The very reason for using a hardware wallet is that your computer IS compromised, trusting it makes using the hardware wallet an expensive security theatre (or 2FA at best).
Always verify on the HWW device screen!
🧵Thread: 10 Rules for Verification on a #Bitcoin Hardware Wallet 👇
The very reason for using a hardware wallet is that your computer IS compromised, trusting it makes using the hardware wallet an expensive security theatre (or 2FA at best).
Always verify on the HWW device screen!
A compromised computer can be tricked into displaying addresses that belong to an attacker. The only way to make sure you own the addresses is to display them on the HWW device and verify they match.
It is pointless at best, and misleading at worst, to verify them beforehand like receive addresses...
Verifying before that is pointless and error-prone.
Now let's talk some multisig...
This is not 100% mandatory - but if you're no expert - you really should do it.*
This is especially true for at least one address (see next rule) but recommended for all. If using a device that you haven't verified the xpub of on-screen, you should verify all receive addresses on it!
This is needed only once with wallets like ColdCard, Cobo Vault, Bitbox02, and Specter DIY - since they allow saving the multisig xpubs on the device.
So while you might use a Trezor in a multisig, I would not recommend it to non-experts.
Ledger currently does not allow verifying multisig addresses on the device - nor displaying the XPUB on its screen.
It is still possible for a (very) sophisticated attacker to make you think it worked, while it was him signing for you...
This is very useful for multisig! - where devices might be distributed in various places.
Popular devices (besides Ledger as said), can verify that the address you send from and the change address used belong to the same multisig wallet (from same xpubs).
This is valid for both single sig and multisig! (although even more relevant for the latter).
Verifying balances requires getting information from the Bitcoin network - i.e. you need to be online - which would make hww more vulnerable...
This is where a full node comes in!
For redundancy, you could double-check against block explorers or another node (use a different device for either!).
If you want to separate your keys without having a security theatre, you should verify on your signing device!
Also check out some more info on multisig setups over at:
https://t.co/dwsl52QeD8 (@mflaxman guide)
More from Crypto
🚨Altcoin Trading Indicator🚨
How to use it. A THREAD.
Please Share.
To use it to buy Altcoins and make a high probability entry, the following conditions needs to be fulfilled.
For a long.
1. A green candle Closes above the cross.
2. Heikin Ashi candle turns green.
3. Price should be above 0.236 Fib from the swing high.
How to add the Indicator.
1. Click on the link and Add it to favorites and apply.
https://t.co/Kn90qgDjMi
2. Or Search it in the tab and then apply it.
The indicator itself the most comprehensive Moving Average Indicator which provides 9 MAs and 13 Different times of MAs.
The base of the indicator was by @insiliconot.
To further enhance it, I have added a cross indicator on the cross which works the best historically on Alts.
Condition 1- The cross.
Entry is made when a Cross occurs on the EMA 13/21.
The indicator automatically indicators the Cross with P for a positive cross or N for a negative cross.
This is the first condition for an Entry.
How to use it. A THREAD.
Please Share.
To use it to buy Altcoins and make a high probability entry, the following conditions needs to be fulfilled.
For a long.
1. A green candle Closes above the cross.
2. Heikin Ashi candle turns green.
3. Price should be above 0.236 Fib from the swing high.
How to add the Indicator.
1. Click on the link and Add it to favorites and apply.
https://t.co/Kn90qgDjMi
2. Or Search it in the tab and then apply it.
The indicator itself the most comprehensive Moving Average Indicator which provides 9 MAs and 13 Different times of MAs.
The base of the indicator was by @insiliconot.
To further enhance it, I have added a cross indicator on the cross which works the best historically on Alts.
Condition 1- The cross.
Entry is made when a Cross occurs on the EMA 13/21.
The indicator automatically indicators the Cross with P for a positive cross or N for a negative cross.
This is the first condition for an Entry.
1/ @MIT discussing the need for blockchain gateways to achieve interoperability across different blockchain networks, and to support the cross-blockchain mobility of virtual assets
https://t.co/PbjQkSlTT3
@quant_network are collaborating with MIT in the creation of ODAP
$QNT
2/ "In order for blockchain-based services to scale globally, blockchain networks must be able to interoperate with one another following a standardized protocol and interfaces (APIs)"
Gilbert founded ISO TC307 which 60 countries are working towards standardizing the interfaces
3/ "We believe that a blockchain gateway is needed for blockchain networks to interoperate in a manner similar
to border gateway routers in IP networks. Just as border gateway routers use the BGPv4 protocol to interact with one another in a peered fashion we believe that a...
