You have to do this before clicking on the upload.
And yes, you have to click on the thumbnail that appears before uploading.
Ok, ok.. I see now that edit appears when I hover the mouse over image. Instead of doing this I was think image first needs to be uploaded and then clicked on it.  Maybe you could add a small text below image (resize?) saying that image can be resized like this. |
|
|
|
A new malware in the wild was spotted by trend micro. It leverage what we call runas.exe function, so they take advantage of it and can run the propagation with administrative privileges.
This malware again targets only devices with wind0ws operating system, that means that using linux would be perfect protections against this attack. I am long time advocate for doing this switch from windows to linux, not only because of security benefits but because of better privacy and open source code. Fedora, Debian or Linux Mint are one of the best choices and they are generally better for anything related with Bitcoin. |
|
|
|
When you select the image, it generates a thumbnail, clicking on the image opens a pop-up to edit the image size.  I tried it several times but only pop-up page is opened for me when I click on image, and I don't see anything for changing image size, only the links are available. |
|
|
|
Better buy an old ledger nano s wallet.
I don't want to waste any money on this junk. My question was related to people who already won this devices, so they can mitigate potential issues. They have said that first your seed phrase is encrypted, and then that encrypted seed phrase is split in to a 2-of-3 Shamir's scheme, with one share given to each of those companies. They have not however, as far as I am aware, said anything about how your seed phrase is actually encrypted, what encryption algorithms are being used, how the encryption key is generated, or who stores it.
I listened to Andreas Antonopoulos talking with Jameson Lopp and he said that ledger is probably using industry standard encryption (I can't remember exact name), but there is no way for anyone to confirm or prove that. Since they don't have any plans to stop with Recovery plans, we are going to find out more details in next few months. I am glad some other hardware wallets are going different direction and releasing everything as open source (for example Coolwallet). |
|
|
|
I can use my DIY PiTrezor without problems with official Trezor Suite. Yes, Trezor Suite detects that the PiTrezor isn't genuine and shows a warning banner, but otherwise works perfectly fine with it.
Is there any way to bypass and skip that warning? Another problem I have with PiTrezor is that it can only be used to replace Trezor One, not Trezor model T, as far as I know. For people using only Bitcoin I would prefer using RaspberryPi for making SeedSigner DIY device, or something similar that dont keep anything on device and it has camera. |
|
|
|
We have very important announcement coming from Coolwallet hardware wallet, they decided to release their firmware and secure element chip as open source! This was decide after recent ledger wallet debacle incident, and Coolwallet wants to have more transparency with their devices. Secure element Coolwallet use has EAL6+ security and from my research they are using NXP chips in their devices, but we are waiting for official confirmation. With slick card format, current prices of $99/$149, and being opensource I think Coolwallet will have lot of new customers soon:  Source blog post: https://www.coolwallet.io/coolwallet-will-open-source-its-hardware-wallets-secure-element-chip-code/Thank you ledger |
|
|
|
Ajoj, čim je ovo backano? Zrakom?
Čitaj malo ovo: Every #USD token is fully collateralized and redeemable 1-to-1 for USD held by Prime Trust at FDIC-insured banks https://stably.io/brc20-usd/nije mi jasno zašto bi netko uopće trebao brc20 stablecoin.
Isto kao i stablecoin na drugom blockjchainu, i zato jer nema potrebe za eth i svim ostalim shitcoinima. |
|
|
|
Jeste li čuli za USDS stablecoin na Bitcoin blockchain BRC20 Bitcoin Ordinals protocol? Name: Stably USD
Symbol: #USD
Network: Bitcoin (BRC20)
Total Supply: 69,420,000,000,000*
Market Cap (May 24, 2023): $101,000
Deployment Inscription: #8,727,192
Inscription ID: cc2483940adb3dcabbd2f3856d45b206004d88bab78b9e9e056b9565ea119a07i0
Treasury Wallet Address: bc1qfy3tahmr2gw3l3974gafuvkvv4y7lwv8vc3k7a https://stably.io/brc20-usd/Coingecko: https://www.coingecko.com/en/coins/stablyNe preporučujem ovo nikome, koristite na vlastitu odgovornost. |
|
|
|
Would a HD wallet generated with a 24 words passphrase attached to a 24 word seed phrase that is know to an attacker be as hard to brute force as a HD wallet generated using only 24 words and no passphrase?
