Just lost everything biz

[Anonymous No.9288461]

Just lost 70k link, 50k req, and 18k amb. I was using a ledger nano s with MEW. Hadn't logged in for three months but decided to check today and it was all gone. I thought I did everything by the book and was as safe as possible. I still have no idea how someone was able to take it. Worst part is that I can still see it sitting in someone else's wallet. I'm basically fucked, right?

[Anonymous No.9288476]

>>9288461
how..?

[Anonymous No.9288478]

>>9288461
holy shit, how the fk, can u post the wallet?

[Anonymous No.9288498]

[Anonymous No.9288502]

>>9288461
You might have used the compromised MEW. There were two hacks if I remember correctly.

[Anonymous No.9288509]

>>9288461
probably fill for a phishing scam at some point. check your internet history for fake mew sites.

[Anonymous No.9288510]

>>9288461
That shit doesn't just happen. You must've fucked up

[Anonymous No.9288512]

>>9288461
>Just lost 70k link, 50k req, and 18k amb

larper, even if it is true. you are holding shitcoins. think that they still in your ledger, check prices eoy. all three would be zero or exit scam. techinically you didnt lost anything. just pretend that you still have in ledger. be happy.

[Anonymous No.9288519]

Fuck that liar. Ledger Nano S require manual intervention for every transaction.

[Anonymous No.9288520]

Tfw always been comfy on exchanges since 2012

[Anonymous No.9288537]

>>9288461
lmao, new paradigm amrite

[Anonymous No.9288539]

>>9288461
Probably someone got hold of your seed words. Where did you keep them?

[Anonymous No.9288541]

>>9288512

[Anonymous No.9288576]

https://ethplorer.io/address/0x96bc378d121aa6fca97a279be8e593e7b0c6c419

Funds were spread between two wallets. My AMB and Req on this one and Link was sent to another wallet. Probably was a victim to compromised MEW. I kept my seed words written down in a notebook that only I was aware of. Do Ledger Nanos require manual intervention in order to transfer? I'm so at a loss right now.

[Anonymous No.9288608]

>>9288509
I checked my internet history. I didn't find any sketchy MEW sites. That's my only guess as to how this happened.

[Anonymous No.9288632]

>>9288576
>Do Ledger Nanos require manual intervention in order to transfer?
This question right here makes me wonder if you even know the whole story.
This is fucking odd. Did you even transfer the crypto to the ledger? You have to manually push the button on the ledger for every transaction.

[Anonymous No.9288636]

>>9288608
>I checked my internet history. I didn't find any sketchy MEW sites. That's my only guess as to how this happened.

check those two other wallets are owned by you.

> fooling biz. you guys are easy

[Anonymous No.9288674]

>>9288461
You probably fucked up somehow and are looking at the wrong address

[Anonymous No.9288677]

>>9288636
Owned by me? How are you coming to that conclusion? I never personally transferred any link, req, or amb out of my ledger.

[Anonymous No.9288704]

>>9288632
Yes it was 100% transferred to the ledger. I know how the ledger works, but I was wondering if there were workarounds that a hacker could use to transfer funds out without manually confirming on the ledger?

[Anonymous No.9288750]

https://www.ledger.fr/2018/01/12/scam-second-hand-ledger-device/

Tell me you didn’t fall for this anon.

[Anonymous No.9288753]

>>9288704
Of course not, you larpy fuck. That would eliminate the purpose of the ledger.

[Anonymous No.9288778]

>>9288704
No, if someone found a ledger vulnerability they'd be going after bigger fish than you. Did you confirm a transaction around that time without checking the token, amount and address? Possibly a compromised MEW changed the transaction to send everything out, and you didn't check before confirming. You wouldn't see it in your history, MEWs DNS servers were compromised a couple of weeks ago, anyone who used it in a three hour window got their keys stolen. A ledger should keep you safe though, and there's been no other reports of altered ledger transactions.

[Anonymous No.9288803]

reminder that you could just leave your funds on binance and not have this problem

[Anonymous No.9288806]

>>9288704
What are the exact dates you've accessed MEW? You probably check mew when DNS poisening occurred.

[Anonymous No.9288813]

>>9288778
>MEWs DNS servers were compromised a couple of weeks ago, anyone who used it in a three hour window got their keys stolen
Only some servers were compromised. Anyway, you should always double check displayed address on the Ledger.

