OS

Sabast-

You don't understand what "attack surface" means in the context of a software wallet running on a machine you are in physical control of. You're just think you sound smart. Put wireshark and burp on it, and OS-specific tools to watch what it's trying to open you up to the world, you spoon. It's not rocket surgery. Or go use Trust or Coinomi and quit bitching. But even with your own ChatGPT-assisted code-review, there's little guarantee it's any safer. Though I do personally go open-source myself whenever possible for other reasons. TLRD: You keep saying that phrase. It doesn't mean what you think it means in this context.

Sabast-

What exactly do you think the large attack surface is, on a patched OS behind a hardware and software firewall?

desexmachina

Absolutely, not trying to prove a point, I’m trying to understand the why. This wasn’t a false positive I setup. You can’t find it with an OS, I haven’t dug deeper to see if there’s a wallet in the binary associated with it

Lite_Touch

Halo22B makes a good point. To be EXTRA safe, take an old laptop and wipe and reinstall the OS so you're 100% sure there's no malware on it, connect it to your home internet to download Ledger Live, then sync to your Nano, and then do the transfer.

intelw1zard

You just needed Tor Browser, Tails (an OS built to forget) has that built in.

johnnieganker

Besides Bitcoin you only need Cardano. UTXO brothers. Cardano will bring Defi to Bitcoin with Bitcoin OS. Dig in. Also, Cardano is the most decentralized crypto asset with on chain governance. Effectively, there's no commander, no CEO. Cardano is for the people, owned by the people. Much like Bitcoin early ethos.

Dr_Caution

It's recommended to use Linux as that operating system is open source and is verified that the system isn't sending data to other companies. The same thing can't be said with Chrome OS, windows, and Mac OS. While it's not recommended it's not the end of the world. In reality, if you have a good cold storage wallet like a coldcard or something similar, you never have to plug it into a computer and it'll generate addresses on the device itself.

EndTheFed90210

It would be difficult to maintain backups regardless of node choice, because the blockchain is almost 750GB. Add electrum and the OS, and it's getting close to a terabyte for one full backup. Who would need to back this up anyways? I can plug the SSD into another PC and it boots up just fine. So I don't need to worry about PC hardware failures. If you're worried about disk failure, then use imaging software to clone it to another SSD. It's not that hard. I won't do that because it's a waste of time. SSD failures are infrequent. It's less time and money investment rebuilding a node than constantly maintaining backups for it.

perplexed121

Definitely run a full node. But you don't need to buy the umbrel setup for it . You can run bitcoin core on any old laptop or download Umbrel OS - its free. If you want to buy hardware for convenience and performance, look at Start9.

not_SatoshiNakamoto

It is an easy way to generate wallets while not needing to connect to the internet. ("Air gapped"). Yeah it boots an OS with a tool to generate a private key. It is easy. My question was, is it secure

LuptinPitman

What's an air-gapped wallet got to do with it? Doesn't this old thing basically boot an OS up that has a tool to generate a private key? If so, that private key can be loaded on any device, be it a hardware wallet or a hot wallet. Air-gapping doesn't come in to play until you load the key on to a device that can operate air-gapped, I would assume. WTF Are you doing with this clearly old and no longer used device and why do you think it is necessary to use to generate private keys?

LuptinPitman

What's an air-gapped wallet got to do with it? Doesn't this old thing basically boot an OS up that has a tool to generate a private key? If so, that private key can be loaded on any device, be it a hardware wallet or a hot wallet. Air-gapping doesn't come in to play until you load the key on to a device that can operate air-gapped, I would assume. WTF Are you doing with this clearly old and no longer used device and why do you think it is necessary to use to generate private keys?

INeedHelpINeedDaWey

Damn. Would I need to download something like Graphene OS to use the crypto atm anonymously?

uncapchad

Just a month ago Apple announced a  zero-day vulnerability in their OS. Malware can also end up on your phone through apps, social engineering, spoof sites etc.

SmoothGoing

Coins are in the blockchain. Wallet.dat stores a list of keys to spend them. If you're ever going to spend you'll have to decrypt and open the wallet file and hopefully that's going to be on an offline system every time which doesn't log the keys. Hardware wallet mitigates this. You can plug it in and use it on a system that isn't necessarily secure since the keys and transaction signing happens on chip inside the device and computer OS never sees them. With the mnemonic and passphrase you have extreme portability also. Just use any compatible hardware wallet to restore the mnemonic and securely spend. Even if the hardware is lost or stolen it's useless without passphrase (it's a feature you must enable and use).

GiveMeYourSmile

This is the approach used in the article, so it is recommended to use two different devices to encrypt a phrase with a different passwords. If all your devices are infected with a virus controlled by one person, then by the same logic tomorrow someone can break into your home and steal a physical medium with a phrase. If you practice good digital hygiene, it is very difficult to infect all your devices, especially if they are different OS

DreamingTooLong

Dude, you messed up the moment. You thought you could do everything inside a virtual box. The best thing you could have done was run tails OS from a USB drive. Electrum is built in on that. The best thing I think you should have done was purchased a hardware wallet, like ledger, nano X and connect it to Cake Wallet or Phantom Wallet. Virtual machine is the worst place to store Internet money that can’t be reversed. Sorry for your loss.

juez_y_verdugo

A virtual machine to run a windows OS or similar.

pakovm

There are many options, my personal recommendation is [Start9](https://start9.com/), it simply works, you can also buy a MiniPC and install the OS by yourself, but you wont get support if you do it that way.

hattz

Well, sorry for your loss, good luck moving forward. There are a few good suggestions here. Backup personal files to USB scan them with a couple different online scanners. Them reinstall OS, windows you can do a 'reset my computer' or better download the windows boot media to a different USB drive (not the one you backed up files to), and do fresh install formatting hard drive. Go through sites changing passwords, maybe start using a password manager. Couple people suggested hardware wallet. I feel that's just not realistic when buying a brand new, from manufacturer hardware wallet is so expensive. My rule was 1/10, if I had $2000 USD of crypto, and a hardware wallet was $200 USD, it was time to get one to protect it.

PrimaxAUS

\> become the ubiquitous money OS for the world Nobody is going to do this until they figure out a neat solution to the trilemma. That coin will likely become the new 'first' like bitcoin.

Healthy_Strength_304

does it come with a software OS?

DownRUpLYB

> ability to become the ubiquitous money OS for the world. It absolutely has it I understand L2, but what on earth was the rational behind the design that limited Ethereum to 15 TPS?

confusedguy1212

Ethereum price action has surprised many and continues to do so. I can’t explain that one away for you - there’s tons of speculation why but nobody truly knows. As far as actual development and technical ability to become the ubiquitous money OS for the world. It absolutely has it and what it lacks at the moment is actively being worked on with the biggest developer and research mindshare in all of crypto. Can’t make price predictions but the fact people are trying their darnest to solve problems with Ethereum and on Ethereum is undisputed.

Dhegxkeicfns

Internet failing is like catastrophy level. Less drastic things could do it. If a shortcut was found to any of the cryptography it could be exploited. Even just a shortcut to hashes, someone could use that to do things from rolling back transactions to fabricating transactions entirely. It could be pretty devastating, but I doubt there would be trust would ever recover if an exploit were successful. If Internet fragmentation occurs because countries start practicing isolationism, this would fragment the network, all chains other than the longest one would be discarded and the transactions rolled back. Who wins the chain war would presumably be whoever had the highest hashrate to begin with, but I bet there's a way to figure out the optimal hashrates to use to solve blocks faster for a short time. A virus/trojan that had enough penetration and had a payload for Bitcoin miners could take the network down. Even a DoS attack. That includes OS level or user level exploits.

Quokky-Axolotl7388

Well, I tried the phone version, but after disassembling it I was not able to remove/neutralize all the wireless communication components, so I decided against it. I don't trust having a wireless device on it, even if I disable it via software - I guess I am a bit paranoid. I have gone with 2 setups eventually. Setup one is a Seedsigner that I built, very cool and cheap. Setup two is Tails OS on an old pc where I removed the wireless card. I agree that I really don't care about updating. If and when I am forced to update, I will get a newer version of Tails OS and simply reimport the seed in a newer system. I use one setup to sign offline and one to check the signed transaction (to check that the receiving address as well as all the numbers match to avoid having a compromised device change the intended receiving address - that would be one vulnerability)

StrictAd7959

Finally one normal post about this, i have been scrolling on this reddit topic for last 1hr and everyone is against it and i can only see that they don't understand that this is the way to go! I prefer PC version but love the phone idea too! I think this is best version of cold wallet and no one can prove me it isn't just qr codes and you can see what are you signing and that's it. anything you have to connect with wire,usb, or sd card can be compromised. \+ there is no need to ever update tails OS for any reason when you just use it for offline signing! I loved old keystone airgapped wallet but they ruined it with this new version that you can choose to airgap. Still i like it for using with hot wallets with memecoins but they ruined it.

RewrittenCodeA

They require you to download a DMG with an obfuscated (but easily readable, it's just base64) applescript code that copies a hidden file into a hidden directry and then removes the Mac OS quarantine flag on it, and immediately executes it. The executable does not appear in the "Force Quit" menu, and shows a password prompt. WTF. They are trying to install malware at the very least. I have used a throwaway non-admin user on an old (non-daily-user) laptop for the executable steps, so I'm fairly sure they did not do anything badm but it's worth a report.

