Bitcoin Forum
July 01, 2024, 11:40:48 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 [282] 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 ... 648 »
5621  Bitcoin / Project Development / Re: LastPass 1Password Security Crypto Challenge + Bounty on: February 02, 2022, 07:45:06 PM
I am open to ideas/suggestions on how I could 'prove' I cannot withdraw things myself?
I think it's to late for that now, and people just have to trust that you won't withdraw coins yourself.
One potential way would be to create some multisig setup so that nobody would have full control over keys/coins, or splitting seed words with shamir backup scheme.
Maybe there was a way to create simple script for unlocking coins with some terms but I don't know how to do this.

I could for example claim that I destroyed my copies, but is there a foolproof way of proving somehow a withdrawal doesn't come from me later?
No, as far as I know that is impossible to know.
You could always time limit this challenge and create new from scratch doing it in some better way like I suggested before, but think who would you add and trust as other parties in multisig.
5622  Other / Beginners & Help / Re: What do you think about Atomic wallet? on: February 02, 2022, 06:46:52 PM
Ok, so AtomicDEX. As usual, at least on their homepage, they don't say if they're open or closed source. What are they? is it safe?
I told you to go and do your own research, don't just go around asking random people is something is safe or not.
Don't expect everything to be chewed down like baby food, and use your brain for a change Roll Eyes
https://github.com/KomodoPlatform/atomicDEX-Desktop/blob/dev/LICENSE
5623  Other / Beginners & Help / Re: What do you think about Atomic wallet? on: February 02, 2022, 05:27:53 PM
Now, I've been reading (not a lot) about Atomic wallet, but, as usual, I can't find what I'm looking for.
I would not suggest anyone to use Atomic wallet because it's closed source and I don't like it's interface.

Hardware wallets are unaffordable to me now. Any multi asset software wallet you'd recommend?
Most wallets that support multiple coins are not open source, so you won't find much better alternative wallets.
One potential alternative that could work is a wallet plus dex exchange and it''s called AtomicDEX that can be used as wallet for storing coins and for trading coins using atomic swaps:
https://atomicdex.io/

I would not recommend any other software wallets, but I know people use closed source wallets like Exodus and Coinomi.
It depends if you are asking for mobile or desktop wallet, but Unstoppable.money could be interesting open source mobile wallet you should check out.
Do your own research before using any of them, and keep seed phrase backup safe.
5624  Local / Hrvatski (Croatian) / Re: Jesmo li pronašli Fxsurfera& Antikvarka? on: February 02, 2022, 05:00:53 PM
Ne mogu vjerovati da nisam prije primijetio, ali He-Who-Must-Not-Be-Named se opet vratio na forum.  Shocked
Nisam ni ja... ali to je opet ista stara priča, Bitcoin down - Antikvark is back, Bitcoin up - Antikvark is gone.
Ostaje samo počastiti se njegovim prisustvom na lokalnom forumu, sa novim ''mudrostima'' iz šešira, a možda to i nije loše protiv monotonije.
Uhvatio se sad sa onim frankyem a imam ih obojicu na ignore.
5625  Local / Hrvatski (Croatian) / Re: [Naš projekt] CryptoToday.com - Decentralizirani CoinMarketCap s Vote2Earn on: February 02, 2022, 04:40:11 PM
Da li znate da postoje agencije, ljudi koji nude usluge da se placa listanje na CMC i CG?
100% znam da se direktno ništa ne plaća listanje coina na Coingecko ili CoinMarketCap, ali šišanja ima dok ima ovaca koje plaćaju za to.
Indirektno se mogu i ja pojaviti i tražiti neki novac za listing, ali to nema veze za CG i CMC.

Oni nisu decentralizacija, oni nemaju veze s kriptom osim sto listaju za jako puno novca vase i nase projekte da bi dobili exposure. Stvorili su si takav monopol da ih nista drugo ne zanima osim novca 🤮
Ne mora sve biti decentralizirano i ne vidim kakvu prednost to daje osim plaćanja glupih visokih fee naknada na polu-centraliziranoj ethereum mreži, ili još gore na drugim centraliziranim klonovima kao bsc npr.
Kažeš da njih zanima samo novac a vi planirate prodaju nekog novog BCT tokena, a za što drugo ako ne zbog novca, sigurno nije iz ljubavi prema tehnologiji  Cheesy
To je samo moje skromno mišljenje i možda ima nekih pozitivnih strana, da ne budem kao drugi mračnjaci sa ovog foruma koji sve gledaju crno.
Sretno sa projektom.