24 words passphrase?! I don't know anyone who is using something similar. Passphrase can be brute forced and cracked much easier than 24 seed words, but you can make passphrase stronger to reduce the risk, or even better to add multiple passphrases. |
|
|
|
For the most technical, what you guys think of this?
Ark looks very promising and I like that side effect of using Ark will be improved privacy, similar like Coinjoin is doing but offchain. Yesterday I listened the interview with main developer Burak from Turkey talking on Bitcoin Takeover podcast. He worked before on Liquid and on Lightning Network, and Ark was created as byproduct of new Lightning wallet, but he introduced a lot of improvements. His reason for creating Ark is to make Bitcoin available for everyone, and I agree with him that that is impossible to do on mainnet or with Lightning: https://www.youtube.com/watch?v=iQ7TLBhh9r4That's true, but while in Lightning you do gain something from being well-connected even as a regular user (better / faster / cheaper routes for your own payments), I see no incentive at all to become a service provider in Ark. Routing fees (at least in Lightning) are still very low nowadays, so I doubt that is incentive enough.
There will be incentive in Ark, same as in Lightning, and Ark will be compatible with LN from what I understand. Listen the interview I posted above. |
|
|
|
Air-gapped open source devices are fine but unfortunately they are also vulnerable to "chosen nonce attack" which may be specific for wallets with compromised MCU. To disguise this attack they may gradually leek the small portions of relevant info so that the whole SEED could be reconstructed from chosen transactions. I never saw a single case of this attack being conducted with success in real life scenario, and I would say that chances of stuff like this happening is minimal or near impossible. That doesn't mean that airgapped wallets are perfect, but when you combine them with passphrases and multisig setup, you are getting best protection for average bitcoiner. The main thing to keep in mind is that with most camera possibly all of the hardware wallets out there today they are using standardized chips to perform the functions. So yes these chips might be doing something shady, but and this is important, it would be doing it for all the devices that they are used on. So if something was wrong with them it would not just involve hardware wallets.
I think that Passport wallet is using mostly open source hardware components and that includes camera, so I don't see any risk there if done correctly. |
|
|
|
This all doesn't really matter, though. The fact of the matter is that as soon as you install firmware with seed extraction capability, it's game over for your privacy and security.
Does anyone knows if it's possible to downgrade ledger firmware? Maybe it would help a little to keep ledger always offline and connect it only with offline computer or smartphone when making transactions. This can be temporary solution until ledger is replaced with some other device. The fact that Ledger won't even tell you who that entity is or what security is being used to store your decryption key is highly suspect.
I am not defending ledger but I think they said this will be shared between three companies with different geo locations, France, United Kingdom and United States. For encryption they are using Shamir Secret Sharing, that is a bit strange for me since they never supported that scheme in ledger before (unlike Keystone or Trezor). |
|
|
|
I was actually trying to use the app and not the website. If I use my IP address, the virtual card doesn't show but if I use a VPN, then it shows but like I said, it's strange because that page also shows the restricted regions, and my country is not part of them. Have you tried them?
Yes I did play around with few offers to see how everything works, and I can send you ref code if you want  You even have the different offers for cards if you select different countries inside app, for example g00gle play giftcards are available only if you select few countries like United States, Germany, etc. |
|
|
|
I'll probably continue to maintain this list for a bit longer, but I was thinking about creating a website for it.
Is this going to be something like aggregator website to find the best rates for exchanges, or just list of all available exchanges with basic information about them and maybe short review with ref links? |
|
|
|
ive had trezors since 2014 (? i think thats when they came out, i got one of the 1st). no issues in usability. but the seed extraction thing.. oops. i get around it by erasing the trezor after use and when needed i put the seeds in the hard way (using the trezor not the computer kb), do the tx and then reset again.
