Bitcoin Forum
July 05, 2024, 09:33:11 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 [141] 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 ... 650 »
2801  Economy / Scam Accusations / Re: Be careful with saxydev; he is a scammer on: February 11, 2023, 09:33:14 PM
This could be the first legit claim in this entire thread...
Or you have been smoking the same stuff like saxydev since you are the single person in the entire forum who is opposing my flag against this clown Tongue
He actually owed money to another member before (and one more now), so this is not first accusation against him, but I guess you didn't read everything carefully.

So, is there any certainty whether my work will be paid or not?
What work exactly you did for him?
Provide some evidence for your work, it would be interesting to see this, but if address you gave him is showing zero coins, than you should make scam accusation against him.
Even if he paid later than he promised means that he broke one more written agreement, that is reason for another flag against him.
He owes me 0.1 BTC, and I am still waiting to receive this payment from him.

2802  Other / Meta / Re: Good Initiative by Royse777! on: February 11, 2023, 09:05:38 PM
This is not a bad idea to report members who are suspected for using AI to generate their posts, but we should be really careful with this before making a report.
I did detect few members recently who probably did something like this and I reported them to moderators, I consider this to be spam that is similar like plagiarism.
Maybe it's time for unofficial forum rules to be updated so that members who are doing repeated AI generated posts can be banned.

For the most part; these detectors are awful, and can't be relied on.
I think I tested all of them that exist so far, some are doing very good detection job and others can be improved.
It's enough for me if I notice something suspicious in several posts from specific member, and if several AI detectors confirm my suspicion with high percentage.
2803  Local / Off-topic (Hrvatski) / Re: Kutak za kulturni trenutak (filmovi, serije, knjige etc) on: February 10, 2023, 09:07:30 PM
Da li ste možda gledali seriju Servant?
Ima četiri sezone, i prilično dobar rating na imdb i na rotten tomatoes, ali malo je čudna i nije za svakoga Smiley
Plane nije loš novi film koji sam gledao sa Gerard Butlerom u glavnoj ulozi, ima nekig nerealnih scena, ali to se i očekivalo od ovog žanra.

2804  Other / Meta / Re: What cause the donation closure thread of Yahoo on: February 10, 2023, 08:40:53 PM
Why would you see it? It was done in private, but they usually don't get contacted at all.
They either go straight in the trash without notification or the person gets a ban but I thought I'd do the nice thing and nicely ask him to remove it rather than trash the entire thing. It's really not done selectively. I think everyone should be treated the same and people shouldn't be begging for money here. I would urge people to report any begging threads and we'll probably stop a lot of scams from happening in the first place.
How would you call collecting donation to develop new forum software that was never delivered like promised?  Tongue
My point was that I saw so many obvious examples of people asking for donations in this forum and this was never considered a begging.
Now I understand if you want to make an example from yahoo, but I would like to hear opinion from theymos about it.

I don't think that thread should have been there but two wrongs don't make a right.
Dude, are you serious?!
This thread is still very much there as well as their ''donation'' address  Roll Eyes
https://bitcointalk.org/index.php?topic=5124375.0

You could just have a friend or even an alt account make the suggestion.
So you are now saying that he used some of his alt accounts for this, and for what....to get around $100 worth of BTC in donations  Roll Eyes
I am really surprised and sad to hear all this from Global Moderator  Tongue
2805  Other / Meta / Re: What cause the donation closure thread of Yahoo on: February 10, 2023, 07:45:38 PM
Not all donations are begging. If someone wants to send you or me money as a donation then they can go to our profiles and do so. You can donate to anyone you want. What you can't do is create a thread to try solicit donations. If a thread contains a sob story and address urging others to donate then I'd say yes, that clarifies as a begging thread.
I never before saw moderators contacted someone to remove Bitcoin address from their topic, and this should not be done selectively like you are doing.
One more thread that comes to my mind was controversial Bitcointalk Charity topic, with three forum members being involved in abusing collected donations.
That topic was allowed to exists for months, and it's interesting that yahoo was one of the people who first talked about that issue, so I don't see him as a bitcoin beggar:
https://bitcointalk.org/index.php?topic=5376475.0

You can't really say I'm not asking for donations then literally ask for donations both in the thread and directing people to your profile. Whilst some people will or would have genuine reasons for asking for money and it may seem harsh not allowing them in certain instances I think a blanket ban on them is wise unless we're going to scrap the rule completely or open up some sort of donation board which I think would just be a messy nightmare.
I will repeat again, there was no bitcoin addresses when thread was created, he added it later after other members asked for that.
I don't know what I would do in similar situation, but fact is that most members supported yahoo and gave him bunch of merits.
Last time I checked he didn't receive  that much Bitcoin at all, fake Bruno scammer and Bitcointalk Charity trio received much much more.

