HN user
Hi.
chill[at]degreesofzero.com
With both Trezor and Ledger it is possible to use Electrum as the GUI (interface) app. So if they go out of business and/or stop supporting the specific hardware wallet model that you own, you can continue using it with Electrum. Alternatively, you can import the seed backup (12 or 24 words) into a new hardware wallet.
I usually don't bother to login to comment, but I felt compelled in this case. The other replies include a lot of bad advice. You sound like you don't have much of experience actually using bitcoin (or cryptocurrencies). So the best (most secure and easiest) solution is to buy a hardware wallet and use the wallet app which they provide. I suggest either Trezor [1] or Ledger [2]. Do not buy a hardware wallet from secondary marketplaces or second-hand resale websites - buy direct from the developer's website only.
For added opsec:
- Use a temporary email address on the order form (e.g. mailinator or similar).
- Do not ship the goods to your home address. Pick-up your order in-person at a drop-off spot, post-office, or have it delivered to your workplace.
A bit more information about hardware vs. software/app wallet:
- Hardware wallets protect your bitcoin and cryptocurrencies by keeping your private keys secure on a dedicated USB (or air-gapped) device. The private keys never leave the device.
- If you use an app on your phone or desktop computer, your private keys could be stolen by malware. This is the exact attack vector that hardware wallets are designed to protect against.
Good luck!
If a site is vulnerable to XSS it's basically game over security-wise.
Another reply seems to have focused on having XSS causing an attacker to gain access to session cookies. But no one has mentioned using Content-Security-Policy [0] - which if set properly can make it nearly impossible to exploit an XSS vulnerability in the first place.
Your comment is so obviously disingenuous. It makes absolutely no sense to open a Lightning Network channel to send one transaction and then immediately close it.
Yes, an on-chain transaction is required to open a channel. But once open you can continue to use it forever, or until you (or your counter-party) decide to close it.
Lightning Network adoption is slow and steady. There are several newbie-friendly mobile wallet apps available [1][2][3]. Some nice improvements have been developed and pushed live in the last 18 months (e.g watchtowers [4] and atomic multi-path payments (AMP) [5]). There are now five Lightning Network node implementations (lnd, eclair, c-lightning, rust lightning, Electrum). And there are hardware projects working to bring LN into the physical space - one of which is my own project, a Lightning-only Bitcoin ATM named "Bleskomat" [6].
[2] https://www.walletofsatoshi.com/ (!!) <-- custodial
[4] https://github.com/lnbook/lnbook/blob/8d2582e51eb615c850b24e...
[5] https://lists.linuxfoundation.org/pipermail/lightning-dev/20...
No one should be using on-chain Bitcoin transactions for in-person exchange. Partly due to the high fees, but mostly because of double-spending and lack of privacy. Lightning Network solves all of these problems. Fees are much lower, settlement is instant and clear to even unsophisticated users, and the recipient cannot see from where the funds originated.
Taxes are a different issue and that's up to each jurisdiction to solve via better legislation.
Internet is not required [1] to sync a full Bitcoin node. There have also been numerous proof-of-concepts for transmitting Bitcoin transactions via radio.
I think you fundamentally misunderstand why a business might buy an asset like Bitcoin. It's certainly not to participate in a pump and dump scheme - as you seem to be alluding. It takes time for a corporation to build up a position in something like Bitcoin. And it will take time to unwind that position. This is clearly a long-term hedge.
Are you sure you can't spend Bitcoin directly for goods and services? Have you tried? When was the last time you searched for physical shops near you [1] that accept it?
Those are not really specific questions. But I will try my best to somehow provide useful information.
1. Energy efficiency of the transactions and the network
If by "transaction" you mean a single economic exchange between two agents, then the energy cost of a single transaction is impossible to measure. Many of the on-chain transactions in Bitcoin today are "batched" to reduce their total size thus saving on fees. Each of these batched on-chain transactions can easily represent dozens of individual economic exchanges. Lightning Network (LN) takes this even further with bi-directional payment channels now representing potentially tens of thousands of transactions over the lifetime of a single channel. It requires one on-chain Bitcoin transaction to "open" a bi-directional payment channel, and another transaction to "close" it. Closing is not strictly necessary and will be less so as infrastructure and tooling improves.
Bitcoin is not really one single network. It is a few different networks operating in their own niche with their own specific optimizations. Miners can operate as dumb hashing computers with no visibility or knowledge about the blockchain other than the next chunk of data to hash. Full-nodes are typically operated by the "users" that wish to carry on the mantra of "don't trust, verify"; value their personal privacy; or are a large commercial entity. The last estimates that I saw were about 10,000 publicly reachable full-nodes and another 100,000 private or non-reachable. There are also mobile wallets that can be custodial or "light clients". Then the Lightning Network (LN), which consists of public and private nodes, mobile and custodial apps, nodes backed by full-nodes and LN's version of light clients.
2. How democratic the process to mine new coins is.
Mining appears much more centralized than it is - due to the success of mining pools. Mining pool operators do not control all the hash power that congregates in their pool. Instead the owners of mining rigs/operators can point their rigs at the mining pool that offers them the best ROI. Of course sometimes other reasons override the profit motive but usually only temporarily - see the SegWit political / governance drama from a few years ago. Corporations (and governments) have already started investing in mining equipment in an effort to secure their own interests in the space. They will compete with each other here just as they have competed with each other over territory and natural resources for hundreds of years.
3. What steps are taken to manage frauds, speculations bubbles etc. to protect malicious actors from gaming the system.
Bitcoin is governed today by the same laws and rules as other systems. Fraud is fraud is fraud. Criminals, scammers, and fraudsters use banks and cash too. From the sound of it, you would prefer to err on the side of institutions and regulation. I disagree, and would prefer that individuals take personal responsibility for their own education and finances. The world is a messy place and there is no answer for 100% of the people 100% of the time.
I would love to be proven wrong and learn something new about the sector that increases my confidence.
That's great. Having an open mind is a good thing. What areas are you specifically interested in? The industry is vast with deep niches and history - mining, exchanges (online/offline/p2p), scripting ("programmable money"), private key security (software/hardware/multi-sig), BIPs/forks/governance, ATMs, end-user apps, scams and shills, cypherpunk history and lore, and so on.
My understanding of the space contradicts each of your points. So without either of us providing citations, both of our opinions are pretty useless to the casual reader. But I will add some thoughts here.
The [humongous] energy wastage of the network should be the biggest cause of concern, but most proponents shoo it away by buzzwords like lightning network etc.
Lightning Network is a second layer payment network that is working today. Its goal is to take the transaction pressure off of the base layer (blockchain). Its design has privacy built-in, so it's not possible to generate statistics [3] on its total transaction thru-put. That's also why articles like the one on which we are commenting are so disingenuous. The source they cite makes a direct comparison of the total transaction volume of the Visa network with the Bitcoin blockchain while completely ignoring layer 2 networks built on-top of Bitcoin.
Bitcoin is popular in the west and the US specifically because it lacks the cutting edge financial networks rest of the world has. Citizens in China, India, Kenya etc can do transactions in a jiffy using their existing bank accounts, whereas ACH clearance takes longer time.
Bitcoin is not "popular" anywhere. The total number of Bitcoin ATMs [1] and physical shops/vendors [2] transacting with Bitcoin is still quite limited. The vast majority of commerce occurs online. But what I do see is that there is slow, steady growth globally. The infrastructure is still developing to support larger volumes of users - and with more diverse levels of computer skills.
[3] https://1ml.com/
[ x ] Make provocative statements about the uselessness and wastefulness of Thing A without real evidence. But make sure to at least link to some source that provides the illusion of evidence.
[ x ] Recommend Thing B that claims to solve the problems of Thing A. But you probably forgot to mention that you have a financial interest in Thing B succeeding.
[ x ] Finish with unclear call-to-action that requires others to take insane financial risks to support your made up "movement" (e.g shorting Bitcoin - great way to lose infinite money).
Any one of those individual private keys could be imported into another wallet software application (e.g Electrum). Then the funds can be swept to a newer wallet that has a seed backup.
Private keys are just numbers. That has not changed since the beginning.
You think a guy smart enough to give birth to Bitcoin, and maintain complete anonymity while doing so and while communicating in public forums etc, would forget his private key?
You just need to remember one seed and suddenly you have billions of dollars of value stored in your brain. I don't think that's a realistic possibility.
BIP39 mnemonics ("seeds") were not around in the early days. Bitcoin core software generated random private keys that were completely unrelated to one another. So it was necessary to backup the wallet file each time that new keys were created. Most users would generate hundreds (or thousands) of keys at a time, to reduce the frequency of backups.
The internet didn't magically appear one day in its current form. It is a pile of good-enough solutions, layered on-top of one another as they became needed. The same could be said for many of the other systems that humans have developed.
If you have the time, listen to the audio (~25 minutes) embedded in the article. There are reasonable concerns that naive and unsophisticated ("retail") investors will be harmed by cryptocurrencies. However to make the jump to "[the government should ban or regulate it into oblivion]" - this demonstrates an absolute disregard for the rest of the world which does not enjoy the same level of access to the financial tools available to citizens in wealthy nations. Bitcoin and other cryptocurrencies are an experiment. An experiment that is going to continue regardless of any regulations that governments attempt to control it.
There is real innovation here, but there are also many scams. It's up to the individual to take responsibility for their own finances. Or outsource that responsibility to companies and institutions in their own locality.
Get an Arduino starter kit and start hacking on some little project around the house. With a bit of persistence, C/C++ is not so difficult to become productive coming from almost any other language. And with the help of platformio's [1] CLI tooling it makes uploading and debugging your code on chips like the ESP8266 (or ESP32 or Arduino) pretty straight forward. Then of course there are the actual physical pieces of hardware, wires, circuits, components, etc. It's a whole new world in which to learn and break stuff. Good luck!
[1] https://docs.platformio.org/en/latest/what-is-platformio.htm...
1) Requires a private SSH/GPG key that was associated with your GitHub account at some arbitrary date in the near past. It would be trivial to design a cryptographic scheme to prove ownership of a GitHub account without compromising private keys. So why do it the way they have?
2) Requires that you provide government issued identification (and possibly more) to be able to withdraw or sell the airdropped tokens for USD or bitcoin.
Call me paranoid, but this feels like a honeypot. It feels like an attempt to compile a database of programmers/developers (and their real identities) - with a bit of a bias towards those with knowledge in the areas of cryptography and/or cryptocurrencies.
Even if that is not the intent. Would you trust this company to safely store such information about you?
Those are old numbers. According to the VISA Annual Report from 2017, the VISA network does ~3500 transactions per second (tps) (average) [0] and a "FactSheet" put out by VISA claims 65,000 peak tps [1].
And AliPay had ~325,000 peak tps according to their 2017 annual report [2].
[0] https://s1.q4cdn.com/050606653/files/doc_financials/annual/2...
[1] https://usa.visa.com/dam/VCOM/download/corporate/media/visan...
[2] https://www.alibabagroup.com/en/news/press_pdf/p180201.pdf
It looks like the linked library expects you to provide integer values only. You can do the same with cryptocurrencies (satoshis in the case of Bitcoin), but not all cryptocurrencies have the same number of decimal places (Monero with 12 instead of 8).
I've used the following library in the past:
* https://mikemcl.github.io/bignumber.js/
It's also worth noting that the maximum integer value that can be safely stored by the Number type in JavaScript is 2^53 (9007199254740992). So if you expect to be working with integers larger than this, you should use a library for working with large integers (private keys in cryptocurrencies). The one linked above works, but there are others as well.
There are several co-working spaces in Prague:
* PaperHub at Paralelni Polis - https://www.paralelnipolis.cz/koncepty/coworking/
* ImpactHub - http://www.hubpraha.cz/en/
* Node5 - http://node5.cz/#about
The easiest and best option for me was temporary residency, because my partner is Czech. But if you are not in a long-term relationship with a Czech citizen then I recommend a business visa. Here's a fairly straight-forward resource for what is required:
Through my personal network (specifically a former colleague of mine).
Correct, eLance and other similar websites are an absolute waste of time unless you are ok with competing only on price and you have a very low cost of living.
* Build a web presence that funnels potential leads to you (blog, portfolio, resume, stackoverflow profile with activity like posting questions/answers, programming/freelance subreddits, github contributions and projects).
* Build your personal network via meetups, conferences, etc.
* Toptal [1] is the best platform for finding gigs that I've used, but it could be better. It has short-, medium-, and long-term contracts. Not the best possible rates and it's possible to waste some time with interviews, but it's still a lot better than elance and others.
* Gun.io [2] is something that looks interesting, but I have never gotten a contract through it. So could be hit or miss.
[2] https://gun.io/
You could try freelance work for clients remotely. That would give you a lot of freedom to choose where to live.
I am an American living, working (as a freelance programmer) in Czech Republic -- good economy (especially Prague), low crime rate, low cost of living. Happy to answer questions.
Not trolling, serious question: What is the audio/mic equivalent of covering your webcam with a sticker?
Fair enough. I don't think this is a "shady" practice either. But I think it's an old, out-dated practice to charge extra money for a feature that should be on by default.
All web traffic should be encrypted, regardless of purpose. This increases the work that nation-state level adversaries must do to effectively spy on the population. And it's cheap and easy to do these days.
Maybe you could make some life-style changes to improve your overall energy level and/or cure your tiredness. How do you eat? Do you eat right before you go to bed? Do you wake up with an alarm clock? Do you eat a lot of greasy, processed foods? Soda? Do you exercise?
Other than that, maybe you could try pulling back the number of hours you're at work. I've felt myself getting stuck in that cycle of work, eat, sleep in the past, but I am currently pretty happy with my routine.
If you want to make some life changes, I'd recommend starting small. Pick one thing to improve this week (don't eat less than 2 hours before going to bed). Then next week try adding another thing. Before you know it, you'll be doing these healthier things without even thinking about it.