Warning. This file might be malicious.


Explanation:

1) PE file has unusual entropy


Executables with an entropy greater than 6.6-7.2 are likely to be encrypted/packed, which is a common anti-AV measurement.



2) Process tries to sleep for an unusual long time.

There is a weird API call being done:

It seems that the process is trying to sleep for 435+ hours.
Usually malware tries to sleep in the beginning to trick some AV execution emulators.


I would recommend to NOT download or run this file!

I think he meant that the addresses don't get exposed to the server when using electrum instead of ledger live.
And AFAIK ledger live isn't even using bloom filter, so every address your software checks is indeed transmitted to ledgers server.

With electrum on the other hand, the server can only know which addresses you are not interested in, but can't specify which exactly you own. They can only determine a superset of your addresses.

Ledger Live will only verify the firmware, not the hardware.
Hardware attacks can still be pulled off (e.g inserting another chip).

However, those attacks are extremely unlikely. A simple 5$ wrench attack is way more probable.

Ja.

Die Anbieter unterscheiden jedoch teils stark voneinander:

• Fixkosten (monatliche/jährliche)
• Gebühren beim Abheben / Bezahlen
• Limits (tägliche/monatliche/jährliche Abhebelimits etc.)
• Anreize (z.B. Cashback)

Highly unlikely, because:

• OP's friend is using ledger's software (no weird derivation paths)
• They imported the seed into electrum using all 3 standard derivation paths
• The address originally was retrieved from ledgers software (so no weird index outside of electrums gap limit)

You need the guide to check the hardware.
And the warning is shown in a box with "CAUTION!".

I felt like he is able to read properly, so no need to treat him like an incompetent person.




The time it takes to modify the hardware as i described is roughly 2 minutes.

Same
Naja, kann sich nur noch um 7-14 handeln  

Theoretically, very well possible.
He can't do anything with your ledger. There are hardware mechanism to protect against some kind of stuff.

But a few attacks would still be possible (e.g. inserting a chip and a small antenna to trigger button clicks from ~11 meter away).
This, paired with your compromised computer, could allow an attacker to steal your funds.


However, do you think this is somewhat realistic in your case ? If you aren't a BTC millionaire which everyone knows about, i don't think so.
But even if you are paranoid about it, you can always open the case and check whether the hardware looks genuine. Ledger published a guide.




 
What about this: From now on, ledger uses a sex shop as their shipping address? That would kind of solve the problem 

I believe that the address might actually not belong to the wallet of your friend.
Since you already imported the seed from the hardware wallet into electrum, try the following (within the wallet file where all addresses start with bc1..:

• Go to the Menu: View -> Show Console
• Go to the Console Tab
• Enter this: ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")

If it returns false, it seems that this address indeed does not belong to your friends wallet.
The most probably scenario here is that either you or your friend is infected with some kind of malware.
Another option would be that he is trying to steal some coins from you by giving you a different address.

The transaction indeed is confirmed.

Is bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 the address your friend gave you ?



What kind of addresses did you see in electrum? Did they all start with bc1.. ?
If so, it seems that he  did not receive the coins. But if all addresses start with 1.. or 3.., they might still belong to his wallet / seed.

P.s. after this is resolved, tell your friend to generate a new seed on the nano s and move all coins to it.
Importing the seed into a software wallet defeats the purpose of having a hardware wallet. This seed should be regarded as compromised now.

IMO, miners leaving was predictable.
The earnings have been reduced by 50%. Some simply cant' continue to mine without losing money due to ongoing costs (rent / electricity / maintenance).

Depending on whether the BTC/USD value is going to rise or fall, we might see miners coming back or even more leaving. That's business. If they don't earn money, they stop mining.



Could be, but doesn't have to.
Those "experts" don't have any clue. Just like any other person.

This site is alsways overestimating the fees.
I wouldn't recommend to use it.

http://core.jochen-hoenicke.de/queue/#0,2h gives a pretty decent overview of the mempool.
I use the 3rd graph (Mempool Size in MB).
Currently, Transactions with 50 or more sat/B take roughly 1.8 MB of the mempool. Such a transaction should be confirmed within the next few blocks. No need to pay 150 sat/B for a confirmation within the next 6 blocks.

Why do you use blockchain.com in the first place when you have a hardware wallet? This doesn't make any sense to me.
However, if you don't see any balance in your trezor but all transactions, this means you have imported your mnemonic code correctly, but simply don't have any funds.
Keep in mind that you should NOT use that seed with your trezor and assume it is safe. You need to generate a new one (on your hardware wallet) Everything else beats the purpose of having a hardware wallet.

Blockchain.com support is the only one able to help you in this case.
And for the future: Don't use web wallets.

The first transaction will not be deleted from any node beside yours until your second transaction is confirmed (which does not have to be the case!).
All changes you do to your mempool are exclusively local on your node.



You can not delete transactions from the mempool of all nodes.
You can create a new transaction spending the same utxo's with a higher fee. This can (but does not have to!) lead to your second transaction being included into a block.

Not necessarily.

It will remove malware which already is in its database or which is extremely conspicuous.
Everything else will not get detected / removed by an AV software.

Security by Obscurity is not the approach you want to rely on.
You are far better off by simply encrypting it.

And please keep in mind, that storing them encrypted (or hidden) on an usb device, is not nearly the same as a hardware wallet.
Once you want to spend the coins, you actually need to import them somewhere. That's the crucial point.

If you don't want a hardware wallet and don't use an offline computer to sign transactions (e.g. from a paper wallet), you have to rely on the security of your computer.
But same applies to using ANY exchange. You have to rely on the security of your PC.

The bitcoin software runs on computers.
The bitcoin protocol is spoken between nodes.
There are no bitcoin functions. And even if they were, they wouldn't be running on blockchain technology.

Think of the blockchain as a database. It is being used as a ledger.




They are not.
Bitcoins (or rather the unspent transaction outputs) are assigned to public keys on the blockchain.
A wallet is storing private keys.

A better term for wallet would actually be keychain, since it only stores the keys, not the "actual bitcoins".




Blocks are created by miner and verified by nodes.

Firefox is not using cloudflare as an "automatic proxy".
Firefox does support DNS-over-HTTPS. When enabling, you can chose which server to use. And Cloudflares DNS server is the default one. But that's not a proxy.

That's an encrypted way to resolve domains to IP addresses (without being visible for everyone).




The website does NOT know how you gathered the IP.
It is the DNS servers fault. This has nothing to do with archive.is or any other website.

You set the fee rate in sat/B and Mycelium multiplies the chosen sat/B fee rate with the size of your transaction. The result is the total fee in mBTC,




0.22323 mBTC is the overall Fee.
~1.62 GBP is the overfall Fee converted to your currency.
99 sat/byte is the fee rate in sat/B, which is used to calculate the overall fee.




Yes.
The transaction is already constructed at this point. You just need to confirm what you see to actually sign it.

Wait.. so they also take fees ?!
Why would any sane person want to use that shit wallet ?



Rather to deceive...



No, we don't.
That's the reason this topic has a [shady] tag instead of [scam].
And that's the reason there is no open flag against sendbit yet.



And so is sendbit.io..