Search content
Sort by

Showing 20 of 67 results by lyw123
Post
Topic
Board Hardware wallets
Re: Black Friday Hardware Wallet Less Known Deals
by
lyw123
on 16/11/2023, 02:32:13 UTC
First Keystone announced discount and it is still available for Keystone 3 Pro version, discount is 30% and price is $90 plus shipping.
I think Keystone's products look very attractive, but the numbers of reviews and Google Play downloads are too small.
Bitbox02 is good too, but it also faces the problem of too few users.
I wish these two products can receive more attentions and have more users.
Post
Topic
Board Hardware wallets
Re: NEW SafePal X1 hardware wallet
by
lyw123
on 15/11/2023, 02:21:01 UTC
I have no idea if the X1 model is open-source or not. I can see that WalletScrutiny has not yet reviewed it, but their other product, the S1, never became open-source although they said it would. So the first condition you mentioned may never be fulfilled and you will have to look elsewhere. 
According to the number of app downloads on Google Play Store, the data published by the official websites of various wallets, and the number of reviews on Amazon, I estimate that only Ledger, Trezor, and Safepal have 1 million users. Among them, only Trezor is open source. This indicates that users lack the necessary knowledge, or are ignorant.
The number of users of other brands is particularly small. I estimate that the number of OneKey users is less than 300,000, the BitBox users is less than 100,000, and the Keystone users is less than 30,000. If a company's annual sales is less than 100,000, is its profit enough to maintain the operation? With too few users, the supervision will be insufficient, and it will not be safe.
Post
Topic
Board 中文 (Chinese)
Re: 安全出金请教?
by
lyw123
on 02/11/2023, 10:29:02 UTC
5,最好的方法是办理境外比如香港/新加坡/欧洲和美国的银行账户。然后将u通过合规平台转入境外银行账户,再由境外账户转回或ATM取现或境外银行卡绑定支付宝直接消费或通过刷卡套现。 另外还可以去香港现场换现金,然后存在香港银行账户等方法。
谢谢赐教!如果我只有50万人民币要出金,去一趟香港成本显得太高了些。
币安币商赚差价,通常只有0.1-0.5%的利润,这可以推测出:币商银行卡被冻结(公安冻结那种)的概率小于0.1%吗?如果大于这个概率,币商岂不是要亏本?

当然,如果有大钱(几百万),去香港办银行卡就有必要了。

3,币安港币出金已停止。
现在有什么办法通过合规平台转入香港银行卡吗?
Post
Topic
Board 中文 (Chinese)
Topic OP
安全出金请教?
by
lyw123
on 28/10/2023, 05:35:18 UTC

您好,请教:
     1. 如果不贪便宜,选择币安C2C交易量大,注册时间长的币商出金,被冻结的概率能小于1%吗?
     2. 这个策略合适吗?我使用8-10张银行卡(非工资卡)小额出金,出金后放在银行卡10-15天,如果没事,取现金,然后集中存到我老婆的银行卡。
     3. 向币安的币商买U,是不是完全没被冻结的风险?这种情况人民币是流出的。
     4. 一般情况下,银行卡被公安冻结后,钱还能要回来的概率有多大?
     5. 还有什么更好的出金门道吗?

请高人指点!
Post
Topic
Board 中文 (Chinese)
Re: 如何安全地出金USDT?
by
lyw123
on 27/10/2023, 00:39:45 UTC
2,可行,但也可能你还没来得及取就被冻,或这次没冻下次立刻被冻。看运气。只要你被冻过一次心态就不一样了。

您好,请教:
     1. 如果不贪便宜,选择币安C2C交易量大,注册时间长的币商出金,被冻结的概率能小于1%吗?
     2. 这个策略合适吗?我使用8-10张银行卡(非工资卡)小额出金,出金后放在银行卡10-15天,如果没事,取现金,然后存到我老婆的银行卡。
Post
Topic
Board Altcoin Discussion
Re: Stablecoin censorship
by
lyw123
on 26/10/2023, 12:34:51 UTC
The best thing to do is to not do anything with centralized stablecoin that would trigger addition to the blacklist or just use a decentralized stablecoin like DAI. Most of the addresses in those blacklists are addresses that contain hack funds.

