Search content
Sort by

Showing 20 of 28 results by pfuschi77
Post
Topic
Board Hardware wallets
Re: Bitfi wallet - most user-friendly functionality, does not store private keys
by
pfuschi77
on 12/07/2019, 10:17:29 UTC
Is this wallet better or worst than nano ledger s?  Is there a reason why anyone would use any wallet besides trezor or nano ledger?

Vertbase and Digibyte are happy with the security Bitfi has TODAY, so I guess I will buy one, split my coins over trezor, ledger and bitfi
Post
Topic
Board Hardware wallets
Re: Bitfi wallet - most user-friendly functionality, does not store private keys
by
pfuschi77
on 10/07/2019, 18:50:15 UTC
The real drive is we don't want newbies who don't know any better to be ripped off by buying a glorified brain wallet and end up losing all their hard earned bitcoin.

The only reason the bounty wasn't awarded is because Bitfi kept changing the goal posts and then cancelling it all together so they didn't have to pay out. The conditions were met several times by different people. They managed to extract the seed in plain text from the device, meaning all coins can be instantly stolen. Bitfi's claim was their wallet was "unhackable". I'm pretty sure extracting the seed counts as being hacked.

Even forgetting how horribly insecure their device is, even forgetting it had been hacked wide open multiple times, even forgetting the seed is extractable, even forgetting you can gain root access and install custom firmware; even forgetting all that, at the end of the day, it's still a brain wallet. Brain wallets are even worse than web wallets on the scale of "good security".

Buy one if you want, but realise that your funds are at constant risk of being stolen, and there is literally nothing it does that cannot be achieved more securely and for free with some freely available and open source software.

I´m not sure if I agree with you 100%, you focusing to much on the bounty IMO

The hackers were able to hack into the firmware, modified the whole device and only then do a transaction and tracing the seed out of the RAM as long as it was there in using a security whole in the device.
Am I wrong with that? They did not get into anything that already was on the device, didn´t do a withdrawl of the original transfered coins.
To me this is totally fine with the bounty rules. If they said, buy a new one, load it up with your coins yourself and try to hack it, that would be a different story, then they would have
lost the bounty.

Is it OK to not reward the bounty hackers with something after there experts didn´t find that RAM problem themself and actually produce the first Bitfi? Or did they find out themself???
I think rewards should get paid out if it can be proven. There was something paid so don´t know for what and if that front is cleared or not, lost overview with that  Shocked

So as I said before, we have 2 parties who are not 100% right or wrong. Doesn´t Bitfi have the right to correct themself even if they had a big mouth?

- I´m with you that a security device at first should not be hackable that easy and get root-access on top of that -- is this fixed? I don´t think so, is it feasible at all? I don´t know!
- Nothing in the device should store anything from a past transaction -- that was fixed, can anybody prove it is not so? That would solve the most important big problem IMO
- The Dashboard did not detect that the device was modified -- is a fix feasible? I don´t know, but this is a problem every device has and SURELY I WANT THEM ALL TO FIX THAT.
 
If your device can´t be 100% secured from a root-hack, your software/portal/dashboard, whatever !!! HAS TO DETECT THAT AND WORN YOU THAT THE DEVICE WAS COMPROMISED !!!
I don´t care how they do it but without that safety of our funds are at risk. You know how I shit myself when Komodo had their problem with the Agama Wallet? I sick of all that nonsense.
If I can´t be 100% sure that my device is 100% as the manufacturer produced it how secure can I feel then?
Post
Topic
Board Hardware wallets
Re: Bitfi wallet - most user-friendly functionality, does not store private keys
by
pfuschi77
on 10/07/2019, 14:37:05 UTC
Oh boy I worked me through this thread and I don´t know what to think of all the posters attacking Bitfi with such a passion and wonder what their real drive is.
Come to the point guys.

As far as I understood there was NOBODY that did empty the delivered wallet, is that fact or not? Don´t come with the "but I got root-access sh..." that was clearly not the part of the deal.
If somebody found out that the device RAM was readable than he should just do the transaction and got the 250k.

So we have hackers who clearly can´t read bounty rules because they where only able to do sh... after modifing the device and then trace the RAM, but still the stored coins could not be extracted right?

On the other hand we have a company who did lean a bit to much out of the window, not knowing that the device RAM did store their private keys for some time.
I guess they did fix that with an firmware update for the first generation and on the getgo with the second generation.

To me, both claims are somekind of wrong, but in the end, Bitfi was more right, their claim could not be broken.
The product needed some more "optimization" as we learned and they delivered on that.

What else should be answered:
Who did found the weakness first?Huh
Hacker of the bounty? Then this person might "deserve" a reward for saving Bitfis ass, this could have ended in a big scandale many years later.
It simply would be a nice gesture of Bitfi, with the help of the bounty they where able to optimize their product.

