@jerry0
Check the pictures in the OP. The last two show a manual of how to configure the fake device, select the number of seed words, and then entering them in a fake software (not the real Ledger Live). Once you do that, the information is transmitted to the hackers. As you know, your seed is never supposed to be entered into a software and you shouldn't use or accept any hardware wallets from anyone that you didn't order yourself.   

I think that Coinomi is good enough to be used as a multi-currency mobile wallet. Yes, they are a closed-source software, but they are still a practical option to store various alts and shitcoins. I wouldn't use it as my main wallet though and I wouldn't keep my bitcoin on it.

To be fair, the biggest problem Coinomi had was concerning their desktop app, not the mobile version. The desktop app sent your recovery phrase to Google spellcheck in an unencrypted format, which caused one user to lose a lot of money. Besides that incident, I can't remember any significant issues or scam accusations against the Coinomi brand.

No problem, I am glad they are of help. Feel free to read the previous eight riddles as well and see if you come to the same conclusions as the members who solved them. There is no need to post your answers in the thread because they are already a thing of the past, but you can do it to practice your knowledge about bitcoin and crypto if you like.

You will hear the standard USB connected/disconnected sound and a notification will appear telling you that it is now safe to disconnect your device from the USB port.

I guess that depends on the system settings. I have 2 laptops and a desktop PC I use depending on where I am and what I do. The two laptops share the same USB mouse. When I connect it to one laptop, the safely eject icon becomes visible. That's the same laptop where my Ledger Live is installed on as well. The same icon also appears for my Nano S. The other laptop doesn't show the icon when I connect the same USB mouse to it.     

I noticed something yesterday when trying to place a live bet on a game on Betja. I already places a pre-match bet on the same event and when I tried placing an in-game bet it didn't work. I kept getting a notification from the system saying something like you have already placed a bet on this event. Why is the system set up to refuse bets on the same markets or on the same match? If I wanted to, I should be able to place multiple bets on the same event or the same market if I wanted to.

Sad as it is, you can't except newcomers to know and understand everything you just explained. Most people are not that cautious about their privacy and traditional financial institutions know all about them already. Having an exchange do the same, wouldn't be something they see as a potential threat.

Just the other day I was shopping in a local supermarket. The shop organized a giveaway. To participate in it, you had to fill out a form with your personal information and put that together with your receipt inside a big box placed near the exit. The information they asked for in the form, is your full name, gender, age, home address, and phone phone number. The box was full and had hundreds maybe thousands of entries. If the form required your ID number or your bank account number, or a picture of you holding your ID and receipt, I doubt you would notice a difference in the number of submissions.

Imagine if someone walked in and just grabbed the box and ran away, or if an employer stole or sold its content? People simply don't think about those kind of things, but they should. 

I will make some changes to the information about CryptoGames. The site still says that you can claim the faucet every 3 minutes from the same IP. However, there is a maximum amount of claims you can make in a 24-hour period just like you said. The minimum amount is 10 and the maximum is 60. I will summarize all this in the table. 

Are you sure about that? I am looking at the withdrawal page right now and it says that the minimum withdrawal amount is 0.001 BTC.

That "free" welcome bonus isn't so free if you take into account that you first have to deposit some real money and the bonus money has to be rolled over 20-60 times depending on which crypto casino you play on. I would be very surprised if more than 5-10% of players manage to withdraw the bonus money and not lose it all due to the wagering requirements. 

The votes so far show that 2 people safely eject their hardware wallets before disconnecting them. Honestly, I expected around 100% of the votes to be for 'NO'.

I remember reading about the process of copying files to a USB device. During the event, your operating system could copy the files to its cache first, and from there save them onto your USB drive. This is a quick process, but in the event that a USB-device gets disconnected during it, data losses can appear. Not sure if hardware wallets function in a similar fashion, and could such a process break down during a transaction broadcast.

Once the transaction info is transferred to the screen of a hardware wallet, you sign and broadcast it by pressing the buttons on the device. Does it still communicate with the software on the computer once the send transaction button is pressed, or does it all happen on the device from there on out?   

Your answer was incomplete. You mentioned vulnerabilities, but didn't go into more details about what vulnerabilities you are talking about. You also wrote that Paul should "create a new address." He should have generated a new seed and created a completely new wallet. UKprod's answer is more complete. You were also not the first one to answer. roosbit's answer was faster and he mentioned creating a new wallet, not a new address. 

I don't know what would happen if you were to disconnect your hardware wallet during the transaction signing and broadcasting process for example. Of course, I am not going to try it to find out. I have never seen a thread were someone complained about creating a corrupted output where a loss of electricity, failure of the computer OS, or something like that resulted in the loss of money. I wonder if there is a short moment in time during the broadcasting process that could cause a transaction to simple disappear. I doubt it.   

That's correct! In the images you posted in OP, we can see one with setup instructions were the user is instructed to enter his seed phrase into the fake software. For anyone who has ever used a Ledger device, he knows that this is not the way a Ledger hardware wallet works and is set up. Those who don't pay attention or are just starting out, wouldn't notice that something is off. But that's not an excuse because if the devices were shipped to users from the original leaked database, they should already be familiar with the way the devices work.

If something like this was shipped to me, my first question would be why is Ledger sending me this without checking with me first and making sure I still live at that address? It doesn't make sense.   

When using a USB-connected device such as a flash drive, external hard disk, or a hardware wallet, your operating system allows you to safely eject the device before removing it from the USB port. 

When the eject feature is initiated, the system stops any read or write operations potentially running in the background. If such work was to be abruptly interrupted, a possible negative consequence for the device could be data corruption. The chances for that to happen are slim, but they exist.

When we are talking about hardware wallets, they are different from standard USB flash drives because you aren’t copying data from your computer to it and vice versa. However, a connected hardware wallet can also be ejected safely before being physically removed from the USB port.

In this poll, I would like to know, are you safely ejecting your hardware wallets before disconnecting them, or do you just pull them out of your computer?

In all the years of using a hardware wallet, I have to be honest and confess I have ejected it maybe 2 or 3 times. I feel like I should be more careful with it in the future.

Hvala, hvala. Nisam se ni prijavio da postanem merit source već samo dođe jedan dan poruka od šefa da me je postavio za source-a. Pitam ga da li to znači da sam source za svoj lokalni dio foruma, kaže on da nije o tome razmišljao. Dakle, po principu udri gdje stigneš. Gledaću naravno s posebnom pažnjom naše lokalne članove jer nam merita uvijek fali ovdje a postova i kvaliteta imamo.

Dobro si to promašao. Nisam se ni sjetio da na BPIP-u ima evidencija o promjenama u Default Trust-u. Ako nekog zanima, može ovdje pratiti najnovije promjene > https://bpip.org/TrustLog. 

Like the comment underneath your post suggests, I don't want to include casinos that have negative tags for valid violations. Even though the feedback for DuckDice was written back in 2017 and some users who initially posted a negative rating revised their trust to neutral, I still don't want them on the list.

Simpledice doesn't seem that popular on Bitcointalk, but that isn't necessarily a bad thing. They aren't negatively tagged, so I will take a look at their offer with the next update of my OP.

A properly secured seed should never come in contact with the internet or be stored digitally. Paul's seed was used on a software wallet, an app that is considered a hot wallet. If his software or computer experiences a breach, gets hacked, or infected with malware, an attacker could get his hands on the private keys like it was mentioned amongst the replies. Whoever has the private keys/seed, owns the money they protect.

Even if such a breach didn't happen, it's better to create new wallets and get a new seed than using the same seed across multiple software. 1 piece of software represents one item that could be attacked. Replicating the same private information across new apps creates 2 or more attack vectors and ways to lose your coins. Compare that with sharing a secret with one person vs sharing the same secret with 3 people. With 3 people knowing what you know, the chances of someone exposing you have increased greatly.

Riddle #9 is solved!

Varaš se da smo dobili "samo" jednog merit source-a. Eto vi sad nagađajte ko bi mogao biti drugi.

A ne smije tako, ja skupio dovoljno merita pa mi ne treba više. To ti je kao u nogometu. Pobjediš, pa odmah razmišljaš kako ćeš pobjeiti narednu utakmicu. Pobjediš i tu, onda dolazi ona poslje nje. A kad osvojiš titulu, onda trebaš pobjeđivati slijedeće godine da je odbraniš i osvojiš neke nove titule. Nešto slično je neki Juventosovac jednom davno rekao. Samo da se ogradim i osiguram.

Not much has changed today. Check out the results when you perform a search for "best bitcoin wallets". This is the top-ranking article: https://www.thebalance.com/best-bitcoin-wallets-4160642.

The best "wallet" according to them is the Coinbase "cryptocurrency exchange".
They recommend that beginners use SoFi which is a brokerage platform. In their explanation about SoFi, they mention that users can't deposit or withdraw from the platform, but it's still something they recommend to new crypto users.

Ovo je objavljeno prije više od mjesec dana pa me čudi da se o tome nije prije pričalo. Nekako nije dobilo dovoljno pažnje. Prvi put čujem za jedan takav plan. A ovaj neki socijalista, Eero, predlaže da se prestane sa korištenjem PoW sustava. Zašto jedonostavno ne predlože zabranu rudarskih postrojenja na ugalj kad im je u interesu dobrobit planete? Dajte ljudima poticaj da koriste manje štetne izvore energije i prije svega jeftinije pa će te vidjeti da i to može. 

Mislio sam da kad te netko doda na svoju trust listu da će se ime tog korisnika pojaviti na LoyceV trust listi u polju ispod "judgement is Trusted by". Ali kod Stalker22 nema Trofe, a ni kod Trofe nema Stalker22.

Evo njihovih lista:
https://loyce.club/trust/2021-07-03_Sat_06.12h/2739454.html
https://loyce.club/trust/2021-07-03_Sat_06.12h/1099980.html