PS
Your last quote was wrong, I didn't say that, it was post from Halab:

If you want to talk about your health problems... why not. If people are touched by your story, they will contact you by PM to ask you for an address to make a donation. That's all you can hope. Because if we open this Pandora's box, there will be abuse.
2806  Bitcoin / Hardware wallets / Re: Secure Element in Hardware Wallets on: February 10, 2023, 07:24:07 PM
That's a good idea, I'll see if we can post a blog post summary of the Twitter Space.
Taking transcripts from that audio would be nice.
I listened your conversation today, and I didn't know stuff you guys said about Risc-V chips not being really open source.
I was really surprised that you didn't speak more about upcoming Trezor secure element TROPIC01.

Regarding OneKey, my understanding is this has nothing to do with the secure element, but instead an issue with their firmware – it seems that they didn't encrypt the traffic between the secure element and processor (lol). The 608a secure element by Microchip is not recommended for new designs, but I am unaware of any attack that doesn't involve a lab + lasers that could pull data out of it. We are of course switching to the 608b for next batch of Passports, but not due to any glaring vulnerability.
Yeah I know the problem was not directly related with secure element in OneKey but it's connection with microprocessor, but there was clear indications that other hardware wallets have similar issues.
As for ATECC608A secure element, it's clear that this is not secure enough chip anymore, their documentation proves that, and it was exploited before.
2807  Other / Meta / Re: What cause the donation closure thread of Yahoo on: February 10, 2023, 05:56:39 PM
OP why don't you use your main account, instead of creating new one just to ask a question about this?  Roll Eyes

It was essentially a begging thread which obviously isn't allowed and I think the no begging rule is one of the oldest here.
So now we are going to call any topic that has donation address a begging?!
I didn't see Yahoo beg at all in this thread, I even think he added donation addresses later when people started asking about that, he just said that everyone can find address in his profile (archive can confirm this).
This was certainly not the only thread that collected donations, I can clearly remember one topic from Bruno AKA Phinnaeus Gage and his medical condition, we all know outcome of that.
I can also find several donations campaigns for disasters and health issues, you can't call all donations begging, even Bitcointalk forum had donation address for years.

Is it only me who finds that this topic and the one(s) made by fishy001 yesterday seem too closely related?
I would not be surprised if it's the same person. (And, while multi accounts are allowed, ban evasion still isn't.)
Yeah I think it's him.
He tried to mask his usual writing style, but it's not working very well.

Quote
I'm not asking for donations or anything, but I do have a bitcoin address in my profile if anyone wants to help out they can.
https://ninjastic.space/topic/5430104
2808  Bitcoin / Hardware wallets / Re: New HW wallet announced: COLDCARD Q1 on: February 10, 2023, 03:21:41 PM
Makes you wonder if the cost and weight of a more durable screen on a device like this matters as much as on a phone.
I was  actually talking about smartphones, I don't like what they are turning into Cheesy
I could understand bigger screen if hardware wallet was designed like Keystone or like upcoming 1inch wallet that have gorilla glass protection.
Using very very large size hardware wallets I can't really understand, especially if they are thick like a brick.

If you have a lot of funds stored on the wallet secured by it, IMO your hardware wallet should be locked in your desk / safe / wherever and pulled out when you need to move them. And you have the seed backed up securely someplace else anyway.
Most of the people probably keep hardware wallets at home, but in some cases you need to travel and cross border with them.
My thinking is that credit card style hardware wallets is ideal for this situations, not big brick you carry in your big pocket.

