What a f-ing nightmare. It's stuff like this where I start to understand Apple's stance on right to repair. How do you maintain hardware security without strict provenance over every component in your phone?
Hardware wallets are not a solution to self-custody.
If one would make a list of things that can go wrong, starting from the supply chain that delivers parts to the manufacturer, malicious employees at the manufacturer, mistakes the manufacturer can make, attacks on the delivery chain from the manufacturer to the user, to mistakes the user can make creating, using and storing their keys - the list would contain hundreds of points.
Banks and payment providers (Visa Mastercard AMX) provide services beyond simply a store of wealth and a mechanism to transfer it.
Actually 2FA, hardware biometrics, behaviour based fraud prevention and personal confirmation of suspicious transactions. If you’re using credit they can refund fraudulent transactions, and there is the chargeback mechanism. This is probably banking system dependent, but in AUS there is a refund mechanism for mistaken/fraudulent traditional bank transactions.
BTC has effectively none of the safety net, and humans are fallible. We need the safety net. It’s the hugest barrier to adoption. Exchanges do a far better job of managing the risks than trusting your wealth to a hardware wallet.
Hardware wallets are air-gapped. The issue here was a distributor got acquired and then snuck a chip in that could read the spi link between the microcontroller and the screen. The chip had its own cellular modem and could send the passphrase that was shown on the screen to the attackers.
If there was one, someone would write down the steps necessary and put them on the internet. But I have never seen a sound description of how to self-custody Bitcoin in a safe way.
The hardest part seems to not even be the one that currently creates all those problems - the hardware and software used. The hardest part is storing the key (for example a seed phrase). If anyone says they know a way to safely store Bitcoin, my first question is: How do you store the key?
> Hardware wallets are not a solution to self-custody.
Nothing in this world tends to be "the solution", everything has tradeoffs.
Say you want to do self-custody, what is then the best option? "Don't do self-custody" obviously isn't the solution, as the core use case here is self-custody, so what in your opinion is a better way, than hardware wallets?
If there is nothing better today than hardware wallets, then for now, they are "one of the better solutions" for how to do self-custody, even with the current tradeoffs. But again, I'm eager to hear what the alternatives are.
From a bird's-eye perspective, 3 things are needed: Create a key, derive an address from the key, store the key.
Creating a key safely is possible with dice. You would probably create a seed phrase instead of a key directly, but for this discussion it is the same.
Deriving an address from the key is hard and I have not yet seen a good protocol on how to do it. I have read through a bunch of descriptions of how people do it and they are all weak and brittle. The most popular seems to be "I order a hardware wallet and follow the instructions that come with it". But even people who put a lot of thought into it come up with weak and brittle approaches.
I would think there is a way to do it safely. But I have never seen a description of one yet. It might involve multiple computers, multiple software implementations and a hell of a lot of work to create a multisig that is not prone to a single attack vector.
Storing the key is probably the hardest. The most popular way seems to be to store it in a drawer or a safe. So now those coins are just as safe as a piece of gold would be. Or they use a multisig and store the keys in multiple locations. Quite painful. As you have the ongoing problem of keeping those locations accessible and safe at the same time.
Very often this is not the case. Debit / credit cards payments are quite reversible, but once a person send $100,000 or even $10,000 to a scammer it can be quite hard to recover.
Usually how it goes is if someone hacks your account or steals credit card info. You get refunded. If a scammer convinces you to willingly send the money, you’re out of luck.
Caused by an account take over? This is letter of the law stuff and something bank (and other financial firms) employees receive specific training on. The customers loss is capped and their bank is on the hook.
For inter-bank transactions involving a scam that causes the customer to “voluntarily” send money it depends on the rail. But US ACH rules cover reversals due to fraud and have pretty substantial rules about it.
I'm guessing the best way to go about self custody these days is to have a multi sig wallet, based on multiple hardware wallets from different vendors.
My gut reaction is that a hardware implant would be too costly so there's no way they'd actually do that but I guess when you can steal $92M, anything is possible. They could even fab an esoteric chip and still make a profit.
Why do you think it's too costly? It's well known that there are divisions in DPRK that are focused on generating $ through crypto hacks and compromises.
We're dealing with reasonably sophisticated state actors here in this dark forest; not script kiddies.
Cheap $5 PCB + programmable small FPGA is a very viable route too for hardware implants; but even a microcontroller / ESP32/etc will probably do.
PCBWay will make anything you send them for reasonable pricing. Custom boards etc are not at all hard to manufacture, and for the amount of money you can get, of course you can team up with someone. I think the most people overestimate the cost of bespoke PCB creation.
Can see why hardware wallets seemed a good idea at the time but history has shown this is a terrible way to self custody. Compromised devices aside, the KYC data leaks have put people in danger too.
And yet on this exact website people critical of the industry were ridiculed with the exact same rhetoric adopted by the AI industry. It was touted by so many as inevitable, and how we will all be left behind if we don’t join the cult
If one would make a list of things that can go wrong, starting from the supply chain that delivers parts to the manufacturer, malicious employees at the manufacturer, mistakes the manufacturer can make, attacks on the delivery chain from the manufacturer to the user, to mistakes the user can make creating, using and storing their keys - the list would contain hundreds of points.
Actually 2FA, hardware biometrics, behaviour based fraud prevention and personal confirmation of suspicious transactions. If you’re using credit they can refund fraudulent transactions, and there is the chargeback mechanism. This is probably banking system dependent, but in AUS there is a refund mechanism for mistaken/fraudulent traditional bank transactions.
BTC has effectively none of the safety net, and humans are fallible. We need the safety net. It’s the hugest barrier to adoption. Exchanges do a far better job of managing the risks than trusting your wealth to a hardware wallet.
If there was one, someone would write down the steps necessary and put them on the internet. But I have never seen a sound description of how to self-custody Bitcoin in a safe way.
The hardest part seems to not even be the one that currently creates all those problems - the hardware and software used. The hardest part is storing the key (for example a seed phrase). If anyone says they know a way to safely store Bitcoin, my first question is: How do you store the key?
Nothing in this world tends to be "the solution", everything has tradeoffs.
Say you want to do self-custody, what is then the best option? "Don't do self-custody" obviously isn't the solution, as the core use case here is self-custody, so what in your opinion is a better way, than hardware wallets?
If there is nothing better today than hardware wallets, then for now, they are "one of the better solutions" for how to do self-custody, even with the current tradeoffs. But again, I'm eager to hear what the alternatives are.
From a bird's-eye perspective, 3 things are needed: Create a key, derive an address from the key, store the key.
Creating a key safely is possible with dice. You would probably create a seed phrase instead of a key directly, but for this discussion it is the same.
Deriving an address from the key is hard and I have not yet seen a good protocol on how to do it. I have read through a bunch of descriptions of how people do it and they are all weak and brittle. The most popular seems to be "I order a hardware wallet and follow the instructions that come with it". But even people who put a lot of thought into it come up with weak and brittle approaches. I would think there is a way to do it safely. But I have never seen a description of one yet. It might involve multiple computers, multiple software implementations and a hell of a lot of work to create a multisig that is not prone to a single attack vector.
Storing the key is probably the hardest. The most popular way seems to be to store it in a drawer or a safe. So now those coins are just as safe as a piece of gold would be. Or they use a multisig and store the keys in multiple locations. Quite painful. As you have the ongoing problem of keeping those locations accessible and safe at the same time.
What do you use to access your bank account online? I use my laptop, or my phone.
For inter-bank transactions involving a scam that causes the customer to “voluntarily” send money it depends on the rail. But US ACH rules cover reversals due to fraud and have pretty substantial rules about it.
Seriously, that's why we have banks, still.
You're better off just having a dedicated laptop for crypto transactions.
Actually the only one I know is the Gnosis Safe. Talk about creating a huge risk if it would have a problem.
We're dealing with reasonably sophisticated state actors here in this dark forest; not script kiddies.
Cheap $5 PCB + programmable small FPGA is a very viable route too for hardware implants; but even a microcontroller / ESP32/etc will probably do.
Eg. https://dangerousthings.com/products/apex-flex?Antenna=Narro...