Pages:
Author

Topic: What's wrong with my current cold storage? - Weaknesses in cold storage methods - page 2. (Read 4075 times)

full member
Activity: 129
Merit: 100
A good point, I have updated the section to be more accurate in that point

'A physical bitcoin coin where the manufacturer generates and installs the secret ke

 * The medium that the key is on is often paper/plastic which can burn or be smoke damaged'
We usually use the terminology funded (or pre-funded) vs. DIY coins (or buyer funded) in the collectibles section. That may help with clearing things up. This is a nice summary but should probably be differently formatted to make it look nicer!


Thanks, I changed it to this

'A pre-funded physical bitcoin coin (where the manufacturer generates and installs the secret key)'

to reflect the proper terminology.
legendary
Activity: 2674
Merit: 2965
Terminated.
A good point, I have updated the section to be more accurate in that point

'A physical bitcoin coin where the manufacturer generates and installs the secret ke

 * The medium that the key is on is often paper/plastic which can burn or be smoke damaged'
We usually use the terminology funded (or pre-funded) vs. DIY coins (or buyer funded) in the collectibles section. That may help with clearing things up. This is a nice summary but should probably be differently formatted to make it look nicer!
full member
Activity: 129
Merit: 100

This is only true for pre-funded coins, otherwise it is false. I'd say it is a bad generalization to say that all physical Bitcoin share these weaknesses, because they don't. There are several DIY coins, where you assemble and fund it with whatever address that you want. The only obvious weakness in DIY coins is theft (none of these listed above apply to these) and potentially your own generation scheme (if weak, vulnerable, etc.).


A good point, I have updated the section to be more accurate in that point

'A physical bitcoin coin where the manufacturer generates and installs the secret ke

 * The medium that the key is on is often paper/plastic which can burn or be smoke damaged'

legendary
Activity: 2674
Merit: 2965
Terminated.
A physical bitcoin coin

 * Trust in the manufacturer themselves, they could copy the key
 * Trust in their key generation procedure
 * Trust in the operational security of the manufacturer, they could be generating the keys on their everyday computer
 * Trust no one is successfully spying on them, electronically, looking through their documents while they are out of town, or with tiny tin foil hat cameras or long range ones
 * Trust that the object was not tampered with in delivery
 * Trust that no one has tampered with the object since you got it
This is only true for pre-funded coins, otherwise it is false. I'd say it is a bad generalization to say that all physical Bitcoin share these weaknesses, because they don't. There are several DIY coins, where you assemble and fund it with whatever address that you want. The only obvious weakness in DIY coins is theft (none of these listed above apply to these) and potentially your own generation scheme (if weak, vulnerable, etc.).
full member
Activity: 129
Merit: 100

Also, don't forget to mention that cloud storage or online wallet isn't good place to keep your bitcoin wallet Roll Eyes


Hmm, I didn't include it at all because I figured anyone that gets any insight from this post would know well enough to not store their btc in an online service unless they were prepared to lose it.

I wanted to talk about cold storage methods that are secure, online storage is so far from secure I didn't even bother with it, should I add something to that effect?
hero member
Activity: 1456
Merit: 579
HODLing is an art, not just a word...
it is always good to have security in mind when it comes to bitcoin or money in general and although i agree with most of what OP says but i have my own way of doing things.

i have made my cold storage in USB disk and i keep it encrypted and in my desk drawer. there is one paper backup of my seed and also a digital backup on the cloud (obviously encrypted) and i feel safe enough.

because even if i lose access to one of these like my house burning to the ground, i still have another back up accessible.
legendary
Activity: 1904
Merit: 1074
Every method having their own risk but it is good to know the risk so we can make things to secure our bitcoins, I have not try cold storage because I believe online is safer when you put 2FA on your accounts.
I personally don't feel safe with that even with 2FA after all the bitcoins are on the server some server that you dont know, even if the provider is very trusted you never know if the servers are hacked or something. In my opinion you should keep majority of bitcoin in cold storage, if you are going to use them in near future and keep some change online or anywhere you please for everyday use.

