I've not seen that site before, but it seems like it tests every browser "out of the box", meaning Brave with in built tracking protection comes out on top. What it doesn't mention is that Brave accepts money from third parties to allow them to bypass the tracking protection, whereas installing uBlock Origin on Firefox achieves the same thing but without giving companies such as Binance a back door in to your browser and in to your data.
I prefer Librewolf browser now, it's the middle ground between regular Firefox (that is getting more and more like Chrome) and Tor browser. It already has uBlock origin there and you can enjoy much better browser that follows all Firefox updates, without any telemetry and junk that comes with normal Firefox. I know about Brave, but you can disable their adblocker and I think it's still better option than regular Chrome browser, but I still don't recommend it. One group tried to fork Brave removing all that crap, and they sent bunch of lawyers to them scaring them to death, but it's their business model I guess  |
|
|
|
Unfortunately my prediction was right.
Oh please don't get me started with that topic, and if Mozilla really cared about that they should not allow donations in fiat currencies coming from military industrial complex. They made a mess with starting to support all kinds of shitcoins like doge, instead of just accepting Bitcoin and Lightning Network, if they care so much, and they don't but they just cracked under pressure because they are weak. You're sure about that? You are going to take the word of company which deliberately infected its own customers with malware? Pretty sure that wasn't in their terms of service.
I think that healthy dose of skepticism about trusting any company or government system is good, especially if we blindly tell us to trust something without doing our own investigation. Is it possible to live in today modern world with total privacy and security? No, but that doesn't mean I should sign up and send my information everywhere without any thinking. If there is a option for doing the same thing without any kyc, I would always go for that option, even if it means some inconvenience for me. It's the same as using a non-KYC centralized exchange. You are only non-KYCed as long as they allow you to be, and that could end at any time without warning and result in the seizure or loss of your funds if you don't comply. If you want to avoid KYC, you choose a DEX. If you want to avoid KYC, you don't choose BitPay.
More people that use DEX exchanges it would be harder for centralized exchanges to ''piss'' on everyone and do whatever they like until regulators twist their arm. |
|
|
|
The exchanges are obviously working with blockchain analysis companies such as Chainanalysis but the data flow direction is from the analyzer to exchanges not the other way around. Basically exchanges are using these blockchain analysis companies to do things such as blocking their users who deposit the so called "tainted" coins in their platform. @dkbit98 should clarify if it is otherwise.
It's two way street really. How do you expect Chainanalysis and other similar blockchain analysis companies are getting all their information from, it's surely not from thing air or from regular customers. They have software and algorithms that are reporting back addresses from all exchanges, including information they are getting from government agencies, and since that software is closed source, we can't know exactly what they are doing. The exchanges also won't hand out information to any of these companies without a court order. Some shady exchanges desperate for money could be illegally selling users data though but that is a different topic.
Not exactly true. I remember Binance giving customer information to government of Netherland without any court order, and they even froze accounts for some of their customers who are not Dutch citizens and they don't have any connection with that country. For me Binance is shady exchange, but most people consider it one of the best exchanges in the world, even if they already had big leak of all customer data information. I don't believe a single big company (or government parasites) to keep our information safe and secure. This is just my own opinion and I could be wrong of course. |
|
|
|
As a small experiment, I would suggest everyone takes out their phone right now and go to the "permissions" section of their settings. It's usually under Settings -> Apps or Settings -> Privacy. Just look at how many apps have access to your keyboard, your storage, your screen, your camera, your location, etc. Maybe you've downloaded and verified a reputable open source wallet like Electrum. Good start. Are all your other apps open source and verified as well? Didn't think so.
Even very own mobile operating system is a junk collecting personal information, behavior, movement and just about anything you can think of, so I would consider using degoogled phone or at least remove anything related with google. Reset you phone and instead of Google Store use something like F-Droid or Aurora Store, uninstall apps that are not open source, install some good adblocker and Tor browser. If you can't cope with this than use separate phone and use it only for Bitcoin crypto wallet like Electrum or Blue wallet, not connecting it to anything else. It's the same as when people start installing a bunch of extensions to their browser. Every additional app/extension/piece of software is a new risk.
That doesn't mean that you should not use some very good extensions like uBlock origin, but it's better to keep it on minimum. You can do the same thing like with mobile phones, use separate browsers for crypto or bitcointalk forum and don't use it for anything else. Here is one nice and useful comparison testing of web browser privacy, Tor, Brave and Librewolf stands out from all the rest: https://privacytests.org/ |
|
|
|
All standard bios contain proprietary blobs. If you are not using Coreboot, chances are your CPU has Intel ME enabled, which has it's own proprietary OS in it with pretty much full access to your computer at pre-boot times. Anyone that is serious about Bitcoin should be using Coreboot or Libreboot. Most people don't use Bitcoin tho, if you aren't running your own full node you aren't using Bitcoin as far as I can tell. So it all begins with a good defense at the bios level, then you build a decent Linux setup, then install Bitcoin full node client you can trust. Most people aren't even aware of Intel ME and PSP for AMD exist so without addressing that most Bitcoin nodes are potentially compromised by default.
Sure, but you can always lock your bios with a strong password and you can disable in settings anything that you don't want to have. Don't get me wrong, I updated my bios many times and I never used corebot or libreboot so far, but maybe I will give it a try to see how it works on older computer. In addition to this you can always enable encryption during installation of any Linux OS, that makes is much more secure than any windows os will ever be, and you can always go next level with Tails, Whonix or Cubes os, but that is not recommend for majority of people. I don't see how Bitcoin nodes or any bitcoin related software can be affected with having bios password, plus encryption on OS level, plus strong password for your account. |
|
|
|
HI there, my journey to find and buy a hardware wallet which works for me.At the moment I am located in the EU (Malta) which brings me to the issue of shipping cost and customs.Whilst I was able to find a reasonable price to shipping the customs remain. At this point I am thinking about buying a ColdCard,Power-Only USB Cable, Power-Only USB Cable. The price comes to a little bellow 250 $ without customs which vary , so I am not even sure about the end price. However , I was thinking through the whole process and I still am not sure if I really need to spend that much on a hyped-up calculator. The setup I have in mind is using software like Sparrow , Electrum or Specter for the air gap transaction signing.The idea is to keep the funds private key as cold as possible but also usable on monthly bases if needed. Now I would love to hear suggestions and recommendations from a smart community like one here.
Hardware wallet is NOT mandatory device to have and it's not perfect by any means, but it has a good balance between security and simple easy usability. That doesn't mean that every hardware wallet is made equal, and they all have their positive and negative sides compared to airgapped computer with opensource wallets. If customs is what you are concerned, than I am sure you can find some official local resellers that sell them in Malta, and I would always choose open source device. One option you have is to make your own signing device with Raspberry Pi Zero, and use it only for Bitcoin. I made a list of most open source hardware wallets and signing devices, so you can check some of them below: Open Source Hardware wallets: DIY Open Source Hardware wallets (and signing devices) (for advanced users): You want to keep your privacy and avoid leaks when you purchase hardware wallets online, so you better check out my guide How to buy a Hardware Wallet the right way: - Buy hardware wallet only from official website or reseller store.
- Use Tor or VPN when registering to website and install ad blocking extension like uBlock.
- Use alternative or disposable e-mail address and new random password for registration.
- Use alternative prepaid phone number and not your real phone number for registration.
- Use crypto for payment, not connected with your real ID, or pay with cash in your local authorized reseller.
- Use alternative or fake name for registration.
- Use PO boxes or alternative address for delivery.
