9 comments

  • whywhywhywhy2 minutes ago
    Can see why hardware wallets seemed a good idea at the time but history has shown this is a terrible way to self custody. Compromised devices aside, the KYC data leaks have put people in danger too.
  • ArtTimeInvestor58 minutes ago
    Hardware wallets are not a solution to self-custody.<p>If one would make a list of things that can go wrong, starting from the supply chain that delivers parts to the manufacturer, malicious employees at the manufacturer, mistakes the manufacturer can make, attacks on the delivery chain from the manufacturer to the user, to mistakes the user can make creating, using and storing their keys - the list would contain hundreds of points.
    • nkrisc10 minutes ago
      Then can you give an example of what you would consider a solution, whether hypothetical or real?
      • ArtTimeInvestor3 minutes ago
        There is none yet.<p>If there was one, someone would write down the steps necessary and put them on the internet. But I have never seen a description of how to self-custody Bitcoin in a safe way.
      • mattmaroon6 minutes ago
        Using the banking system instead of crypto.
    • embedding-shape26 minutes ago
      &gt; Hardware wallets are not a solution to self-custody.<p>Nothing in this world tends to be &quot;the solution&quot;, everything has tradeoffs.<p>Say you want to do self-custody, what is then the best option? &quot;Don&#x27;t do self-custody&quot; obviously isn&#x27;t the solution, as the core use case here is self-custody, so what in your opinion is a better way, than hardware wallets?<p>If there is nothing better today than hardware wallets, then for now, they are &quot;one of the better solutions&quot; for how to do self-custody, even with the current tradeoffs. But again, I&#x27;m eager to hear what the alternatives are.
      • ArtTimeInvestor12 minutes ago
        There is no solution yet.<p>From a bird&#x27;s-eye perspective, 3 things are needed: Create a key, derive an address from the key, store the key.<p>Creating a key safely is possible with dice. You would probably create a seed phrase instead of a key directly, but for this discussion it is the same.<p>Deriving an address from the key is hard and I have not yet seen a good protocol on how to do it. I have read through a bunch of descriptions of how people do it and they are all weak and brittle. The most popular seems to be &quot;I order a hardware wallet and follow the instructions that come with it&quot;. But even people who put a lot of thought into it come up with weak and brittle approaches. I would think there is a way to do it safely. But I have never seen a description of one yet. It might involve multiple computers, multiple software implementations and a hell of a lot of work to create a multisig that is not prone to a single attack vector.<p>Storing the key is probably the hardest. The most popular way seems to be to store it in a drawer or a safe. So now those coins are just as safe as a piece of gold would be. Or they use a multisig and store the keys in multiple locations. Quite painful. As you have the ongoing problem of keeping those locations accessible and safe at the same time.
    • akoboldfrying35 minutes ago
      Yes, but this threat analysis also holds for laptops and phones.<p>What do you use to access your bank account online? I use my laptop, or my phone.
      • kasey_junk31 minutes ago
        If your money is stolen from a bank account via fraud you have recourse to get it back, and it’s pretty straightforward to do in most cases.
        • SXX27 minutes ago
          Very often this is not the case. Debit &#x2F; credit cards payments are quite reversible, but once a person send $100,000 or even $10,000 to a scammer it can be quite hard to recover.
          • kasey_junk14 minutes ago
            Caused by an account take over? This is letter of the law stuff and something bank (and other financial firms) employees receive specific training on. The customers loss is capped and their bank is on the hook.<p>For inter-bank transactions involving a scam that causes the customer to “voluntarily” send money it depends on the rail. But US ACH rules cover reversals due to fraud and have pretty substantial rules about it.
          • lmz19 minutes ago
            Even banks find it hard to recover: <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Bangladesh_Bank_robbery" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Bangladesh_Bank_robbery</a>
          • nkrisc18 minutes ago
            Because the scammers are instructing victims to use methods that are difficult or impossible to reverse, such as gift cards or cryptocurrency.
    • chinathrow45 minutes ago
      But freedom.<p>Seriously, that&#x27;s why we have banks, still.
      • iammrpayments26 minutes ago
        Good luck trying send money abroad or dealing with a sudden unexplained account shutdown.
        • chinathrow14 minutes ago
          I have had no problem sending or receiving money abroad, thank you.
  • Freeaqingme21 minutes ago
    I&#x27;m guessing the best way to go about self custody these days is to have a multi sig wallet, based on multiple hardware wallets from different vendors.
    • scrlk5 minutes ago
      I wouldn&#x27;t trust any of the hardware wallet vendors. Pretty much all of them have had customer data leaks, resulting in wrench attacks.<p>You&#x27;re better off just having a dedicated laptop just for crypto transactions.
  • chinathrow1 hour ago
    Exhibit #9387434 for reasons to stay out of crypto.
  • Neywiny33 minutes ago
    My gut reaction is that a hardware implant would be too costly so there&#x27;s no way they&#x27;d actually do that but I guess when you can steal $92M, anything is possible. They could even fab an esoteric chip and still make a profit.
  • Cytobit1 hour ago
    What is the use case of a hardware cryptocurrency wallet besides trapping bitcoins in the Shadow Realm?
    • numpad043 minutes ago
      Like any HSMs, to put private keys in it and to let things be signed with it.
    • mitxela47 minutes ago
      Making sure malware on your PC can&#x27;t steal your private keys.
  • wartywhoa2352 minutes ago
    Crypto-brwned!
  • dauertewigkeit25 minutes ago
    Funny how all the rules of capitalism break down as you approach really big sums of money.
  • astverskoy44 minutes ago
    Crypto is a gift to scammers: billions stolen, victims left with little recourse, and no effective government oversight.
    • dgellow33 minutes ago
      And yet on this exact website people critical of the industry were ridiculed with the exact same rhetoric adopted by the AI industry. It was touted by so many as inevitable, and how we will all be left behind if we don’t join the cult
    • cindyllm13 minutes ago
      [dead]