What a lot more wallets need, and other then the keystone I don't know of any, is a 'self destruct' when taken apart so you can't attack them by taking them apart and getting to the SE. BUT the other side of that is you can't take them apart to fix them either.
Maybe, but than you would have to trust manufacturer they are telling the truth about self-destruction.
Mnay times it's just a security theater like in case with Safepal, and I remember people managed to easily bypass Cobo (now Keystone) self-destruction mechnism.
2809  Bitcoin / Electrum / Re: Backup on mobile Electrum on: February 10, 2023, 02:52:45 PM
I wanted to do a file backup on mobile Electrum but I was unable to. This is the error
Don't you already have seed words as offline backup written on paper that was generated when you first started Electrum wallet?
Importing that should work just fine in desktop wallet or any other smartphone, unless you want to backup labels and other data from Electrum.
I am not a big fan of Electrum mobile wallet, their desktop wallet is much better product.

What is causing the error?
This error is certainly related with your device app permission.
2810  Economy / Exchanges / Re: Localbitcoins closing down on: February 10, 2023, 02:24:49 PM
For those who don't mind going through KYC what are the best alternatives now? Any suggestions?
Probably something like Binance p2p exchange, but I don't see why you would use kyc when there are alternatives that work fine without it (Bisq, AgoraDesk, HoldHodl).
If you want something that looks similar like LocalBitcoins, than you can check out Localcoinswap.com or Paxful.com.
Just make sure you read the terms before signing up for any of this platforms.
2811  Local / Hrvatski (Croatian) / Re: [VELIKA LISTA] Hardverski novčanici (80+) on: February 10, 2023, 12:54:16 PM
Dolazi nam još jedan novi zanimljiv hardverski novčanik ColdCard Q1 koji dosta izgleda kao stari Blackberry phone Smiley
Kao i kod ostalih Coldcard harverskih novčanika, podržana kriptovala je samo Bitcoin, tako da ovo nije novčanik za vas ako imate shitcoine.
Trenutno možete samo rezervirati ColdCard Q1 za $200, ali nije sigurno kada će biti dostavljeni kupcima.
Poboljšanja u odnosu na starije uređaje su QWERTY tipkovnica, veći ekran, sva MicroSD slota, tri AAA baterije, QR skener, a ostalo je slično kao kod ColdCard mk4 modela.


https://coldcard.com/
https://coldcard.com/docs/coldcard-q1
2812  Bitcoin / Hardware wallets / Re: Secure Element in Hardware Wallets on: February 10, 2023, 11:27:52 AM
Hi all! Wanted to share a Twitter Spaces we at Foundation hosted a few weeks back about secure elements; we dove into some nuances. Check it out: https://twitter.com/FOUNDATIONdvcs/status/1617879545708961792
I will probably listen this talk but since it's one hour long it would be a good idea to have this released as written article somewhere, maybe on your blog page.
Problem I have with Passport hardware wallet is that it is still using outdated secure element ATECC608A, same one that is used in OneKey hardware wallet that was recently hacked by Unciphered.
I don't think chip shortage is such a big issue anymore, so it's probably time to replace it with something better.
 
2813  Bitcoin / Hardware wallets / Re: New HW wallet announced: COLDCARD Q1 on: February 10, 2023, 11:05:30 AM
I am quite flattered by Coldcard's new direction; it certainly seems like a direct response to our 2021 Passport Founder's Edition.
They are even repeating the exact same mistake you did with triple A batteries, and that back design for Q1 is really ugly in my opinnion.
I am almost certain we are going to see ColdCard Q2 after this, that will have similar batteries like you are using in current Passport device Smiley

One interesting thing we noticed is that it's about 4x6 inches, almost an inch thick (you can do the estimation yourself knowing the screen is 3.2 inches diagonal). I think many users will be surprised by the sheer size of the device. It's certainly not pocketable.
Did they release any dimensions for ColdCard Q1?
It's bet if they can release how it looks when someone holds it in hand, but in their defense I would have to say that most modern smartphones are far from being small and ''pocketable''.
I don't like this direction at all, but people like big screens (that crack easy).

