Bitcoin Forum
April 27, 2024, 12:02:11 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 [7] 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 ... 192 »
121  Bitcoin / Project Development / Re: 12 Word Recovery Phrase - a security weakness? My (free and simple!) solution(s) on: October 03, 2022, 06:08:11 PM

You can mitigate your chances of losing access to the particular version of the book by choosing a book that will likely continue being published, like the bible.
The Bible is probably one of the worst possible choices, actually. There are literally hundreds of different versions, with each version having dozens of editions, and even the same edition of the same version being different due to having multiple publishers and/or printers. Even something as simple as line spacing being slightly different or page size being slightly different and your page/line/word schematic is rendered completely useless and your coins completely inaccessible.
With a bible, you can modify the procedure so that each word is from a particular bible verse. You could give each book an index number, then use the xth word in nth chapter of the book.

You still need the right translation, but there is less variety among editions, and translations don’t regularly change
122  Bitcoin / Project Development / Re: 12 Word Recovery Phrase - a security weakness? My (free and simple!) solution(s) on: October 02, 2022, 10:25:44 PM
Each line in this key was formed of a triplet that referred to the page, line and word-number of a specific word, which, when looked up (using the exact correct book), was in fact the relevant ‘recovery word’. In 12 lines, he’d noted all 12 of the words in his recovery phrase without actually giving anything away to a casual reader/attacker. So long as the attacker didn’t know the book it referred to, the recovery phrase would be secure.
A more elegant solution would be to make this a brain wallet. Either via a "traditional" brainwallet, or by converting the 12 words to a xprivkey in a non-standard (nor BIP39 compliant) way.

This will allow you to generate the words in a way that is actually random. Even if you were to use software that uses flawed RNG, it will not be as big of a problem because you are using a book that your device will never know about.

With the first solution (book), you are now reliant on hiding an entire book rather just a single piece of paper. If you lose your copy of the book, there is no guarantee you would find the exact same edition again and your coins will be lost. So that's a more difficult back up process and a single point of failure.
This particular solution has issues similar to that of using a brain wallet. For example, if the specific book is not written down anywhere, you may forget which book you are using, or your next of kin will have no way of recovering your coin when you die.

You can mitigate your chances of losing access to the particular version of the book by choosing a book that will likely continue being published, like the bible.
123  Alternate cryptocurrencies / Altcoin Discussion / Re: What is Trust wallet and is it safe? on: October 02, 2022, 10:07:59 PM
Trust wallet is not open source.

Here is their blog post announcing they are becoming closed source about 4.5 years ago: https://trustwallet.medium.com/why-open-sourcing-android-app-could-be-a-harm-to-the-crypto-community-fb3ae1707dc6


<>
They are making an argument against keeping their wallet software open source. I am not sure if I agree with their argument, and I know that other wallet software has had similar problems with malicious clones. Electrum is one example. Unlike electrum, I understand that Trust Wallet is a mobile wallet, that must be downloaded via an app store. It is much more difficult for someone to find the "correct" version of an app on the iTunes/google app store than it is to find the correct/official website for bitcoin core or for electrum.

They outright lie on their website when they claim to be open source. If being closed source isn't enough to convince you to stay away, then them outright lying to you should be. They are also owned and operated by Binance, so you can guarantee you will have absolutely zero privacy when using Trust wallet.

Avoid it.
The fact that binance manages the wallet software certainly gives me pause. However, I think that the "open source" claim is being confused. I don't see the claim on the download page in either the iTunes nor google play app stores. I do however see that people can "submit" DApp's that can run "on top of" Trust wallet.
124  Other / Beginners & Help / Re: One way to avoid scam wallets on: October 02, 2022, 09:58:42 PM
There are other handy places that may help you find a good wallet too, there'll be other well trusted examples but on i can think of is bitcoin.org: https://bitcoin.org/en/choose-your-wallet
This is probably a better venue than the forum. There may from time to time be threads about wallets that contain malware, or are otherwise malicious, and there will be some people giving warnings, but for a newer user, it is often difficult to judge if these warnings should be heeded to or not.

bitcoin.org does not have discourse, and as such, there are no potential scammers promoting malicious wallet software.
125  Other / Politics & Society / Re: Putin grants citizenship on Edward Snowden on: October 02, 2022, 09:55:41 PM
This is just a formality for media headlines. Snowden was integrated essentially as a Russian citizen and has no intentions of ever leaving. Nor was Russia interested in deporting him.
I would tend to agree with this. Snowden has more or less been loyal to Russia for a long time. Part of this is likely due to his own self-perservation (without said loyalty, he would likely face the death penalty).

