Bitcoin Forum
November 08, 2024, 05:52:57 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: What risk is there creating a cold storage on a public computer considering...  (Read 409 times)
Dabs
Legendary
*
Offline Offline

Activity: 3416
Merit: 1912


The Concierge of Crypto


View Profile
January 23, 2021, 07:00:12 PM
 #21

Cold storage implies at least an air gap. Public computers are almost always infected and most that you can rent have some sort of monitoring software (or hardware) installed.

If you want something almost as secure, do it on a phone that you have just factory reset.

Blowing up the computer shop is for movies.

Quote
Robert Clayton "Bobby" Dean: "What the hell is happening?"
Edward "Brill" Lyle: "I blew up the building."
Bobby: "Why?"
Brill: "Because you made a phone call!"
 - Enemy of the State.

Theb
Hero Member
*****
Offline Offline

Activity: 1680
Merit: 655


View Profile
January 23, 2021, 10:26:51 PM
 #22

If you want something almost as secure, do it on a phone that you have just factory reset.

If you are talking about having an extra phone and making it as a cold storage where he would just download an electrum wallet and after that be disconnected to the internet then I think this is a much better option for him but of course the problem here would be the reliability of that extra phone if it can withstand any hardward issues in the future. If the problem here mainly is you not having a personal computer I think the best alternative here is if you can't buy one ask someone who you are close with first like a family member perhaps and scan first for any viruses and malware before doing the method you already know. At least in this way you have some privacy in a creation of your cold storage.

..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
ranochigo
Legendary
*
Offline Offline

Activity: 3038
Merit: 4420


Crypto Swap Exchange


View Profile
January 24, 2021, 02:18:33 AM
 #23

If you are talking about having an extra phone and making it as a cold storage where he would just download an electrum wallet and after that be disconnected to the internet then I think this is a much better option for him but of course the problem here would be the reliability of that extra phone if it can withstand any hardward issues in the future.
Can't see how that's an argument at all. Unless you bring your phone around to dunk in the ocean and lakes, I don't think phones are that unreliable. There's a reason why the wallet always asks the user to write down the seeds on a piece of paper and to keep it safe. In the event of any hardware failure, the user can just restore it to another phone or device.

Old laptops are fairly cheap nowadays, if you purchase one, it could be a good investment and would probably serve as a decent airgapped wallet if you run a LiveCD using a USB flash drive.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Theb
Hero Member
*****
Offline Offline

Activity: 1680
Merit: 655


View Profile
January 24, 2021, 09:33:38 PM
 #24

If you are talking about having an extra phone and making it as a cold storage where he would just download an electrum wallet and after that be disconnected to the internet then I think this is a much better option for him but of course the problem here would be the reliability of that extra phone if it can withstand any hardward issues in the future.
Can't see how that's an argument at all. Unless you bring your phone around to dunk in the ocean and lakes, I don't think phones are that unreliable. There's a reason why the wallet always asks the user to write down the seeds on a piece of paper and to keep it safe. In the event of any hardware failure, the user can just restore it to another phone or device.

Old laptops are fairly cheap nowadays, if you purchase one, it could be a good investment and would probably serve as a decent airgapped wallet if you run a LiveCD using a USB flash drive.

I'm talking about personal experience here. When I have bought a new phone and just kept my old (working) phone in one of my storage after a couple of months when I decided to open my old phones to transfer some contact numbers it wasn't turning on. Now if I made my old phone into a cold storage during that time then I have created a big problem at present. Yeah old laptops might be a good idea but only if he will be buying one from a reliable store probably one of those refurbished ones. Just by buying old laptops or just second-hand ones without knowing the real running condition of the laptop will just give him the same problems of having an old unreliable phone.

..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
Dabs
Legendary
*
Offline Offline

Activity: 3416
Merit: 1912


The Concierge of Crypto


View Profile
January 25, 2021, 02:20:17 PM
 #25

I don't know what phones you have or used, but I have some 5 year old phones with me still working today. Samsung J1 (2016). I believe they were still being sold up to last year as brand new for around $100 USD.

You can regularly get refurbished old desktops for below $100 as well, they can all run the latest update of Windows 10. You'll want to add a keyboard, mouse, cheap monitor and maybe a webcam, but you can keep that machine behind an air gap and completely offline.