[Anonymous No.9288815]

>>9288778
Oh, it can't be the MEW dns thing because this happened in february. Your seed words must have been compromised. Have you ever typed your seed words into a computer for any reason? Is there anyone who could have read that notebook?

[Anonymous No.9288824]

>>9288803
funds are safe

[Anonymous No.9288842]

>>9288461
Why would you need to "log in" to check your coins?
All you need is your wallet address

[Anonymous No.9288844]

>buying erc20 shitcoins
You deserve it.

[Anonymous No.9288849]

Anyway, OP says he didn't transfer anything from his Ledger, so MEW hack is ruled out. The only possibility left is that someone got a hold of his seed or OP is larping, in which case 7/10. Not bad.

[Anonymous No.9288851]

Post the wallet addresses, otherwise you're a liar.

And if this did happen, where did you buy your Nano from?

[Anonymous No.9288872]

>>9288851
>Post the wallet addresses, otherwise you're a liar.
How would him posting his wallet addresses prove he's not a liar, you fucking brainlet?

[Anonymous No.9288891]

>>9288815
I typed them into a word doc on my computer when I was setting up accounts probably 6 months ago. Transferred the word doc to a USB. Then deleted the documents. No one read the notebook as I kept that secure. My USB was secure as well.

[Anonymous No.9288901]

>>9288872
He says he hasn't logged in for three months. Pretty straightforward you literal retard.

[Anonymous No.9288903]

Not possible unless someone physically had your ledger.

[Anonymous No.9288917]

>>9288891
>secure
That's not how you spell compromised.

[Anonymous No.9288932]

>>9288901
Are you unironically retarded? What does it matter what he says about when he logged the last time?

[Anonymous No.9288944]

>>9288891
I think this is where you fucked up.

Key logger could of easily gotten that.
Why store it on the computer where it's not safe....

[Anonymous No.9288958]

>>9288851
My link address - https://ethplorer.io/address/0x94d7a351bda4eb2ff89eae89d05e68c326e954da
Bought my Ledger off Amazon from the Ledger vendor.

[Anonymous No.9288959]

>>9288903
Or the seed phrase. Which is why you write it down and keep it safe, not store it digitally.

[Anonymous No.9288960]

>>9288891
Next time look into shit like veracrypt if you’re going to do stuff like this

[Anonymous No.9289000]

>>9288944
Perhaps that was the fatal error but regardless, they would still need access to my ledger in order to steal the funds wouldn't they?

[Anonymous No.9289001]

>>9288958
There’s your problem

[Anonymous No.9289011]

>>9288960
Doesn’t matter. When it’s typed into a computer it’s already compromised.

[Anonymous No.9289013]

>>9289000
Not if they have the seed phrase, obviously.

[Anonymous No.9289032]

>>9288958
Did you buy it from the producer? If not, see
>>9288750

[Anonymous No.9289035]

>>9289000
No. Only need the seed that’s why you’re supposed to write it down instead of entering it in a computer which defects its purpose.

[Anonymous No.9289038]

>>9288958
>Not buying direct from Ledger website

Sorry anon this is where you fucked up

[Anonymous No.9289047]

>>9289011
Well obviously but it’s better than nothing

[Anonymous No.9289064]

>>9289032
Not even OP is dumb enough to use a Ledger with already generated seed. Probably.
>>9289038
No, he didn't you brainlet. Ledger's hardware cannot be tampered with. And if someone is retarded enough to use a pre-generated seed then good riddance. Hopefully they won't procreate.
>>9289047
Not really.

[Anonymous No.9289085]

>>9289064
On a non airgapped computer you are right

[Anonymous No.9289086]

>>9288461
are you the guy that bought a ledger nano used from ebay?

[Anonymous No.9289103]

>>9289038
Bought mine second hand, reset it twice and it's all been good. They're tamperproof.

[Anonymous No.9289119]

Don't worry your coins just got burnt as part REQ's token burn. So what you lost your coin if it was for the good of the network.

[Anonymous No.9289155]

Well, thanks all for helping me realize how much of a fucking brainlet I am. Fucking wrecked.

[Anonymous No.9289173]

>>9288891
Was the computer connected to the internet at the time or any time after? When you deleted the document, did you use a secure delete tool or just select delete? Modern operating systems don't actually delete the file, they just delete the pointer to the file. The actual data remains on disk unless deliberately overwritten.
>>Everyone saying don't buy second hand ledgers
Ledgers are cryptographically attested, they can't be tampered with unless you have a budget of tens of millions and an electron microscope.

[Anonymous No.9289182]

Whats the total USD loss?

[Anonymous No.9289198]

>>9289155
Wait you didn't seriously get one with a seed and use it did you? Please tell me you didn't do this.

[Anonymous No.9289204]

>>9288520
This Binance is all you need
Even though op is larping anyone that spends 200 on a stupid usb Stick that actually stops you from making trades is a brainlet

Leave it on Binance, comfy as fuck. Funds are confirmed safe
And on top of that , whenever I see one of my 5 coins pump I sell and put a low buy order in. Within days my buy in is 90 percent of the time hit.

Get on my fucking level ledger plebs, grow some balls. This is a market of risk after all, if the .001 percent chance that my exchange gets hacked. So be it

[Anonymous No.9289213]

>>9289103
No they are not

[Anonymous No.9289229]

this is why I only use binance

ledger and mew are too creepy and weird for me

[Anonymous No.9289231]

>>9289047
No. Bad security that you don't know of is worse than no security when you're aware of it.

Because of risk compensation, when you think you are secure you automatically take more risks (e.g. caring less about the firewall/antivirus etc.).

[Anonymous No.9289232]

>>9289103
They aren't immune to malicious maid attacks. The pre 1.41 security model was "no one could possibly use so few kilobytes to execute an attack". Restricting wallets to a range of ~ 1000 key/address possibilities was doable. It'd be extremely difficult to detect.

Ledgers should be bought from official sellers.

[Anonymous No.9289233]

>>9289213
https://arstechnica.com/information-technology/2018/03/a-tamper-proof-currency-wallet-just-got-trivially-backdoored-by-a-15-year-old/?amp=1

[Anonymous No.9289243]

>>9289204
>This decentralised trustless tech is great!
>Now, to use it in a centralised and trusted manner!
Try not to be too mad when they exit scam.

[Anonymous No.9289253]

>>9289233
this is amazing
how are they still being sold with no fix?

[Anonymous No.9289254]

>>9289085
Sure, but how do you securely send the transaction from the airgapped computer? USB? You'd have to throw it away after every transaction (yes, viruses can in theory survive reformatting). Not to mention the USB can be compromised out of the store. The only safe way I can think of is using a floppy disk and erasing it with a strong magnet after every transaction.

[Anonymous No.9289259]

>>9288803
This. If I had the IQ of a toaster like many in crypto do, I'd trust my funds are safe to a big headed chink

[Anonymous No.9289262]

>>9289231
So even an airgapped computer with veracrypt?

[Anonymous No.9289270]

>>9289155
So, what did you realise you did? Used a pre-genned seed?

[Anonymous No.9289275]

>>9289253
They fixed it immediately after. Dyor before making conclusions like a typical /biz/tard.

[Anonymous No.9289279]

>>9289253
I'm pretty sure the patched it out now. Still fucking spooky

[Anonymous No.9289297]

>>9289254
https://kb.myetherwallet.com/offline/making-offline-transaction-on-myetherwallet.html

[Anonymous No.9289298]

>>9289259
look at that cranial capacity
that's who you want protecting your funds

[Anonymous No.9289300]

OP tell us what you did you brainlet

[Anonymous No.9289313]

>>9289243
Yea they really are gonna exit scam
Even tho the CEO puts him self everywhere
Goes to all types of conferences, was on the news etc

Someone planning an exit scam would be wayy off the grid. They know there would be a hit put on them in a second. Especially with the mega whales on Binance. Kys for baiting me

[Anonymous No.9289328]

>>9289262
That should be fine, if it's set up correctly. Fairly inconvenient though.

[Anonymous No.9289332]

Nothing is secure dummy
Just cause you paid some fuck money for a bunch of plastic doesn’t mean diddly

[Anonymous No.9289335]

>>9288461
This is just sad, sorry bro.