5626  Bitcoin / Hardware wallets / Re: Trezor AOPP Integration on: February 01, 2022, 04:59:33 PM
...
Just look at their ridiculous definition of their own AOPP service...
Most exchanges, even centralized with strict kyc don't ask from users some special knowledge for withdrawing coins.
It's simple click of a button and entering your wallet address... I don't see anything complicated there that would need simplification.
Even signing a message is not a big deal with simple instructions, many forum members did it here and they are not experts with some super-secret hidden knowledge.

Quote
AOPP is designed to simplify the user experience of non-expert users who are dealing with difficulties withdrawing their funds from exchanges to their own wallets.
5627  Bitcoin / Hardware wallets / Re: making fake HW wallets(will we see this scam next)?? on: February 01, 2022, 04:10:25 PM
Do I understand correctly that there have already been cases with the substitution of fake ledger wallets? This is the first time I hear about it. Can you tell me where I can read about this incident? Were there people who lost their funds because of this?

Yeah it happened and I have been writing all about that last year in one of my topics.
Packaging and case looked like original, they even had plastic cover (not that hard to make even at home), fake packaging bag, so newbies could fall for this trap easy.
Only difference was with fake instructions, inside of device pcb was different and fake software that was pre-loaded on device.
Experienced users and previous ledger owners would probably notice suspicious scam device and report it like one of them did.

 

Fake Instructions is asking users connect the Ledger to their computer, than import recovery phrase from their old device, and that is sent to the attackers who imports it on their own devices and steal crypto.



Guy who received this fake ledger opened the device that was later compared with original device and you can see the clear difference inside both front and back as well as some sloppy soldering work.

They added a flash drive inside Ledger case and wired it to the USB connector with the purpose to be used for malware delivery to attackers.

 
5628  Bitcoin / Hardware wallets / Re: Trezor hacked (again) on: February 01, 2022, 04:00:00 PM
Goddamn, this sneaky dude got me as well! It appeared to me that this happened recently - which would mean the firmware would have been seriously outdated - but I reckon it would have been possible: get a ton of coins, forget it for almost 10 years, find it again and need to look for a hacker since you forgot the PIN.
He is smart guy and I will give him a credit, but correct way would be to mention the years when this happened, if not in video than in descriptions.
Most of the people are now thinking that Trezor is still affected by this old bug, they are not doing any research and social media is full with this youtube video  Cheesy

They're not just cutting the antenna, they're removing the chip's power source, so it just can't turn on again.
Yeah I saw that link and procedure is fairly simple for anyone who did some soldering in his life.
No chip = No wi-fi/bt, and this could even make raspberry a bit faster also (version 2.0 is faster than v1.3 even with wifi/bt).

I love DIY and FOSS myself, and do believe it can be more secure in many cases, just due to more eyes looking at the code. It's also great that you can remove a feature and recompile without that, for instance. However this is not limited to DIY wallets, but it's also the case for any other open-source wallet.
Except for coldacrd wallet, because if you fork their code and try to compile it yourself and change some things, you will get a lawsuit from NVK for license violation...
That means their website is lying and misleading people intentionally.
Ask NVK about this and you will get banned, but all his channels... pathetic.  Roll Eyes

Of course, also pressure on the manufacturers helps. For example, Shift Crypto offers a 'Bitcoin only' firmware that I believe can also be flashed to the 'Multi' edition (irreversibly).
You know that Keystone wallet also has this feature?
It's possible to install Bitcoin only firmware and after that it's impossible to switch back to multi-coin edition, so it's permanent and good for security.

I would not immediately update in this case, since the new firmware update may contain fresh critical bugs or vulnerabilities. This problem creates a danger only with physical access to the device. Online, Trezor is still safe, isn't it. Can wait a while, and then update the device.
Hello and wtf?!
I would... It's been more than 3 years since this bug in Trezor and it would be BIG mistake if you don't update now if you have old firmware like that.
5629  Bitcoin / Hardware wallets / Re: Trezor AOPP Integration on: February 01, 2022, 03:46:13 PM
I'm not going to use a wallet which makes it easier for governments to control and monitor their citizens.
Me neither.
I was surprised to see Blue wallet on that list, and I like how it worked as a mobile wallet, but I won't recommend it anymore.
Nobody asked customers and regular users if they want to have this anti-privacy feature or not, they just want to kiss ass of governments, now they should suffer.

