So far, security has only been on ourselves, all must be more careful to save with extra security, it's not necessarily safe..
Personally, in my opinion, if you have a lot of assets, it's better if you don't store it in one wallet, but you have to have multiple wallets to store your email and don't let many people know. have assetsa lot..
Topic: Safety - page 3. (Read 663 times)
I have read several times on this forum where people said human error is what lead to vulnerability to attack but I read that air gap computer was recommended several time on this forum is not that secure while Malwarebytes was also said to work base on how it was programmed, that is also not that secure and I believe in the next 5-10years Bitcoin price will reach 6digit and after this happens crypto holders will be the major target of online theft.
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
1.Crypto holders are and always will be a major target for online theft.The Bitcoin price doesn't matter.
As long as the Bitcoin price is above zero,hackers and scammers will always try to steal BTC.
2.There's no "0%error/100% step...Humans are not perfect.Technology isn't perfect as well....
The easiest way to achieve a very good level of security with minimal risk of messing up is to buy a hardware wallet and follow the instructions to the letter, including not exposing your seed phrase.
The most important thing is to avoid disclosing your information (name, address, and phone number) when buying HW, because the Ledger database hacking case shows us how important that step is, no matter how much one thinks the risk that has arisen from it all is minimal. Also, as an additional security, a passphrase should be placed on the main account and kept separate from the seed phase - preferably in different locations.
In the end, it all comes down to how much everyone protects themselves, because in the event that something bad happens, a positive outcome is very unlikely.
Probably the best way is to not put all of your eggs in one basket. But that becomes problematic, as then you have to fight your own memory.
Computers that are connected to the internet aren't safe. Period. Even the US's national finance credit firm had all of its data hacked. Some are safer than others.
1) It is more of a personal belief that a linux computer without systemd https://nosystemd.org/ is more safe than others, but it's just a hunch.
2) You can get and install your own phone software with https://sailfishos.org/, which works with a lot (but not all, like slack) android software, and does OTP authentication.
3) You can have your bitcoin keys offline, never touching an online computer. You need a computer for initial generation of a send to address, which could be generated in memory that won't be stored (be very careful though..). You can split up the key into two written halves (make back ups).
Computers that are connected to the internet aren't safe. Period. Even the US's national finance credit firm had all of its data hacked. Some are safer than others.
1) It is more of a personal belief that a linux computer without systemd https://nosystemd.org/ is more safe than others, but it's just a hunch.
2) You can get and install your own phone software with https://sailfishos.org/, which works with a lot (but not all, like slack) android software, and does OTP authentication.
3) You can have your bitcoin keys offline, never touching an online computer. You need a computer for initial generation of a send to address, which could be generated in memory that won't be stored (be very careful though..). You can split up the key into two written halves (make back ups).
It seems that with the continued development of bitcoin, which may reach a significant price (which can be 6 digits), it will certainly cause many problems that will occur. at the current price, there are many who commit fraud in all kinds of ways that make people who have bitcoins can be tempted to make mistakes.
so it's natural that the more exciting bitcoin, the more people will try to do things that can trick those who have bitcoins make mistakes or even get stolen, but it's not that easy and it can also be ensured that protection tools to prevent them from being taken will also progress rapidly. so that in the end it all goes back to each individual person, whether they can still be tricked in a very systematic way by the fraudster or he already knows not to be deceived.
so it's natural that the more exciting bitcoin, the more people will try to do things that can trick those who have bitcoins make mistakes or even get stolen, but it's not that easy and it can also be ensured that protection tools to prevent them from being taken will also progress rapidly. so that in the end it all goes back to each individual person, whether they can still be tricked in a very systematic way by the fraudster or he already knows not to be deceived.
As long as you ensure these two things and the private keys are randomly generated, you are safe.
There's no actual way to ensure that the private keys are randomly generated numbers. There are ways to avoid being physically or digitally compromised, such as with malware or by verifying the authentication of the software, sure. But, there no ways to confirm digitally that what you're seeing is a random number.An attacker could choose a certain range of the secp256k1 and returned you each number's hash. It'd look pretty much random, but it would be known to him.
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
Although both Ledger and Trezor devices have had vulnerabilities identified in them (mostly now patched, and the one we know of which isn't patchable is mitigatable with a passphrase), I'm not actually aware of any of these vulnerabilities being successfully exploited in the wild in order to steal someone's coins. Literally 100% of the cases I have seen of coins being stolen from a hardware wallet are down to user error - falling for a scam, signing an incorrect transaction, entering their seed phrase somewhere, etc.Even if someone out there has had their hardware device cracked or a vulnerability exploited, in >99.9% of cases the weakest link is the user. The same holds true for airgapped wallets. Yes, theoretically an attacker with enough resources could extract private keys by listening to the speed of your fan, but in reality what will actually happen is that you will accidentally connect to the internet, or sign the wrong transaction, or expose your seed phrase, etc.
The easiest way to achieve a very good level of security with minimal risk of messing up is to buy a hardware wallet and follow the instructions to the letter, including not exposing your seed phrase.
Hacking means unauthorized access, and this access can be physical or via the Internet. An air gap computer that is not connected to the Internet increases your security by ensuring that the device has not and will not connect to the Internet in any way.
You still have another problem, which is the physical access to the device. As long as you ensure these two things and the private keys are randomly generated, you are safe.
Hardware wallets provide these settings easily for those who do not know how to do it.
You still have another problem, which is the physical access to the device. As long as you ensure these two things and the private keys are randomly generated, you are safe.
Hardware wallets provide these settings easily for those who do not know how to do it.
You're minimizing the number of attack vectors by the choices of wallet that you make.
