Good morning Krogoth!

49 - Kryptowerk

Thanks again for your generous raffle.

Indeed, time to update OP, haha - but let's be real, there's gonna be a lot more ups and downs on the horizon before we reach Jupiter.

Cool devices you mentioned, do you have any experience with any of them? Blockstream Jade seems like great value for the buck. - However it has a built-in camera and bluetooth which I am not sure if it isn't a security concern.


@krogothmanhattan Do you already have the Tresor 3 in hand? What's your experience in comparison to Model 1?

Sorry for slightly OP, but I have to jump on the Ledger-bashing-train.
I had a bunch of negeative experiences over the last almost decade now with their devices.
Right now I can only say I hate Ledger and here is why:
- discontinued hardware support for older devices (buy the new one - money grab company)
- data leak exposing all customer data including phone numbers, full name, address etc. From a company supposed to provide crypto security. UGH
- horrible experience with their ledger nano app: balances were displayed as missing or completely wrong (I was a multimillionaire on paper for a few minutes, too, lol). - Only fully resetting with the passphrase worked - how tf is that a secure device?
- They have their "back-up" backdoor upgrade which is highly debateable and mostly frowned upon by any security experts in the crypto space.


That said I have had a good time with the Trezor line and looking forward to try the new Version 3.
I have a %-OFF voucher, not sure if it only works for one device or if I can buy several. If anyone is interested in a Trezor 3 for quite a few % off, send me PM I will try tomorrow if it works for more than one item.
@krogothmanhattan If you still need one send me a PM.

It's not guaranteeing you anything. A wallet being emptied does not tell you what's wrong, which software is responsible, when the malware was installed etc. A smart thief wouldn't trade their unknown access with $10, and I strongly recommend you to not expect hackers to be dumb. They may wait until you deposit a decent amount of money, or perhaps valuable files.

Prevention over cure. You should just be aware of your computer's security, and friendly suggestion; don't rely on security through obscurity.

The only thing a 100 char long password used for BIP38 does for you is to make your work entering it in the future for decryption a nightmare, more so when it is random!

It does not provide you with the security you think it does because in BIP38 algorithm the password is fed into scrypt KDF to derive a 32 byte key which means when you use a bigger than 32 byte password to derive a 32 byte key, your security still depends on the 32 byte size not the much bigger password (eg. 100 byte).

Theoretically to brute force your password, one would just skip the first step (ie to derive a key using scrypt that needs to iterate 100 bytes) and just brute forces the 32 byte derived key.
Realistically since 32 bytes is 256 bit and impossible to brute force, this is impossible to pull off.

It's BIP38, not BIP39. I know, because I've made the same mistake in the past....

Given that $1000 was not enough to crack just 6 characters in 2 years (even after giving hints), this doesn't really prove anything. It's probably easier to "guess" the private key itself than guessing your 100 characters.

At least that should be a proof that his accont was not hacked or sell.

I am curious about how he lost his key, that may be a new thread for it, i mean only if he want to tell us that history.

I'm quite happy to be able to say I don't have such a thing I like fungibility of money, not the opposite

I don't get it though: you've been here almost as long as me. You must have seen this by now:

You must have some old addy that you can use to prove you're still the same person, right? It doesn't hurt to be thorough when it comes to staking addresses.

Trezor > Ledger from a UX and software perspective, by a mile

You must have some old addy that you can use to prove you're still the same person, right? It doesn't hurt to be thorough when it comes to staking addresses.

Ok, you have proved that you control the address, but how do we know that the account hasn't been hijacked?

Could you sign a message with any of addresses you have used in the past, stating that you are using the new address? What about 1FsLxbxsgz9jzvrKFyLkNz24x6ENRVFzNg or 1GDjqcTyvNa37CwMaDvh9buL6Qd1SjbYKG?

Hey krogoth, if you are interested in collectibles shaped as wallets, I have a Ledger Nano X branded by Betnomi. I won 3 such wallets at their raffles but I don't need all 3. If you want to see some pictures you can do it here. The wallet from those images is unsealed, but I am talking here about one which is sealed.

I used the unsealed wallet to check its hardware integrity and the result was that the wallet is not tampered.

If you are interested, please let me know.

Wonderful. THANK YOU!
Always excited to add a Krogoth item to the collection.
PM incomming.
Geophphreigh