Additionally, I think I found the QR scanner part they are using. This means the QR scanner is essentially a standalone black box computer running proprietary code. It also means that there will be no viewfinder on the Q1 screen: https://www.alibaba.com/product-detail/Embedded-1D-2D-Image-Barcode-Scanner_62478427468.html?spm=a2700.galleryofferlist.normal_offer.d_title.2e971000ZaPAEz&s=p
Admit that you came back in bitcointalk forum, after being triggered by release of new ColdCard Q1... I found your conflict really amuzing, can't wait for NVK to join the party soon and talk more about QR code scanner and device dimensions.
Speaking about code, Coldcard doens't care at all about being open source, so it' doesn't matter f they use propriety code.
In their defense again, secure element you are using in Passport is also not open source and it has security issues, that is why it was outdated by manufacturer Wink
2814  Bitcoin / Hardware wallets / Re: Trezor CoinJoin Testing on: February 10, 2023, 10:54:02 AM
Model One does not even support Monero.  I doubt it will handle Coin Joins properly.  It seems like it can pretty much only handle the very basics before its hardware throttles.
You are right and I was thinking the same thing, but I was not expecting ancient Trezor One device to be one trick pony Wink
If I was in Trezor team I would make new device with similar price (code name Trezor2) that could do everything like Trezor model T but in same old Trezor One package.
This should be possible with upgraded processor and small design changes, but I would still keep Trezor One active for firmware updates.

Based on this "pull request", I think their upcoming model that "I mentioned in the past" might actually be the improved version of Model One.
I think this new Trezor model R is going to be their new generation wallet with their own secure element, and I am sure it's going to be much more expensive than current wallets they are offering.

Even though it makes sense from a development and financial point of view they focus in the news generation, some people (like me) spending over 200$ for a cold wallet is a bit out of the budget...
I could agree with you few years ago, but with raging inflation and increased prices of everything we saw in last few years, $200 today is not the same like $200 few years ago.
And if someone is holding several Bitcoins than I see no reason why this amount of money would be such a big problem, but then again I always remember this meme:





EDIT:
Dates and times for Trezor CoinJoin testing are:
- February 15, 15:00 UTC
- February 22, 17:00 UTC
2815  Bitcoin / Hardware wallets / Re: [LIST] Open Source Hardware Wallets on: February 10, 2023, 09:37:46 AM
oh sorry I was convinced you had a OneKey, thanks anyway for answering some of my questions. I'll take a closer look at your list, I've been getting paranoid about closed source hw lately and was hoping to get some advice on the buying an open source one
I wanted to buy one for my testing when it was dirt cheap, but I gave up on that idea and I didn't want to wait for delivery from China.
Open source doesn't automatically mean that something is more secure, it's easier for secure experts to inspect the code to find bugs, but that can also be done by malicious actors.
You might want to read up the latest post I wrote about OneKey wallet:
https://bitcointalk.org/index.php?topic=5439320.0
2816  Bitcoin / Hardware wallets / OneKey Hardware Wallet HACKED! on: February 10, 2023, 09:30:48 AM


Another day and another hardware wallet hacked, this time it was open source device OneKey, biggest manufacturer of hardware wallets in China.
OneKey was forked from original Trezor code and they added secure element ATECC608A, but they obviously didn't do a good job with that, as it was explained in this short video clip.

This vulnerability was discovered by company called Unciphered, known for helping people unlock their crypto wallets, and for this job they received $10,000 bug bounty reward from OneKey.
Seed phrase was easily extracted by doing man in the middle attack, and inserting chip between processor and secure element, after that it took only one second to extract all seed words.
It's important to say that this bug is now fixed with firmware update, but problem is that many hardware wallets available today share the same code (based on Trezor) so they could also be affected.


Video by Unciphered: https://www.youtube.com/watch?v=b8OrakRJmHE

Eric Michaud, the founder of Unciphered said that hardware wallets can often times give people a false sense of security, thinking that wallet can't be hacked.
He also said that there could be a problem with many other hardware wallets because manufacturers recycle the same code base for their products.
Article about this was first released on Fortune Crypto website:
https://archive.is/S1Nwo

OneKey released official reply on their blog page, and they said how these attacks cannot be exploited remotely, and attackers need to have physical access to device.
It's interesting to see them claiming how other ''world-renowned hardware vendors'' had similar problem but they didn't say anything about it, because they are not open source (Ledger comes to my mind first).
They plan to improve security for future devices by introducing EAL6+ higher level of security, but I would be careful with their devices in future.
https://archive.ph/1qg0h

Good thing about this bug was that nobody lost any coins, because evil hackers didn't found out first about it, but it's a good reminder to everyone, don't blindly trust any device just because it is open source and it has secure element.
Don't trust, verify.