It is unfortunately likely that Russia has seen sensitive documents belonging to the US that have nothing to do with his whistleblowing activities. One can argue is this outweighs the benefits of him making public the abuses by the US intelligence agencies against its own citizens....
126  Other / Meta / Re: Why forum search taking years to load on: October 02, 2022, 09:51:05 PM
To answer the OP's question: the forum DB is not indexed on the columns that contain the text of posts. This means when you try to search for a posts containing a particular text/phrase, the forum will have to search through all posts (that the person performing the search has access to) in order to provide results.

To index a column means that the data is stored in a particular order, and this takes additional scarce resources. With there being many alternatives to searching on the forum (such as google, plus multiple forum members have their own searchable database of forum posts), there is little need to invest resources into the forum's search functionality.
127  Bitcoin / Development & Technical Discussion / Re: Signature aggregation for scaling - what is possible? on: October 02, 2022, 09:42:30 PM
Hi guys,

I have spent a while reading about BIPs 340-342, but I'm struggling to find a definitive answer about how these BIPs will address scaling issues.

To give some context:
I am concerned with the future user scaling of Bitcoin. When there are 5 billion users, no individuals will be able to afford to transact on-chain - 5 billion people => 1 transaction per person per ~20 years - unless there is some highly scalable way of aggregating transactions.
Lightning does not address this problem. Lightning improves transaction speed and volume, but it does not solve the root problem of redeeming one's coins on-chain. There are proposed solutions such as channel factories, but these are still worthless without the possibility to redeem on-chain.
If no one can afford to redeem on-chain, we may as well just create a separate token called LNBTC and operate LN independent of Bitcoin.
I have to disagree with you on this point.

With LN, it is possible to redeem your coin from LN and claim your coin on-chain. The LN protocol makes it unnecessary for users to do this on a regular basis, and as such they will not redeem their coin via an on-chain transaction on a regular basis.

If an individual wants to redeem the coin they have on LN, they can do so. This does not mean that every individual needs to be able to transfer between LN and on-chain every day.


In terms of scalability, I don't think it is possible to increase the number of transactions in a block by one without increasing the total block size by some constant. In other words, the total time incremented block size will be at best O(1) in relation to the number of users who have at least one on-chain transaction during that time increment.
128  Economy / Service Discussion / Re: Crypto lender Celsius mulls possible restructuring amid financial woes on: October 02, 2022, 09:14:55 PM
So, Celsius CEO Alex Mashinsky decided to resign from his position and he continues to bullshit in his letter of resignation. Good riddance, but unfortunately its too little too late.
It is possible that Mashinsky was being questioned about decisions he made and in lieu of answering the questions, he decided to resign. At least one regulator is saying that Celsius had multiple financial setbacks over the years. Celsius was a bank, and the business models for banks really do not allow for you to even be in a position to possibly have major setbacks.

I understand the operating losses, as they are likely the result of mispricing and/or a mismatch of deposit/lending volume. Having "one time" events is really more concerning to me.
129  Bitcoin / Hardware wallets / Re: Trezor hardware wallets can be used without verifying and backing up a seed on: October 02, 2022, 08:31:26 AM
People should have the choice to be able to make bad decisions.
We will have to agree to disagree then.  Wink
What gives you the right to tell people how to manage their money?

I can tell people I think they are making a bad decision, and I can tell people how I would manage specific situations when asked, but I have no authority over anyone to tell them they have to do something a certain way. I don't think you do either.

If someone is intent on making bad decisions, they could create a text file with their seed on their computer...
That's a bad way to manage your seed, but even a digital backup is better than no backup at all.
True, but the point I was trying to make is that a person can make a temporary back they intend to immediately destroy after verifying they have made a backup, and there would never be a warning against not having a backup. If having a backup is not required, it is unlikely that someone will create a temporary backup, so someone intent on not creating a prominent backup will choose the "skip backup" option, and receive appropriate warnings.
130  Economy / Service Discussion / Re: Bitrefill's new bill pay service on: October 02, 2022, 08:21:20 AM
If you authorize xyz company to withdraw $100 from your bank account, but they take $100 instead, they have initiated an unauthorized transaction
I don't get it: did you make a typo, or are they withdrawing exactly what they should?
Yea, that was a typo. I fixed it.

Quote
and are liable for any fees you incur as a result. Often, your bank will waive/reverse any overdraft fees that resulted, but if they don't xyz company would need to reimburse you for said fees, and any other expenses you incurred as a result. Obviously, in the intrum, you will be without access to your money, which is an issue.
From what I've seen, the US banking system is decades behind compared to ours. You guys are still using checks, right? Like I said: mistakes are rare. And I'm pretty sure people would make much more mistakes if they have to pay everything manually.
Yes, checks are still used, but are becoming less frequently used.