I'm certain they will. But again, hardware wallets shouldn't be actively helping them to do so.
It's not just related with hardware wallets, and this can easily expand to all mobile wallet if there wasn't such a big negative reaction from people.
I am sure that soon all binance supported wallet will rush to apply for aopp as soon as possible, like Safepal hardware wallet or Trust Wallet.
Maybe they are not focused on desktop wallets so much, so I hope Electrum wallet won't do that ever :/
We should seriously consider traveling without any (visible) bitcoin wallets cross border, just to be extra safe.
5630  Bitcoin / Development & Technical Discussion / Re: Is passphrase supported in BIP39 standard? on: February 01, 2022, 03:07:27 PM
If passphrase in BIP39 standard, Why there are only few wallets support passphrase?(Trezor, Ladger, Safepal)
Most hardware wallets support BIP39 standard and they all have optional passphrase, not just three brands you mentioned.
I am pretty sure that Keystone, Coldcard, Passport, BitBox, KeepKey, CoolWallet, Ellipal and others have support for both BIP39 and passphrases.
Not sure if all desktop or mobile wallets support passphrase with BIP39, but I know Coinomi wallet does:
https://coinomi.freshdesk.com/support/solutions/articles/29000009680-how-to-add-a-bip39-passphrase-to-my-existing-recovery-phrase-
5631  Economy / Exchanges / Re: Secure Asset Fund for Users (SAFU) on: February 01, 2022, 02:43:29 PM
SAFU means fake safety, and that wallet can be hacked at any time with some insider leak attack.
Binance collected over 7,950 Bitcoins with only 10% from trading fees, so you can see how much they really earn with rest 90% and it's not including withdrawal and all other fees.

Do you think that creating such funds would be good for users and sufficient as a hedge if there were hacks?
I don't really trust Binance or CZ, and they have much more funds to cover all potential loses if they want to do it.
I am not sure what happened when they got hacked before and how they payed their customers.

Do you think it has enough assets to cover all the technical problems that will occur? And what if all crypto exchange do this?
This is obviously not enough to cover anything, it's just created as marketing propaganda for fake safety.
5632  Other / Meta / Re: Ninjastic.space - BitcoinTalk Post/Address archive + API on: February 01, 2022, 01:46:50 PM
Looks like my certificate got caught in the middle of the last Let's Encrypt bug.
First it was BPIP website, now ninjastic.space affected by that let's encrypt bug, but in my case everything worked just fine.
Not sure why some users are affected and some not, but it could be because if specific browser settings that are not the same for everyone.

5633  Other / Meta / Re: [Userscript] Unofficial Bitcointalk Reporter Badges on: January 31, 2022, 08:05:27 PM
Very nice!
Let me propose that this Reporter Badge script could be added to BPIP Extension, so they could be used even without userscript managers.
I don't know how complicated is to add this to extension, and correct me if I am wrong but I think that other scripts and themes are already added.
This should be optional in settings, so maybe suchmoon and ibminer could comment if that is even possible and if they have free time for this update.

5634  Local / Hrvatski (Croatian) / Re: Trebam pomoć on: January 31, 2022, 04:28:41 PM
Kupio sam Bitcoin u mjenjačnici bez problema. Danas sam htio platiti VPN i dobio odgovor
Nisi rekao ni koji VPN, ni koji novčanik, ni koji način plaćanja si koristio, možda oni koriste neki third party payment.

Mislim da se taj error javlja samo kod Androida i ima neke veze sa javom, pa probaj onda koristiti neki drugi novčanik, najbolje Electrum koji ima i za desktop i za android.

PS
Trust Wallet je sranje. Tongue
5635  Bitcoin / Hardware wallets / Re: Another Ledger scam attempt!!! on: January 31, 2022, 04:11:43 PM
While I was browsing the Ledger's subreddit, I stumbled upon another lame phishing attempt
I am getting emails like this in my old spam email address all the time, and I am not even paying any attention to them, but the sad thing is that some people are falling for this crap all the time.
Just imagine how many emails, sms, and calls like this previous ledger customers received after that huge ledger leaked that happened.
Related with this topic I just remembered to post screenshot of brand new leaker website  Cheesy


(credits to unknown author)

Do you have the link to submit my seed phrases to? I have a few billion seed phrases, certainly wouldn't want any of them to be terminated, so I'll submit them as fast as I can.
Send me PM and I will give you big 90% discount and free lifetime tech support!
I just need to dive into spam folder to find what you are looking for Wink
5636  Bitcoin / Hardware wallets / Re: Square is considering making a hardware wallet for Bitcoin on: January 31, 2022, 04:01:52 PM
Yeah, that's about right. All the close-range mumbo jumbo is not implemented as a security measure; you can circumvent it with a tunneling attack, stronger antennas and similar. On hardware level, it is not protected against that.
To paint a better picture, everyone should imagine that NFC is just a small antenna.
It's my opinion that having antenna in hardware wallet is not secure, but that is just my opinion, what do I know Smiley

I have limited knowledge about its security but in regards to the simplicity of its approach, it means little to nothing if it's going to work occasionally.