I keep about 20% of my coins in hardware wallets or online services to be able to trade quickly, or if I see something I want to buy. The

other 80% are in cold storage, securely stored. I will also not trust anyone with the storing of my private keys, no matter how reputable

they are. The 2FA authentication is a temporary hurdle for hackers, who mostly use social engineered methods to get hold of that. The

MitM attacks will also void some of these securing methods.
hero member
Activity: 1050
Merit: 529
Every method having their own risk but it is good to know the risk so we can make things to secure our bitcoins, I have not try cold storage because I believe online is safer when you put 2FA on your accounts.
I personally don't feel safe with that even with 2FA after all the bitcoins are on the server some server that you dont know, even if the provider is very trusted you never know if the servers are hacked or something. In my opinion you should keep majority of bitcoin in cold storage, if you are going to use them in near future and keep some change online or anywhere you please for everyday use.
full member
Activity: 129
Merit: 100


, but to me it seems to be a bit of an overkill with no real benefit in terms of security.

Again, I am trying to spell out the potential problems, if people are uninformed they would all just do silly things.


Especially I don't understand, why your product is limited edition (just 50 pieces). A suitable solution for cold storage should ideally be mass-produced and provided at low costs.

In fact you very greatly misunderstand everything about the motive for my post and creation. The post outlines why current methods were not good enough for me, because of their failure in edge cases.
The 'product' is a personal art project, I made this for me so that I could have something better than what was out there, for the reasons outlined above. It is expensive to make but way more expensive to design and make just one, so I made a few; perhaps others see the problems that I have outlined and want something better



I fail to see a real advantage of using your capsules over just printing out an (encrypted) paper wallet or engraving my (encrypted) key into a piece of metal of my choice. Doing it myself is a lot cheaper and I can print out thousands of paper wallets to store them at different places, thereby significantly reducing the risk of theft. A small sheet of paper is also much easier to hide than one of your capsules.


that is the exact point of the post. was that not clear? I thought I was very clear in spelling out the weaknesses with methods and suggesting people stamp their own metal as the easiest option. Also, this post is more for people who don't have access to more than one location, so if their house burns down and all their paper wallets are in that house they are all gone. There is a link to a situation where this pretty much happened. That is why I made this post, to point out weaknesses (and show why I wanted something better)




Physical tamper evidence is not a really important feature if the item you use for cold storage is itself worthless:


I very much disagree, for one not everyone monitors their btc so if the thief replaces it you might never know until you need to spend it


Put your paper wallet in tinfoil / a dark envelope and seal it with glitter nail polish.


I think I also suggested something along these lines for the better stamped metal plates
legendary
Activity: 1708
Merit: 1036
From previous discussions on this topic, I suggest the following  strategy: An M-of-N multisig wallet with multiple copies of each key distributed in different locations. Whether in digital or hardcopy format I simply don't have the expertise/data to judge which is best. But by using multisig you don't worry about a single copy of the key falling into wrong hands, and by using duplicate copies you protect against accidental loss. (This would only be for rarely touched significant investments, it's just too much of a hassle for everyday spending accounts.)

And while I appreciate the efforts of folks like in the OP, I still tend to think that zipping your wallet.dat file with a password, renaming it BirthdayPics2006 and throwing it on any decently operated cloud storage account is likely to be safer than most overthought methods, so long as you didn't have malicious code on your computer when you first generated it.
sr. member
Activity: 318
Merit: 250
Cold storage is an ongoing process where you periodically check if all your multiple backups on multiple different mediums still work. If one breaks you replace it with a copy from one of your other backups. You can't rely on anything forever because of the human factor, so the belt and braces approach is best if you expect your belt or braces to eventually break and need replacing. Keep monitoring and repairing multiple backups.
member
Activity: 84
Merit: 10
your solution is over the top and also not perfect.
i don't think you can be 100% safe, but you also don't need to.
there are fine solutions at a cheap price that are sufficient.
the biggest factor is and always will be is the human part.
legendary
Activity: 1806
Merit: 1024
What's wrong with my current cold storage? 

