 Show Posts
|
|
Pages: [1] 2 »
|
--snip--
What is the worst that can happen?
What can these people with a malicious node do to my wallet?
Someone might found security vulnerability on library used by Sparrow wallet used to read JSON data, which could exploited to perform RCE attack. But take note that, 1. It's merely a theory. There's no need to worry or think about it, unless you're developer of Sparrow wallet. 2. Those malicious server don't even know which wallet software used by you. If they actively send data to everyone which contain invalid or malicious data, IMO it's just matter of time before someone detect it and warn others. So theory aside, a malicious node can only: -Don't forward my transaction (I would notice if the money didn't arrive) -Forward my transaction, but still leave the amount displayed on my wallet (I would also notice if the money arrives) If that's the only thing he could do, what benefit would he get from it? Could he manipulate my transaction data and change the recipient's wallet address in the background? (I would also notice this because I always compare the address on the hardware wallet) |
|
|
|
Yes a particular node can actually feed you wrong information due to its settings or configuration and that’s why you see almost all SPV wallets like electrum do not rely on just a single server or node. Example of This bad information can be a transaction which has been dropped by the node you are connected to but still kept by other nodes you are not connected, without knowing of this, the transaction could still propagate without you noticing at that moment. If that particular node should temporarily go offline you will certainly miss some data that took place then and that’s why we see two different nodes with deficit sometimes
1. It's true node/server operator can send manipulated data, but Sparrow (or any decent wallet) should check whether the received data is valid or not.
2. What malicious node/server can do usually limited to not returning data you expect (e.g. new transaction) or not relaying your transaction to other node.
3. You probably read about old security vulnerability which let malicious Electrum server send and show any data (which include phishing link).
Risks are similar like when you are using Electrum and other wallets with nodes from someone else.
They would be able to know all your address and transactions, and there is a small chance of connecting to malicious node.
What is the worst that can happen? What can these people with a malicious node do to my wallet? |
|
|
|
You will not have privacy is the risk. For privacy, run your own node or server with Tor.
I once read that the node operator could manipulate data and I could lose my money or that my payment would no longer be accepted by other node operators. Is that correct ? If you run your own Electrum server, it is like you run your own node because you will still connect to your own node before using your server. It means you do not depend on central server but your own node. So I do not see any disadvantage about this.
Yes, but if you don't run your own server, then you use Bitcoin Core and the public keys and credits are not encrypted on your computer. Is that bad ? Can a hacker do anything with the public keys? |
|
|
|
|
Hello everyone,
I have two small questions.
What are the risks if I connect Sparrow to a public server instead of my own full node?
What are the disadvantages if I connect Sparrow to my own full node instead of my own private Electrum server?
|
|
|
|
I know that Ethereum has a huge lead, but Cardano doesn't have to replace Ethereum. Cardano will find its own way. But it is still far too early for Cardano. We have: Blockchain 1.0 = BTC (store of value) Blockchain 2.0 = Ethereum (SmartContracts) Blockchain 3.0 = Cardano (DeFi & dApp) https://www.youtube.com/watch?v=sDwJA1AnsAY |
|
|
|
Maybe instead of Cardano, I think there is a possibility that Solana will be closer to Etherium someday.
I can't say that Cardano may or may not replace Ethereum, because anything is possible.
Also the major reason what I feel is that, ETH is the pioneer of smart contracting feature. Many other cryptocurrencies were launched after seeing the success of this smart contracting feature which ETH had introduced. It's nearly impossible to replace a Pioneer.
I don't think Cardano will overtake Ethereum either. But I believe that both will have their own niche and will coexist next to each other. I'm just wondering which niche Cardano will dominate  Think with Ethereum it is DeFi |
|
|
|
Cardano will not be able to replace Ethereum. because we can see that the ecosystem in Ethereum continues to develop rapidly. Not only in Layer 1 but layer 2 is also developing rapidly, such as Arbitrum which is also continuing to develop. ADA actually also has its own advantages. So I also think that both will go side by side and have their respective advantages and disadvantages.
What do you think Ethereum's niche will be and what will Cardano's be? I think not, cardano is lacking behind in this regard, let alone pursuing ethereum which supposedly requires cardano to have higher growth rate than ethereum. funnily enough over the course of this past 6 months cardano only rise double of its bottom, its kinda unrealistic to say that ethereum gonna be overtaken by cardano, its more realistic to say solana have higher chance overtaking ethereum.
Cardano's time is not yet, in this bull market Ethereum will shine but I think in the next bull market it will be Cardano. Of all the alternative Layer-1s you've chosen the one that has barely any adoption and user activity at all lol. Cardano doesn't even have native stablecoins yet. If there's an alternative L1 that will challenge Ethereum, it would be Solana and the Cosmos IBC ecosystem. Cardano is one of those L1s that I don't know why still has a huge fanbase despite not much activity occurring.