I think the most common error when a merchant takes out the incorrect amount would be when the customer calls the merchant, and a representative accepts payment via phone and the agent keys in an incorrect amount. These will typically be isolated incidents, and the merchant will have both records of the call itself, and the fact that the payment would be illogical according to the the status of the account. Problems with "auto pay" are very rare, and most commonly, merchants will provide a statement (usually electronically) to the customer advising of the amount to be withdrawn, so the customer can address issues and/or suspend auto pay if they are being billed for an incorrect amount.
131  Other / Meta / Re: No more banner advertising: what's next? on: October 01, 2022, 09:49:25 PM
3 Implement Silver/Gold/Platinum/Lamborghini Memberships like the current Copper one that come with the benefits of a Full/Senior/Hero/Legendary etc, and maybe even some additional perks with a higher "premium" rank like the ability to change name, access to a exclusive sub board and so on.

Completely passive income for the forum
Essentially stops account sales and farming
Will severely dent people from fishing/begging for merit
Another similar option (with similar benefits) would be to allow people to purchase merit from the forum in order to rank up. I think a lot of people would probably be interested in buying Lamborghini memberships, but some may also be close to Legendary but are struggling to get enough merit to rank up, and may want to pay to get the ranking.

1) Offer or auction some long term deals to companies that are already trusted and have a history of advertising here. Many of these gambling companies are sponsoring streamers millions a month so I'm sure they'd put up a fairly large amount for a years ad subscription or something.
I don't think that theymos is a kind of guy that can easily change his opinions once he makes them, and there could be some legal issues he is concerned for future as well.
I disagree. In my experience, theymos is open to listening to arguments in favor of changing policy, and will do so if a sufficiently strong argument is made.

It seems that theymos already seems to be open to long-term deals, as he said that he will accept private offers to advertise. I think long-term deals are more of an issue for advertisers because there are many unknown variables, such as how effective an ad is, forum traffic in the future, how profitable a business will be in the future, etc.


Theymos mentioned that he thought the process of buying ad space has a lot of friction. This could be addressed by automating the process of which advertisers purchase advertising. The initial vetting/setup is probably something that shouldn't be automated. Someone could potentially create an automated ad buying software that advertisers could buy ads on. I am not sure if the cost of creating these software would be worth the potentially higher revenue for the forum, especially if it needs to be integrated with the existing SMF software.
132  Bitcoin / Hardware wallets / Re: Trezor hardware wallets can be used without creating a seed on: October 01, 2022, 09:05:26 PM
But I would be happier if the option to skip backups wasn’t there at all.
I disagree.

People should have the choice to be able to make bad decisions.

I would also note that removing the "skip backup" button does not actually force someone to make a proper backup. If someone is intent on making bad decisions, they could create a text file with their seed on their computer, or they could write down their seed, and immediately throw it away. The "skip backup" button at least allows for the opportunity to warn the user of the dangers of not having backups.
133  Economy / Service Discussion / Re: Bitrefill's new bill pay service on: October 01, 2022, 08:57:08 PM
Security issue, you should NEVER allow a biller to pull from your bank. You should only initiate payments from your bank to them.
Many times banks and other businesses have made mistakes and pulled too much from peoples accounts.
It probably varies per country, but here I (and most people) pay many things by direct debit. Cable/phone/road tax/energy/water/subscriptions/insurances and more. Mistakes are rare, and you can "undo" those charges within 6 or so weeks at the click of a button. It's much more convenient than paying all those recurring bills manually.
If you authorize xyz company to withdraw $100 from your bank account, but they take $1000 instead, they have initiated an unauthorized transaction, and are liable for any fees you incur as a result. Often, your bank will waive/reverse any overdraft fees that resulted, but if they don't xyz company would need to reimburse you for said fees, and any other expenses you incurred as a result. Obviously, in the intrum, you will be without access to your money, which is an issue.

134  Bitcoin / Press / Re: [2022-08-09] Iran makes first import order using cryptocurrency on: October 01, 2022, 08:50:35 PM
Whenever a country moves in the direction of freedom it is a good thing, Bitcoin is financial freedom for everyone.
I can assure you that the government of Iran has no interest in giving its people any kind of freedom.

The transaction in question was intended to allow Iran to not have to use US and western financial systems. It was to evade sanctions against Iran imposed by the US. I don't think this is good for bitcoin or for crypto, as this shines a negative light.
135  Other / Meta / Re: No more banner advertising: what's next? on: September 27, 2022, 05:00:10 PM

Seeing as this frees up a bunch of ad slots, what does Theymos think of advertising non-profit bitcoin sites?
The forum is not a charity. The forum is run in order to improve the chances of bitcoin succeeding over the long term, along with furthering the forums stated mission that loyce quoted above.

I am not surprised that forum suspended ad auctions. Given the obvious process of having to manually vet each new potential advertiser, and the low auction price in recent months, selling ads was likely not worth Theymos’ time for a long time.

I think part of the reason for the low ad prices is strict requirements to advertise, and the long list of things that Theymos won’t advertise. Plus, the forum doesn’t offer any kind of targeted advertising, which is something that advertisers are offered almost universally. The lack of targeting means more privacy for forum users, and that is the price the forum is clearly willing to pay in order to offer privacy.
136  Other / Beginners & Help / Re: Hardware wallet or Bitcoin Core wallet? on: September 26, 2022, 06:31:33 PM
I'm going to look into Electrum (I have to be honest, I haven't heard of it before)
Using Electrum is a lot less resource intensive than running a full node in exchange for only a small reduction in privacy. The reduction in security when using Electrum is close to zero (in my opinion).


As you may have noticed with my two posts in your thread, you have to consider various tradeoffs when considering how to transact, and what via which means your private keys are stored. You will need to consider how much privacy you need, how much security you need, and how important 'ease of use' and how many resources you want to dedicate to using bitcoin.

Very interesting. I'm going to download Electrum. If I may, what makes Electrum a bit less secure than the Bitcoin core wallet? Sorry if my questions are silly, I've been out of the loop for quite some time, lol.
Electrum only downloads the block headers compared to bitcoin core downloading and verifying every block since the genius block. This makes it slightly less difficult to subject you to a sybil attack in order to make you believe you have received a transaction that you haven't. In practice, the risk of a sybil attack using both bitcoin core and electrum is near zero.

In the past, malicious servers have been able to use mass social engineering to trick electrum users into downloading a malicious version of electrum that would be malware. The ability to do this has largely been curtailed.
137  Other / Beginners & Help / Re: Hardware wallet or Bitcoin Core wallet? on: September 25, 2022, 10:46:22 PM
I'm going to look into Electrum (I have to be honest, I haven't heard of it before)
Using Electrum is a lot less resource intensive than running a full node in exchange for only a small reduction in privacy. The reduction in security when using Electrum is close to zero (in my opinion).


As you may have noticed with my two posts in your thread, you have to consider various tradeoffs when considering how to transact, and what via which means your private keys are stored. You will need to consider how much privacy you need, how much security you need, and how important 'ease of use' and how many resources you want to dedicate to using bitcoin.
138  Other / Beginners & Help / Re: Hardware wallet or Bitcoin Core wallet? on: September 25, 2022, 10:02:45 PM
I would suggest using a hardware wallet. Using a trezor or ledger is not quite the same as using cold storage, but the security is up there. There ease of use/security tradeoffs make using a HW wallet ideal.

You can use most HW wallets with most major wallet software, although I don't think many (any?) are compatible with bitcoin core.

Although you did not specify, I got the feeling after reading your post that you were considering using a "hot" wallet using bitcoin core as your first choice.
139  Other / Politics & Society / Re: [Rumor check] Chinese President Xi Jinping under house arrest? on: September 25, 2022, 09:58:58 PM
You don’t house arrest dictators. They would either be imprisoned or assassinated.
China often imposes a "house arrest" on political dissidents. This is a way to make it appear the person is not being imprisoned, while still restricting their freedoms, and being able to monitor their communications with others (so these people can be "kept in line").

I don't think there is any kind of Coup going on in China right now, as this is not being reported by any reputable news sources. However, if this were happening, I think Xi being under "house arrest" would likely be a first step.

I also know that Xi has a very tight grip on the CCP and the Chinese government. His loyalists are in positions of authority.
140  Other / Meta / Re: Tables of users with the most merits earned (more than 1500 merits) on: September 25, 2022, 09:54:14 PM
Also, I would have expected a constantly decreasing list, from 1,500+ up to 10k+. It's surprising that more members have over 2,500 merits, than those over 2k, but that's likey a result of the gap from 2.5k up to 5k+.
There are some "power users" of the forum who are very active, very insightful, and very helpful, all of which tend to result in people getting merit.

Most people who ever get any merit receive very little (the overwhelming majority of "users" never receive any merit). The few that do get merit tend to get a LOT. I can also say from personal experience that right before I reached various milestones, I would get a sudden surge in merit received, and that surge would continue for a while after I reached said milestone. I am not sure if this was because I was motivated by the milestone, or if people wanted to help reach the milestone, and once it was reached, my other posts were noticed.
Pages: « 1 2 3 4 5 6 [7] 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 ... 192 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!