News for hackers. Stuff that matters.
Re:Did I just lose half a million dollars? by Rastonbury on Sunday January 30, 2022 @09:55AM (#30137699)
This is what stresses me out the most about crypto. The supposed gold standard is a hardware wallet and access is done via 12-word recovery phrase but even that is sketchy. If I'm not wrong all an attack has to do is get recovery phrase and load it into another hardware wallet if they don't have mine, this is functionality is there if the hardware wallet fails. If I've been doxxed and have several mil in crypto, thieves can break into my house steal and crack my safe or hold me at knifepoint and ask me to open it.

I'd want to keep it on in encrypted file but even that is sketchy if I have to have in on multiple clouds.

Re:Did I just lose half a million dollars? by instagraham on Sunday January 30, 2022 @10:26AM (#30137943)
> thieves can break into my house steal and crack my safe or hold me at knifepoint and ask me to open it.

you: "sorry, i have a multi-sign wallet and the other signatory lives at the other end of the world"

thieves: understandable, have a nice day

Re:Did I just lose half a million dollars? by pjc50 on Sunday January 30, 2022 @10:49AM (#30138155)
thieves: it's fine, you can ring them and explain the situation as we remove your fingernails

(This technique has been used in real bank robberies; both of the people required to open Northern Bank had their families taken hostage https://www.theguardian.com/uk/2008/oct/09/northernbankrobbe... , and that was for a mere £28m in easily traceable physical money!)

Re:Did I just lose half a million dollars? by shadowgovt on Sunday January 30, 2022 @10:30AM (#30137969)
Actual thieves: "Cool. We're going to kidnap you and beat you until your other signatory coughs up access."
Re:Did I just lose half a million dollars? by njarboe on Sunday January 30, 2022 @10:50AM (#30138171)
Many people are very rich and don't own crypto. You can kidnap them also and do the same thing. This is common in many parts of the world. The US used to have this problem also and got it under control by the state focusing on capturing kidnappers and putting them in jail. Crypto does make the transfer of anonymous money a bit easier, but so does motor vehicles.
Re:Did I just lose half a million dollars? by ttfkam on Sunday January 30, 2022 @10:44AM (#30138110)
+1

Something something xkcd $5 wrench

Re:Did I just lose half a million dollars? by SilasX on Sunday January 30, 2022 @10:56AM (#30138235)
Also, in ten years you won’t know what to do with the 12 words because the application was abandoned and when you try to install it you get some error messages from npm about certain dependencies being deprecated.
Re:Did I just lose half a million dollars? by topranks on Sunday January 30, 2022 @06:50PM (#30142580)
It’s fairly easy to derive the keys yourself, don’t expect any single piece of software going dead would cause a problem.

https://github.com/nilcons/crypto-key-derivation

Crypto currencies will be worth jack shit in 10 years in all likelihood though..

Re:Did I just lose half a million dollars? by SilasX on Sunday January 30, 2022 @09:19PM (#30143738)
You have a different definition of easy than I do! You have to figure out which of those your client was using at the time, and then how to convert it into a currently functional client’s private key format. Most people need to hire a specialist to figure that out.
Re:Did I just lose half a million dollars? by Rastonbury on Monday January 31, 2022 @01:43AM (#30145254)
There are standards for seed phrase generation and the big providers mostly use the same one called BIP-39 I think. That's why they advise writing the standard and wallet and some other info down with the seed phrase, a layperson likely won't
Re:Did I just lose half a million dollars? by thinkmassive on Sunday January 30, 2022 @10:59AM (#30138259)
The gold standard is multi-sig with at least 3 hardware signing devices.

Devices can be permanently geographically distributed, protecting from disaster in any single location. This is superior to shamir’s because it never requires the single all-powerful private key to exist, removing that as a single point of failure/compromise.

So far this is only 100% achievable with Bitcoin as far as I know.

Re:Did I just lose half a million dollars? by cslarson on Sunday January 30, 2022 @10:30AM (#30137971)
Don't keep your backup fully available at your house for this reason. Figure out we way to split it up and distribute it, but with redundancy.
Re:Did I just lose half a million dollars? by Rastonbury on Monday January 31, 2022 @01:39AM (#30145236)
So like split the seed phrase into part A and B, make 3 copies of each. Rent 6 safety deposit boxes around the world for each copy of A and B?

Impractical for most but I supposed if you are protecting several million, it's worth the security.