- Do your own research
|
|
|
|
Nakon više prijava građana oštećenih investicijskim prijevarama, policija je opet objavila novo upozorenje o prevarantima koji postavljaju oglase na internetu za investiranje i obećavaju brzu višestruku zaradu. Kriminalci se spajaju na računala ljudi pomoću aplikacija kao AnyDesk, i prebacuju novac s njihovih računa na račune mjenjačnica kriptovaluta, zatim konvertiraju novac u kriptovalute, najčešće bitcoin. Moraš biti glup ili pohlepan da bi nazvao slučajni oglas na internetu koji obećava brzu zaradu, i onda još nepoznatoj osobi dopustiti pristup svom računalu...   Savjetujemo građanima:
- uvijek tražite nepristrani financijski savjet prije nego što date novac ili uložite sredstva,
- odbijte nenajavljene pozive o mogućnostima ulaganja,
- budite sumnjičavi prema ponudama koje obećavaju sigurnu investiciju, zajamčene povrate i veliku dobit,
- čuvajte se budućih prijevara - ako ste jednom uložili u prijevaru, prevaranti će vas vjerojatno ponovno ciljati ili prodati vaše podatke drugim prevarantima i
- obratite se policiji ukoliko smatrate da ste oštećeni kaznenim djelom. https://policija.gov.hr/vijesti/upozorenje-gradjanima-investicijske-prijevare/5937 |
|
|
|
About the highlighted part: I actually think by now, that camera / QR code communication is one of the most secure ways, probably even better than moving an SD card around.
I agree with you that camera + qr codes are safer option than using sd cards (that can be removed and replaced), but only if those codes can be verified easy. If qr codes are done like in case of Safepal hardware wallet than you can't verify anything and you don't know exactly what you are transacting. Keystone wallet is doing this the right way with open source, and I think it's similar with Passport wallet, maybe you can confirm that n0nce. What I mean is: it should be pretty obvious that you lose tons of time on a smartphone daily; even though a few things are quicker / save time, most people spend a lot of time on them which could be better used.
There are much better ways to spend than messing with phones all the time, but I am not saying they are not useful and can be used even for bitcointak forum. We made smartphones something like out third arm extension, and I saw people getting super scared when thinking they lost their smartphone, like their all life is located in that device.
Back on ColdCard topic, looks like they are preparing some new product called Coinkite cards (TapSigner, SatsCard), they should be cheap and multisig. Maybe this will be competition for Satochip/Satodime or Tangem NFC cards, and they will probably launch this together with new ColdCard Mk4 wallet. I just love new stuff coming out in HW world   https://coinkite.cards/ |
|
|
|
when given the chance to try this I decided to go for it.
i am interested in safety of it along with ease of use.
Do you have to write a review or make a video review about SecuX wallet or you are receiving this device strictly unconditionally? Security score on that spreadsheet I sent you is one of the lowest, and I think that screen for W20 is not really trusted (not sure about V20), so I would not recommend it if you want safety. Would I pay $139 for this wallet?- No. Would I test this wallet for free and only with pocket money?- Yes. Would I use this wallet on regular basis for more than a pocket money?- No. MineYour.₿iz did a review about same model few months ago: https://www.youtube.com/watch?v=qwd7Wt44bAA |
|
|
|
Hive and Steemit maybe. I don't know how relevant those platforms are, but I know that both have crypto communities. And you can post your own videos there. If I remember correctly, one of them (maybe both) supports uploaded videos from some decentralized video platform besides YouTube. We are talking about alternative video platform so I don't know how much those platforms you mentioned are relevant in this case, and I never watched a single video on Steemit. Usable alternatives would be decentralized Odysee (LBRY), Twitch, and one more interesting dedicated to Bitcoin that is using PeerTube and it's called BitcoinTV. I already saw many known channels there as a backup for youtube, for example Bitcoin Magazine, The Bitcoin Standard Podcast, Techlore, This would certainly give us more exposure to people who are specifically following Bitcoin videos.. A repository of educational video content for the Bitcoin community, without distractions like advertising, altcoins, or third-party trackers. https://bitcointv.com/ |
|
|
|
Would it be a good idea to have cybersecurity subforum? It is a topic that goes hand in hand with bitcoin. I don't remember last time when moderators added some new child boards in forum, and I have been saying for some time that we should have some changes. Adding cybersecurity board could be added but only if related with Bitcoin, otherwise it would probably go to off-topic section. Lightning Network board could also be interesting, with some different opinions, but Theymos might not be in the mood for adding anything new things in forum, but I could be wrong about that I don't use Heads, and messing around with bios is not advisable for most people. Even regular update of bios is not recommend to everyone, and should be done only if you need to fix some issue with your computer or enable new functionality. |
|
|
|
I have noticed people do not recommend wallets on phone, but in reality, some people do not have money to buy hardware wallet and do not have computer but having it in mind to buy it later when they have money.
So they have money to purchase smartphones and change them every few years or less, but they don't have money to purchase hardware wallet. I find that hard to believe, but nobody is forcing you to buy it, you can also use old airgapped computer if you know what you are doing, or some old phone without sim card and internet connection. Using your regular every day phone for storing keys for Bitcoin is just a nightmare scenario waiting to happen. Is there a way the password can be bypassed to access the wallet. Phone password are not long, is it possible for the pilferer to hack the phone password to have access to the phone.
All smartphones have backdoors (demanded by governments) and they can be hacked easily by someone who knows what they are doing (read government agencies). You can protect your phone from tiny criminals with strong passwords and encryption, but all that falls if they blackmail you or do $5 wrench attack on you. Using your phone you are sending your location and behavior non-stop and I don't want to have that combined with my bitcoin addresses ever. |
|
|
|
When it comes to choosing a wallet, I make sure to choose one that offers a wide range of options, including the need that it be open-source. Open source wallets are very important but they don't always increase or improve privacy. I know few examples of wallet applications that are open source but they are sending analytics of everything you are doing, so it's best to disable that option in settings, or use some better alternative wallet that respects privacy and uses Tor protocol. Stop using a fancy keyboard I don't see how fancy mechanical keyboards for computers can be a problem, and it's totally different story for phones and software keyboards. If you ask me I would ditch smartphones totally if you care about privacy at all, or at least use it as little as possible... old mobile phones work perfectly for calls and messages. Update your machine's operating system and anti-virus software How about removing windows operating spyware and installing open source Linux operating system like Debian for examplem or Tails OS with USB drive. That is probably one of the best things you can do in your life to improve your privacy. Hardware wallet
1. Trezor model one
2. Trezor model T
3. Ledger Nano X
4. Ledger Nano S
5. Coldcard (but more complicated to use)
Coldcard wallet is not more complicated to use, it is more safe than others but it's not open source anymore, not they have CC+MIT license. I would suggest everyone to stay away ledger wallets (not open source), and especially ledger NoNo X that is full of bugs, errors and problems. People report them daily, like I wrote in this topic: https://bitcointalk.org/index.php?topic=5358741.0 |
|
|
|
To clarify the answer here and I have since stopped tagging cheaters since then too. I don't take it as a personal matter. but as a form of self-awareness because I don't have thick skin. You have to first ask the thick skin gang leader LoyceV for permission to let you join his gang. After that you will notice that your skin will be thicker and thicker every day, and forum noise wont affect you anymore. The Thick-Skinned Gang needs to have a new brand and a logo... maybe something like this, I heard LoyceV have a strange hidden feet fetish:  PS Maybe GazetaBitcoin can hire some designer for this work on his Gangs of BitcoinTalk  |
|
|
|
|
Many exchanges are now demanding that people must enable 2FA for withdrawing anything from their accounts, and you wont be able to use it without completing that step.
I don't understand what's the problem of using 2FA, just don't connect it with your phone number, and use some open source app like Aegis or AndOTP.
You can even use some old offline phone without sim card with sole purpose of being used for 2FA.
|
|
|
|
I live in Brazil, but I do have a bank account in Europe and I would like to convert some crypto to EUR and withdrawal that to my bank account, in EUR.
FTX.com could be a good choice or alternative for exchanges you are already using, especially when you know how they don't charge any fees on withdrawing Bitcoin and most other coins.  For Fiat currencies they accept deposits and withdrawals and they (usually) don't charge any fees in EUR (except for BRL 0.3% + R$10 withdrawal fee; or $75 USD for spamming). I think this is a good combination for no (or low) fees for both crypto and fiat. https://help.ftx.com/hc/en-us/articles/360043023772-Depositing-Withdrawing-Fiat- |
|
|
|
It remains to be seen if Coinkite can provide a secure implementation, but it's true as DaveF says that it's an additional attack vector. I guess that point can be made about any wallet with more than one means of communication. Yes I know they are making additional attack vectors this way and I am not defending them, just trying to be neutral in this situation if possible, and I have bad things to say about coldcard wallet. If we think this way than we should know that regular computers, laptops and smartphones have the biggest attack vectors from all devices, they have connections for cameras, wifi, bluetooth, internet connection, etc... even if they are airgapped. I agree that cutting out unnecessary firmware code makes sense though, like removing the hidden Snake game they added, which I also provided as feedback. I guess that I wouldn't use a wallet with Bluetooth myself though, so I may be applying double standards here, potentially accepting NFC but rejecting Bluetooth, I'm aware of that I think that bluetooth is much more dangerous than nfc because of wider range, and it sucks that even Trezor is considering adding that in their new hardware wallet device  I probably won't ever use any hardware wallet with bluetooth or wireless connection either, but I just checked one list of hardware wallets and saw there are more of them with NFC chips: - KeyWallet Touch - Asamacura - SatoChip/Satodime - ColdLar Touch - D'CENT Card Wallet - KeyCard - Sugi - Tangem Card - Arculus ... No, but if my Chase Visa gets compromised and someone runs up thousands of dollars in charges it's not my problem beyond making a phone call and letting them know about it. A cold card is not a credit card, it's a security device. They added something to it to make it more convenient to use. Same as the camera on the passport. The odds of either being compromised are very very very....add many more very small. But they are not zero. And you don't need it. You need a screen. You need a way to input information. That's it.
You should really opt out from using smartphones and start using old mobile phones, use it only for calls, because you are increasing attack vectors a lot, and you are tracked 24/7. I am not sure but I think that NFC technology is also found in sim cards and many other devices, so trying to escape from it is almost impossible. I think that credit card is a kind of primitive security device, you have your PIN code and you can use it for payments or withdrawing money, it has security written all over it. And you can't have zero attack vectors in any device, so nfc is just a less evil than other things |
|
|
|
V20 model is coming to me for testing
...
I have zero idea if it is any good or honest
any help would be welcome
I watched few reviews for SecuX V20 wallet and I did basic research about it when I researched (almost) all existing hardware wallet devices in the world. I have to say that I am not impressed, and I wouldn't buy this device, but I would gladly accept it for testing. Bad things I noticed about SecuX is that they are closed source, they have bluetooth/wireless connection, and you can't use them with any other third party wallets like Electrum, that means you are stuck with their native app, like it or not. I guess the good thing is that you have known secure element and not so much problems like with ledger nono X. One comparison I found gave this brand of wallet but different model W20 a very low score (open spreadsheet for more details): https://cryptoguide.tips/hardware-wallet-comparisons/PS I think this topic should be moved to Hardware Wallet section: https://bitcointalk.org/index.php?board=261.0 |
|
|
|
Fatfork ako može malo ažuriranje ove teme i prebacivanje nekih novčanika u Defunct/nisu u funkciji/ne mogu se kupiti - FLX One (mrtav) Effective 12/03/2021, FLX Wallet support is no longer available. FLX Wallet can be recovered to any crypto wallet with the 24-word phrases (during initial setup). https://flxwallet.com/- CaseWeb stranica nema httpS i novčanik je rasprodan. - BEPAL PRO SWeb stranica je mrtva 网站正在维护中... - Wookong Bio i Wookong Solo (mrtvi) Web stranica ne postoji.
- Passport (ažuriranje) Može se kupiti samo kao pre-sale na popustu za $199 - Blockstream Jade (ažuriranje) Može se kupiti za $45.99
Dodaj nove hardverske novčanike (imaš gore na ovoj strainici moje kratke opise): - Udun Cold T1- Cerber- Husky HDW20- Klever |
|
|
|
I deleted support for this flag against Cloudbet after reviewing the case, and I don't have will and time to dig deeper, but it is strange to see that one Opposition for this flag was Cloudbet, and they never cared to comment anything about this in forum. In the same time member Mahdirakib showed up suddenly and started to do his own investigation, and he is holding the side of Cloudbet, without opposing the flag. Why Cloudbet remained silent all this time, even if they are well aware of this case, and they are still visiting and reading what's happening in forum?  https://bitcointalk.org/index.php?action=profile;u=154563 |
|
|
|
|
Show Posts