[Anonymous No.9289371]

>>9289254
QR code

[Anonymous No.9289372]

>>9289328
I agree but I’m a hodl meme 90% lol. The rest is in a ledger. If it’s inconvenient for me who knows how to all the necessary passwords and such, I think it would be a little too much for someone who doesn’t. But if you have any other recommendations I’m all ears

[Anonymous No.9289374]

>>9289313
>Several billion dollars could not possibly buy a new life, new identity, and escape from all the butthurt /biz/raelis

[Anonymous No.9289389]

>>9289297
What about my post do you not understand? You have to get the transaction into your online computer somehow. Are you going to manually type it down?

[Anonymous No.9289390]

>>9288461

Did you buy your LNS straight from manufacturer?

[Anonymous No.9289415]

>>9289232
Hmm, let's just hope the guy I bought from on eBay wasn't clever enough to do such a thing. Anyway to check?

[Anonymous No.9289431]

>>9289371
QR codes aren't 100% reliable.

[Anonymous No.9289451]

did he ever confirm what he did wrong?

[Anonymous No.9289463]

>>9289451
No, because he's larping. Fun thread nonetheless.

[Anonymous No.9289464]

>>9288944
How common are key loggers and how would one get installed on your computer?

[Anonymous No.9289467]

you werent gonna make it anyways with that shitty ass portfolio. you didn't lose anything dude

[Anonymous No.9289469]

>>9289372
For hodling a paper wallet is best (and easier to secure than a whole PC). You only need all this crap for transactions.

[Anonymous No.9289472]

>>9288461
Damn that sucks.. Hope you're ok.

[Anonymous No.9289475]

>>9289389
I mean there’s always a way around every security measure. I just use usb’s But I get them for free and only use the air gapped stuff long holds. Another anon said something about a qs code but have never done that as I’m ok with my set up.

[Anonymous No.9289481]

>>9289415
Update to the patched firmware
https://support.ledgerwallet.com/hc/en-us/articles/360002731113-How-to-update-the-Ledger-Nano-S-firmware
If the update works, the old firmware was verified and you were never affected. Also it patches the bug.
If it doesn't update, that doesn't mean you were compromised! It's probably just being awkward. Reset and try again.
>>9289451
>>9289300
>>9289270
He typed his seed into a computer brainlets, read the thread.
>>9289431
Sometimes they don't scan, but they're not going to give corrupted data. And if they do, just try again, there's nothing sensitive about a signed transaction.
>>9289464
Alarmingly common, he probably got a virus.

[Anonymous No.9289488]

>>9289469
True but it’s entertaining setting up all these different schemes

[Anonymous No.9289493]

>>9289475
Your USBs are potentially compromised and should be treated as such.

[Anonymous No.9289498]

>>9289431
What do you mean? That private key data could somehow leak out through them? Or that they sometimes fail to scan?

Neither is a problem in this scenario, where you control both the display and reader device. Because you can check the data, and the checksum would ensure that it either works right or not at all.

[Anonymous No.9289501]

>>9288461
Just use MetaMask.

https://metamask.io/

[Anonymous No.9289503]

>>9289481
I keep all my passwords in an excel file.
How fucked am I?

[Anonymous No.9289515]

wtf would you use MEW when you have a fucking hardware wallet?

[Anonymous No.9289529]

>>9289503
Depends on how good you are with keeping your computer clean. But somewhere between medium and very high risk.

[Anonymous No.9289530]

>>9289481
Thanks fren, will do.

[Anonymous No.9289535]

>>9289155
And this, boys and girls, is why I leave all my crypto on exchanges.
Sorry for your loss, RIP anon.

[Anonymous No.9289546]

>>9289155
Try putting the contract address back in mew

[Anonymous No.9289548]

>>9289493
Agreed. I guess it’s just the risk I’m willing to take

[Anonymous No.9289554]

>>9289503
On a scale of Elliot Rodger to Tila Tequila, Marcellus Wallace.
Is it at least encrypted?
>>9289515
You can use hardware wallet with MEW, MEW is just for constructing transactions and sending them to the ledger to be signed.

[Anonymous No.9289561]

>>9289498
Not much experience with QR codes, I was merely under the impression that QR code can load incorrect data. If that isn't the case and the only way they can fail is by failing to scan altogether, then they're good enough.

[Anonymous No.9289594]

>>9289503
>>9289529
Should I store this file on an encrypted usb instead?

[Anonymous No.9289596]

>>9289374
I wouldn't recommend leaving everything on an exchange either, but once you've reached profile as a billionaire, you can't just spend your way out of it.

[Anonymous No.9289626]

>>9289594
Doesn't help. If your computer is compromised, the hacker can read it whenever you decrypt it.

[Anonymous No.9289635]

>>9289501
This

[Anonymous No.9289649]

1. Always buy Ledger NANO S directly from the Ledger website.

2. Never type your seed phrase anywhere, ever.

[Anonymous No.9289668]

>>9289501
Metamask has no hardware wallet support
>>9289594
Just use a proper password manager like keepass. At least then they're all encrypted.

[Anonymous No.9289745]

Can I put TRX on my Ledger? my concern is that I have too many 10k+. Does the Ledger fill up? Like does it have a gb max level so 10k is too many coins to put in it? I haven't got any other coins but can't find this info anywhere.

[Anonymous No.9289755]

>>9289535
Unironically this.

[Anonymous No.9289814]

>>9289745
youre just pretending

[Anonymous No.9289822]

>>9289745
I would never put TRX of mine for this reason, definitely vulnerable to buffer overflow exploits. Same for REQ, token burn has caused at least 42 injuries (1 fatal).

[Anonymous No.9289843]

Encrypt your keys and print them on QR codes. Never touch the keys again. Always use official desktop wallets. I don't get why you people think it's so hard. Proper cold storage can be set up in 5 mins and you don't even need to pay for anything.

[Anonymous No.9289866]

>>9289204
2FA reduces that chance greatly as well, which binance supports.

[Anonymous No.9289922]

>>9288461

post another wallet address that you use op

[Anonymous No.9289931]

>>9289843
could be recovered from printer memory

[Anonymous No.9289951]

ITT brainlets give security advice

[Anonymous No.9290009]

>>9288891
this is where OP fucked up. never digitally store your seed faggots

[Anonymous No.9290116]

>>9289931
That's literally why you encrypt the privkeys before you print. Good luck bruting AES.

[Anonymous No.9290123]

>>9288461
Shitty larp faggot. KYS.

[Anonymous No.9290132]

lol you guys are such fucking faggots. Every week we get another thread like this from retards who thought they were being clever with their hardware wallets.

stop being a "muh if you don't own your keys you don't own your funds" cuck and get with the binance program

2FA authorization for login and withdrawal. Email verification for withdrawal. And 2BTC daily withdraw limit, meaning you can never be hacked for more than 20k

binance will not exit scam because CZ is a based public figure. He'd be hunted down and killed anyways

their security is likely a million times better than Mt. Gox, and 90% of their funds are kept in vaulted cold wallets which are pretty much impervious to external hacking

and in the 0.00000001% they were hacked, they can afford to pay every one back

how many faggots have had their MEWs/ledgers/etc compromised? Thousands. How many Binance users have lost funds via a system hack? Zero. Even in the event two months ago where people were hacked by malicious trading bots, Binance detection systems activated within seconds and prevented any money from leaving the exchange

take off your tinfoil hats

[Anonymous No.9290216]

>>9290132
>take off your tinfoil hats
but mines custom fit

[Anonymous No.9290221]

>>9290132
I still would rather keep the funds myself because I don't trust others. Plus, just buy a thinkpad t450 off of ebay, rip out the hard drive, put a new one in, install qubes, and then keep it airgapped and use it for managing your funds in a secure manner. Also, flash the EFI before installing, and remove the intel ME.

[Anonymous No.9290253]

Also, wouldn't just using a VPN basically solve the problem of DNS hijacking? The VPN I use has it's own DNS servers which I trust more than public mutt DNS servers.

[Anonymous No.9290286]

>>9290253
was just thinking of that. not too sure

[Anonymous No.9290296]

>>9290132
There's nothing special about cold storage. It could be as simple as storing the information analog. Anyone can do it.

>how many faggots have had their MEWs/ledgers/etc compromised?
This is more an ETH groupthink problem. ETH users are too retarded to use the official Ethereum wallet so they opt for... some web client. You can't cure stupid.

>>9290253
DNS resolving always requires some degree of trust. If you use a VPN you're still using the same DNS servers or the VPN's own DNS service, except it's all routed through a VPN.

What you can do is use DNSCrypt. It prevents MITM attacks between you and the DNS resolver.

https://www.simplednscrypt.org/

[Anonymous No.9290298]

>>9290132
based cz
funds are safe

[Anonymous No.9290299]

I could go into this for hours, but basically just do what I said in my first post, and then just get yourself an external SSD and run whonix in a virtual machine from within qubes off of the main HDD. Qubes is very nice though because the compartmentalization is wonderfully implemented. Also, don't keep all your eggs in one basket. you're an idiot if you don't distribute them in various places.

[Anonymous No.9290306]

>>9290221
>>9290253
you're an IT/CS fag. I'm not. 99% of people are not. You can do what you like. But the rest of us are statistically better off using binance.

[Anonymous No.9290307]

>>9290221
Damn. How you learn to be so tech savvy

[Anonymous No.9290380]

>>9289173
Even when you delete from the recycle bin??

[Anonymous No.9290394]

You guys give way too advanced tips to the average joes. They just want to use Windows and still be as safe as they can be with that.

[Anonymous No.9290412]

>>9290132
>Pretty much half of all exchanges hacked every year
>Lol 0.00000001% chance it happens to me
>>9290380
Anything other than a dedicated secure delete tool leaves all the data on the disk.

[Anonymous No.9290413]

>>9290380
i dont think that solves it. i personally use a shredder that comes from mcafee

[Anonymous No.9290435]

>>9289204
Only exchange fails have been bitgrail and mt. Gox. All the other overwhelming issues have been human failed ledgers and hacked wallets. Exchanges are actually secure. I keep everything on exchanges.

[Anonymous No.9290440]

>>9288803
You realize they'll probably exit scam at some point?
and by exit scam I mean they got "hacked".
Don't leave your funds on exchanges kids.
Trade and get that shit off.

[Anonymous No.9290443]

>>9290132

[Anonymous No.9290444]

>>9290412

But wouldn't that just bloat your HD? What secure delete tool do you suggest, anon? I've got a ledger linked to my MEW (ordered ledger from the manufacturer), but better safe than sorry about other passwords I have, need to delete some 100% and then just move to paper or USB stick.

[Anonymous No.9290446]

>>9290412
>Implying all shit exchanges are like Binance

You're a fucking retard

[Anonymous No.9290454]

>>9290412
and none of them are top 10 exchanges

[Anonymous No.9290468]

>>9290435
Well, if you still want to keep stuff on exchanges I recommend dealing with American companies.

Most USD in US exchanges are insured by the FDIC and Coinbase claims to have private insurance for their crypto.

Leaving stuff on Chinkchanges is just asking for it.

[Anonymous No.9290484]

using Windows is a very big security problem in itself
when I see my friends' laptops, I am guessing there must be at least one virus or malware on it...
although installing ublock origin and using firefox with other sec-oriented extensions will lessen the inherent windoze sec risks
if you can, use linux

[Anonymous No.9290486]

>>9290435
t. newfag who doesn’t know about mintpal and cryptsy

[Anonymous No.9290514]

I have 60k link on a ledger. The seed phrase is in a dmg file with 256bit encryption. The password is only 145bit long tho. Good luck guys.

[Anonymous No.9290525]

>>9290514
>not knowing how a keylogger works

[Anonymous No.9290531]

>>9290514
brute forcing the encryption is out of the question
but then someone could brute force your ass
that's another story

[Anonymous No.9290542]

>>9290514
I'll probably post a demonstration of my setup in the future. Will leave a few bucks of Monero in a wallet and then post the QR code of the AES-encrypted seed. That's the only right way to do cold storage for free imo.

[Anonymous No.9290553]

>>9288461


Use a trezor instead of the ledger. And I really dont know how this happened unless you put your private key on your computer.

[Anonymous No.9290566]

>>9290542
ok picture this
someone if brute forcing your asshole
you can only make him stop by telling him your pw
would you do it ?

[Anonymous No.9290583]

>>9290542
It's not illegal to shoot spooks that try to fucc ur boipussi. :^)

[Anonymous No.9290587]

>>9290566
hell cum and lose interest in like 10min max

[Anonymous No.9290610]

>>9290132
cz when not burning BNB just sits at his laptop hoping for an attack so he can strike. Comfy

[dml to moon No.9290611]

>>9290542
get rekt kek

[Anonymous No.9290667]

Blame the niggers

[Anonymous No.9290689]

>you lost your link, how sad

[Anonymous No.9290714]

>>9290444
It's not taking up space, because the data is available to be overwritten. But until the OS needs the space and writes something new over the top, it sticks around. Which tool to use depends on your circumstances and OS, but they basically all do the same thing, overwriting the file. Some will go crazy with the marketing wank and overwrite 30 times or more as if that's better than just once, but they're no better. Basically anything that says secure delete. There's loads of freeware, you definitely don't need to pay for anything.
And one more thing: for SSDs it's different. They use wear levelling, so an attempt to overwrite will be directed to a different area of the disk, still leaving the original data hiding somewhere. A modern SSD and OS should support TRIM, which is a specific command to the SSD to wipe a block of data, so if you have an SSD secure deletion is either the default or impossible.
>>9290446
>>9290454
>What are MtGox, Bitfinex, Cryptsy, Mintpal
The bigger they are, the harder they fall

[Anonymous No.9290742]

>>9290514
Hope you've got an airgapped computer, otherwise a keylogger will steal your encryption password, or maybe just pull the decrypted file out of ram when you open it up.

[Anonymous No.9290771]

>>9288891
Thats where it went wrong

[Anonymous No.9290814]

I don't know what the discussion is all about, it's pretty clear what was the reason if OP isn't larping. He entered his fucking passphrase into his computer which defeats the entire purpose of a hardware wallet. If nobody has access to your passphrase written down on a piece of paper this shit has been so far unhackable. I think there was some recent news that some pajeet hacked the device having a physical access to it but someone may as well break into your house and steal your pc/private keyes anyway

[Anonymous No.9290938]

>>9289843
How??

[Anonymous No.9290958]

>>9290221
what software should be used to manage the funds though?

[Anonymous No.9291005]

>>9290714
This, also always encrypt your drives in case of theft/etc. Won’t help you if someone gains remote access to a mounted volume on a running OS though.

[Anonymous No.9291237]

Why not just handwrite all your password and seed phrases?

[Anonymous No.9291272]

I have an unopened trezor wallet i bought direct from the manufacturer. Is tgere a known vulnerability in the trezor?

[Anonymous No.9291288]

Can you lock a single address with the ledger nano s and a trezor wallet at the same time?

[Anonymous No.9291334]

>>9291237
Because leaving that data in plaintext opens up the possibility of physical theft. Anyone else that owns shitcoins knows that a string of words is a seed phrase and they'll gladfully jack you.

If you encrypt the data, QR code them and print them you can keep multiple copies for redundancy. Now it's like you put something in a lockbox but the key only exists in your head. Then you have to pray you don't get hit by a baseball bat and forget the password. If you're really fucking dumb you can leave half the password on a piece of paper at home and half of it in a bank box.

It's all about threat models. There's no such thing as perfect security but you can make it ludicrously hard for anyone trying to jack you.

[Anonymous No.9291347]

That sucks bro. I'm so sorry some fucking jew did that to you. ;_;

[Anonymous No.9291357]

>>9289503
Following this.
What about password keepers like lastpass or keepass? Typing them there would be hackable?

[Anonymous No.9291358]

>>9291272
update to the latest firmware before use.

[Anonymous No.9291405]

>>9291357
Password managers are a tradeoff. If your computer gets hacked quite literally all your passwords are hacked. Otherwise they work well for normies who normally wouldn't use secure passwords.

Like with most things, these things are most secure when you only use them on airgapped computers.

[Anonymous No.9291406]

>>9290435
That’s not true, I personally got exit scammed by Cryptsy.

[Anonymous No.9291456]

>>9291405
The hacker would have to know the passphrase and key file of the manager, no?
Can a virus read from a manager like if it were a doc or text file?

[Anonymous No.9291494]

>>9291456
Malware can just copy your password database after you decrypt it lol.

[Anonymous No.9291546]

Can only happen the following ways:

You used a phishing site, for example a fake MEW, and didn't check your ledger to confirm the transaction displayed on the device was for the amount / address you thought it was for and signed it.

You exposed your recovery words which is effectively a paper wallet containing the private key. If you stored the recovery words on your computer that is where they could have been exposed.

You bought a fake or pre-setup ledger from a third party and didn't realize it was tampered with or had already been set up.

[Anonymous No.9291560]

>>9290525
I want to keylog a person I know and steal his shitcoins. Trust me he deserves it. He is drug dealer and killed my friend. Someone point me to a keylogger that I can install remotely or a black hat that can help. My only other option is to steal his phone to get through 2FA or somehow get access to ss7 service.

[Anonymous No.9291565]

>>9288461
I just want to say I feel for you mate.

This is my nightmare scenario

[Anonymous No.9291578]

>>9290468
>Most USD in US exchanges are insured by the FDIC
thats a complete lie

[Anonymous No.9291604]

>>9291578
https://support.coinbase.com/customer/portal/articles/1662379-how-is-coinbase-insured-
https://www.coinbase.com/legal/insurance

>If you are a United States resident, your Coinbase USD Wallet is covered by FDIC insurance, up to a maximum of $250,000.

mystery exchanges that actually operate overseas don't count anon

[Anonymous No.9291651]

>>9291578
>>9291604

FDIC doesn't cover theft, lmao. FDIC is for bank failure. Banks usually have insurance for bank theft. And coinbase claims to, but that is for theft of their bitcoin, not your compromised account. Good luck asking coinbase to reimburse you if your account was hacked lol.

[Anonymous No.9291662]

>>9291651
I don't endorse leaving shit on exchanges so we're on the same boat. ¯\_(ツ)_/¯

[Anonymous No.9291790]

I thought those compromised in the MEW attack were using 8.8.8.8/8.8.4.4 DNS. If true, they deserve it.

[Anonymous No.9291907]

Guys I’m storing my seed words on a “notepad document” on my MacBook Air. I’m scared the same think could happen to my LINK stack. How do I fix this? Help me Marines

[Anonymous No.9291957]

>>9288803
I keep all mine in the vault on coinbase is that not just as good?

[Anonymous No.9291995]

>>9288461
I just checked. All my wallets are fine!

[Anonymous No.9292008]

>>9291957
>in the vault on coinbase
>is that not just as good?

[Anonymous No.9292021]

binance for meme tokens.
steam for vidya.
same things.

[Anonymous No.9292027]

>>9291494
Can that happen on an offline device?

[Anonymous No.9292036]

>>9291907
Transfer everything to new seed words, and this time don't type them into a computer ever. Physical media only, and keep them physically secure.

[Anonymous No.9292098]

>>9291995
>>9292008
Do you suggest a store all my liquid cash under my mattress as well? I don't want any filthy Jews stealing my shekels.

[Anonymous No.9292174]

>>9292098
Get a hardware wallet and cryptosteel.

[Anonymous No.9292245]

>>9292174
This thread was started by a man who lost the shit in his wallet. I guess thats just the risk involved with crypto. I have 25k in this shit, and I'm fine with potentially losing that, but having it stolen would be so fucking shitty. Guess I will look into it. I was silly thinking Coinbase was as good as a crypto bank account

[Anonymous No.9292332]

>>9289501
>metamask
How do you send money out of metamask ? I dont like using MEW due to phishing scare lately.

[Anonymous No.9292391]

Don't use Metamask. Use the official ETH wallet. I don't think it supports seed phrases yet but the wallet files are like 1kb each and still small enough to be put on QR codes.

[Anonymous No.9292484]

>>9292391
Can you use a ledger with the official ETH wallet?

[Anonymous No.9292512]

>>9288512

he's not wrong

[Anonymous No.9292521]

>>9292484
It does but support is very sparse unfortunately.

[Anonymous No.9292581]

>>9292521
Dam, so best just to use mew with the ledger. Fucking ledger fud has done my head in this last month, invested alot more on keeping my seed safe but still fucking worries me.

[Anonymous No.9292606]

Ffs are you guys still discussing this

There is nothing to talk about. Read my post earlier

Binance with 2fa code
Funds are fucking safe
They even spend their own money to put bounties on heads of potential hackers

Or you can spend 200 on a usb Stick because you are a pussy with no balls and still mess up your funds

[Anonymous No.9292649]

This thread made me paranoid. How can I check if an usb stick is compromised?

[Anonymous No.9292651]

>>9289501
Is Metamask the safest option?

[Anonymous No.9292718]

Damn this story. I would probably kill myself if this happened to me since I have 100k LINK, 100k REQ and 40 mil HOT on my ledger.

[Anonymous No.9292800]

>>9292649
If you read the post op states he once typed with 24 word recovery into a word document, I find the missing/change of wallet addresses more worrying

[Anonymous No.9292896]

>>9292606
Lol this