Kakmakr
Legendary
*
Offline Offline

Activity: 3542
Merit: 1965

Leading Crypto Sports Betting & Casino Platform


View Profile
February 02, 2021, 04:43:14 PM
 #26

"Tails" come with a standard old version of Electrum, so you have to update that version to the latest version and the only way to do that is to enable a Persistent volume. I think enabling a Persistent volume on Tails defeats the purpose of a clean boot with Tails.  Roll Eyes

I use a vanilla flavor the latest "Tails" for the creation of my paper wallets. (for the clean boot) and then I use bitaddress.org to create the paper wallets. (I download the script and then I go offline to create the wallets)  Grin

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
ranochigo
Legendary
*
Offline Offline

Activity: 3038
Merit: 4420


Crypto Swap Exchange


View Profile
February 02, 2021, 04:56:17 PM
 #27

"Tails" come with a standard old version of Electrum, so you have to update that version to the latest version and the only way to do that is to enable a Persistent volume. I think enabling a Persistent volume on Tails defeats the purpose of a clean boot with Tails.  Roll Eyes
It's a cold storage. The version available on Tails is sufficient to generate the seeds and it shouldn't go online at all. Using outdated Electrum is fine, there isn't any concurrent vulnerabilities present in the installed binaries on the latest Tails that would impact the security.

I use a vanilla flavor the latest "Tails" for the creation of my paper wallets. (for the clean boot) and then I use bitaddress.org to create the paper wallets. (I download the script and then I go offline to create the wallets)  Grin
Paper wallets are actually not very great to use. You'd have to use a printer without any wireless connectivity, ensures that it isn't stored in the ram to ensure that the paper wallets remains as an offline cold storage. If you don't print it out, then you can't store it without the persistent storage either. If you were to use an OS for that already, might as well just use the Electrum that is provided on it. Needless to say, Bitaddress doesn't even have Segwit on it and it's arguable that using an offline Electrum *could* be potentially safer than trying to download a script online to use it in a browser.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
PrimeNumber7
Copper Member
Legendary
*
Offline Offline

Activity: 1666
Merit: 1901

Amazon Prime Member #7


View Profile
February 03, 2021, 04:11:09 AM
 #28

Tails is designed and maintained by the NSA, and is funded by the government.
Follow the money.

Aren't the same sources telling that ToR and also Bitcoin were created by NSA?
TOR was actually created by the US Navy, although it has been open source since its creation.


Don't use a public computer to create cold storage private keys. Public computers often have surveillance tools installed so whoever owns the public computer can monitor its usage. Even if this was not the case, there is the risk that someone has installed malware on the computer, or that the private keys will remain in memory after you finish for the next person to find.

It would be best if you were to purchase any equipment for a cold storage device in person without using any kind of order-ahead type service aka you pick up the equipment off the shelf at the store. You should also maintain possession of any equipment used to generate cold storage private keys after you have created them.
Wind_FURY
Legendary
*
Offline Offline

Activity: 3094
Merit: 1929



View Profile
February 03, 2021, 05:19:21 AM
 #29

It's almost the same price as a chromebook  Grin
if he gonna store some bitcoin in cold storage, I'm sure he is rich enough to afford it.
btw the cheapest cold storage wallet is probably Blockstream Jade, which is only 40 USD.


I believe it’s safer to buy hardware to use for Bitcoin, that will not be known that you will use it for Bitcoin. This especially rings true after the Ledger privacy leak. Plus we shouldn’t trust third-parties anymore, not when Bitcoin is going to 6 digits. EVERYONE will be going after the thing they want most from you. Your Bitcoins.

██████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
██████████████████████
.SHUFFLE.COM..███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
█████████████████████
████████████████████
██████████████████████
████████████████████
██████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
██████████████████████
██████████████████████
██████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
.
...Next Generation Crypto Casino...
Dabs
Legendary
*
Offline Offline

Activity: 3416
Merit: 1912


The Concierge of Crypto


View Profile
February 03, 2021, 05:04:15 PM
 #30

You can probably use Tails, use Persistent volume, and update using an offline download. Still keeps it offline... But I would still not use any public computer, better to get your own.

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!