An air-gapped hardware wallet would probably suffice for most uses. Air-gapped wallets are secure because you're eliminating the most common attack vector; malware or rather the way for malware to communicate. The problem being that most users don't know how to properly set up and maintain one. As with the side-channel attacks, secp256k1 has properties that minimizes leaks with the side-channel so it isn't that great of a concern. Side-channel attacks are generally far more expensive and requires more technical expertise.
An air-gapped hardware wallet would probably suffice for most uses. Air-gapped wallets are secure because you're eliminating the most common attack vector; malware or rather the way for malware to communicate. The problem being that most users don't know how to properly set up and maintain one. As with the side-channel attacks, secp256k1 has properties that minimizes leaks with the side-channel so it isn't that great of a concern. Side-channel attacks are generally far more expensive and requires more technical expertise.
There isn't a 100% perfect solution to actually securing your coins, there are, however, secure options, that could potentially help you in guarding them. Others have said it themselves already, and simply speaking, a bit of DYOR would result in what you easily want. Other tips to follow would be to stop spreading info about yourself and your investments/assets online? Just like how a thief could plan out to steal from a house where an owner is a person who updates his and his family's whereabouts daily, giving out personal info about you could easily lead to you're assets being compromised. Just keep a low profile, do most transactions in the safety of your home, and do the basics of having a secure way to buy and store your assets.
Yes, a hardware wallet should be good enough and not be paranoid for such brute force attack or hacks unless you have been attacked physically). You just have to practice safe hygiene as pointed out by others.
For air-gapped pc, you can read everything here: Even air-gapped wallets aren't safe...
For air-gapped pc, you can read everything here: Even air-gapped wallets aren't safe...
Unless you are a high profile person you are probably safe from most of the more technical attacks and a hardware like a Trezor would probably be enough for all of your activities. The investment at first might suck a little but the only other equivalent is making a offline wallet but you lose some of the functionality and bring in extra work if you ever need to bring that wallet online when your trading.
I have read several times on this forum where people said human error is what lead to vulnerability to attack but I read that air gap computer was recommended several time on this forum is not that secure while Malwarebytes was also said to work base on how it was programmed, that is also not that secure and I believe in the next 5-10years Bitcoin price will reach 6digit and after this happens crypto holders will be the major target of online theft.
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
When it comes to safety then you should consider this as a long term hodler.As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
•Never save your keys or phrases online
•Never click links randomly
•Go for hardware wallet
•Never disclose that you do posses big stash of coins online or offline
Just stick with the basics and you would be fine.
it's true because basically bitcoin is one of the references for altcoins to adjust prices, but not all altcoins refer to bitcoin in the sense that only those connected to bitcoin can be said to be like that. There are many examples of altcoins that don't follow bitcoin like bitcoin cash etc.
Don't generalize all altcoins are all bitcoin because some are not.
Don't generalize all altcoins are all bitcoin because some are not.
Crypto holders have already been the target for hackers for a long time, you don't need 6-figure Bitcoin price to have that.
I personally never saw any posts that say that their airgapped wallet has been hacked. If it ever happened, it's incredibly rare. While relying on an antivirus to protect your hot wallet is definitely not reliable. You can never get the perfect thing, but you should be striving to get the best thing possible, which in this case is an airgapped machine or a hardware wallet.
I personally never saw any posts that say that their airgapped wallet has been hacked. If it ever happened, it's incredibly rare. While relying on an antivirus to protect your hot wallet is definitely not reliable. You can never get the perfect thing, but you should be striving to get the best thing possible, which in this case is an airgapped machine or a hardware wallet.
I wonder, how do hackers attack you if they don't know you? They do need some data first about you don't they? As long as you don't fall for traps, don't click infected links or share specific information about your IP address, is there any way for them to blindly identify and attack you?
Im in agreement with both responses ghat have been given and its no new news in the cryptosphere or even within our world today that crypto uses gets targeted with the values attached to cryptos today and NFT has even stepped into the picture. It's very difficult for individual accounts to get hacked, I guess 8 haven't heard of any especially when it's got to do with seed phrase and private key secured wallet in contrasts to the exchanger based accounts/wallets. The over looked part to the security is the anonymity that crypto provides. Ots a perfect cover for safety as your completely out of the picture for direct attacks. All that is left is for you to find a way to keeping the you keys safe either by using cold storage and other forms of hardware wallets.
Crypto holders have already been the target for hackers for a long time, you don't need 6-figure Bitcoin price to have that.
I personally never saw any posts that say that their airgapped wallet has been hacked. If it ever happened, it's incredibly rare. While relying on an antivirus to protect your hot wallet is definitely not reliable. You can never get the perfect thing, but you should be striving to get the best thing possible, which in this case is an airgapped machine or a hardware wallet.
I personally never saw any posts that say that their airgapped wallet has been hacked. If it ever happened, it's incredibly rare. While relying on an antivirus to protect your hot wallet is definitely not reliable. You can never get the perfect thing, but you should be striving to get the best thing possible, which in this case is an airgapped machine or a hardware wallet.
There is no such thing as 100% secure. As that article shows, there is always a way in.
However, hardware wallets and air-gapped computers provide a very high level of security that may be good enough for most people to protect against all but the most unlikely attacks.
However, hardware wallets and air-gapped computers provide a very high level of security that may be good enough for most people to protect against all but the most unlikely attacks.
I have read several times on this forum where people said human error is what lead to vulnerability to attack but I read that air gap computer was recommended several time on this forum is not that secure while Malwarebytes was also said to work base on how it was programmed, that is also not that secure and I believe in the next 5-10years Bitcoin price will reach 6digit and after this happens crypto holders will be the major target of online theft.
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
As a preparation for what may happen now and in the future, what are the 0% error/100% step a crypto holder or investors need to follow to avoid been expose or securely save his investment from attackers?
Jump to: