Why doesn't every hardware wallet support the use of a seed phase + password? It seems like a really simple way to add a layer of protection in case the seed phrase you've written down is discovered. Right now, written seed phrases are like writing your bank account and log-in credentials on a piece of paper and hoping nobody finds it. All hardware wallets I know are supporting passphrase that is acting like salt to seed phrases, and that is not stored anywhere on device. Password is something different and that is usually stored in device, that means there is a chance for getting extracted and device hacked. You can also use multisig setup to make seed words much more secure, and some hardwre wallets have new methods of protection. Do modern hardware wallets like the Ledger Nano S Plus, Nano X, Trezor, etc. already support applying a password to seed phrases? Is it just a feature that's hidden and not promoted that much?
Hardware wallets you mentioned are not that modern like you think, and password in not as secure as you think. Ledger have pin when you power on device and you can add additional passphrase later that is connected with pin. Don't mix password with pin and passphrase. One interesting new concept is used by Cypherock X1 hardware wallet device, they are not storing anything on device, and keys are split in multiple secure cards. |
|
|
|
Which one should I use ? Native Segwit (and Taproot) are starting with bc1, and they are newest formats and most people is using that to save on fees, but you can use anything you like, they all work. I would use Bech32 aka Native Segwit format. Which address should I send BTC from Binance Exchange by selecting which network ? I wouldn't send any coins to centralized exchanges like Binance for holding only for exchanging, but I think they support all mainnet formats. Watch out not to confuse that with other shitcoin blockchains that have fake bitcoin tokens (tron, binance chain, ethereum, etc) What is the difference ? All tokens on other blockchains are not not really Bitcoin, they are centralized and can go to zero anytime. |
|
|
|
Is there such a thing being developed and kept updated? What I mean is a distro that comes with preinstalled software that you would need for any Bitcoin related business (full node software like Core, another lightweight software like Electrum, all libraries pre-installed, Tor, some other useful tools and everything else declutted)
There was one bitcointalk member MagnumOpus3kwho created Linux distro preloaded with Bitcoin related software and it's called LockBox Linux OS. He created topic about that OS in bitcointalk forum, but I don't know how often he updates it. Second option is Tails OS, this is minimalist Linux OS you can use with USB stick, but I think it comes only with Electrum wallet. You don't need to install Bitcoin Core because it's unrealistic to use it minimalist like you want and you would have to wait a long time to sync. I would rather install Fedora CoreOS or Debian myself (they are both coming without any bloatware) and than add Electrum or any other wallet or software later. HW's are anti privacy because it already reveals by default you are holding Bitcoin.
This is so wrong....with your logic if you carry a knife or axe with you than you are already a killer right? On your laptop or phone you can carry much more than bitcoin keys, including bunch of your sensitive information. |
|
|
|
Hello everyone! I have an update that I think will be pleasing to everyone here: BTC is now accepted to buy the prepaid cards. Great to see that you finally added Bitcoin payments for virtual cards, but you didn't answer me one question I asked before if this can be used to purchase upcoming physical FCF cards without any KYC verification? I couldn't find this information anywhere on your website. |
|
|
|
I wanted to reply to this topic but at a moment the thread was locked at that moment I realised no matter how much I am in good faith, I was made a criminal for them. Liar! This thread was not locked, and you were not online for days with this profile. This is a trust abuse all of these for some attention and some small payout from a signature campaign.
I am still waiting for you to pay me ''small'' payout you owe me. Your profile have all neutral feedback, and flag against you still stands is because you need to pay me 0.1 BTC. If you are so poor that you don't have 0.1 BTC, I can also accept for you to pay me monthly or weekly in smaller denominations, until you pay the full amount. Hi, I have saved the whole history and can post it. He wrote to me yesterday that he would like to send me the Bitcoin back, I'll wait, otherwise the whole process will come in here.
Creating feedback for someone without providing any links, history or some proof is worthless in this forum, and that goes for all members not just for this case. I was wondering for what service exactly did you pay 0.0071 BTC to member saxydev? |
|
|
|
Statistika za 2022 godinu pokazuje ogroman porast internet prevara u Hrvatskoj u odnosu na 2021 (porast preko 20%), a mislim da statistiika za 2023 godinu može biti još gora. Pitanje je koliko još ima neprijavljenih slučajeva, jer u statiistiku ulaze samo prijavljeni, a Index je postavio dobar članak o tome i ima nekih fraza koje nikad do sada nisam čuo. Najčešće prevare su Krađe identiteta (Phishing, Vishing, Smishing), CEO prevara, BEC prevara, Lažne stranice banaka, Romantične prevare, Investicijske prevare i prevare u online kupovini, Krađa osobnih podataka. Sve se ovo može koristiti i za krađu Bitcoina i hakiranje računa, a to će se događati sve više kako ljudi budu koristili digitalni novac. https://www.index.hr/vijesti/clanak/hrvati-masovno-nasjedaju-na-internetske-prevare-ovo-su-najcesce-od-njih/2432770.aspx |
|
|
|
Momci moze mala pomoc. Gdje mogu na ovom forumu jos oglasiti da prodajem profile na stranim i nasim kladionicama. Uredno verificirani. Hvala
Na lokalnom forumu mislim da to možeš to postaviti u sekciji Trgovina. Možeš to isto postaviti i na engleskom forumu u sekciji Invites & Accounts. Nisam siguran da je to što radiš legalno, pa bolje pripazi koje informacije objavljuješ i ne zaboravi pročitati pravila foruma. |
|
|
|
Also, I thought it would not matter much what service of password managing one chose?
Because as far as I understood during my brief investigation, the data is encrypted and decrypted using the trezor itself?
Data with login details and passwords on Trezor was encrypted, but I don't know how exactly and it's possible they identified some weakness because web browser must be used for this to work. It sure matters what password manager someone is going to use after Trezor Password Manager, and I wouldn't recommend using LastPass or anything like this. I don't expect someone decide to continue maintain it when more established alternative exist and currently there are almost no contributor. It's not impossible to happen. There are several hardware wallets that exist today and they are Trezor forks, like KeepKey, OneKey, Prokey, etc. OneKey is biggest Hardware Wallet company based in China, and they could easily continue with OneKey forked Password Manager. 1Password (which mentioned on Trezor website as alternative) also had few security incident and IMO should be avoided.
Yeah, I think Trezor needs to update that page asap. |
|
|
|
Yes, it was clearly a trap, hence my reluctance to flag that guy. But nobody has forced him to accept the deal.
How about this: "The next user who posts after me, agrees to pay me 0.1 Bitcoin." That sounds like a casual agreement to me. But it shouldn't be allowed!
I didn't make a trap for anyone and I didn't call ''next user'', I talked with one specific user and he replied. If he didn't brag so much about his revolutionary invisible universal service than I wouldn't be challenged to tell him before there are free services like this. He said this is not true and that made me ask him to pay me if I provide a link, then he agreed, so there is clear history here, unlike your imaginary ''next user''. Again, anyone can easily oppose the flag... instead of writing theoretical fairy tales  PS Nobody noticed how saxydev mysteriously dissapeared from forum after this event on 25 January  |
|
|
|
Cryptocurrency was bought with fiat.
Were provided - bank statement with payroll, cash withdrawal statement.
But they say = "actual source of funds"
Previous statement is less than a week old. I sent a new one
I think they are asking for source of your coins, not source of your fiat money  That means you need to explain from what wallet you send coins to HitBTC exchange, your own non-custodial wallet or from some other website/service. I hope you don't have lot of funds stuck there, but my suggestion is to stop using any centralized exchanges and transition to decentralized exchange like Bisq and p2p trading. I heard bad things about HitBTC before, just do a quick search and you will find a bunch of bad reviews and complains on internet. |
|
|
|
Let's rest 1000 merits to all the legendary users from those who get 1000 merits and make a new raking for those who haven't hit the 1000 merits. For example, if you have 1990 merits, then you will be 10 merits away from legendary, but you will have the new rank until then.
I don't see any real reason why we need to create new forum ranks for merits, and nobody would see any benefit from this. It's much better to spend time on fixing real bugs and improving stuff with scripts, maybe even doing final transition to new epoch talk software. Quick workaround for your request could be made with BPIP extension or script, if someone is willing to make more pseudo-ranks like Veteran or Elite, maybe even Retired for inactive members. |
|
|
|
Q. The biggest risk seems to be accidentally sending the private key instead of the public key. Is that foolproof on modern hardware wallets (e.g., do you have to go through a stupid amount of work to get the private key, making it less likely to screw up) or is there something to watch out for?
You shouldn't keep private key or seed words anywhere online and you should never send them anywhere. That is possible by using airgapped devices and by keeping seed words written on paper or on stainless steel. Having hardware wallet will not protect you from stupidity of sending words to some phishing website that will easily steal your coins. Q. Do public wallet addresses always start with 1 or 3 (which something I'd read)? How many characters long are public keys compared to private ones? Is there some other high confidence way confirm the string is the public key and not the private one? Bitcoin addresses can start differently: 1 - P2PKH - (Pay 2 Public Key Hash) Legacy format 3 - P2SH - (Pay 2 Script Hash) Compatibility format bc1 - Bech32 (Pay 2 Script Hash) Native Segwit format bc1p - Taproot (P2TR - Pay To Taproot) Taproot format Q. What blockchain explorer would you all recommend using? One of the best explorers is mempool.space but you can use anything you like. Good list of Bitcoin explorers is available on Jameson Lopp website: https://www.lopp.net/bitcoin-information/block-explorers.htmlQ. Do I need to set-up a full node to do this (i.e., is it really necessary)? If so, should I set up the node on my dedicated computer, or on my regular daily use PC? Does it matter?
If you run your own node than you can run your own mempool.space explorer, so you don't have to trust anyone else about Bitcoin transactions. Everything is open source and available on their github page, it's not necessary to do it, but it's good for your privacy. https://github.com/mempool/mempool |
|
|
|
What will happen to my Bitcoin if I decide to transfer some sats to the former address? Your Bitcoin will be joined together and anyone could identify different sources you used to send coins, that can reduce your privacy. Using same address would be fine if you are receiving Bitcoin from same source, that could be your public donation address that is used to receive payments. In all other cases you should generate fresh new address and try to do address management with labels for addresses and transactions. |
|
|
|
Very nice development and also a good quality look for a DIY device!
What always bothers me, is that maybe I can use this device, since I have a lot of experience in this field, but I can never recommend it to somebody because it is simply to complicated. Maybe it is possible to eventually in a few years/month to have a very easy DIY kit of this wallet available for sale.
It's not complicated at all, especially with this new mobile app for testing. I am not an expert or developer at all, but I managed to flash ESP32 device in few minutes and start Krux wallet without any issues, because you don't need to assemble anything and there are no need for any ''kits''. You buy any supported device, than you flash a code, verify it, and you are ready to go... it's easy. |
|
|
|
I don't know if there are more similar topics, but for beginners, now I'm showing the image-based process of using BPIP extension on mobile.
It's nice to use BPIP on mobile, but my suggestion is to use separate Kiwi browser with extensions only for bitcointalk forum, because adding extensions on mobile browser is reducing security a lot. For everything else you can use open source Bromite browser that is one of the best options for Android, or Brave mobile browser as alternative. Another option is Firefox and Tor mobile app, but they are much less secure on mobile than on desktop. |
|
|
|
Wanna buy mine?
No I am not looking to buy this, but if you are selling than tell me how much would you ask for it? I think I am done buying gadgets for some time, most of gadgets I have are just collecting dust and I don't have real use case for them.  PS I hope some amazing new hardware wallet/gadget won't come out soon and ''force me'' to buy it |
|
|
|
For anyone who owns old Android smartphone and wants to test Krux app you can do it now with downloading latest version 0.7 APK file from their github page. Note that this should be used only for learning how Krux works with signing Bitcoin transactions or Nostr events. Don't use Krux app for storing important keys or larger amount of coins, but you can download and test how everything works: https://github.com/odudex/krux_binaries/tree/main/Android |
|
|
|
I created a flag against member saxydev who violated a written deal made with me, and I was not paid 0.1 Bitcoin like it was agreed. This member can't be trusted about anything and he was already accused by other members for his suspicious behavior and services. I am asking from others to support or oppose flag here: https://bitcointalk.org/index.php?action=trust;flag=3086 |
|
|
|
Is there anyone using a raspberry Pi 4 to successfully run a multi asset wallet of any kind? Or the 4 GB Ram is the limit affecting this component? I have tried execute atomic wallet and exodus with no success.
First you must have ARM packages or APPImage format for wallet so they could work with your device. I know that Electrum wallet works just fine in RaspberryPi if you install all required packages, but I didn't try with Atomic and Exodus wallet. It's much better multicurrency option to use hardware wallet connected with RaspberryPi and I am sure that Trezor Suite is available as ARM and it works with RPi4. |
|
|
|
Kod mene su u prijašnjoj firmi imali kvartalne testove gdje su s pravih mailova te firme (e.g. tech@ ili management@) slali "phishing" testove i requestove, te onda pratili koliko ljudi zapravo klikne na te pizdarije i sukladno tome odrađivali edukaciju. Dosta zanimljiv koncept koji je urodio plodom nakon nekog vremena.
Ako nije tajna zanima me koliko je ljudi kod vas kliknulo na te phishing testove i preuzelo te aplikacije? Ne bih se ni malo iznenadio da većina ''normalnih'' ljudi bez problema klikne na sve što dobiju, sad čitam da je nigerijska prevara još aktuelna i ljudi dobijaju pisma i na kućne adrese. Mislim da moderne vlade i države sa svojim obrazovanje od ljudi prave imbecile.  |
|
|
|
|
Show Posts
