Discussion of OpSec, Threat Models, Protection, Assessment & Countermeasures.
Vendors: /d/vendor_handbook.
While the focus of this community's OpSec discussions may center around DarkNet (DN) activity, all members of this sub are encouraged to think about, discuss, and share ideas relating to OpSec.
by /u/morlvob · 1 votes · 2 weeks ago
With ledger being shady and sharing info to third parties and all that - unsafe
Trezor is able to block funds and not having to give a reason why - unsafe
what is the best non - kyc hardware cold wallet for bitcoin?? seems difficult to find a legit company that won't fuck you over
/u/ZMrngwudsr5kkWWV · 1 votes · 2 weeks ago · Link
trezor cant block your funds, only their coinjoin, but thats not problem with trezor but with wasabi afaik. just route through electrum or other soft and do your txs done if that happens.
otherwise airgap.
also if you use trezor, make sure to use passphrase, but dont forget it.
/u/morlvob
· 1 votes
· 2 weeks ago
· Link
how do you air gap ?
/u/MrLivian · 1 votes · 2 weeks ago · Link
buy 1 laptop!
create your own OS linux based....
Create your wallet on it !
Never connected to internet ...
a motherboard supported by an open source BIOS, e.g. Coreboot;
an AMD CPU which is not locked down by AMD's Platform Security Processor (PSP);
a graphics card with minimal to no proprietary microcode.
/u/Paris A · 1 votes · 2 weeks ago · Link
air gap it man. Generate the keys, put it on an encrypted USB, put it in a safe deposit box, and you now have a true code wallet. Make sure to use a password you will never forgot but haven't used elsewhere.
/u/ZMrngwudsr5kkWWV · 1 votes · 2 weeks ago · Link
Make sure to use a password you will never forgot
cant stress this enough, it may seem stupid and trivial to anyone reading, but it happened to me a few times and caused hella stress me brute-forcing it. Even if it's some passphrase, endless combinations to confuse the shit out of your brain. You should not stress it, but you should also stress it.
/u/morlvob
· 1 votes
· 2 weeks ago
· Link
Air-gapped wallets are bitcoin wallets completely disconnected from the internet and any form of wireless communication. This generally means that they are disconnected from both traditional internet connections as well as Bluetooth, WiFi, NFC (near-field communication), and even USB drives.
says its disconnected from USB drive? i'm a little confused
/u/Exalted · 1 votes · 2 weeks ago · Link
is bit rot a factor for USB devices? if so then probably need to deal with that every 5ish years but otherwise this is exactly what you should do instead of these shitty hardware wallets.
/u/idl1ng · 1 votes · 2 weeks ago · Link
Here is my question for everyone: What is a trustworthy wallet in general? I do not care if it is hardware/software
/u/morlvob
· 1 votes
· 2 weeks ago
· Link
i've used electrum many times in the past and never had issues. just looking for something very secure and non kyc to hold bigger amounts
/u/idl1ng · 1 votes · 2 weeks ago · Link
I was just researching this a little. Any research on NGRAVE? I see they are new to the crypto industry and they're completely offline, and secure, apparently.
/u/morlvob
· 1 votes
· 2 weeks ago
· Link
never heard of em. check out cold card though, they might be worth it
/u/idl1ng · 1 votes · 2 weeks ago · Link
Look into NGRAVE, they're new to the industry, completely offline, they talk about how the only person who deserves to see your wallet and shit is you. Apparently they give you a key as well that they do not have access to, which is a good sign. Check it out.
/u/idl1ng · 1 votes · 2 weeks ago · Link
Also, correct me if I am wrong, but if someone were to commit some type of work that is frowned upon by legality, wouldn't it be safer to route it via multiple crypto wallets then transfer to real currency?
/u/psychonut · 1 votes · 2 weeks ago · Link
Just use Trezor. They cannot block your funds. Only the CoinJoin protocol they recently added to their app. It is still a offline wallet that can not see or control what you are doing.
As others have suggested you can generate the keys offline and store everything on an encrypted USB. You could create a hardware wallet using a Raspberry Pi or something similar too.
However, the method with the USB will not be as secure as a hardware wallet, you will have to connect to the internet and give a computer access to the keys in order to send from it.
No hardware wallet does KYC. They are not a service.