I noticed that the trading amount of DAI on Binance and OKex is very very small. Will there be a problem of low liquidity if I hold DAI?
Post
Topic
Board Hardware wallets
Re: Onekey Classic or Bitbox
by
lyw123
on 25/10/2023, 23:28:00 UTC
Although it is widely believed that users' responsibility led to these thefts, but a single mistake could wipe me out.
That's true for any hardware wallet. So, think twice before you do something you might later regret. If in doubt, ask questions before, not before making a mistake.
[/quote]

Thank your suggestions.
I placed an order for OneKey, now own three different brands of hardware wallets: Trezor One, Bitbox02, and OneKey Classic. I will take care of the OneKey's open source nature and reputation, and will immediately disable it if anything bad happens.
Post
Topic
Board Hardware wallets
Re: Onekey Classic or Bitbox
by
lyw123
on 25/10/2023, 01:25:25 UTC
...But dkbit98 mentioned something interesting. OneKey had a serious vulnerability a few months ago where it was proven that the keys from its secure element weren't encrypted and thus could be intercepted. That's exactly what a security company did and made OneKey aware of that. Despite the existence of a SE chip, it didn't make the wallet safer because it was coded wrongly. Who knows what else they did wrong that is yet to be discovered. Huh

Compared to OneKey, DKBit98 may prefer Keystone, perhaps because Keystone is air-gapped.
However, in terms of user base, OneKey (with 50k downloads on Google Play) is significantly larger than Keystone (with 5k downloads).
Post
Topic
Board Hardware wallets
Re: Onekey Classic or Bitbox
by
lyw123
on 25/10/2023, 01:08:38 UTC
Since you are working with altcoins, I don't see the point in adding a 3rd hardware wallet to the mix. I don't have a a lot of positive things to say about most altcoins anyway.
Storing BTC can using multi-signature wallets, which provide a highest secure guarantee. However, for storing altcoins, only single-signature wallets are available. Currently, there are a few well-known open-source wallets for altcoins, including Trezor, BitBox, OneKey, Keystone, and KeepKey.
Post
Topic
Board Hardware wallets
Re: Onekey Classic or Bitbox
by
lyw123
on 25/10/2023, 01:00:07 UTC
...I think. Anyway acording to them it was fixed but anyway…guess no company is 100% safe.

Originally, I only intended to use Trezor as it has the most user and the most open-source nature. I came across various user reviews of hardware wallets on the website https://www.trustpilot.com/review/  and found that Trezor had the most stolen customers (= 12). Although it is widely believed that user responsibility led to these thefts, but a single mistake could wipe me out. So I chose diversifying my altcoins in 3 hardware wallets.
Post
Topic
Board Hardware wallets
Re: Onekey Classic or Bitbox
by
lyw123
on 24/10/2023, 00:50:35 UTC
The positive thing is that both wallets are open-source.However, WalletScrutiny couldn't match the binary with the published source code.
I want to buy three different brands of hardware wallets to diversify my altcoin storage. Currently I have TREZOR ONE and BITBOX02, both were purchased directly from the official website. It's hard to choose the third option, as both onekey and keystone not passed the  of open source testing of WalletScrutiny. Is there any problem with the open source nature of OneKey at present? Can I trust that it is completely open source?

I can't seak much about quality of Onekey wallets, but I know they had serious bug connected with secure element...
Using a passphrase, I am not very worried about being stolen after physical acquisition. Two worried things: 1. It cannot be hacked remotely. 2. It must be sufficiently open source to allow the community to fully review it.
Post
Topic
Board 中文 (Chinese)
Re: 如何安全地出金USDT?
by
lyw123
on 22/10/2023, 01:18:56 UTC
1,没事
2,可行,但也可能你还没来得及取就被冻,或这次没冻下次立刻被冻。看运气。只要你被冻过一次心态就不一样了。
3,币安港币出金已停止。

谢谢大牛解答!

研究了好久了,没得什么特别好的办法。打算还是存在硬件钱包里,尽量不取出来。
开源硬件钱包学习了也有好久了,目前买了trezor one 和bitbox02,在等待和考虑要不要买keystone,目前无法确认它是否足够开源。

顺便提醒一下国内的朋友,闭源钱包不要再买了,比如ledger, safepal, imkey(imtoken)。这些我都买过,当垃圾丢了。
因为它的代码是不公开的,理论上如果在代码上留后门,分分钟偷你没商量。
目前支持山寨币的,最开源的就是trezor one 和bitbox02,国内有keystone和onekey, 但后2种安全性比不上前2个。
Post
Topic
Board Hardware wallets
Merits 1 from 1 user
Re: Keystone 3 HW coming soon!
by
lyw123
on 21/10/2023, 10:10:07 UTC
⭐ Merited by JayJuanGee (1)
For those who are interested in getting one of these HWs, there's a 20% discount for its pre-sale that ends in 4 days!

I want to have 3 different brands of open source hardware wallets to store altcoins and spread risk.
I currently use the Trezor One and just placed an order for the BitBox02. And need a third one of different brand.
I have noticed that Keystone 3 pro uses an embedded system, not the previous Android OS.
I am not sure that whether Keystone 3 will be open source like Trezor Safe 3 or Bitbox02?
Or just wait a few months?
Post
Topic
Board Hardware wallets
Re: Trezor Safe 3 New Hardware Wallet
by
lyw123
on 20/10/2023, 09:53:20 UTC
we've also seen countless users on this forum make posts blaming their hardware wallet for the funds being stolen, and it almost always turns out to be a mistake the user has made instead (such as storing their seed phrase in their emails).
I have carefully reviewed the stolen comments and have difficulty confirming the true reason for the theft. I am not a professional, but I believe that there is no problem with the firmware of the Trezor and the Trezor Suite, only the hardware may have problems. If a backdoor is left on a small amount of hardware, ordinary users and professionals cannot detect it. Of course, if the Trezor firmware can effectively eliminate the harm of fake hardware wallets, it can only be stolen due to user errors.

You can even raise the more general concern. Is it possible that there is a bad entity (located, let's say, in China) outside Trezor company that produces counterfeits of wallets? I would not answered negatively. Even if such company doesn't exist today it can appear tomorrow.  Thus, it is always better to buy the stuff directly from brand.
It is a fact that there are many cheaters in China, so I don't want to buy Keystone and Onekey, even though it is free shipping (I am Chinese). But don't underestimate the Europeans, too.

It all comes down to us after all. I have also lost a small amount of money from a hot wallet I owned: https://bitcointalk.org/index.php?topic=5461230.0 . Personally I had made a ton of mistakes, so...
The high probability is that the user's own problem caused the theft. Having professionals to answer questions can make newbies feel ease.  o_ e_ l_ e_ said:"Just one incident can wipe me out."  It's better to be cautious.
Post
Topic
Board Hardware wallets
Merits 1 from 1 user
Re: Trezor Safe 3 New Hardware Wallet
by
lyw123
on 20/10/2023, 03:22:10 UTC
⭐ Merited by JayJuanGee (1)
Other open-source hardware wallets (altcoin wallet, not bitcoin only) have few users and less attention, making them less secure.

Having less attention doesn't necessarily make you less secure. In fact it may be the exact opposite.

You may be right. I found user reviews of different wallets on the bitbox website. see https://bitbox.swiss/bitbox02/#compare and https://www.trustpilot.com/review/bitbox.swiss
I compared several kinds of wallets and recorded the theft situation myself, as follows:

Trezor,     User score: 3.5,  Number of reviews: 405,   Number of stolen users: 12, Some details: Robert in AU, 160,000$ stolen; Curtis in US, 100,000$ stolen; Donald in US, 60,000$ stolen; Voodoo in AU, 0.4BTC stolen.
Ledger,    User score: 2.8,  Number of reviews: 1559, Number of stolen users: 12, Some details: Di in IT, 1 eth stolen; Ale in AU, 0.33BTC stolen.
Keepkey,  User score: 2.4,  Number of reviews: 290, Number of stolen users: 1, Some details: Gennady, 5000$ stolen.
BitBox,     User score: 4.9,  Number of reviews: 547, Number of stolen users: None
Keystone, User score: 4.2,  Number of reviews: 47,   Number of stolen users: None
Onekey,   User score: 3.5,  Number of reviews: 56,   Number of stolen users: None

Post
Topic
Board Development & Technical Discussion
Re: Given the first 15 words out of 24, can a hacker crack the wallet?
by
lyw123
on 18/10/2023, 13:25:20 UTC
How can thieves or ordinary hackers crack it?
I already showed you a link where someone cracked a fingerprint reader on a $1000 smartphone in 3 minutes. The fingerprint reader on a $20 USB drive will be trivial by comparison.

Thank you very much, o_ e_ l_ e_ o! Thank you for your advice.
I seen that video, and known that the fingerprint U disks were not unbreakable.
So the handwritten documents corresponding to the unencrypted files on the USB drive, will not be stored at my home (off site backup).
Post
Topic
Board Development & Technical Discussion
Re: Given the first 15 words out of 24, can a hacker crack the wallet?
by
lyw123
on 18/10/2023, 08:24:27 UTC
As others have pointed out: go for proven schemes (mnemonic words and separate mnemonic passphrase; stored safely in redundant safe and secret locations // multi-sig stored safely in redundant locations // use hardware wallet(s)). Mnemonic recovery words and (if used) a mnemonic passphrase should only be backed up on physical non-digital media (paper and for protection against paper harming conditions or events: stamped in stainless steel or titanium).

I divided the seed phrase and passphrase into two parts, one handwritten and the other stored on USB drives. If the files in the fingerprint U disks are not encrypted, then I do not need to remember any passwords to recover the wallet data. If I have three fingerprint-encrypted USB drives, and check whether they work properly every year. Then the probability will be very very low that they will all be unusable at the same time? Your method: seed phrase and passphrase were backed up on physical non-digital media. Please tell me, what is the difference between yours and mine?
Post
Topic
Board Development & Technical Discussion
Re: Given the first 15 words out of 24, can a hacker crack the wallet?
by
lyw123
on 18/10/2023, 05:26:12 UTC

Also, keep in mind that if you use 24 words seed phrase, even if you reveal words in unordered way, hacker still won't be able to crack your wallet, but will be able to crack if you use 12 words seed phrase and reveal all of them.


There are two ways to recover the seed phrase of Trezor One on Trezor Suite, one is standard and the other is advanced.
When restoring in the standard mode, the words are entered directly in a unordered way. If 12 out of 24 words have been exposed, then this recovery method is obviously not secure. If I enter in advanced mode, will there be no problem? Of course, a safer way is to write down the 24-word password and encrypt only the passphrase.
Post
Topic
Board Development & Technical Discussion
Re: Given the first 15 words out of 24, can a hacker crack the wallet?
by
lyw123
on 18/10/2023, 05:14:44 UTC

I find overly complex encryption schemes, self invented worst of it, a quite sure road to loss and desaster later, unless you perfectly document everything. How do you protect your documentation then? Never rely on your memory alone, it will fail you in some future (I speak from own experience).

Some wallet data are handwritten on papers and stored with multiple copies (5-6 copies); remainder wallet data is stored with electronic format, which are stored on 3-4 encrypted USB drives and 2-3 emails. There are unencrypted files in the two fingerprint U disks, but the corresponding handwritten files are not stored in my home. The encryption file production is completed on offline isolated computers.
Post
Topic
Board Development & Technical Discussion
Re: Given the first 15 words out of 24, can a hacker crack the wallet?
by
lyw123
on 18/10/2023, 05:04:55 UTC
Quote
Storing partial unencrypted wallet data on a fingerprint-encrypted USB drive or writing it directly on paper doesn't make much difference. These fingerprint-encrypted USB drives are specifically designed for protecting corporate trade secrets, and I don't think they can be easily cracked.
Digital storage has other shortcomings that just being hacked/cracked. For example hardware problems that is where the USB disk is harmed either physically or due to electrical issues or other things and the data on it becomes inaccessible. Or we have the data decay/degradation by passage of time.
The most terrible thing is that the U disk is broken. I currently have 3 encrypted USB drives and plan to buy one more. In addition, I have added another preventive measure. Finally, email encryption is the last way to open files.