Post ARi3zvO0FPVKFIIPUe by seb@hachyderm.io
(DIR) More posts by seb@hachyderm.io
(DIR) Post #ARi0jTfjDjVJnQ3KT2 by malwaretech@infosec.exchange
2023-01-16T18:09:57Z
0 likes, 1 repeats
Web3 in a nutshell:"We've taken back control of our assets. No more big banks controlling our money, only me and my keys""Help, I lost my keys to a very simple phishing scam and now all my apes are gone"
(DIR) Post #ARi0jUET8ZIFXAJ4cK by xerz@fedi.xerz.one
2023-01-16T18:24:58.814607Z
0 likes, 0 repeats
@malwaretech ngl I’m frustrated as hell by the fact that nobody acknowledges that his happens through centralized exchanges and wallet holders (so a not decentralized part)but then often (like an infamous recent case) it’s because keys are stolen (yes decentralized)but that only shows computers are chaos and we better get security keys rolling NOW
(DIR) Post #ARi0jV9th3EMPHAw88 by malwaretech@infosec.exchange
2023-01-16T18:13:02Z
0 likes, 1 repeats
"I want full custody and control over my assets, I should be the only person responsible for them"*gets hacked*"no, not like that"
(DIR) Post #ARi3ACMLtbdlpTrJB2 by seb@hachyderm.io
2023-01-16T18:50:56Z
0 likes, 0 repeats
@xerz It‘s a reminder that people don’t regularly get phished out of their normal bank or broker accounts.
(DIR) Post #ARi3ACneG7TVC8d6iu by xerz@fedi.xerz.one
2023-01-16T18:52:14.089279Z
0 likes, 0 repeats
@seb Well, yeah, but my point is that these flaws are not cryptocurrency-specific, and if it’s not self-sufficient without authorities for most people then at the very least it would be neat if computers did their jobs at a basic level
(DIR) Post #ARi3zvO0FPVKFIIPUe by seb@hachyderm.io
2023-01-16T18:58:31Z
0 likes, 0 repeats
@xerz A risk of all your “money” being stolen by a phishing scam is absolutely a crypto/defi flaw. Hardware security keys don’t help with that one bit. They also don’t help with somebody with a gun asking for your fancy hardware key.
(DIR) Post #ARi3zw2Pp9pYGdCgU4 by xerz@fedi.xerz.one
2023-01-16T19:01:30.569569Z
0 likes, 0 repeats
@seb Please reread what I’m saying and focus on that. People get stolen from centralized software controlled by (private directly, public indirectly) authorities. The part that is often failing is using those authorities as intermediaries. So that part is not merely a cryptocurrency problem, but a cryptography problem as a whole. Using it in a truly decentralized fashion and getting your keys stolen is not what most people experience, but there’s still decentralized parts that need fixing and apply to all of computing.
(DIR) Post #ARi4Ayobq2nm4B0pZA by xerz@fedi.xerz.one
2023-01-16T19:03:34.539648Z
0 likes, 0 repeats
@seb ….and I was gonna leave that point implicit, but might as well make it implicit: if you already have an authority taking care of assets and transactions, you might as well make sure that authority acts as such
(DIR) Post #ARi6plENRva9iTdf4C by seb@hachyderm.io
2023-01-16T19:25:32Z
0 likes, 0 repeats
@xerz People get their assets stolen both by centralised exchanges, phishing scams, rug pulls, etc. Hardware keys are only a solution to a small subset of the causes. “Things just need a little more improvement then it’ll finally be safe/scalable/useful” has been said (without specifics) by crypto boosters for years. It’s getting predictable.
(DIR) Post #ARi6plqf9aCtdDYEk4 by xerz@fedi.xerz.one
2023-01-16T19:33:15.824386Z
0 likes, 0 repeats
@seb I mean, stuff like passkeys fix pretty much all of the potential “stealing keys” attack vectors ‒ and yes it affects everything, that’s my point. Not that cryptocurrencies’ usability issues are fixed with that ‒ if anything, that cryptocurrency hate gets in the way of critical thinking on why
(DIR) Post #ARiUu2HaOJVYexi8hc by dracoMetallium@pleroma.soykaf.com
2023-01-17T00:03:01.232947Z
0 likes, 0 repeats
@xerz @sebI would say that given that transactions cant be undone (unless you are friends with the etherum developers), it is an intrinsic problem of current cryptocurrencies.
(DIR) Post #ARiVHZLbcgdTrvoS1o by xerz@fedi.xerz.one
2023-01-17T00:07:17.050133Z
0 likes, 0 repeats
@dracoMetallium @seb that's not being talked about in this thread, but key theft and intermediaries (which could still wait before committing a transaction, extract from client wallets and compensate with fund protections)
(DIR) Post #ARjqzRDlUTehbOrfxQ by dracoMetallium@pleroma.soykaf.com
2023-01-17T15:45:13.312815Z
0 likes, 0 repeats
@xerz @seb Sorry, I should had being more clear. Stolen keys, passwords and pishings attacks will always be a problem, but it gets worse because irreversibilidad.If someone gets my homebanking login information and drains all my accounts I can call the bank and tell them that I is an stupid and things can get undone (at least partially), meanwhile if someone gets my wallet, all my apes are gone forever (again, unless you are friends with the ethereum developers).