2817  Bitcoin / Hardware wallets / Re: [LIST] Open Source Hardware Wallets on: February 09, 2023, 08:02:40 PM
I think it's time for me to change hardware wallet, this time I would like to take an Open source hardware wallet that doesn't cost much, I looked at your list and the onekey classic caught my attention, it looks like a good device but I would like to ask what do you think? Are the updates regular? does the battery have a long life? Or would you recommend a different wallet?
I don't own OneKey hardware wallet so I can't answer everything you want, but I know they are forked from Trezor wallet with added secure element ATECC608A.
They are making regular updates for their native OneKey app, but not all of their devices have battery, only OneKey Classic 100 mAh and OneKey Touch 800 mAh.
I am not going to recommend any hardware wallet, you have the list with more information, and you can make your own decision based on your needs and coins your use.
2818  Local / Hrvatski (Croatian) / Re: Novosti on: February 09, 2023, 07:28:07 PM
Jesi li imao priliku da isprobaš aplikaciju već? Pitam jel na stranici piše da trenutno ne primaju nove beta testere već moraš ostaviti svoj email pa će te naknadno kontaktirati.
Kakve su impresije i ima li već nekog značajnog volumena trgovanja?
Nisam još dovršio testiranje, ali uradio sam mali mađioničarski trik i preuzeo sam APK fajl sa njihove stranice.
Za sada ima opcija za samo nekoliko EU zemalja sa lokal opcijom, ali postoji i Bank Transfer, Paypal, Revolut i Wise za online wallet, i Amazon Gift cards.
Mislim da bi ovo moglo dobro funkcionirati i mnogo je lakše za korištenje nego LocalBitcoin i slične p2p web stranice.

 
https://peachbitcoin.com/beta.html

PS
Koristite na vlastitu odgovornost i rizik... I am not your financial advisor Cheesy
2819  Bitcoin / Wallet software / Re: Securing Your Seed Phrase with Washers on: February 09, 2023, 07:09:52 PM
We've seen with the recent earthquakes how important it can be to have a seed phrase backup that can withstand some damage.
One of the reasons I like to use one washer per 24-word seed backup and large washers is that the end result is relatively large and bulky, so you could find it again in such a scenario.
LoyceV tactics of putting paper backup inside walls wouldn't end very well in this earthquake scenario, but I don't think slightly larger washers would make much difference.
Only thing that would work in events like this is if you have multiple backups distributed in different locations, different cities, regions or even countries.
We could argue that living in house is much better option than living in tall buildings, and if you want to hide anything, digging a hole in your backyard or near your favorite tree/flower would be much better.

I'm actually in the process of doing it, and not just for my Bitcoin, but other things like certain credentials. However, my threat model isn't as extreme as some of the options here, since I live in a relatively stable area which doesn't have too many hazards.
Stable can quickly turn to unstable, and it doesn't have to be natural disasters.
I know some people who are having big problems with immigrants, police are not doing anything about them, they are armed, they are dealing drugs, and doing all kinds of shit.
They look more like armed forces ready to be deployed on command.

When I was referring to threats I was thinking about legal ones, like government banning bitcoin possessions, or legal ones (an asset seizure from government) or a search warrant of your belongings.
Not just natural disasters, rather self-inflicted ones!
They banned gold in past, so nothing would surprise me anymore.
2820  Economy / Exchanges / Re: Localbitcoins closing down on: February 09, 2023, 06:31:54 PM
Doing trades on there before kyc was really slick. They were a great dex when I used them (similar in style to bisq now iirc) but then regulations came...
It's sad to see one of the oldest Bitcoin p2p trading websites going down like this, but this was expected after they accepted mandatory kyc regulations on their platfrom.
In future we are going to have to pick sides and I don't see any reason to use websites like LocalBitcoin if they have kyc verification.
I am not worried about this news at all, there are several alternative options for p2p trading that work just fine now, and for all others there are always centralized exchanges.
This is obviously related to latest Operation Choke Point 2.0 that was started by US administration, to make life harder for all crypto to fiat connections.
Pages: « 1 ... 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 [141] 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 ... 650 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!