Do not have high amount of money on an online device.

[_act_]

The second quote below will shock you if you have not read about it before.

You can read the news yourself if you click on this link: https://cointelegraph.com/news/iphone-17-memory-protection-boosts-crypto-security

This is the part that I like about the news:

“Security improvements reduce overall risk but don’t make devices invulnerable,” Hacken said, asking users to be vigilant and expect new vulnerabilities.

Also do not think your phone is not vulnerable but you can learn how to avoid hacks to significantly minimize how you will be vulnerable to hackers.

Another most important part is where I saw that people should not have huge amount of coins on a wallet on their online device. You can be an expert and still have a vulnerable wallet. You can read this about it:

Apple’s crypto users have been facing serious security threats. Last month, it was revealed that a zero-click vulnerability allows attackers to compromise iPhones, iPads and Macs without user interaction. Apple released security patches across multiple OS versions to fix the flaw.

What if you are a victim before the security patches.

[Zoomic]

No matter how informed or an expert you are, you could also be vulnerable, if not from your end, it could be from the device side or the manufacturers. That is why I say that since you are online, you are not 100% safe. Most experts know about not holding huge amount online, but they ignore it because of convenience or laziness. This industry is a respecter of no man.

_act- please correct your quote so that it can be clickable.

[hugeblack]

The cost of creating/buying an airgapped device is less than $100, which is much cheaper than purchasing an iPhone or any other locked-source device for absolute security.
The memory-protection update is more likely to be associated with physical attacks, so I don't think it will significantly impact online attacks. The best solution is to learn how to properly manage airgapped devices while generating sufficiently random seeds.

[stadus]

It’s always good to know how to minimize risk. No matter how careful we are with securing our online wallets or apps where we keep money, there’s always a chance of vulnerability. The only thing we can really do is reduce that risk, and one way is to not keep everything in just one wallet.

For me, 2FA is also a big help, especially the type that sends text verification before you can access your account. Yeah, it’s a bit of a hassle, but if you value security more than convenience, that’s one of the best ways to protect your funds.

As for me, thank God I haven’t experienced getting hacked yet - maybe because I don’t really keep big amounts, so I’m not much of a target, lol.

But thanks for the advice, this is really helpful especially for newbies who are still unaware of how to improve the security of their accounts and devices.

[Zaguru12]

No matter how informed or an expert you are, you could also be vulnerable, if not from your end, it could be from the device side or the manufacturers.

Wasn’t it just this week that we heard an expert developer from NPM got hacked through phishing, this phishing attack is usually considered one of the weakest attacks but it still got such an expert, so as long as you’re online you’re not save.

The cost of creating/buying an airgapped device is less than $100, which is much cheaper than purchasing an iPhone or any other locked-source device for absolute security.

Exactly you cannot get an iPhone with that amount except you’re going for all this lower iPhones before XR which are more likely to lose supports for upgrade too. This is even less costly than some hardware wallets, although this hardware wallets are also less expensive to an IPhone 11 now which is considered not so high again. For me I just think it’s a thing of laziness and negligence that many still have huge funds on online device. Any amount above $1k I think it is best to sacrifice $100 to get a cold wallet.

Airgapped wallet set up isn’t rocket science everyone can learn it and set up well and use it properly if they truly decide to learn, if it is tricky then there is the hardware wallet which is more convenient

For me, 2FA is also a big help, especially the type that sends text verification before you can access your account. Yeah, it’s a bit of a hassle, but if you value security more than convenience, that’s one of the best ways to protect your funds.

In as much as this certainly helps to reduce risk than a wallet without 2FA but with the attack reported by OP will the 2FA actually have any impact because this kind of attack actually usually gets information from everything on the phone or the online device, so for informations or codes sent to Gmail it can actually get access to that. For 2FA on wallet like electrum once you have the main seed phrase exposed the person break it out, so I seriously doubt if it can have much of any impact in this regard

[Peanutswar]

Prevention is better than anything else, the reason why some of the software, and applications we are using requires an update, such as patches, bug fixes and feature inclusion because of the users need at the same time the security of the system, if you are just a small time business seems not much invested in security just okay but still make sure there is because if the unexpected happens such possible attacks that might risk your business but seems small percentage of this happen most likely with the high tier organizations or business there are some hackers keep trying to compromise the system reason why its good to have updates to avoid this kind of attacks. Its okay spend money in your safety than lossing for nothing.

[Aanuoluwatofunmi]

The second quote below will shock you if you have not read about it before.

You can read the news yourself if you click on this link: https://cointelegraph.com/news/iphone-17-memory-protection-boosts-crypto-security

This is the part that I like about the news:

“Security improvements reduce overall risk but don’t make devices invulnerable,” Hacken said, asking users to be vigilant and expect new vulnerabilities.

Also do not think your phone is not vulnerable but you can learn how to avoid hacks to significantly minimize how you will be vulnerable to hackers.

We cant do in cryptocurrency without being updated with the ongoing development and information needed for our own security and other benefits, some have already made some mistakes which they never thought could have led to what they saw.

I also like the fact that if you're going to use a wallet safely, ensure its on an air gapped device, which talks more about avoiding the internet connectivity on the device we are using for our wallet and the likes, which this is one of the safety ways we can also use.

[stadus]

For me, 2FA is also a big help, especially the type that sends text verification before you can access your account. Yeah, it’s a bit of a hassle, but if you value security more than convenience, that’s one of the best ways to protect your funds.

In as much as this certainly helps to reduce risk than a wallet without 2FA but with the attack reported by OP will the 2FA actually have any impact because this kind of attack actually usually gets information from everything on the phone or the online device, so for informations or codes sent to Gmail it can actually get access to that. For 2FA on wallet like electrum once you have the main seed phrase exposed the person break it out, so I seriously doubt if it can have much of any impact in this regard

Of course it’s not safe once your system gets compromised, but what I meant is it only helps minimize the risk, not fully remove it. The best way to handle risk is still to spread your funds, don’t keep everything in one wallet that’s connected to your phone. And with this news, I think they’re talking about the advanced feature of the iPhone 17. I don’t even use iPhone myself, but you know how it goes, hackers will always adapt no matter what phone or tech comes out.

[tech30338]

The second quote below will shock you if you have not read about it before.

You can read the news yourself if you click on this link: https://cointelegraph.com/news/iphone-17-memory-protection-boosts-crypto-security

This is the part that I like about the news:

“Security improvements reduce overall risk but don’t make devices invulnerable,” Hacken said, asking users to be vigilant and expect new vulnerabilities.

Also do not think your phone is not vulnerable but you can learn how to avoid hacks to significantly minimize how you will be vulnerable to hackers.

Another most important part is where I saw that people should not have huge amount of coins on a wallet on their online device. You can be an expert and still have a vulnerable wallet. You can read this about it:

[quoe=https://cointelegraph.com/news/iphone-17-memory-protection-boosts-crypto-security]Apple’s crypto users have been facing serious security threats. Last month, it was revealed that a zero-click vulnerability allows attackers to compromise iPhones, iPads and Macs without user interaction. Apple released security patches across multiple OS versions to fix the flaw.

What if you are a victim before the security patches.
[/quote]
I think mobile phone are the most vulnerable like androids, but now iOS also been the target with the evolving technology, hackers also now targeting other os, even Linux are not safe anymore, with ever ending heights of technology, bad guys also achieve another level of skills and can crack even a sophisticated protection, and OP is right don't put money on your mobile devices, because malwares can crawl and get what they need to break those securities, and also as a reminder that nothing is safe now.

[hd49728]

Of course it’s not safe once your system gets compromised, but what I meant is it only helps minimize the risk, not fully remove it. The best way to handle risk is still to spread your funds, don’t keep everything in one wallet that’s connected to your phone. And with this news, I think they’re talking about the advanced feature of the iPhone 17. I don’t even use iPhone myself, but you know how it goes, hackers will always adapt no matter what phone or tech comes out.

It can be a physical or software issues so hot wallets basically are never safe to store big fund. If you store big fund on a phone, you will have trouble some time in the future like you lose it somewhere, it breaks down physically or it has technical issues or hacks, whatsoever issues. You can have problems with smart phones from all brands, not only iPhone from Apple so security-wise practice is the same for all phone brand companies.

Phones are more sensitive and vulnerable with technical, physical issues as well as online threats from hackers. Lastly, the advice is always store big fund in cold wallets and always have different wallet backups for a single wallet. Even it is a hot wallet on a phone, you must have different wallet backups and this practice is like a standard.

[348Judah]

Our assets are expected to be on a non custodial wallet and not custodial wallet, then also, the devices we often use for internet connectivity may be set apart to the one which have our wallet in it, so that we don't comprise things all by ourselves, had it been some have been aware of how these vulnerability come to be, they wouldn't have gone through the path taken that led to the loss of their asset after being attacked.

[coyhasmon]

The second quote below will shock you if you have not read about it before.

You can read the news yourself if you click on this link: https://cointelegraph.com/news/iphone-17-memory-protection-boosts-crypto-security

This is the part that I like about the news:

“Security improvements reduce overall risk but don’t make devices invulnerable,” Hacken said, asking users to be vigilant and expect new vulnerabilities.

Also do not think your phone is not vulnerable but you can learn how to avoid hacks to significantly minimize how you will be vulnerable to hackers.

Another most important part is where I saw that people should not have huge amount of coins on a wallet on their online device. You can be an expert and still have a vulnerable wallet. You can read this about it:

Apple’s crypto users have been facing serious security threats. Last month, it was revealed that a zero-click vulnerability allows attackers to compromise iPhones, iPads and Macs without user interaction. Apple released security patches across multiple OS versions to fix the flaw.

What if you are a victim before the security patches.

Nothing is really invulnerable, even your offline devices are vulnerable to different types of offline attacks. It is all about analyzing the threat vectors and making a balanced strategy of wallets that relates to how much you have, how much you can lose and your use habits. We should not force people into wallets if it does not fit their usage style. Some are very active mobile users and like paying with the Bitcoin on the go. Others prefer using desktop wallets.

A proper distribution and analysis is key, with the major part of your stack being in cold storage or a hardware wallet.

[programmer3666]

No matter how informed or an expert you are, you could also be vulnerable, if not from your end, it could be from the device side or the manufacturers.

Wasn’t it just this week that we heard an expert developer from NPM got hacked through phishing, this phishing attack is usually considered one of the weakest attacks but it still got such an expert, so as long as you’re online you’re not save.

The cost of creating/buying an airgapped device is less than $100, which is much cheaper than purchasing an iPhone or any other locked-source device for absolute security.

Exactly you cannot get an iPhone with that amount except you’re going for all this lower iPhones before XR which are more likely to lose supports for upgrade too. This is even less costly than some hardware wallets, although this hardware wallets are also less expensive to an IPhone 11 now which is considered not so high again. For me I just think it’s a thing of laziness and negligence that many still have huge funds on online device. Any amount above $1k I think it is best to sacrifice $100 to get a cold wallet.

Airgapped wallet set up isn’t rocket science everyone can learn it and set up well and use it properly if they truly decide to learn, if it is tricky then there is the hardware wallet which is more convenient

For me, 2FA is also a big help, especially the type that sends text verification before you can access your account. Yeah, it’s a bit of a hassle, but if you value security more than convenience, that’s one of the best ways to protect your funds.

In as much as this certainly helps to reduce risk than a wallet without 2FA but with the attack reported by OP will the 2FA actually have any impact because this kind of attack actually usually gets information from everything on the phone or the online device, so for informations or codes sent to Gmail it can actually get access to that. For 2FA on wallet like electrum once you have the main seed phrase exposed the person break it out, so I seriously doubt if it can have much of any impact in this regard

surely 2FA is helpful!! but once your device itself is somehow compromised then the full protection may no longer apply to you again because the attacker can still access your emails, some codes & even your wallet if your seed phrase is kind of exposed. that is why relying only on 2FA is kind of not enough as well. i think the safest way is still to keep large funds on an airgapped device or a proper hardware wallet. i feel spending around $100 for extra security is worth it compared to losing thousands, i mean generally security is an expensive commodity, convenience should never be placed above security, especially when it comes to protecting your crypto portfolio.

[Jewan420]

We can never be 100% risk-free, no matter how educated or knowledgeable or expert you are about risk management, you can never be completely risk-free.

Maybe you can reduce the risk or keep yourself alert. As technology improves, the techniques of hackers are also improving and they are finding new weaknesses in new technologies.

So if you are connected to the internet, you are not at all risk-free. You can also be a victim of hacking or fraud at any time.

When storing valuable coins, you can use a device that you do not use regularly, that is, do not connect to the network too much. Or try to keep your assets in different wallets and on different devices instead of keeping them in the same wallet.

[Mpamaegbu]

Another most important part is where I saw that people should not have huge amount of coins on a wallet on their online device. You can be an expert and still have a vulnerable wallet.

No matter how tight proof or safe we assume a device is, it's still dependent on humans to maintain its security. I laugh whenever I read people talk about hardware wallet and how they're safer than online wallets. They forget that humans operate them and hackers are humans too. About leaving huge amount of coins in wallets as a bad thing, I don't know what to really make out of it. We get to read of admonitions that we shouldn't leave huge funds in Cexs, are we also going to be getting admonitions now not to leave same in online wallets too even when they're Web3 wallets?

[I_Anime]

Our assets are expected to be on a non custodial wallet and not custodial wallet, then also, the devices we often use for internet connectivity may be set apart to the one which have our wallet in it, so that we don't comprise things all by ourselves, had it been some have been aware of how these vulnerability come to be, they wouldn't have gone through the path taken that led to the loss of their asset after being attacked.

When I was into airdrop then I had to separate my devices . Because airdrop involves a lot of clicking of links which may lead to our device being vulnerable. So I had to separate it by getting another device, while I use the old one for airdrop farming and other crypto stuff related to clicking link just to keep my assets safe just like they say prevention is far better and experience is not always the best teacher to learn from despite it being the best teacher . Either your asset is being offline or online you just have to be careful.

[Merit.s]

I agree with you OP that cold storage is the best wallet to store your bitcoin offline and should be used to save huge amount of funds. Unlike, hot wallets that are vulnerable to attack which should be use to store funds for our daily needs or in a short term. Majority of crypto enthusiasts overlook at this key factor of security and allow their asset to be highly vulnerable to attack by keeping majority of their funds in hot wallets.

Don't be too lazy and learn a hard lesson from your mistakes, rather you should learn from others.

[Ojima-ojo]

Apple have is known for high security and privacy features the reason why their products are the most choice devices for young fork's into tech and other online activities.


This latest upgrade is quite needed considering how hacker's have attacked a lot of hardware and online wallets via the exploitation of the memory storage and stealing sensitive datas like wallet keys and saved passwords.


But with the current Apple upgraded Memory Integrity enforcement (MIE), features in iPhone 17 make a big turn from what we used to have and turning this iPhone into a good secured cold storage for those with large coins since there is guaranteed security assurance.


As we have always said saving sensitive online is not recommended regardless of the level of security you might think, so we need to operate with caution always.

[Patikno]

Apple’s crypto users have been facing serious security threats. Last month, it was revealed that a zero-click vulnerability allows attackers to compromise iPhones, iPads and Macs without user interaction. Apple released security patches across multiple OS versions to fix the flaw.

Sorry, I think the quote needs a fix, let me do a little change, so people can see it.

What if you are a victim before the security patches.

If someone falls victim before the newest security patches, then, I think it is a very big risk to experience a big loss, and if that means it is not the user fault, then there is a possibility that a user could file a lawsuit, if they become a victim, cmiiw.

So I think this incident is related to the title of the discussion you made, right? If so, I strongly agree to advise everyone not to store large amounts of money or crypto assets on online devices. Even if we need some to be stored on online devices, it is best to have an amount that can be tolerated in case of loss. Sometimes, I also often think about what things might make it possible for us to experience cyber attacks, so I think that it is better for us to store our wallets offline, especially wallets that are intended for savings in large amount. Because, I feel that any device connected to the internet still has vulnerabilities, whether it is due to our own carelessness, or direct attacks (like the news you mentioned).

By the way, I remember a quote from a movie about hacking that said "No System is Safe", and it was from the movie "Who am I" released in 2014, even though it is not a true story, it seems that it needs to be an important lesson. On the other hand, a famous figure once said that "Everything can be hacked".

Dan Kaminsky: No one should be surprised if a cyber attack succeeds somewhere. Everything can be hacked.

[Achalugo BTC]

No matter how informed or an expert you are, you could also be vulnerable, if not from your end, it could be from the device side or the manufacturers. That is why I say that since you are online, you are not 100% safe. Most experts know about not holding huge amount online, but they ignore it because of convenience or laziness. This industry is a respecter of no man.

_act- please correct your quote so that it can be clickable.

Exactly, no one is an expert in this journey of crypto, no matter how careful one is, one will one way or the way will always make mistakes that give them another experience or teach them more about crypto and this will make them to strategize their plans.