledger reproduced across tens of thousands of computers. They also can't easily attack and put out of business the thousands of mining companies and small-time home miners. What they can do is exactly what you said: attack the value transfer. Make it difficult and expensive to use Bitcoin and then fud, through their media, what a waste of time and resources Bitcoin is. Maybe it's time for another fork, and more people need to use Lightning Network for small transactions. Doesn't really help much because you still need to open and fund the channel and close it eventually. Both are on-chain transactions and require those currently expensive on-chain fees. |
|
|
|
But you have to use Ledger Live to add or update apps on your Ledger hardware, at which point you're at the mercy of Ledger's tracking. I know, but like I said, that's an entirely different problem that has no affect on the custody of your coins and keys. If you had no access to your crypto outside of Ledger software and needed their permission to move your funds, then we can talk about issues with custody. That isn't the case here. Better yet, it's time for Ledger to prove the firmware on their hardware is safe AND HAS ABSOLUTELY NO ABILITY TO EXPORT THE USER'S KEYS. Doing it now, retroactively, would be pointless anyway. The best you can hope for is them doing it for future firmware versions, and I doubt they will do that. And even if they do, the harm of Ledger Recover has already been done and can't be undone. Sending shards of your keys to other companies for "safe-keeping" is a custody issue in comparison to the tracing problem we discussed above. |
|
|
|
There have been a lot of controversies surrounding the mode of operations of ledger - one of the top hardware wallet manufacturers, meant to be complete non-custodial, but recently, researchers have discovered data Harvesting Inside the ledger live app.
For whatever reason best known to ledger, and hard to comprehend for users, ledger live app is transmitting information about..
- Clicks
- Page visits
- Redirects
- Crypto transactions
- Page scrolls
- Number of accounts
- Crypto asset names
- Session duration
- Hardware device type
- Firmware version The information you mentioned that is being tracked and collected doesn't change the non-custodial aspect of the app to a custodial one. As long as you have access to your keys, and you are the only one with such access, and can import them properly elsewhere, it's a non-custodial wallet. And you can do that with Ledger. A big problem would be if someone can prove that Ledger has and/or has always had a copy of all keys. I am not talking about the Ledger Recover feature here. However, even if the user turns off that option, can we say with certainty that the app still does not (secretly) collect data and send it to someone for analysis? Someone should prove it then. Unless it's the firmware that is doing nasty stuff, those who can read and comprehend code shouldn't have issues proving if and how Ledger collects data using ledger Live. |
|
|
|
If you remember the situation before the Ordinals Attack began, you can see that the 4 MB weight was enough to handle the real demand. But after the spam attack began, the fees started going up and stayed up.
In other words the problem isn't the block space. That's true. However, it's the current demand. But if Bitcoin is to have many more users globally, it needs to be able to handle the load. This Ordinals spam is a good example of how a huge influx of new users could look like. The results are unsatisfactory. The solutions are unsatisfactory as well. Telling everyone just use the Lightning Network and it will be fine is like sweeping the problems under the carpet. |
|
|
|
Yes, I have looked at some alternatives. The problem with all other manufactors is that they only support the AVAX C-Chain via the respective hardware wallet, including Metamask. Staking via Avalanche requires the P-Chain, which is currently only fully supported by Ledger. OK, I see. I just checked if Ledger offers native support for Avalanche tokens, and they don't. The supported AVAX wallet is the Avalanche wallet, which Trezor doesn't support. That can only mean that it's the Avalanche wallet that offers the needed P-Chain that you are taking advantage of for the staking feature. |
|
|
|
The message came from their official GitHub page and there was no case of hack reported, meaning an authorized personnel who had access to the account deployed the malicious code. if it's not from a team member, who could possibly have done this? A former employee who still have the login details? Yes, that's exactly what they stated publicly. But it doesn't matter if it's an ex-employee or a current employee. It looks bad either way. If it's an ex-employee, why would he still have access rights and the ability to manually change code without anyone else's permission and verification? If it's a current employee, why does he not have the skills to recognize a scam and phishing attempt when he is working in a position with such security clearances?! I'd be off Ledger in a heartbeat if there was finally a viable alternative for people who have a larger stack of altcoins. At least my altcoins, e.g. AVAX, still can't be staked via Trezor - or any other competing product. Trezor supports AVAX via third-party wallets, such as MetaMask, MyCrypto, and Rabby. Have you checked if any of those solutions have a staking feature for AVAX? To be honest, I don't understand why the competition doesn't utilize the penalties that have been set up. What do you mean? What penalties? |
|
|
|
<Snip> Ima tu još jedna stvar. Kako se blok nagrade smanjuju poslje svakog halvinga, u budućnost će transakcijske naknade postati glavni izvor prihoda za majnere. Ako bi se blokovi toliko povečali da nema nikakvih problema sa zagušenom mrežom, to bi onda značilo i da bi naknade bile niske. A ako bi naknade i block nagrade bile male, mineri bi dugo bili neprofitabilni i vjerovatno počeli gasiti svoje uređaje. To onda smanjuje sigurnost čitave mreže. Zašto svi ignorirate ovo?
Zamislite da na Amazon možete staviti neuništiv oglas da prodajete jurišne puške djeci od 8 godina.
Ordinalsi predstavljaju trajnu sliku na chainu, koju skine svaki node koji je priključen na mrežu. Ne ignoriramo ali šta hoćeš da učinimo povodom toga? Ne znam koliko je jednostavno Ordinalse blokirati a da se ne napravi veća šteta. Zar nije nedavno Ocean mining pool pokušao to da uradi pa usput blokirao i Samourai Whirlpool tranksakcije što je pogrešno rješenje!? |
|
|
|
There is no discount for Trezor Model 3 right now, except for free shipping, so I think you made a mistake here, it's for Trezor Model T. Yes, you are right. Thanks for keeping your eyes open. I wanted to write Model T but ended up writing Model 3 instead. That's not even an existing model of theirs. I have edited the previous post now. The discount is, obviously, for Model T, which usually costs over €220 and is now available for €179. |
|
|
|
That's fine and it a much better stance to take than some other websites are doing, who are outright blocking anyone with an IP from any country with related sanctions from doing financial transactions. Ahh, yes. The land of the free and all its possibilities. I had no idea that Stacker.news had such a discriminatory policy towards whole countries and regions. I don't use it, so I don't care. I am going off-topic but somehow while reading your post and the announcement by SN, I remembered Borat's pledge to the US, when he said " we (Kazakhstan) support your war of terror." The whole crowd goes nuts thinking he just made a grammatical error and was trying to say something completely different. I will stop there. |
|
|
|
But maybe, based on your observations, you can note several casinos that actively change their data in such extreme situations as the latest events related to Ordinals. These changes may partially and indirectly signal to players about the decreasing reliability of such casinos.
I think this information would be useful to many players. My last complete check of all the numbers in the table dates back to the end of August. The Ordinals inscriptions were already causing problems back then and it's still ongoing as we all can see. Honestly, I have never thought about which particular casinos make regular changes to their withdrawal fees, for instance. Many crypto casinos have dynamic withdrawal fees, so the numbers change all the time. Obviously, those with fixed sums don't make changes as often. |
|
|
|
|
@Kruw
With everything that happened with Sinbad and the campaign's escrow address landing on the OFAC sanctions list, has zkSNACKs implemented the same sanctions to the address and/or all others connected to it? More precisely, since it isn't zkSNACKs that implements the sanctions and its the blockchain analysis company, is the suggestion that zkSNACKs receives to allow or disallow UTXOs into coinjoins from the above-mentioned users? I don't use Wasabi, but it would be interesting to hear how it would handle it.
|
|
|
|
And while we are at it, is there a better alternative to trust wallet? What I mean is an app for android that is ideally open-source and can handle tokens and shitcoins and all that jazz. Depending on what altcoins you want to engage with, Stack Wallet might also be able to help. It's available both for Android and iPhone users. But it doesn't support that many altcoins. And based on what was said previously, it generates a unique seed phrase for each new coin you add to it. So, if you are using it with 3 altcoins, you would have to make 3 different secure backups + copies of those backups to store in different locations for better security. https://stackwallet.com/ |
|
|
|
|
Using that analogy, Adidas is also a popular company with excellent products, so if they released their crypto wallet, we should use that. Wrong. Adidas is an expert in a completely different industry and so is Samsung. Unless you experienced some difficulties with your Electrum wallet, I see no reason to jump from that to the Samsung wallet. Personally, I am not a fan of Electrum for mobile phones, but there is, for example, Blue Wallet that would be my choice. The Samsung wallet wouldn't even be on the list of considerations.
|
|
|
|
<Snip> I wouldn't get my hopes up that Atomic Wallet will release any comments, especially anything that makes them look bad or guilty. I don't doubt they have money for advertising and they will spend it to keep showing their wallet in good light. Crypto users quickly forget. Blind them with an airdrop or two, a special deal, or perhaps an NFT with promises of huge profits in the future, and many of them will come back to using Atomic Wallet, having forgotten all about this incident a long time ago. |
|
|
|
|
I came across this discussion by accident. I find it funny how a member who was not a participant of the campaign (at least not with that username) complaints that other members have not received their payments. At the same time, the actual participants, understanding what happened, are not asking for their coins for now. Publicly at least. One never knows what's going on in private messages. airfinex is the Dark Knight of Bitcointalk.
|
|
|
|
Always use your dictionary and Google Search then everything will be very simple for you to understand. And it is not all about links but understanding. Google is a very useful but a very dangerous tool for many things related to Bitcoin. Asking Google to recommend good wallets or exchanges can point you to fake phishing sites or Google ads created by scammers. Without knowing what you are doing and not having the knowledge to distinguish the good from the bad, Google can get you in trouble. You should at least have ad blockers installed in your browsers because Google doesn't care if it's advertising a scam for you to see. |
|
|
|
Nisam poslušao isječak jer doma uz djecu ne mogu ništa čuti. Ali zanima me jedna stvar, a mislim da si osoba koja bi to mogla znati. Je li mana povećanja bloka samo činjenica da će za full nije trebati puno veći hard disk ili ima još nedostataka? Veće ulaganje u hardver je jedan od razloga. To onda za sobom vuće problem da oni koji ne bude htjeli ili ne budu mogli da snose te troškove će odustajati od full node-ova. Tu se gubi na decentralizaciji a node-ovi bivaju centralizovani kod onih imućnijih sa dubljim džepovima. Za povečanje blokova bi bio potreban hard fork. Mreža bi se podjelila u dva smjera. Kad se to desi gubiš jedan dio korisnika jer će jedni ostati vjerni (nazovimo to tako) orginalnoj ideji a drugi otići na drugu stranu. Mislim da nije nikome u interesu da se još više djelimo i na taj način umanjujemo značaj Bitcoin mreže. Još jedan problem koji se je spominjao je da bi veći blokovi uzrokovali povečanje broja orphaned blockova. To su blokovi koji se prvo potvrde kao validni a onda se ponište jer to zapravo nisu. Mora proći određeno vrijeme da svi majneri dobiju najnovije informacije o najnovijim blokovima i tranksacijama u njima. Ako se blokovi povečaju, povečava se i to vrijeme potrebno za prenos svih podataka svima. Nemam pojma koliki je to problem u praksi jer je ovo samo teorija. Ako određeni majner kasni i ne dobije informacije o novom bloku na vrijeme, on može raditi na dodavanju transakcija na stari blok. A te transakcije i taj blok bi onda bili poništeni jer ne možeš jedan coin potrošiti dva puta. Na prvi pogled bi taj blok izgledao validan i bio bi možda i prihvaćen od onih kojima informacije također kasne. Ali kad bi se sve sinhronizovalo, blok bi bio poništen. Npr. zadnji blok koji je izrudaren je 821795. Zamisli sad da imaš majnera koji nije primio informaciju o tom bloku i ubrzo nakon toga izrudari svoj blok. U njega ubaci 80% istih transakcija jer mu kasne infomacije. Sve u početku izgleda ok međutim kod verifikacije bloka vidi se da nije uredu jer troši coine koji su prethono već bili potrošeni. Kako sam napisao, nisam niti za ordinalse niti protiv. Ide mi na živce što je slanje BTCa postalo skupo, ali kod Ethereuma su skupe transakcije dovele do razvoja L2 rješenja. Zašto BTC developeri umjesto da se toliko bore protiv ordinalsa ne promijene nešto kao što su L2 mreže na Ethereumu. Ethereum je centralizovan. Tamo je mnogo lakše predložiti i izglasati velike promjene. Ethereum Fondacija odlučuje šta će biti. Kod Bitcoina moraju da se usaglase majneri, mjenačnice, vlasnici full node-ova, itd. Ne možeš se dogovoriti sa ženom koji film pogledati, svako ima svoj ukus. Zamisli sad da o tome odlučuje cijeli Zagreb. Ali imaj na umu šta sam prethodno rekao da nije nikome u interesu da je 52% za jednu stranu a 48% za drugu ako će onda tih 48% odustati od Bitcoin mreže i graditi/rudariti njegov fork. |
|
|
|
If anyone wants to go down this path, the laptop has to be offline (zero connection to the internet) most of the time otherwise, it's still likely to be exposed to even popular vulnerabilities. Not most of the time. All of the time. After you install a fresh OS onto it (Linux is recommended), it should never be connected to the internet ever again. Removing the network/WIFI cards ensures that you can't even mistakenly connect it to the internet.
I am reading the response of Ledger's CEO and can't help but to giggle. The guy is talking about the standard security practices the company uses and goes on to say how multiple parties review code before it's deployed. They control who can access what internally, and if an employee leaves the company, they revoke all access rights. Sadly, everyone was asleep when it comes to the alleged ex employee who was able to upload the code changes without anyone else reviewing it and still had the needed access rights despite being an ex-employee. https://www.ledger.com/blog/a-letter-from-ledger-chairman-ceo-pascal-gauthier-regarding-ledger-connect-kit-exploit |
|
|
|
I also want to know one more thing. I have been using this address for some years now, so i got some money from Si^D^^ recently but what about those satoshis which i got when i was not in that campaign ? I transferred some satoshi to some other wallets before the campaign too. So all those wallets become suspected  It doesn't cost you any money to generate a fresh address every time you need to receive Bitcoin, nor will you be saving on transaction fees by using the same one over and over again. Start doing that so it becomes a habit and also divide your activities in different wallets. Then, things like what you just explained won't happen. You said that you used that same address several years. Have you received any coins to it from a service that has your KYC details? For example, an exchange, a casino, etc.? If you have, it would be very easy for blockchain analysis or any interested 3rd-party to figure out who you are based on what that centralized service tells them. You moving the older coins before you started receiving Sinbad payments doesn't matter. Bitcoin's blockchain is public. The same person that owns coins from a CEX also received BTC from Sinbad. That's what the blockchain will show. |
|
|
|
|
Show Posts