In theory some kind of universal NFC reader could be used for all devices including desktop computers, but question is if this will be compatible with one used in Square wallet.
I was reading that Apple had worse support for NFC from all other smartphones, but maybe something changed in last few models.

I found some interesting articles about alleged ''secure'' NFC techology that everyone is trying to push down out throat recently.
One of them say that malware can be planted using NFC beaming, but bug was android related:
https://www.zdnet.com/article/android-bug-lets-hackers-plant-malware-via-nfc-beaming/

This one is from last year, NFC Flaws Let Researchers Hack ATMs by Waving a Phone!
https://www.wired.com/story/atm-hack-nfc-bugs-point-of-sale/

After reading all this I am really having trouble to believe how they say that adding NFC in hardware wallets in more secure than other methods.
If ATM can get hacked with NFC than I rest my case, or maybe we should buy this new hardware wallets and use them for hacking  Cheesy
5637  Bitcoin / Hardware wallets / Re: making fake HW wallets(will we see this scam next)?? on: January 31, 2022, 03:45:49 PM
Design and build a fake hardware wallet
This already happened before with fake ledger wallet that was looking exactly the same from outside, but from inside it was different and it was pre-loaded with fake ledger software already.
Nobody knows exactly how many people received this devices but we know that scammers used ledger amateurs leaked database with home addresses information.
With recent stupid changes ledger is making it's not even possible to verify if your device is genuine because they are gluing pcb with battery  Roll Eyes

It's much quicker and easier to setup a scam coin or fake electrum site and drive people to it or a bad link to metamask or something else.
Those are cheap phishing scam and fake tech support that gets recycled all the time.
There are different level of scammers, lowlife and upper class, but biggest scam would be to just infiltrate one STM32 chip manufacturer that is used in most hardware wallets.
5638  Bitcoin / Project Development / Re: LastPass 1Password Security Crypto Challenge + Bounty on: January 31, 2022, 03:20:50 PM
Several people have recommended KeePassXC - Thanks - I have started using it and it is amazing. In addition to just storing passwords, it also does TOTP (Authenticator) and automatically pushes keys to an SSH-Agent.
KeePassXC is truly amazing, you can use it on all possible operating systems, it can work fully portable or as appimage for linux, and there are nice browser extension to improve it.
Browser extension is made by KeePassXC Team and it works great in both Firefox and chromium browsers and all their forks.
Note that it's better to keep TOTP Authenticator secrets in separate database from password.

So, in that same spirit I created a new bounty for KeePassXC.
Unless user mistake is made with somebody finding their backup keys, I doubt this will ever be broken and hacked, unless some major quantum change happens in future.

I think this challenge will get very interesting as the price increases for all of these crypto's over the next couple of months  Roll Eyes Cool
Maybe you should post this challenge in social media like twitter to have more attention, if you didn't already do that.
I would tag all three accounts for KeePass, lastpass and 1password, and maybe few bitcoiners and hackers like Kingpin aka Joe Grand.
5639  Other / Meta / Re: Where to discuss a Quest with hidden prizes in altcoins and Bitcoin? on: January 31, 2022, 02:51:34 PM
I don't think that's the right place: it's not about ads and prizes are a couple hundred dollar each.
They can always post it to off-topic but it probably won't get much attention there, and since this is minds games I would go ahead and post it in games in rounds, even mprep said is OKish to do that.
My suggestion would be to avoid talking anything about payment and rewards (or post any payment in Bitcoin) and just post link to telegram channel for extra rewards in altcoins.
That way you are playing with or around the rules and I think that many people visit games and rounds daily, so you would get much more people than in altcoins.
5640  Other / Meta / Re: Bitcointalk.org rules: 13, 21 or 32 on: January 31, 2022, 02:30:49 PM
This is just my interpretation, but maybe moderators think that posting just copy-paste titles with links as low quality post
and most of the merged posts you made looked exactly like that, one or more lines of the and original link.
I would not report this myself if I was a moderator, since this is posted in altcoin section that is usually much lower quality and I don't think this is done for increasing number of posts.

They probably would if someone reported those posts. Except nobody cares about altcoin threads.
Are you sure about that? Smiley
Take a look how many posts got reported by Ratimov, and I am sure lot of them are in local altcoin section.
Let's here what moderators have to say, and maybe we find the secret who reported them.
 

Pages: « 1 ... 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 [282] 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 ... 648 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!