4/ blockchain gateway protocol will be needed to permit the movement of virtual assets and related information across blockchain networks in a secure and privacy-preserving manner"
You can read more about the gateway protocol ODAP in this 21 tweet
5/
"We motivate the need for blockchain gateways and blockchain gateway protocols in the following summary:
✅Enables blockchain interoperability:
Blockchain gateways provide an interface for the interoperability between blockchain/DLT systems that operate distinct consensus...
https://t.co/PbjQkSlTT3
@quant_network are collaborating with MIT in the creation of ODAP
$QNT
2/ "In order for blockchain-based services to scale globally, blockchain networks must be able to interoperate with one another following a standardized protocol and interfaces (APIs)"
Gilbert founded ISO TC307 which 60 countries are working towards standardizing the interfaces
3/ "We believe that a blockchain gateway is needed for blockchain networks to interoperate in a manner similar
to border gateway routers in IP networks. Just as border gateway routers use the BGPv4 protocol to interact with one another in a peered fashion we believe that a...
4/ blockchain gateway protocol will be needed to permit the movement of virtual assets and related information across blockchain networks in a secure and privacy-preserving manner"
You can read more about the gateway protocol ODAP in this 21 tweet
See this 21-tweet thread about the creation of an Internet scale protocol to move digital assets involving Quant, MIT, US Government, Intel, Juniper, Payment and Telecom companies \U0001f447https://t.co/n7VGIIlAvq pic.twitter.com/mTUEmCMFZM
— Seq (@CryptoSeq) December 22, 2020
5/
"We motivate the need for blockchain gateways and blockchain gateway protocols in the following summary:
✅Enables blockchain interoperability:
Blockchain gateways provide an interface for the interoperability between blockchain/DLT systems that operate distinct consensus...
You may be wondering why @bristoliver rather cryptically RT’d a chart that I posted last night. The answer is not just that he loves quadratic fits on log axes, but that this chart may –and I stress may– hint at a vaccine effect amongst the over 80s THREAD
WARNING: this is a long thread, and it’s a bit of a roller-coaster. We find some apparently strong patterns in the data, and then start to unpick them a bit. So if you start getting excited half way through you might find you’re less excited at the end. But we’ll see…
First we first have to go back a bit. @bristoliver posted a thread a few days ago explaining why, with a constant vaccination rate, a log plot of cases should show a quadratic form. In other words, it should fit an equation like: a + b.x + c.x^2
I meant to link in the model thread there - here it is
the quadratic coefficient – the ‘c’ in that equation – gives an estimate of the % of the population who are being newly protected by the vaccine each day. Please note ‘protected by the vaccine’, not ‘vaccinated’ – as we don't expect 100% protection after the first dose
ok, I lied. but strictly it's not a new graph, just a new trendline (now a quadratic on the log plot). looks um... quite a good fit. so I'd say that was interesting. pic.twitter.com/qkgyMf1ya8
— James Ward (@JamesWard73) January 27, 2021
WARNING: this is a long thread, and it’s a bit of a roller-coaster. We find some apparently strong patterns in the data, and then start to unpick them a bit. So if you start getting excited half way through you might find you’re less excited at the end. But we’ll see…
First we first have to go back a bit. @bristoliver posted a thread a few days ago explaining why, with a constant vaccination rate, a log plot of cases should show a quadratic form. In other words, it should fit an equation like: a + b.x + c.x^2
I meant to link in the model thread there - here it is
Been thinking about where we are, where we might be going, what effect vaccines might have and how to tell. This thread may not happen all at once, and will get a bit mathematical in a couple of places (sorry!), but I will put in pictures. It's yet another argument for log scales
— Oliver Johnson (@BristOliver) January 24, 2021
the quadratic coefficient – the ‘c’ in that equation – gives an estimate of the % of the population who are being newly protected by the vaccine each day. Please note ‘protected by the vaccine’, not ‘vaccinated’ – as we don't expect 100% protection after the first dose
You May Also Like
BREAKING: @CommonsCMS @DamianCollins just released previously sealed #Six4Three @Facebook documents:
Some random interesting tidbits:
1) Zuck approves shutting down platform API access for Twitter's when Vine is released #competition
2) Facebook engineered ways to access user's call history w/o alerting users:
Team considered access to call history considered 'high PR risk' but 'growth team will charge ahead'. @Facebook created upgrade path to access data w/o subjecting users to Android permissions dialogue.
3) The above also confirms @kashhill and other's suspicion that call history was used to improve PYMK (People You May Know) suggestions and newsfeed rankings.
4) Docs also shed more light into @dseetharaman's story on @Facebook monitoring users' @Onavo VPN activity to determine what competitors to mimic or acquire in 2013.
https://t.co/PwiRIL3v9x
Some random interesting tidbits:
1) Zuck approves shutting down platform API access for Twitter's when Vine is released #competition
2) Facebook engineered ways to access user's call history w/o alerting users:
Team considered access to call history considered 'high PR risk' but 'growth team will charge ahead'. @Facebook created upgrade path to access data w/o subjecting users to Android permissions dialogue.
3) The above also confirms @kashhill and other's suspicion that call history was used to improve PYMK (People You May Know) suggestions and newsfeed rankings.
4) Docs also shed more light into @dseetharaman's story on @Facebook monitoring users' @Onavo VPN activity to determine what competitors to mimic or acquire in 2013.
https://t.co/PwiRIL3v9x