Fix was implemented, has since then anybody came out proving they are able to move coins out???
Was someone able to root-hack, modify device and trace the RAM again???

Is the device still rootable?
The device is branded with a unique ID great, but how can I be 100% sure the firmware was not modified?
Is there somekind of an online check today where we can see and be sure that the device was not modified on the way or anytime later.
In the past hackers did modify with root-access and the Bitfi Dashboard didn´t even detected that. Is it even possible to protect yourself from that
or is this technically not possible? Would be bad if not, the integrity of the device is super important.

All in all I would say this is great alternative on the market. I´m using both trezor and ledger at the moment and as far as I know, using the trezor with extra 25th phrase is as secure
as you can get. I´m not scared about losing my fund on them. So I´m not in a hurry to buy an Bitfi but in the next few month I think I will buy one.

Post
Topic
Board Announcements (Altcoins)
Re: VERITASEUM DISCUSSION THREAD
by
pfuschi77
on 22/10/2018, 10:35:09 UTC
the price of every coin/token has tanked, Veri is not different but to me it is one of the most difficult tokens
to guess the future value of it because of that very low supply. Bring in another 10Mio in supply and the price should go down
bigtime in the beginning but might get up later when the platform and the token gets used much more. So hard to say and as a very small
investor I´m not sure if I should put that bit of money in SpectreAi or something else, decissions decissions decissions
Post
Topic
Board Tokens (Altcoins)
Re: [ANN][ICO] Digitex - Commission-free cryptocurrency futures exchange
by
pfuschi77
on 28/08/2018, 09:23:27 UTC
will Digitex run on Ethereum or did they mention which blockchain they will use or will they do their own?

DGTX is an ethereum based token and will stay that way. We are not building our own blockchain.

OK
Are you positiv that you platform can perform then or are parts of it not on the blockchain?
Or are you using somekind of sidechain?
Post
Topic
Board Tokens (Altcoins)
Re: [ANN][ICO] Digitex - Commission-free cryptocurrency futures exchange
by
pfuschi77
on 26/08/2018, 17:43:21 UTC
Adam Todd's idea of setting up a private central bank and issuing his own currency (DGTX) is just great! Our only competitor = Federal Reserve Bank !!!! To the moonnnnn!😂😂😂

yea and next day we knockout god, no problem
Post
Topic
Board Tokens (Altcoins)
Re: [ANN][ICO] Digitex - Commission-free cryptocurrency futures exchange
by
pfuschi77
on 26/08/2018, 16:15:49 UTC
will Digitex run on Ethereum or did they mention which blockchain they will use or will they do their own?
Post
Topic
Board Altcoin Discussion
Re: It here PChain ICO - Chinese Ethereum 2.0 and Zilliqa KILLER
by
pfuschi77
on 05/07/2018, 15:54:20 UTC
so could someone please explain what PChain does better as aelf, elastos or cosmos?
Or will it be like "there is enough space for more than one blockchain ecosystem"
Post
Topic
Board Altcoin Discussion
Re: It here PChain ICO - Chinese Ethereum 2.0 and Zilliqa KILLER
by
pfuschi77
on 27/06/2018, 19:02:11 UTC
My head can´t take anymore input
PChain, AChain, UChain, Cosmos, AELF, Icon, ELASTOS, ONT
Who has the time to research all this stuff in a deep dive?

For multichain blockchains I thought I´m all good with Elastos, Icon an Aelf,
now there is PChain   Roll Eyes
What are they planing to do better than Elastos and Aelf?
Post
Topic
Board Announcements (Altcoins)
Re: [ANN] SophiaTX Announcement - The Blockchain for Business
by
pfuschi77
on 01/05/2018, 14:57:48 UTC
really good questions, if they do not respond, than there might be something wrong
Post
Topic
Board Announcements (Altcoins)
Re: [LAUNCHED][POW]⚡ELECTRONEUM⚡Official Moderated Thread
by
pfuschi77
on 08/02/2018, 18:41:03 UTC
What will be the scaling solution for the Electroneum Blockchain?
I don´t think it can handle all the mass of users.
Can Segwit and Lightning be activated? If yes will they do it? or another solution...
I do understand that the coorp with Titanium will help pushing the webwallet but how can they scale the blockchain?

Are their any other Fullnodes? Is the centralization a problem or are we already decentralized with focus on the blockchain?

Post
Topic
Board Announcements (Altcoins)
Re: [ANN] (QTUM) - A Scalable PoS Smart Contract Platform - MainNet Complete!
by
pfuschi77
on 06/01/2018, 15:59:02 UTC
I asked myself the same question and then sold all for 13€  Cry
Got back for 54€ yesterday and seconds after it fell, don´t have any look with qtum, but I will hodl it now

Till now it never was part of a crazy pump which isn´t bad at all. Neo or Stratis are the same,
some of the coins have to deliver and some not  Roll Eyes

Does Qtum survive against Eth, Neo, VeChain, Rootstock...
we will see, at this second it is rising
Post
Topic
Board Announcements (Altcoins)
Re: | STRATIS | The first blockchain developed for businesses |Full POS
by
pfuschi77
on 04/01/2018, 17:45:19 UTC
STR 2018 = ETH 2017

Definitly, see shitcoins like tron, xrb, xp, xvg are pumping hard, how can strat's market cap is lower than theirs?


I´m hoping too that Stratis finally goes up to $50 and more but why is Tron a shitcoin? After next BTC pump I wanted to buy many Tron  Huh
Post
Topic
Board Announcements (Altcoins)
Re: I/O Digital - I/O Coin - Blockchain Ecosystem - DIONS - POS CIPHER - CHAMELEON
by
pfuschi77
on 30/12/2017, 12:01:15 UTC
"If your balance is not displaying properly press ESC then repairwallet"

That worked for me, now everything seems fine  Wink
Post
Topic
Board Announcements (Altcoins)
Re: I/O Digital - I/O Coin - Blockchain Ecosystem - DIONS - POS CIPHER - CHAMELEON
by
pfuschi77
on 26/12/2017, 14:33:53 UTC
new version, same 0 Balance problem.
Dions name, transaction history... everything fine but the balance still wrong.
Did I miss something we had to do after the activation of Dions? Hard to keep up with all these wallets
Post
Topic
Board Announcements (Altcoins)
Re: I/O Digital - I/O Coin - Blockchain Ecosystem - DIONS - POS CIPHER - CHAMELEON
by
pfuschi77
on 25/12/2017, 19:19:27 UTC
My wallet still shows a wrong balance. Don´t understand it.
I downloaded and installed the newest version, put in the latest blockchain data and my wallet.dat.
Everything looks good, Dions is there, my Avatar pic...
In "transactions" I see my adresse "incoming" at 21.11.2017

But under "Overview" I only see 0.00034625 IOC
Pending 0 IOC

When I connect to my old wallet I see the correct balance on Overview page
Post
Topic
Board Announcements (Altcoins)
Re: I/O Digital - I/O Coin - Blockchain Ecosystem - DIONS - POS CIPHER - CHAMELEON
by
pfuschi77
on 20/12/2017, 19:34:31 UTC
What files do I have to copy from old working directory to the new?
only wallet.dat?
This is not working for me, bak Files always gets created.
wallet.dat and peers.dat
Post
Topic
Board Announcements (Altcoins)
Re: [ANN]BYTOM: An interoperational protocol for diversified byte assets
by
pfuschi77
on 14/12/2017, 14:47:09 UTC
I don´t understand Bytom either  Roll Eyes
Can someone please explain why this coin is interesting? As far as I remember (in August) Bytom was a bit promoted as the Bitcoin of china...
and was killed by the china ico news quick after
Post
Topic
Board Announcements (Altcoins)
Re: [ANN][CLOAK] Private, Secure, Untraceable & Decentralized Digitalcurrency
by
pfuschi77
on 22/11/2017, 21:19:30 UTC
Cloak looks strong atm. $10 seem to be possible within a few days.

after open source cloak must be 100$ soon

Do we have a fix date on that? Q4/2017 is what the whitepaper says... but I´m not much into socialmedia so maybe I missed the date  Roll Eyes
Post
Topic
Board Announcements (Altcoins)
Re: IOTA
by
pfuschi77
on 20/11/2017, 13:46:07 UTC
2 hours now for my transaction from IOTA Wallet to Bitfinex and still "pending"  Huh Huh Huh
I will be so happy to get rid of this, I have enough of this bulls....
The migration from my old wallet and old seed to the new one was pure horror for me.
I just want to sell it and I can´t because the transaction is not getting the commits  Embarrassed

So long it takes for the transaction to clear? was it not supposed to clear within seconds?
Why happens this, there is people really interested in this project which already looks big now, but there is also lots of fud
Can you explain a little bit more about your genuine experience please'?
Thanks

Still unconfirmed on "iotasear.ch"  Embarrassed unbelievable, 20 hours now
Normal send transaction to bitfinex, nothing special.
I guess they are very busy because of the "Tangle migration" but I don´t care, this is taking far to long.
Doing the research why my old wallet couldn´t connect anymore, how to update my wallet, create new seed, move my balance from old seed to new longer seed was very time-consuming and stressful (many hours)
it went well in the end but you do not know that when you start.
After that horror I simply want to get ridd of iota and never ever come back. The infos from iota didn´t help at all, without google and all the forums I would not have succeeded that task