Solana with the 20th server failure  Cardano has the most stable and secure blockchain. The Haskell programming language alone is one of the most difficult languages in use. Cardano is still at the very beginning, in 4-6 years things will look different. For me, it is more suitable for Cardano to dominate the DeFi and dApp niche. But what would Ethereum be used for? As a payment? NFT & Gaming? Maybe Cardano would be the developer of the dApps and the platform where it runs would be Ethereum, but that would be very illogical. Or maybe like this: Ethereum = DeFi / dAPP Cardano = AI |
|
|
|
|
Do you think Cardano will replace Ethereum?
Personally, I think that both blockchains will develop in different directions in the future.
Both blockchains would therefore be relevant and coexist.
I personally think of something like this:
Ethereum = DeFi
Cardano = dApp
I also thought of something like this:
Ethereum = NFT & Gaming
Cardano = dApp & DeFi
|
|
|
|
Meines Wissens gibt es die in der CH ebenfalls nicht. Nein gibt es auch nicht, auf so ein Schwachsinn kommt nur Deutschland. Der Verlustverrechnungstopf wird mit hoher Wahrscheinlichkeit aber auch hier gekippt, da es als Verfassungswidrig angesehen wird. |
|
|
|
So hab ich es bisher jedenfalls gemacht und bisher lief das immer durch. Das mag aber sicher auch daran liegen dass kein FA Mitarbeiter Zeit und Lust hat nen paar tausend Transaktionen durchzuschauen. Ja bei mir kommen im Jahr c.a 40k an einzelne Funding Fee Transaktionen zusammen Vielen Dank für deine Hilfe |
|
|
|
Vielen Dank für die hilfreiche Antwort Rollover fees könntest du von dem Gewinn noch abziehen, die Zuordnung müsste aber wohl manuell erfolgen, was bei vielen trades einfach Aufwand ist. Macht man die Zuordnung nicht werden die Rollover fees meines Wissens wie Verluste gewertet, rechnen also auf die 20k Verlustbeschränkung an.
Den Abschnitt habe ich leider nicht ganz verstanden. Also wenn die Zuordnung manuell erfolgt, dann kann man es komplett absetzen. Wenn man die Zuordnung nicht macht, dann ist das absetzen beschränkt auf 20k. Was genau ist eine manuelle Zuordnung ? Transaktionsgebühren Börse-Wallet oder Auszahlungsgebühr für Fiat würde ich tendenziell als nicht anrechenbar einstufen, solange sie nicht für den trade essentiell sind. Ist aber mehr ein Bauchgefühl, also falls du bei deiner Recherche zu einem anderen Ergebnis kommst lass es uns gerne wissen.  Ja das habe ich mir ebenfalls gedacht, diese würden unter Werbungskosten fallen und somit schon durch den Pauschbetrag geregelt sein. |
|
|
|
|
Hallo liebes Forum,
habe da mal eine Frage die mich beschäftigt.
Soweit ich weiß, finden beim Margin-Trading mit Krypto als Colleteral 2 Steuervorgänge statt.
1)
Ich trade auf dydx dort zahle ich USDC ein und die werden hinterlegt als Colleteral.
Dann geh ich dort mit einer BTC Position long ( Margin-Trade / Differenzbetrag also keine echten BTC )
Wenn ich den Trade mit einem Profit von 100.000$ schließe, erhalte ich von dydx die 100.000$ in USDC.
Dieser Vorgang unterliegt der Abgeltungssteuer richtig ? ( Broker im Ausland )
2)
Wenn ich nun meine USDC verkaufe, und der USDC Kurs ist um 10% gestiegen dann habe ich von den 100.000$ jetzt 110.000$.
Diese 10.000$ Profit sind durch den Kursanstieg von USDC entstanden.
Dieser Vorgang unterliegt der Einkommenssteuer richtig ?
Hier entstehen aber jetzt mehrere Kosten die dem Trade und dem Exchange zuzuordnen sind.
Ohne diese Kosten die entstehen, kann ich die Position nicht öffnen, offen halten, schließen und ich kann meine USDC auch nicht in EUR exchangen um dann meine Steuern zu bezahlen.
- Gas-Fees um meine USDC von meiner MetaMask Wallet auf die Börse zu schicken
- Maker / Taker Gebühr für das öffnen der Position
- Funding Rate für das offenhalten der Position
- Maker / Taker Gebühr für das schließen der Position
- Gas-Fees um meine USDC von der Börse auf meine MetaMask Wallet zu schicke
- Gas-Fees um meine USDC von meiner MetaMask Wallet auf Binance zu schicken
- Exchange Gebühren für das Wechseln von USDC zu EURO
- Auszahlungsgebühr von Binance damit meine EUROS auf mein Bankkonto gelangen
Nun zu meinen Fragen:
Sind alle kosten die entstehen absetzbar ?
Sind einige Gebühren mit dem Pauschbetrag schon gedeckt und somit nicht absetzbar ?
Muss ich bei den Gebühren was beachten aufgrund "Verlustverrechnungstopf" oder gilt der Verlustverrechnungstopf nicht für Gebühren ?
|
|
|
|
Indeed, if Thorchain is on the list then Chainflip should be there too, as they seem to use similar concepts (they are basically AMMs).
I've created a separate category for this kind of tools, because they're not completely trustless but incentive-based (see my discussion with honglu69 above), but I think they still belong here as there is no single point of failure. Why they are not completely trustless ? They are DEX and use SmartContracts ( Open Source ) |
|
|
|
|
I have a quick question for you friends.
Is there a tutorial anywhere on how to set up a full node with Electrs + Tor on Windows?
I can't find anything about it.....
|
|
|
|
BIP39 Mnemonic = Recover everything
BIP32 Root Key = Recover everything from the HD-Wallet
Account Extended Private Key = Recover my BIP44 Wallet-address
BIP32 Extended Private Key = Recover my BIP32 Wallet-address
BIP39 mnemonic = recover everything from HD wallet with 12 to 24 word seed phrase or mnemonic. BIP32 root key = recover everything from the HD-Wallet with the BIP32 root key Account extended private key = recover BIP44 Wallet keys and addresses (the extended private key start from xpri) = recover BIP49 Wallet keys and addresses (the extended private key start from ypri) = recover BIP84 Wallet keys and addresses (the extended private key start from zpri) BIP32 Extended Private Key = recover BIP32 wallet keys and addresses Okey thank you very much i got it Seed and root key are the same, so i can secure my seed or i can secure my root key its the same ? |
|
|
|
I would advice you to use its html offline: https://github.com/iancoleman/bip39/releases/latest/Click on that link, download the html and use a text editor to open it on an airgapped device. Do not use the online version, for safety reason. What is most important is the seed phrase You can recover your wallet with BIP32 extended private key which defines HD wallet, be it legacy, nested segwit or native segwit. Your keys and addresses can be generated with the BIP32 extended public key. With extended private key, you can also get access to all your keys and addresses pertaining to an address type. Which means different derivation path which are legacy (BIP 44), nested segwit (BIP49) and native segwit (BIP84) for the different extended private key With extended public key, you can get access to all your addresses, but not your private keys, it can be used for watch-only wallets. Also different derivation path for the addresses which are legacy, nested segwit and native segwit. For the extended private key and extended public key: BIP44, legacy, the extended private key starts from xpri while the extended public key start from xpub, the address start from 1 BIP49, nested segwit, the extended private key starts from ypri while the extended public keystart from ypub, the address start from 3 BIP84, native segwit, the extended private key starts from zpri while the extended public key start from zpub, the address start from bc1q and what is the BIP32 Root Key and for what is this ?
It defines the path to HD (hierarchical deterministic) wallet. Before, the wallets that were existing were non HD wallets which means with each address, you have to backup its private key, but HD wallet makes it possible to just backup many child private keys with just a single key. You can read the beginning of this book chapter for it: https://github.com/bitcoinbook/bitcoinbook/blob/develop/ch05.asciidocOkey i hope i got it now. BIP39 Mnemonic = Recover everything BIP32 Root Key = Recover everything from the HD-Wallet Account Extended Private Key = Recover my BIP44 Wallet-address BIP32 Extended Private Key = Recover my BIP32 Wallet-address |
|
|
|
I would advice you to use its html offline: https://github.com/iancoleman/bip39/releases/latest/Click on that link, download the html and use a text editor to open it on an airgapped device. Do not use the online version, for safety reason. What is most important is the seed phrase You can recover your wallet with BIP32 extended private key which defines HD wallet, be it legacy, nested segwit or native segwit. Your addresses can be generated with the BIP32 extended public key. With extended private key, you can also get access to all your keys and addresses, but different derivation path which are legacy (BIP 44), nested segwit (BIP49) and native segwit (BIP84) With extended public key, you can get access to all your addresses, but not your private keys, it can be used for watch-only wallets. Also different derivation path for the addresses which are legacy, nested segwit and native segwit. and what is the BIP32 Root Key and for what is this ? |
|
|
|
Hello guys i need your help please i was creating a seed with https://iancoleman.io/bip39/it shows me some keys i dont understand.... for what are these keys and what can i do with these keys. BIP32 Root Key Account Extended Private Key Account Extended Public Key BIP32 Extended Private Key BIP32 Extended Public Key |
|
|
|
what is the xpub for then?
I read somewhere that you should keep them.
And you can't get your coins without the xpub
Xpub is the master public key, it can generate the addresses. But master private key is what that is most important, the seed phrase can generate the master private key while from the master private key, the master public key can be generated. If you have your seed phrases, you have your coins as you can recover it and spend it with the seed phrase (which can generate the master public key). ahh ok, well understood so far and the seed always creates the same private key and the private key always creates the same public key when restoring the wallet? So just like the seed always stays the same, do the private and public keys stay the same? |
|
|
|
So far you have the seed phrase, you can use it to recover your multisig wallet, the seed phrase can always generate the master private key and the master public key can always be generated if you have the seed phrase.
So far you are only the owner of the wallet, you can even use seed phrase all through without using the master public key.
I'm glad to hear that what is the xpub for then? I read somewhere that you should keep them. And you can't get your coins without the xpub Best regards |
|
|
|
|
