You're probably right... If Ledger would've exerted the same amount of effort into improving all of those unreliable hardware wallets that they've been selling in the past year or so, they could've restored a portion of their damaged reputation but instead of doing that, they're trying to pull-down their competitors in an unethical way
I like what ledger Donjon team is doing, something similar is done by Kraken team in more neutral way, but so much energy is spent from ledger on saying how all other wallets are unsecure, except their product. They have better marketing and they sold millions of devices, but I think that quantity doesn't always mean quality. It's possible that the guy didn't know who to turn to for help. And that 3 months ago, he came across Kingpin and that other group in Switzerland that was mentioned in the video.
It's possible but he never mentioned exact days in his video and waste majority of viewers are thinking that trezor devices still have this flaw. I am seeing people posting on reddit and twitter every day asking the same question, that could mean that something was intentially done in this way. Even I was not sure about dates when all this happened exactly, and at first I was thinking this is some fresh trezor bug... Take a look at the comments under the video on Youtube. Kingpin pinned Trezor's reply in which they wrote that the vulnerability that was found was fixed in 2017. I don't think he would do that if he wanted to throw dirt on Trezor.
You don't have to tell me to look at the comments because I posted that image from trezor reply in my first post in this topic. Why do oyu think Trezor had to do that? Because they received huge amount of questions...that is why. |
|
|
|
And for OPSEC it's much better to buy normal washers than have someone hammer them with wallet seed words.
I think that he said that he will do what n0nce did, that means he will put seed words on washers himself, and that is not so hard to do if you have the right tools. I am lazy but would think you would be fairly secure making 2 wallets and using 48 of the 60 washers.
Would be very hard to crack. It could be affordable for a buyer and makable for a fabricating guy. I wonder what the math would be on 48 of 60 good words for 2 wallets. Once set up I would think it is about 1 hours labor to make the 60 washers.
I don't see the problem of using the full list of words, and it's not very good idea to be lazy about this. Excuse me for asking, maybe I a don't understanding this correctly, but are you planning to make this washers with seed words on them and then sell them to other people? It's always better to teach a man how to fish, than to give him the wish... even if he is lazy  |
|
|
|
One is Tatum.io wallet builder, the other is some app on Google Play for testnet
I never heard about Tatum wallet but from what I see this is not free service or it can be free but with some limitations, and one of them is that you can't adjust fees. You would need to purchase Enterprise package to get this option enabled (that is more than 49$ per month you need to pay for Basic package). You can use Electrum wallet with testnet with manual fees, other wallets with this option are Coinomi and Trezor hardware wallet. If you want to check fees for Bitcoin testnet before sending transaction check out mempool.space website: https://mempool.space/testnet |
|
|
|
CZ shared a phishing scam on Twitter on how scammers send users an SMS that contains an unknown website with a similar name as Binance that steal your details.
Real question here is how the scammers even got the phone numbers from all those people who received messages? Maybe it was one of many leaks that exposed private information of customers, Binance had one or more leaks, as well as Ledger and maybe other exchanges. Only solution for this problem is to don't reply and clicking anything you receive from unknown people in SMS or emails, and block senders, but ultimate solution would be changing phone number. If anyone want's to use their phone number or email then use alternative number of temporary email for registrations. |
|
|
|
If/when this goes live and hopefully makes a profit, will send a small token as thanks.
If you ever release this exchange than post more information in this forum topic and I will contact you with my Bitcoin address for reward. I don't really like sending my email addresses up front to random people, but I can use some temp mail later if needed. Thanks for mentioning. Cheers. |
|
|
|
What happened:: Kostek is providing fake vote which I think illegal. It will increase spam/scam as the votes will not be genuine.
It is certainly unethical service but I would not call it illegal, as nothing is stopping people for having multiple accounts, yes even hundreds of them with different IP addresses. There is no way you can prevent this in the same way like you can't really moderate and prevent spam in bitcointalk forum. This services will grow if candies and offers from CoinGecko and CoinMakretCap have bigger value. I wouldn't tag anyone for doing this, but hey that is just me. |
|
|
|
|
Update:
My dev friend is currently not available so I can't do much myself with btc mempool extension.
