Attacks from exchanges to wallets and how to prevent these attacks?

[korakwinband]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges, is the wallet you recommend reliable? Do you think i should install Windows or Linux?

                                                                                                                                                                                                   korakwinband

[zabzob]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges, is the wallet you recommend reliable? Do you think i should install Windows or Linux?

                                                                                                                                                                                                   korakwinband

Linux is way more secure than Windows. Sparrow and Electrum wallets are among the most highly recommended and best for security.

[Stalker22]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges,

Good.  That is probably the most important lesson you will ever learn in crypto.  When you keep your money on an exchange, you dont actually own it. They are.  The only way to actually be in control is by moving your funds to a private, self-custody wallet where you hold the keys.

is the wallet you recommend reliable?

What wallet?  Do you have any specific one in mind?

Do you think i should install Windows or Linux?

Thats entirely up to you.  As another member already mentioned, Linux is generally a more secure OS than Windows, but do you actually have the time and patience to learn how to use it? (I assume you don't have much experience with it since you are asking this question.).  If you dont know how to keep your OS updated or how to manage permissions, you are just moving your risks to a different playground.

Have you considered getting a hardware wallet?

[BitMaxz]

Linux is way more secure than Windows. Sparrow and Electrum wallets are among the most highly recommended and best for security.

Linux is more secure, but no matter which of these operating systems you choose, your wallet remains vulnerable to hacking if you keep your device connected online.

So, to perfectly protect your wallet from hackers and online attacks, always keep your wallet disconnected to the internet either one works just fine but I prefer Windows since this one is easier to use than using Linux.

@OP I recommend if you don't know how to use Linux, you better use the Windows OS and make cold storage for your wallet. Mostly they use Electrum because you can make a wallet in the offline device and have a separate watch-only wallet to monitor your funds or create unsigned transactions that you can use later with your offline cold storage wallet.

If you choose to use a Linux OS, I prefer to install Tails OS. It has a built-in Electrum wallet; it was built for a cold storage wallet, way safer than just a normal OS that's always connected to the internet.

[Forsyth Jones]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges, is the wallet you recommend reliable? Do you think i should install Windows or Linux?

                                                                                                                                                                                                   korakwinband

You're on the right track, an exchange should never be used as a bank to store your money, for that, there are self-custody wallets like Sparrow, Electrum, and Wasabi...bluewallet, etc.

Regarding which OS to use, for bitcoin I recommend Linux (like ubuntu), but it gets a bit more difficult if you've never used it before. However, Linux used to be much more difficult in the past.

Use these sites below to learn more about wallets and services related to Bitcoin and privacy:

https://bitcoin.org/
https://bitlist.co/
https://learnmeabitcoin.com/
https://walletscrutiny.com/

[Yamane_Keto]

Hardware wallets, especially those with an air-gapped system, are the best choice for those who lack technical knowledge and have good investments. Buy a device, make sure it is open source, and Broadcasting the transaction by using hot wallet or connectting it with Sparrow.

[satscraper]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges, is the wallet you recommend reliable? Do you think i should install Windows or Linux?

                                                                                                                                                                                                   korakwinband

Linux is way more secure than Windows.

Are you sure?

I don't want to disappoint you but read this.

Out‑of‑box Linux is full of holes, so if you don’t tune it properly, you can get in for surprise.

I spend around one to two hours dayly hardening my xubuntu setup, and the work is far from complete because new issues appear constantly.

So, if you’re not  linuxoid Windows might actually be the right OS for you.

Regarding wallets,  solid hardware wallet can mitigate many security risks associated with OS. For Bitcoin I could recommend Passport Core, but its production has been discontinued in favor of their new device, namely Passport Prime. This device was developed from scratch, including its own OS, so in my view it needs to stand the test of time before it can be fully trusted.

[Forsyth Jones]

Hardware wallets, especially those with an air-gapped system, are the best choice for those who lack technical knowledge and have good investments. Buy a device, make sure it is open source, and Broadcasting the transaction by using hot wallet or connectting it with Sparrow.

HW isn't always a guarantee of everything, everything will depend on the user's experience and cleverness not to fall for phishing scams and handing over their seed phrase or passphrase on a silver platter to criminals.

the beginner should know the basics about: seed phrase, types of backups, privkeys, how to send and receive securely, and how coins are sercure.

But yes, HW especially airgapped, will always be the best thing, but being informed about Bitcoin and its fundamentals is essential.

Are you sure?

I don't want to disappoint you but read this.

Out‑of‑box Linux is full of holes, so if you don’t tune it properly, you can get in for surprise.

I spend around one to two hours dayly hardening my xubuntu setup, and the work is far from complete because new issues appear constantly.

So, if you’re not  linuxoid Windows might actually be the right OS for you.

As a Linux user, I struggle a lot to this day, but I don't give up. Just now, i managed to recover my Kubuntu Linux with the help of chatgpt. It turns out that my Kubuntu wasn't listed in the grub boot menu. I was unable to access my Linux for almost 1 month. Now I can access both my Windows 11 and my Kubuntu Linux via dual boot.

Regarding wallets,  solid hardware wallet can mitigate many security risks associated with OS. For Bitcoin I could recommend Passport Core, but its production has been discontinued in favor of their new device, namely Passport Prime. This device was developed from scratch, including its own OS, so in my view it needs to stand the test of time before it can be fully trusted.

So, the Passport Core has been discontinued? I didn't know that information, is it a good strategy to remove your entry-level device from the catalog? Because there are people who buy the cheapest device to get to know the brand, or who already think that the entry-level device is enough to meet their needs.

[satscraper]

So, the Passport Core has been discontinued? I didn't know that information, is it a good strategy to remove your entry-level device from the catalog? Because there are people who buy the cheapest device to get to know the brand, or who already think that the entry-level device is enough to meet their needs.

Yeah, judging from official announcementt Passport Core has been discontinued.

Regarding so called "entry level" read my thoughts I’ve expressed in  dedicated thread.

Briefly, in my view, by focusing entirely on Passport Prime they’ve taken a step backward rather than forward, because this device compromises on security for UX reasons.

[Lucius]

Are you sure?
I don't want to disappoint you but read this.
Out‑of‑box Linux is full of holes, so if you don’t tune it properly, you can get in for surprise.
I spend around one to two hours dayly hardening my xubuntu setup, and the work is far from complete because new issues appear constantly.
~snip~

When some people (even on this forum) repeat that Linux is in every way superior to any other OS, it becomes an unofficial truth, and as you say, the truth is a little different. It's not that it doesn't matter which OS you use, but those who live in ignorance and some of their own illusions find themselves in the same problem no matter what they use.

I've personally used Windows for decades and with a little common sense, good security software and regular updates, I can't remember the last time I had anything malicious on my computer. 

[dkbit98]

I'm conducting research on wallet reliability. And in line with these researches,i learned not to keep my money in the wallets of exchanges, is the wallet you recommend reliable? Do you think i should install Windows or Linux?

Linux is much better because they are not spyware like wind0ws OS, but I be careful and choose Linux that don't implement Age Verification crap.
As for wallets, you should choose open source non-custodial wallet, and if you want to get one lever higher and have more protection you can purchase good hardware wallet.
I would say that Electrum wallet is a good start on all operating systems.

[Forsyth Jones]

Are you sure?
I don't want to disappoint you but read this.
Out‑of‑box Linux is full of holes, so if you don’t tune it properly, you can get in for surprise.
I spend around one to two hours dayly hardening my xubuntu setup, and the work is far from complete because new issues appear constantly.
~snip~

When some people (even on this forum) repeat that Linux is in every way superior to any other OS, it becomes an unofficial truth, and as you say, the truth is a little different. It's not that it doesn't matter which OS you use, but those who live in ignorance and some of their own illusions find themselves in the same problem no matter what they use.

I've personally used Windows for decades and with a little common sense, good security software and regular updates, I can't remember the last time I had anything malicious on my computer. 

I echo your words, the learning curve for Linux is steeper, but those who manage to learn from basic+ to intermediate are already ahead of others, knowing the basic+ of security. I also don't remember the last time I caught any malware on either Linux or Windows11, I use both in my daily routine.

One thing Linux excels at is app updates, on Linux, we just need to run the command 'sudo apt update', and all software installed through the distribution's app store will be updated, whereas on Windows, we still need to update them one by one, manually (although some apps manage their own updates, like Trezor Suite).

Linux is much better because they are not spyware like wind0ws OS, but I be careful and choose Linux that don't implement Age Verification crap.
As for wallets, you should choose open source non-custodial wallet, and if you want to get one lever higher and have more protection you can purchase good hardware wallet.
I would say that Electrum wallet is a good start on all operating systems.

Age verification hasn't arrived here yet (i use Linux Kubuntu) it's something that doesn't make sense and shouldn't exist, especially not in an operating system.

[NotATether]

Never store your crypto on Windows computers.

The vast majority of exploits can be found there.

I would go one step further and install Red Hat-based distro. These have SELinux enabled which is extremely useful in keeping hackers' automated programs out.

If you do things like devops it's going to frustrate you a lot though so I don't recommend it.

[Lucius]

Never store your crypto on Windows computers.
The vast majority of exploits can be found there.
~snip~

That's generally good advice, but if you're not a person with bad online habits then even W10/11 isn't something you should be afraid of. I have had various hot wallets on a Windows computer in the past, I even have some today, and no one has ever hacked me because I didn't let it happen.

For a hacker to succeed in hacking a wallet, the user's cooperation is always required - do not download pirated content and do not click on suspicious links, you have avoided at least 90% of all possible online threats.

[Forsyth Jones]

Never store your crypto on Windows computers.
The vast majority of exploits can be found there.
~snip~

That's generally good advice, but if you're not a person with bad online habits then even W10/11 isn't something you should be afraid of. I have had various hot wallets on a Windows computer in the past, I even have some today, and no one has ever hacked me because I didn't let it happen.

For a hacker to succeed in hacking a wallet, the user's cooperation is always required - do not download pirated content and do not click on suspicious links, you have avoided at least 90% of all possible online threats.

Well, I've also never had my coins stolen on an updated Windows system, neither 10 nor 11, my current one. Actually, I like using Windows 11, I really enjoy using Linux, especially for accessing my hot wallets, I only don't use software wallets on Windows 11, only if I use with hardware wallets, otherwise, I do almost everything on it.

Regarding Linux, I'm still learning how to use it. Currently, my main linux flavour is Kubuntu Linux, but I have another notebook with Ubuntu and Linux Mint installed that I use occasionally. Linux Mint is very beautiful and functional, I'm amazed by its interface.

[PrivacyG]

I hate that I have to agree for once with most of you people, Linux is NOT an Operating System for the unexperienced or for the people who want to be lazy.  It is not only a steep learning curve but it is also a very tough one.  One of the first times I have ever tried setting up an Airgapped Linux, which was not even for Bitcoin storage purposes, I had a LOT of things to deal with.  When you try to install a package and you find out you can not because there are a few dozen dependencies missing, you realize things are not as easy as running an Executable file on a Windows Operating System.

Linux can also become not Safer at all than Windows if you do not know what you are doing in the Terminal and you are just following the instructions from Chat GPT or any other page of the Internet really.  If you want a 'Safe' Linux then get started with Tails.  It is amnesic however, which is a blessing and a curse.  The thing is.  Security was unfortunately never easy.  I do not know if it ever will be.

Or.  Just follow the typical advice and have an offline computer to use only for Bitcoin.  Then you could browse any thing you want on the other computer, no thing can go wrong with your Wallet any more.

[Forsyth Jones]

I hate that I have to agree for once with most of you people, Linux is NOT an Operating System for the unexperienced or for the people who want to be lazy.  It is not only a steep learning curve but it is also a very tough one.  One of the first times I have ever tried setting up an Airgapped Linux, which was not even for Bitcoin storage purposes, I had a LOT of things to deal with.  When you try to install a package and you find out you can not because there are a few dozen dependencies missing, you realize things are not as easy as running an Executable file on a Windows Operating System.

Linux can also become not Safer at all than Windows if you do not know what you are doing in the Terminal and you are just following the instructions from Chat GPT or any other page of the Internet really.  If you want a 'Safe' Linux then get started with Tails.  It is amnesic however, which is a blessing and a curse.  The thing is.  Security was unfortunately never easy.  I do not know if it ever will be.

Or.  Just follow the typical advice and have an offline computer to use only for Bitcoin.  Then you could browse any thing you want on the other computer, no thing can go wrong with your Wallet any more.

I have to agree, even though I've been using Linux for 06 or 08 years, I don't consider myself an experienced user. When something happens outside my scope, unfortunately I have to resort to these alternatives, but some things I can handle on my own. Linux requires a certain amount of time available, but fortunately the Linux community is large in forums, Reddit... so that's already some relief. Even so, I've never had any security issues or malware, I never download dubious apps or files from suspicious sources, I keep all my software updated, as well as all other system updates, dependencies and packages.

But if a person acquires a hardware like Trezor, maybe they don't even need to use Linux, because Linux isn't for everyone. You need patience, time and a willingness to learn, but believe me, whenever I learn something new in Linux I feel more fulfilled and relieved, it's like a search for adrenaline lol. But as I said in a previous post, Linux was much more difficult 10 or 15 years ago, nowadays we don't need the terminal that  much (depending on the Linux flavour).