Nothing is wrong. I wish you good luck with your product, but to me it seems to be a bit of an overkill with no real benefit in terms of security. Especially I don't understand, why your product is limited edition (just 50 pieces). A suitable solution for cold storage should ideally be mass-produced and provided at low costs. To me it seems that you just want to create a collectible item that is never put to real use but instead just kept in a collection to be sold some day for higher prices.

I fail to see a real advantage of using your capsules over just printing out an (encrypted) paper wallet or engraving my (encrypted) key into a piece of metal of my choice. Doing it myself is a lot cheaper and I can print out thousands of paper wallets to store them at different places, thereby significantly reducing the risk of theft. A small sheet of paper is also much easier to hide than one of your capsules.

Physical tamper evidence is not a really important feature if the item you use for cold storage is itself worthless: If a potential thief will get his/her hands on your cold storage item he/she will either directly spend your BTC or transfer them to a new address. If you have any suspicion that someone might have discovered your cold storage you can quickly transfer your funds to a new address as well and create a new paper wallet. In addition you can easily provide some kind of tamper evidence for paper wallets as well: Put your paper wallet in tinfoil / a dark envelope and seal it with glitter nail polish.

ya.ya.yo!
sr. member
Activity: 294
Merit: 251
If your marketing is good? Mmm... I don't think so, maybe you can do something more directly. You don't need to roast the others methods to promote your.

Change the world key for notes of dollar for example...
Anyone can steal it, it can burn. Same with any currency, like gold too, anyone can steal or whatever.
legendary
Activity: 1042
Merit: 2805
Bitcoin and C♯ Enthusiast
Bitcoin is all about the edge cases and being fully informed, I don't think there is any overkill in the comment but perhaps you can tell me what you think is overkill?
What does erosion have to do with this that corrosion does not cover?

i agree about the edge cases but lets review your edge cases that you have been focusing on in your first post (corrosion, melting point, and you mentioned hard to machine which relates to hardness if we want to engrave physically and doesn't matter much if we want to laser-engrave)

keep in mind corrosion is a process, not a property.
Corrosion:
when we talk about corrosion it is all about the environment, put simply there are two categories to watch: corrosion that is not influenced by any other process and corrosion that is influenced by another process, such as the presence of stresses or erosion (Erosion being a wear process, in which surface damage is caused by the repeated application of high localised stresses)
since the wallet is going to be kept at home environment, lots of conditions like stress induced corrosion cracking are not relevant.
the only things that we have to think about are "Aqueous" and "atmospheric" Corrosion. so strictly speaking a carbon steel with a simple coating is going to do the trick.

melting point
again room temperature and a case of possible fire to reach a temperature of as high as 1100°C which is still inside working temperature of steels.

Quote
> the hardness of these materials is what you should look for

hardness is good but as we see with tungsten being so brittle it isn't a end all be all. I agree that stamping on steel is the best for the common man, I update the Al part to reflect the potential melting point

you misunderstood the meaning of "brittle". a brittle metal is a metal that breaks catastrophically when it reaches the UTS point.
we are talking about a metal, so tungsten with a Yield strength ~ 1000 MPa (it is 500 ish for SS) needs a tremendous amount of power to be broken.
i am not saying use tungsten , just pointing out what brittle means Cheesy

Quote
The titanium is actually only about 10% more expensive than the 316SS

you didn't say which alloy though.
you are intriguing me to buy one and do a quick XRD to find out Cool
full member
Activity: 129
Merit: 100
there are a lot of overkill in your comment



Bitcoin is all about the edge cases and being fully informed, I don't think there is any overkill in the comment but perhaps you can tell me what you think is overkill?

What does erosion have to do with this that corrosion does not cover?

