Author

Topic: A free, simple, and secure alternative to hardware wallets (Read 71 times)

member
Activity: 86
Merit: 26

-Hardware wallets have only been around a few years. It's not clear how durable they are


I've had my Trezor One for several years. Don't use it as much as I used to, but I'm always amazed when I pull it out of the drawer and plug it in, and it's still working as good as new. I would expect a minimalist hardware wallet to be more durable than other devices like phones, laptops etc. Fewer parts means fewer things to go wrong. I expect my Trezor one to go on working for another decade and more.
copper member
Activity: 2338
Merit: 4543
Join the world-leading crypto sportsbook NOW!
Hardware wallets seem to be the default suggestion for secure storage.

There's a good reason for that, and those reasons do indeed refute your reasoning below.

-It's difficult to verify what's actually implemented on the device. They're so niche, fragmented, and complex that I doubt there's enough verification

The open source hardware wallets are no more or less difficult to verify than any software wallet, they just require a different set of skills.  Anyone can crack open a case and use google to search for every piece of hardware attached to the PCB.  You don't even need to be an electrical engineer to figure out what those doohickies do.  The firm ware is often less complex than most software wallets to verify.

I'm not claiming to be an expert, but even novices like me can easily research which HW wallets are trustworthy.

-Hardware wallets have only been around a few years. It's not clear how durable they are

Trezor One has been around for since 2013, the Model T has been around since 2017.  Paper backups can last centuries.  The durability is hardly an issue.


Instead, I've been using my own software focused strategy that's simple enough to verify yourself. I figured I'd make it publicly available now

Here's the repo with code and more details, https://github.com/abandon-ability-able/electrumLiveCD

I'd appreciate any feedback

-AAA

I commend you with taking initiative to come up with something better.  But realistically, any software wallet coupled with an on-line system is vulnerable, and any software wallet coupled with an off-line system can be used as safely and securely as a hardware wallet.
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
Hardware wallets seem to be the default suggestion for secure storage. I have two issues with this approach:

-It's difficult to verify what's actually implemented on the device. They're so niche, fragmented, and complex that I doubt there's enough verification

-Hardware wallets have only been around a few years. It's not clear how durable they are



Ledger and trezor are quite old and safe. 10+ years. No problems with security so far.

Personally, I use a hardware wallet. I recommend everyone to use. They are safe and cheap.

Your solution may be interesting,  but I don't recommend for life savings amounts. Hardware wallets are the way to go.

Ignore news about people losing money with HW. They are safe.
legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
electrumLiveCD

It looks to me like DIY with Electrum.
* The good part is that you'll probably have the latest Electrum on it.
* The bad part is that if somebody can follow those quick instructions, he probably was able to do it also without them

As a Windoze guy I am skeptical I could trust myself doing without mistake what I see there and I could trust the result.

On the other hand, I know I can use Tails OS for the same job, I know it has persistent storage (only!) if I want it, I know it can have internet only if I want it and it has simple and clear instructions on how to install it (although I tend to use it a bit different, just because I am lazy and I still want the latest when I play with it).

Plus, I can clearly say that since I don't have a separate computer for signing, using a separate USB stick with offline Electrum means a few reboots one may not like to do at every transaction. I've played with this kind of setup - yes, with Tails, not your ISO - and this year I decided to just go for a HW at Black Friday price.



TL;DR: HW is still better than this kind of setup; Tails OS looks easier/more reliable than your setup.


PS. Don't take me wrong, I do appreciate work and innovation, just please don't advertise this for more than it is.
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
-It's difficult to verify what's actually implemented on the device. They're so niche, fragmented, and complex that I doubt there's enough verification

-Hardware wallets have only been around a few years. It's not clear how durable they are
Reputable hardware wallets are generally open sourced, save for sensitive components like the secure elements. They're pretty well audited as well. Hardware wallets are fairly durable from my personal experience, and they would offer similar or better redundancy as an air-gapped wallet as they would both rely on the user keeping a backup of the seeds.

Hardware wallets are often recommended for their ability to make it idiot-proof as well. Users don't have to be a rocket scientist to use it.

Tails is also a good alternative as well for livecd implementations.
legendary
Activity: 2870
Merit: 7490
Crypto Swap Exchange
-Hardware wallets have only been around a few years. It's not clear how durable they are

FYI, few hardware and it's company has been around for a decade.

I'd appreciate any feedback

I did not try to run it, but i have some question and feedback.

1. What is size of the result/ISO file?
2. How should we write result/ISO into USB drive? Simply with dd if=file.img of=/dev/sdX ?
3. Does it come with persistent storage, where we can store Electrum wallet file and other files?
4. It'd be great if the script create ISO file which run xterm or graphical interface automatically.
?
Activity: -
Merit: -
Hardware wallets seem to be the default suggestion for secure storage. I have two issues with this approach:

-It's difficult to verify what's actually implemented on the device. They're so niche, fragmented, and complex that I doubt there's enough verification

-Hardware wallets have only been around a few years. It's not clear how durable they are

Instead, I've been using my own software focused strategy that's simple enough to verify yourself. I figured I'd make it publicly available now

Here's the repo with code and more details, https://github.com/abandon-ability-able/electrumLiveCD

I'd appreciate any feedback

-AAA
Jump to: