News for hackers. Stuff that matters.

A comment on Regarding the NiceHash security breach. Parent comment

Re:Regarding the NiceHash security breach by teraflop on Wednesday December 06, 2017 @06:44PM (#15866212)
The whole point of offline storage is to guard against the risk of whatever internet-connected device you use to store your keys getting compromised.

If you make a mistake or fall victim to an attack that lets someone steal the encrypted file containing your key, there's a good chance the attacker will also be able to install a keylogger and get your passphrase.

[ Parent | on HN ]
Re:Regarding the NiceHash security breach by babaganoosh89 on Wednesday December 06, 2017 @07:15PM (#15866398)
The way I do it, is have a bootable usb stick with a clean install of Tails OS that has all my crypto stuff. I also have a gpg encrypted seed file on my google drive as a backup with MFA turned on.

I don't think offline storage is necessary as long as you're certain your system is clean, which a clean linux install helps.

[ Parent | on HN ]
Re:Regarding the NiceHash security breach by Johnny555 on Wednesday December 06, 2017 @06:52PM (#15866266)
If he can run a keylogger on whatever computer you use to unlock your wallet, then it does it really matter whether you store it offline on USB stick in a safe or not.
[ Parent | on HN ]
Re:Regarding the NiceHash security breach by cloakandswagger on Wednesday December 06, 2017 @08:25PM (#15866805)
That's where hardware wallets like Trezor or KeepKey come into play. Any transactions are signed on the device and sent back to the computer; your private keys never leave the device.
[ Parent | on HN ]