> the hardness of these materials is what you should look for

hardness is good but as we see with tungsten being so brittle it isn't a end all be all. I agree that stamping on steel is the best for the common man, I update the Al part to reflect the potential melting point


The titanium is actually only about 10% more expensive than the 316SS and it has benefits for me, notably more lightweight, more corrosion resistance, and not paramagnetic 



This was all made because I want others to be aware of potential problems in their cold storage methods (to see why I wanted to make something better)

Thanks for you comments!
legendary
Activity: 1042
Merit: 2805
Bitcoin and C♯ Enthusiast
there are a lot of overkill in your comment and since my expertise lies in the following part i try to explain my thought:

Engraved / etched/ ablated/ stamped on a piece of metal
 * Some metals can deteriorate or corrode, choose a good metal; also store your metal away from direct contact other metals. Some metals that are corrosion resistant have low melting points, are extremely expensive, orhard to machine.

lots of the links about corrosion, erosion (that you missed the link to), melting point, maintainability, etc are used for harsh/corrosive environment which contains acids like in the food industry, and as for machining, forming,... the hardness of these materials is what you should look for and a simple Austenite Stainless Steel has enough properties to be able to cut the big plate in the form of a paper wallet and then engrave on it using a simple chisel.

Quote
Previously we had been working with 316 Marine grade Stainless Steel for the Keyois capsule engraving material, it is the best type of steel my research led me to, however we made the switch to  Titanium  because it is even better.

is your research a self google search or is is a consult with a material science expert?
if you ask me i say you have increased the cost at least 20 times by choosing Titanium and gaining not much properties over the stainless steel.

Quote
* Metals can still deform or melt from heat, destroying any engraved SK.
"Most house fires do not burn hotter than 1,200 degrees Fahrenheit. This temperature is typically associated with the hottest portion of a home, which is in the roof area. Homes that burn for longer than 30 minutes or consist of multiple levels sometimes burn at higher temperatures."     
You want to pick a metal that won't be destroyed by a fire. So Brass, bronze, tin, lead, silver, gold, and copper are all out as engraving materials.     
Aluminium should survive but I haven't tested this.

Aluminium properties can range from a melting point of 460 °C (865 °F) to 1500 °C (2800 °F) but the price is also going to go up!

Quote
At around 1500° Steel and Nickel should be okay.     
Titanium is what the Keyois Capsule has the SK engraved on and it has a melting point of over 1600° C / 3000°F. Tungsten is double that but can be brittle.

i am curious to know which Titanium alloy it is used in this product.


Austenite Stainless Steel is most probably more than enough for this particular usage, and if you are worried about some properties like the strength, more corrosion resistance, a better surface, a better resistance to Pitting there are some alloys that have structures made out of a mixture of Austenite, Martensite, Ferrite which are so much cheaper than Titanium with enough properties to satisfy any possible threat.

i will post more information with my CES if i had time!
hero member
Activity: 3052
Merit: 685
Every method having their own risk but it is good to know the risk so we can make things to secure our bitcoins, I have not try cold storage because I believe online is safer when you put 2FA on your accounts.
legendary
Activity: 1652
Merit: 1057
Almost every cold storage method is vulnerable to hack /theft /natural calamities. We can protect our laptop with a password from a colleague not from a fire accident.
Having multiple copies in different format and keeping them in different location must be a 'practical' solution still not a complete solution imo.
legendary
Activity: 3542
Merit: 1965
Leading Crypto Sports Betting & Casino Platform
Most of your storage methods, do not include a backup plan. You never store only 1 copy of your paper wallet. You never store all paper wallets in 1 location. I have 3 locations with 3 copies of each paper wallet. For example : 1 copy in a safe deposit box / 1 copy in safe place at home / 1 copy buried in a time capsule.

I know the reason for this post, is to promote your device, but your storage methods needs redundancy to allow for disasters happening in your area. ^smile^
Pages:
Jump to: