/biz/ - Business & Finance

[Anonymous No.20386670]

Can you trust hardware wallets that are not Trezor or Ledger?
This secuX stuff looks pretty nice.

[Anonymous No.20386765]

Put it on a text file.
Encrypt with 7zip or something.
Upload to Google Drive and or OneDrive.
2FA your cloud accounts.

No need for an expensive hardware wallet, your keys are in the cloud.

Or, same thing but a USB stick. Encrypt the USB stick.

[Anonymous No.20387131]

>>20386765
VeraCrypt works very nice for this, used it to encrypt large databases on USB sticks

[Anonymous No.20387460]

>>20386765
I like having my hw wallet attached to my metamask so that the crypto cannot be transferred without the device or the seed phrase. I have had my computer hacked before and crypto stolen. It is worth the $30 to know that it can't happen again.

[Anonymous No.20387525]

>>20387460
Only low IQ individuals get hacked.
That said, VeraCrypt + USB is the cheaper version of a hardware wallet.

[Anonymous No.20387665]

>>20386765
1.you don't know if someone won't get your encrypted file and decrypt it later when the computers are much more powerful, which keeps happening

2.you don't know if your computer is infected with a malware/keylogger (malwares can even store outside hdd/ssd), unless you have a professional firewall which blocks every outgoing traffic and you check every packet, which I doubt you do, you don't know

3.don't be retarded like this and try to outsmart everyone

[Anonymous No.20387801]

>>20387525
>having your seed phrase on a computer, ever
Hackers spend every waking moment thinking of ways to steal your money. Some of them are probably government actors (China, Russia, etc.) that have tremendous resources at their disposal.

[Anonymous No.20388442]

Please, I just want to know if putting my LINK on a secuX wallet is a good idea or not.

[Anonymous No.20388523]

>>20388442
Why not buy a ledger then?

You’ll even be able to do transactions without being compromised everytime.

[Anonymous No.20388813]

just get one of these bad boys

[Anonymous No.20388925]

>>20386670
why does a hardware wallet need a fucking touchscreen, for fucks sake. Jesus fucking christ

[Anonymous No.20389033]

>>20386670
You can't trust any hardware wallet, not trezor or ledger, nor any other one.

[Anonymous No.20389153]

>>20388813
>chinese
-2/10

[Anonymous No.20389318]

>>20388925
It’s so tech bro!! Just like Tesla!!!

[Anonymous No.20389394]

>>20388813
kek

[Anonymous No.20389959]

>>20387801
Yes schitzo. They will specifically target you and your system.
Have you ever built and distributed malware? You're more likely to get a virus from Modding GTA V than just sitting on the internet browsing 4chan and a few scam coin sites.
When's the last time there has been a 0day silent execution via web? Years ago? Last I remember was a silent Java drive-by, that is no longer possible because web Java is basically extinct.
What about a worm that wasn't packed into randsomware? Years?
The only way you're going to get your hot wallets stolen is by being a complete retard with your computer.
If you're a retard, use coinbase. Otherwise, you'll get your shit jacked regardless of being on cold storage or not.
>Muh trezor is safe
Let me see, I'm making malware to jack crypto. I know most bigger wallets are on trezors. Oh look I can detect when a trezor is plugged in. Let's just sit silently and wait for them to plug in and decrypt their trezor. Oop just sent all your coins to my wallet.

In conclusion.
1. Don't be a retard
2. Hardware wallets are illusions of safety
3. Use coinbase or a paper wallet if you are a retard

That concludes my master thesis on why you all have room temperature IQs

[Anonymous No.20390020]

>me? i leave it to binance

[Anonymous No.20390345]

>>20389959
>You're more likely to get a virus from Modding GTA V
You think the people who create viruses and malware for gaming mods don't know how to steal your crypto? All that virus has to do is set remote desktop to on and then send a beacon to the hacker, and now your computer is their computer. They don't even need your password because they will wait until you put it in for them.

>wait for them to plug in and decrypt their trezor
I'm not sure if you are really, really dumb, or you are a really smart hacker trying to lull people into a false sense of security

[Anonymous No.20390350]

>>20389959
What do you use mr. big brain man?

[Anonymous No.20391395]

>>20390345
Your understanding of malware clearly comes from Vox.
>Set remote desktop to on
If you're referring to RDP, no. No malware uses RDP for remote desktop. Also, windows 10 home does not allow for RDP to be enabled. Most remote desktop malware will use it's own protocol.
>Send a beacon
Ya you're retarded. If you're going to pretend to understand malware first learn the language.
>They don't need your password
Correct! But they don't wait for you to put it in as much as you think. Keyloggers are good, but it's much easier to dump the sqlite DB containing your Google/Firefox saved passwords.
>Thinking malware won't wait for a trezor to be plugged in.
It takes 3 lines of code to check if a device is plugged in. It's not that difficult to specifically target a trezor or ledger wallet. Sure you can't steal coins until the user decrypts their wallet, but it's still possible.
For an example, look at Exodus wallet & how it connects to trezor. How difficult would it be for malware to do the same and just yoink your tokens?

>>20390350
I keep my tokens behind a password on Metamask & in my password protected Exodus. If I was really paranoid about having my tokens stolen, I'd only use a paper wallet.

[Anonymous No.20391598]

>>20391395
You have to accept the transaction on the hw wallet before the crypto can be transferred. Plugging it is not enough. Putting in your pin is not enough. Don't pretend like you are some elite hacker just because you spent the last 30 minutes reading a blogpost on Hackaday

[Anonymous No.20391728]

>>20391598
Very funny how you changed tones from pretending to understand malware to pretending to understand hardware wallets...
I thought hackers really wanted to steal crypto?
Seems like a large market to miss if you're not going to target Trezor or Ledger wallet users...

[Anonymous No.20391741]

>>20386670
Preorder an NGRAVE. The only hardware wallet worth a shit.

[Anonymous No.20391820]

>>20391741
Very neat that it's air gapped. Seems very interesting

[Anonymous No.20391830]

>>20391728
I didn't change my tune, you did. You said that yyou are unlikely to get hacked if you are some random, and you don't need a hw wallet, then you proceed to say how easy it would be hack a computer AND a hw wallet.

Do you know of any current exploits for Trezor or Ledger? Particularly ones that can be performed remotely? I'll wait.

[Anonymous No.20391840]

>>20391728
Anon read ledger’s user manual..

[Anonymous No.20391872]

>>20389959
That wouldn't work because you have to confirm the transaction on the hw wallet

[Anonymous No.20391945]

>>20391830
?? Yes a hardware wallet is worthless because it is easy to hack.
Yes there are several exploits & if ledger and trezor paid out bug bounties maybe they'd have a secure platform.
>>20391872
Not hard to MITM these wallets. That's literally what I deacribed. You plug the wallet in to use it, and instead of sending coins to your target it goes to a bad address.

[Anonymous No.20392184]

>>20391945
Where do you come up with this shit? I remember there was a case where someone found a way to exploit a ledger a few years ago if they had physical access, and ledger patched the exploit. It is that simple. You are retarded if you think they sleep on known exploits when their entire company would would go belly up as a result.

The hw wallet has you confirm the address you are sending to during confirmation. I think you are reaching because you realized how idiotic you are. Unless some hacker finds a zero-day exploit AND happens to pick your computer specifically to hack, the chance of someone hacking your hw wallet are zero

[Anonymous No.20392329]

>>20392184
Hell, even if it WAS possible to hack a hw wallet remotely, after also hacking your computer, it is still an additional layer of security. Your idea of a paper wallet requires you to view the seed phrase on your computer, which could be compromised. A hw wallet removes the need for the seed phrase to ever be on your computer, which removes that vector of attack completely.

[Anonymous No.20392350]

Use a floppy disk

[Anonymous No.20392368]

>>20392350
This is actually the correct answer

[Anonymous No.20392603]

>>20392329
This is the part I never understood, how is the seed phrase never in my computer if I’m connecting the ledger to it? Can’t the seed somehow be “intercepted” in the process of going from ledger onto MEW to access my shit?

[Anonymous No.20392643]

>>20392350
Based

[Anonymous No.20392907]

>>20392603
When you get a Ledger, the first thing it has you do is write down the seed phrase on the supplied paper they give you. The device itself gives you the seed phrase, so it isn't on the computer. As for how the wallet gets access, I would guess that the Ledger communicates with Metamask, Mew, or Ledger software through end-to-end encryption to transfer your private key to the wallet. Probably the same way the wallets access the wallet on the blockchain.

[Anonymous No.20392923]

>>20386670
Coldcard is the safest hardware wallet

[Anonymous No.20392929]

>>20392907
>the wallets access the wallet on the blockchain
the wallets access your crypto on the blockchain

[Anonymous No.20393965]

>>20386670
Why would you? Just get a Ledger or a Trezor. If you have enough to worry about getting hacked, then you have enough to buy one of them.

[Anonymous No.20394034]

holy shit this thread. hackers literally do not want you getting hardware wallets and will even fud hw wallets so you stay more vulnerable.

[Anonymous No.20394566]

>>20386670
Smart contracts have replaced physical hardware wallets and seed phrases.

[Anonymous No.20394736]

>>20392907
private keys never leave ledger it just sends signed transactions.

[Anonymous No.20394765]

>>20394736
Interesting. Good information. Thanks.

[Anonymous No.20394999]

Just get a ledger Nano x and call it a day lol.

[Anonymous No.20395139]

has coinbase ever been hacked?

[Anonymous No.20395261]

>>20386765
Top retard post.
We had way, way better quality posts about security last automn, when paranoid guys where advocating for offline signed paper wallets.

[Anonymous No.20395448]

>>20392603
The transaction is signed on the hardware wallet. The seed never leaves the hardware wallet. Jeez i never thought a tech illiterate like me would be giving basic lessons about security.