🔔【ICO】 HODLER HARDWARE WALLET, PAYMENT TERMINAL, TOP100 COINS + TOKENS

[HODLER_TECH]

15 minutes

[tl3w1]

You've got a good list of exchanges you've submitted applications to.  Are you going to expand on the applications submitted, like to Coinexchange.io or stocks.exchange?

[JanEmil]

You've got a good list of exchanges you've submitted applications to.  Are you going to expand on the applications submitted, like to Coinexchange.io or stocks.exchange?

HDL are approved on forkdelta. So when people start to trade the token after ICO the coins show on https://coinmarketcap.com  

Trade HDL-ETH on Forkdelta

CoinExchange approve many coins so maybe the Hodler Team apply there.

Presale ended yesterday. Public sale start now. So early to ask for exchanges.

[Amathis0510]

When do you pay out dividends?

[HODLER_TECH]

When do you pay out dividends?

Please have a look here: https://hodler.tech/ICOdetails.html#roadmap22

Our first dividend payement will be in January 2020.

[muhammadahmad822]

I had the exact same thoughts/concerns as I read through the info on this.

[HODLER_TECH]

I had the exact same thoughts/concerns as I read through the info on this.

What do you mean? What are your concerns?

[HODLER_TECH]

As we have promised, we are ready to publish HODLER Budget Overview.

Our investors received it couple of weeks ago but now we can present it here.

The budget overview is for the first year of running. We estimate the production and sale to be in the region of 840,000 HODLERs annually. Our competitors sold 1mln devices in their first year, so we believe HODLER with its strong advantages should easily reach the calculated numbers. We are also prepared for demands exceeding our production capabilities.

Main principles:

• Annual sale in the region of 840,000 wallets
• Profit margins 20% net
• Installation of system on one device: 30min
• Packaging of one device: 3min
• All salaries as gross pay
• Production location: Western Poland

Please have a look and let us know what you think: https://hodler.tech/temp/HODLER_Budget_Overview.pdf

[JanEmil]

Do you have a godlike twitter account and do you want to help spreading the project?
New Twitter bounty --> https://bitcointalk.org/index.php?topic=3242856

[ruddler]

Maybe its in this thread somewhere.  But, tldr it all.  Will this be mine-able?  What is the minimum hodler holding to have a masternode?

[BBRS25]

Our vision: Bringing cryptocurrency transactions to the everyday life
Our mission: Provide a product that will allow secure transactions anytime and anywhere
The mission of our product: The highest level of security combined with functionality
The mission of our ICO: Building a community that gains financially with the success our company

https://hodler.tech/btct1/bitcointalk101.jpg

https://hodler.tech/btct1/bitcointalk102.jpg

https://hodler.tech/btct1/bitcointalk103.jpg

https://hodler.tech/btct1/bitcointalk106.jpg

https://hodler.tech/btct1/bitcointalk107.jpg

https://hodler.tech/btct1/bitcointalk108.jpg

https://hodler.tech/btct1/bitcointalk109.jpg

https://hodler.tech/btct1/bitcointalk111.jpg

https://hodler.tech/btct1/bitcointalk112.jpg

https://hodler.tech/btct1/bitcointalk113.jpg

https://hodler.tech/img/BuyHDL_button.svg

https://hodler.tech/btct1/bitcointalk114.jpg

https://hodler.tech/btct1/bitcointalk115.jpg

https://hodler.tech/btct1/teampartners.jpg

https://hodler.tech/btct1/sigactive11.jpg

https://hodler.tech/btct1/sigactive12.jpg

https://hodler.tech/btct1/sigactive13.jpg

https://hodler.tech/btct1/signature21.jpg

https://hodler.tech/btct1/signature22.jpg

https://hodler.tech/btct1/signature23.jpg

https://hodler.tech/btct1/signature24.jpg

Warm welcome to all of you.

I would like to present our new project which is also our first ICO.

Briefly about us:
We are a group of people working together since 2006, we have created several large IT projects, applications, ERP system, we have been focusing mainly on the cryptocurrency industry for several years. We have created an auto-trade application for several exchanges, we are working on the Bitcoin Legend project, we have also made bots for arbitration on exchanges (mainly for our own use), we have developed some interesting strategies on Tradingview, we have started the Crypto Analyzer project which will be developed in the future.

We have always lacked a product that we would like to create on our own, it is a secure hardware wallet which would also have all the advantages of popular free applications, that is:

- a large number of supported coins
- the ability to make payments without using a computer
- convenient interface allowing to make convenient payments with cryptocurrencies

All of this would be well protected against all kinds of frauds, scams, thefts and burglaries, just as it is done in Ledger and Trezor hardware wallets. We would like to base our wallet on a smartphone that would have our own version of operating system installed, mainly Linux (Open Source) in order to eliminate the possibility of data leakage caused by the increasingly popular malware which steals money from ordinary Android applications.

The security design of our wallet is described in more detail here: https://hodler.tech/docs/SecurityDescription.pdf
Whitepaper of the project: https://hodler.tech/docs/Whitepaper_HODLERF.pdf
In addition, we would like the device to have such capabilities as those provided by terminals in  shops, i.e. after its purchase, the configuration of connection to a cryptocurrency exchange, would allow us to accept cryptocurrency payments without the use of coinpayments or inpay-type intermediaries.

Other functions that we will implement in our wallet are as follows:
- A GPS localizer that makes it easier to find it or even recover it after a theft.
- HODL your coins function, i.e. the possibility of blocking funds in the wallet that you would like to keep for a long time. You will be able to declare the date of their unlock without being able to change it.
- Reading addresses through an OCR application, using a built-in camera, so that you don't need to write long addresses if you have to pay for something but don't have the possibility of using a QR code.
- The number of stored types of cryptocurrencies - about 100 largest + all ETH, NEO based tokens and other cryptocurrencies that will have the function of generating them.
Backup in the form of a seed which will allow you to recreate the wallet from a key written on paper, and automatic backup of private keys which will be compatible with official clients of each cryptcurrency, so that in case of a fork, you do not need to transfer coins to unprotected wallets, but only recover them in the device itself, fully safely and without the possibility of losing your funds, which we have to reckon with today. Only the indicated private keys will be sent to the cloud, the original ones will be secured only on the device.
- Possibility to purchase only the operating system with an integrated wallet application for people who would like to use any of the supported smartphones from popular manufacturers.

At the moment there is no such device and the market for them is large enough. The main competitor, Ledger wallet, is not able to use cryptocurrencies without connection to a computer, but according to Bloomberg, in 2017, it earned more than USD 55 million and is not producing enough devices to satisfy the demand.

We are waiting for your questions and suggestions.

[HODLER_TECH]

Maybe its in this thread somewhere.  But, tldr it all.  Will this be mine-able?  What is the minimum hodler holding to have a masternode?

HODLER is a hardware wallet designed for allowing secure storage of coins and secure cryptocurrency transactions (making and taking payments) anytime and anywhere.

[HODLER_TECH]

HODLER hardware prototype will be ready by the end of April 2018.

[JanEmil]

HODLER hardware prototype will be ready by the end of April 2018.

That's soon 

[HODLER_TECH]

HODLER hardware prototype will be ready by the end of April 2018.

That's soon 

We have started work much earlier, thanks to our generous investors and we want to prove what HODLER can do asap.

[Dasengineer]

I would like to see competition in the field of hardware wallets. Ledger and Trezor are both good and doing its job, but in future with mass adoption of crypto people shouldn't bother themselves to bring the laptop with them to send crypto in secure way using your hardware wallet. So I support the idea and will look forward to further development.

[HODLER_TECH]

We agree. In the near future, a universal and secure wallet that allows payment and accepting payments must exist on the market. We're just creating it. Thanks for your support.

[cryptodad420]

HODLER hardware prototype will be ready by the end of April 2018.

That's soon 

We have started work much earlier, thanks to our generous investors and we want to prove what HODLER can do asap.

Wow this is so great! Can't wait

[JanEmil]

Hello, your rating was updated! https://icoholder.com/en/hodler-tech-20240

GOOD rating. Social Media could use a little more. But the importent stuff are very good.
Congratulations 

[blockaudit]

Okay, HODLER_TECH, how do you plan on sandboxing the email client, and how will the emails work in a way that prevents you from tampering with them? I don't think it would be feasible to make each device a mail server, so the address would have to be on a central mailserver controlled by you (unless you have some way around it). The emails would not be encryped, so you could easily MITM the address. Also, what prevents code execution from an email?

You got right, we will put mail deamons in our infrastrcuture, not in a wallet itself. By using 7bit ASCII only e-mails (aka plain/text) with hardcoded 255 length limit, exploiting this feature is hard, because there won't by any plugins,images etc. support, so potential attack vector should be based on MITM as you said or exploiting text but without UNICODE support is quite very hard if not impossible. The only threat i know with plain/text is EICAR Test-file, I will post it here, maybe some AV will trigger alert

Code:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

About Man in the Middle thread. Wallet cannot use standard protocols to handle e-mails like SMTP or IMAP, it won't be safe.
To prevent attack, connection between mail application in wallet and "mail server" will be encrypted in safe way, unbreakable without quantum computers.

tl;dr

>RCE prevention due to spartan protocol for emails content and app sandboxing
>MITM prevention with point-to-point safe encryption with signed data

Thanks for a good response, this explains quite a bit. What prevents you (the central server) from changing addresses before relaying the address to the wallet? Others might be unable to MITM, but you would be able to from what I gather, as well as anyone with access to your mailservers.

Just to add some additional color here (assuming we got the context correct):

- virtualization (hw-assisted software isolation) > sandboxing (pure software isolation) for the mail client

- TLS/SSL would make sure there's no MITM for data in transit, going from one place to the next

- code execution from a email is possible only if your mail client has a very serious unknown bug (possible, yet unlikely these days, especially if you're using web-based services gmail, etc), if you explicitly click through all the warnings and run some executable that bypasses any provider filters that compromises the system or you get phished and again explicitly click through 'yes im sure i want to run this malicious program' routine

- end-to-end email encryption is possible if you set it up properly, but its more efficient to just use pgp to encrypt the message in the first place so you don't have to worry if it's even intercepted or stolen on the way there, or if they get access to it later as it's currently too expensive to be successful in attacking the 2048-bit or more (today, that will change in the future though, so forward secrecy helps here); I think this is what was meant by "point-to-point safe encryption with signed data", as long as you 1) trust the signer and 2) don't lose the keys.

- sandboxing the mail server itself is an honorable mention, but just hardens things a bit and not sure if it's relevant for your threat model here

- wallet should be using TLS/SSL in every outside comm it does related to HTTPS or SMTPS/IMAPS

- AVs actually parse a ton of data and make mistakes themselves, often resulting in vulnerabilities and ironically getting users compromised. Just use VT or their APIs and if there's any bugs in the AVs, it's their problem and not yours.

- "unbreakable without quantum computers", eh if someone wants to break it bad enough, they'll hack your server and replace the software with backdoored versions, steal your keys or phish to get your credentials, etc and get around the whole encryption problem

- are you sure there's no OSS dependencies, plugins, etc adding to your attack surface? hard to know without going through the app and writing things down, version numbers, etc and making sure all libraries are up to date. also unclear how UNICODE supports helps or hurts here, but I guess it would add attack surface, yet an afterthought compared to all the other potential attack vectors.

These are the kinds of problems our team deals with to come up with solutions all the time, although most of the bugs are just avoidable coding errors which cause users to get compromised. Better to have security experts take a look if you're not confident in the security of your code.