Please write here if you want to help and if have any cool idea for updating and improving this extension.
|
|
|
|
Pmalek how it's possible that you still didn't manage to get in contact with here? Best way to contact her and ask her about accepting Bitcoin donations directly would be to find her mobile phone number or email address... I don't think that is so hard to find. I saw that few days ago Lana Pudar was a guess on Dubrovačka televizija TimeOut, so she is obviously traveling all around the region speaking the same language we can all understand, so nationality is not so important. Some people may remember Eduardo da Silva, Brazilian from Rio de Janeiro who played for Croatia national team, so why would Lana case be any different. |
|
|
|
CZ and binance paying customers $10 burger money for their identity verification documents... what could possibly go wrong  I mean really, if you start to receive emails and personal calls from scammers don't wonder why that is happening. This is total waste of time and big security risk. |
|
|
|
I was thinking there is something suspicious with the way how this video was released and especially the timing (after years of waiting), so let me elaborate more on this. Maybe this is just a coincidence, but Joe Grand (Kingpin) released his video on January 24 (over 2,2M views so far), and he even has dedicated website offspec.io registered in 2021. On almost exact same day Ledger and their Donjon team started to release similar hacking videos on their channel that are also focused on this event of hacking Trezor device. Side-channel attacks | Enter the Donjon video was released on January 21 just few days before Joe Grand video. Coincidence or maybe Joe Grand is paid and working for ledger team, I don't know... but it sure looks like negative campaign against Trezor for something that was fixed years ago. On January 31 Donjon released new short video for hacking old Coldcard wallet with Laser fault attacks. PS
This is just my speculation and I am not accusing anyone for anything here. |
|
|
|
All in all, it's probably better than Chrome, but it's far inferior to Firefox in terms of security and privacy. They do a lot of shady stuff behind the scenes, accepting money to sell out on both the privacy and the security of their users, while outright lying in their advertising and marketing.
Isn't Mozilla doing something similar with Firefox like Brave, behind the scenes? They even returned google as their default search option If you want more privacy open source browser than try using Librewolf that is fork of Firefox, and for real privacy just use Tor browser. By the way; I just wanted to see if there were any news about Passport v2 and found out that apparently @zherbert and his team have a very strong stance against AOPP, basically saying what we concluded in this topic earlier: it's technically just a shortcut to signing messages (which Passport can do), but they don't want to implement it because of the 'symbolic' of not agreeing to make deanonymizing users easy.
Getting back to AOPP, what do you guys think will be next hardware wallet to make AOPP integration? Maybe Ledger is next? I know Keystone wallet is strongly against it and they even had 10% discount code for seven days using Coupon code NoAOPP  https://nitter.kavin.rocks/KeystoneWallet/status/1486817891202654211 |
|
|
|
But do you know if anyone actually did a deep dive in to these things to see if there was any hidden stuff? What I found when I did big research of hardware wallets is that Buterino didn't use any malicious stuff in their wallets, it was similar components like in original trezor. I don't have any of this mini-trezor devices myself so I can't confirm and be totally sure about this, and who knows what could happen after they stopped creating this devices. I would not suggest using this devices as firmware is outdated, but I would be interested to hear if someone from bitcointalk forum owns them as collectible. This is of course why I preach to all my friends/clients to buy from the manufacturer directly. ( I would def love to have one of these fake trezor's as a collectible!)
Maybe it's best if they don't buy them at all now. Honestly, I would suggest anyone not to buy any Trezor wallets until they add open source secure element and fix issues they have (they are working on this). I would never suggest ledger because they are closed source and they have countless issues with their devices, especially nono x. Buying good used laptop and using it only offline for crypto wallets or with Tails OS is a good alternative, and you won't leak your data to crypto scammers. |
|
|
|
Počela je nova treća sezona serije Snowpiercer, i nisu loše prva i druga epizoda, ali prvo pogledajte prve dve sezone ako niste do sada. Gledao sam neki dan i Ghostbusters Afterlife ali ništa posebno, nije ni blizu dva stara originalna Ghostbusters filma. |
|
|
|
In next version there will be a redesigned interface to improve usability.
Try to make it modular if possible, so that we could manually change and adjust size and position, especially for widget bar. Maybe adding option - always on top yes/no switch would be a good idea. Good to know Linux is running. Next release in AppImage for you if possible.
AppImage is great and this way crypTrax app will work in all Linux distributions, except maybe in Raspberry Pi OS, but for that you can just make arm version of appimage. Maybe CoinGecko will hire you and make this their official dekstop application after this |
|
|
|
Suppose I multisig 3 users together and then it takes say 2 of the 3 of us to withdraw the funds...then one day someone like Elon Musk drops $1,000,000 bitcoin.
Nobody said that you should create multisig setup like that. Something like 2 of 2 (or even 3 of 3) would work very good and you would need all parties to sign transaction in this case. Now off course there is a risk in case other party (or parties) refuse to do that or if they lose access to their wallet and backup, than coins are lost forever. But you are right, some mutual trust is needed for this to work... it's still better than in fiat system that you need to trust 100%  Technically once someone tries to convert the coin to fiat, that last transaction will have a real person associated to it, and the company, coinbase or whatever will know who that was, but it could have passed through hundreds of transactions before that.
That would be very easy to avoid with simple usage of p2p trading, mixers, decentralized exchanges, centralized exchanges without strict kyc. It seems that while bitcoin provides transparency, and while I can 'prove' that I own a particular address, there is no way to 'prove' who made the withdrawal.
You could prove that you made withdrawal if you add some personal information or id number known only to you in bitcoin transaction, that you can prove later. It would be a terrible idea for privacy to know ID's of everyone addresses and who exactly made withdrawals. This does not always have to be the case. You can look into the Two-Factor Key Generation (2FKG) process used by Ballet company to create their physical Ballet Crypto cards. A private key is generated in two physically separate locations without either having access to the complete key before it is permanently written on the physical card and protected from tampering. I don't know if something similar can be applied online. But you would need to trust Ballet claims to do what they say, you would also have to trust all manufacturing process, and they are third party in this case. There are similar paper note wallets that work in similar way, but I don't have control over anything in both examples. In case of multisig at least I have partial control. |
|
|
|
I could see this happening. Take a look at these fake Trezors
This mini-trezors are not available anymore and they used different hardware components, but I don't think they were a scam and they used exact same software/firmware like original Trezor. It was just a smaller Russian version on Trezor wallet and it would be cool to have it as a collectible, nothing more. There are even DIY wallets with full instructions how to make your own device and 3d print the case, so it's not that hard. Someone recently reported that many people are selling old and broken Ledger hardware wallets for cheap on ebay and other websites. Maybe people buy them for spare parts but we know that ledger sold millions of this devices and they are all around the world. It would not be so hard for scammers to purchase those device, refurbish them, make modifications and load their malware software. Maybe they come in box packages, but they can always make new boxes and do better job in adding foil over them. |
|
|
|
They should implement this shit on the web3nftdefimetamask stuff if they haven't done so yet. It will be welcomed with open arms and no pesky privacy concerns.
It's dEcEntTraLisEd technology wallet so they must add support asap Just wait for WorldEconomicForum to approve that, they have Aya Miyaguchi as one of Executive Director of eth foundation, just on the left side of mr. V. Buterin.  ethereum.foundation/about/board/ In conclusion, it seems to me that many in here (I'm guilty of this as well! ) have been using wallets with AOPP withing the last year without noticing it. Yeah but we can't actually follow all the updates coming out all the time for various crypto wallets, and people don't pay much attention and they just click update button, especially tiktok short attention span generation. I was following reactions for BitBox hardware wallet and people are not happy at all about this, but developers don't have any intention to remove full support for AOPP. |
|
|
|
yeah stainless steel can rust
Only if you scrub the surface or cut it with other metal, or if you use some chemicals for cleaning. There are different types and grades of SS with different percentage of iron, chromium, nickel and carbon... in simple terms more nickel means better anti-corrosion. I think that Jameson Lopp used all kinds of testing when he tested metal seed backups, including acid with other torture methods and stainless steel survived all of them. One material that would outlive stainless steel would probably be titanium but that is expensive and I never heard of titanium washers so far I am going to do my own thread as this one inspired me.
Great to hear and I just love reading about DIY projects, especially here in forum. What exact type of steel washers you purchased? |
|
|
|
aren't you a bit too quick to judge?
No I am not, and I not judging you at all, I am just stating the facts. If you can't even read and properly open the github link I sent you, than maybe bitcoin, crypto wallets and computers are just not for you yet :/ Archived page and screenshot is posted bellow as a proof that github link I sent was working correctly, and I tried it in different browsers so the issue on your end. If you still can't understand than let me translate that AtomicDex wallet is Open Source with GNU General Public License. Is it safe to use? - I don't know.  http://web.archive.org/web/20220202195059/https://github.com/KomodoPlatform/atomicDEX-Desktop/blob/dev/LICENSEEnd of discussion for me on this topic. Have a nice day. |
|
|
|
|
Show Posts