That is best thing if you are using Trezor for long term storage and if you are not making many transactions all the time. Perfect example of quick importing seed phrase would be with scanning QR code, but Trezor don't have camera like Passport, Jade or other DIY open source hardware wallet devices. Maybe next generation Trezor will include camera or some other way of quick seed phrase importing. ive read good things on foundations passport.. anyone here want to chime in? might be off topic?
I think member n0once owns a Passphrase wallet, he even made detailed review in forum, so you can search for that. In my opinion this is one of the best Bitcoin hardware wallets available today, but it's certainly much better than ledger. Passport Review topic: https://bitcointalk.org/index.php?topic=5421713.0 |
|
|
|
In Russia, I can buy Trezor T for 80-100 dollars.
The wallet will be in its original packaging, but I can refuse the goods if I suspect fraud.
This device is unavailable at the moment on website you posted, but I wouldn't risk buying it because I am sure this is not original Trezor. Form last reports of hacked modified Trezor T they said that it was packed and it looked exactly identical as original device, and only difference could be noticed when looking inside on the board. One more difference was skipping the online check to confirm device is authentic. With all the other mistakes they have made through the years, and all the other issues with their products, do you think their first shot at designing a secure element is going to be good? Companies that have been designing and building SE for years and years still have massive issues now and then. Their first product out of the gate is either going to be perfect or an unmitigated disaster.
Do you know any newly released thing will be good? With that kind of thinking you shouldn't use or trust anything, but this should be open source and that means everyone will be able to contribute and improve it. It's silly to compare this with any other closed source chips that exists much longer, and Trezor didn't fall from sky yesterday, they are the first even hardware wallet, so they have some experience. Trezor sales soar 900% amid Ledger’s seed recovery controversy
Trezor said a remote seed phrase extraction is impossible on its hardware wallets, adding that it would never implemented.
Nice! I am sure sales jumped a lot for all other hardware wallets like Passport, Keystone, etc, they posted something about all items sold. They should all thank ledger marketing team for free promotion  |
|
|
|
A few blows and it’s working, despite the screen having fallen off (it’s just resting on top now)
It should be easy to glue the screen and prevent it from falling out. Some people are using combination of superglue and baking soda for repairing all broken plastic parts, if something is broken inside that holds the screen. I'm curious though to what extent you can make it. Can you have it with the games? Like with the cartridges? I can't find my old GameBoy but I have some of the old cartridges.
From what I heard this should be possible to do it, but let's wait and see when developers release the code. As someone who recently purchased and tried one of those classic handheld Tetris game consoles in a public market, I can guarantee you such things will always attract some attention [mostly from the older generations, but still...].
Maybe from younger generations also... did you notice how retro things are getting more and more popular again (shoes, cneakers, clothes, etc.)? I think many things made in past had much more quality than things made today, and everything lasted longer, maybe that is one of the reasons for this trend. |
|
|
|
So because they point out that a custodial wallet is custodial, that custodial wallet attempted frivolous legal action because they didn't like someone pointing out that they are custodial?  We should clearly name those custodial wallets and tell more people to avoid using them. WalletScrutiny received this legal actions two times so far, first time it was from Mercado Bitcoin, and now they received it from Foxbit. Both of this services are located in Brazil, that makes me think there is some connection between them, and this was targeted attack. |
|
|
|
I haven't bought the card, so I can't really vouch for them but make sure to read the warnings on the app before buying. The card does not work everywhere (like in PayPal, Revolut, etc.)
I know people who purchased cards from this website before and it worked fine for them. You don't have to use any VPN if cards are available in your region, but it is best to download their app for Android or iOS and check for yourself. Note that changing IP addresses could result in card payment getting declined in some places, so be careful if you are doing that, and first try with smaller amount of money. |
|
|
|
|
Show Posts