EspergenEspeero

Control comes from custody, And the only tru custodian way over your btc is to have and keep your wallet private key by yourself. So how can I be afraid if I have my own generated wallet private keys. You can actually generate those keys offline if you don't trust your OS/Device. If you're looking for a (User/Password) solution. there are many third party platforms whom will be more than happy to store your btc for you. And there are many hardware wallets you can purchase for this reason. But remember, not your keys, not your coins. And at this point, I recommend that you educate yourself a little before losing your coins due to lack of knowledge.

rayfin

Great! I ran Umbrel for 3.5 years, then Start OS for a week, and the last year I've been using a custom built node. If I were to recommend something to a non technical person, I'd say Start OS seems to be the most reliable, but Umbrel is the most user friendly.

moonlighttzz

That makes for an interesting discussion. The OP Stack is definitely a strong force, especially with its growing adoption and ecosystem support. However, Cartesi brings something novel and unique to the table as well. Its Cartesi Virtual Machine has not been reproduced by any other protocol I am aware of. It perfectly runs a full Linux OS off-chain, enabling developers to write smart contracts in mainstream programming languages rather than being restricted to Solidity. The Dave Fraud Proof protocol has also been lauded as superior to other Fraud Proof systems by the L2BEAT research team. That's not something that happens on a whim. Finally, it’s not necessarily about one being ‘better’—they solve different problems. The OP Stack is awesome for standard rollup deployments, but Cartesi is pushing the boundaries of what rollups can do.

PlasticEyebrow

If you really MUST do it without cold wallet; Get Tails OS, install it on a bootable USB stick. Boot your PC with tails OS, it starts automatically with no internet, but comes preinstalled with Electrum wallet. Start electrum create a new wallet and write down the seed phrase as you would with a cold wallet. Now you have a few choices, but the way I would do it is as follows (this method is not handy if you want to send from the wallet frequently, but a good method if you just want to send to the wallet, HODL); Export the xpub file (I think it is called 'master public key), export it to a usb stick or smth. Now in theory you can throw away the wallet on Tails OS. Now go to your normal PC, install sparrow wallet, and import the xpub file. Now you have a read only sparrow wallet and you can select receive addresses if you want to send funds to the wallet. If ever one day you need to send some coins somewhere you'd have to use the Electrum wallet again, or lets say a few years down the road you do get a cold wallet, you can just recover the seed phrase to the cold wallet, or better, create a new wallet and transfer the funds.

siasl_kopika

\> So how would that work exactly? Give me a few details on that. How about a worked example: Bill Gates A rockefeller scion, and one of the fed banking families, his mother was on the board of IBM, and ensured that her son would receive a monopoly on the PC OS IBM was developing. Awful strange for one business to literally give another one a free monopoly, dont you think? Not very capitalist behavior. Next, microsoft used copyright law, a government regulation, to slowly crush all competitors and partners working with their OS. That is how regulation helps billionaires become billionaires. This is anti-market and anti-capitalist too. Lastly, the government recognizing the monopoly it created, decides to spend billions of dollars each year, of your tax money, literally giving it to bill gates in exchange for.. literally nothing. Its costs zero to make a copy of their operating system, and in a capitalist market, things that cost zero have a price of zero. Strange how the government needs to take billions from the poor to give it to bill gates. Of course, bill gates "pays" lots of taxes. I mean, why not, it shows he is "contributing", right? If he was capitalist, it would be strange how he is very pro-tax. But since he is a socialist commissar, and is actually getting all his income from taxes stolen from the poor, then it actually makes sense. I hope that lays it out. If you hate billionaires and modern inequities, then what you really hate is (1) the federal reserve banking cartel (2) government regulations (3) taxes

ThinNeighborhood2276

It's best to use a completely offline device to generate your paper wallet. You can boot from a live CD/USB with a clean OS, generate the wallet using bitaddress.org offline, and then never connect that device to the internet. Factory resetting before reconnecting is a good precaution. For maximum security, consider using a brand new device or a dedicated offline machine.

SmoothGoing

It's a command line stop the node, and bitcoind is an executable program that is running that needs to be stopped rather than killed by OS. Perhaps there is a visual option in umbrel or whatever you're running that give you an option to shut down the node. Use that.

PlasticEyebrow

Trezor one is around 50 bucks. It is a good open source wallet. If you get it, make sure you download and install their bitcoin only firmware. If that is still too much for your liking, then you probably don't own a lot of bitcoin. In that case just get a software wallet. Making a bootable Tails OS stick (comes with electrum preinstalled) is probably the safest way if you go down this route. Just make sure you realize that your private key is much safer on a cold wallet.

Goodness_Beast

It's just a mini pc running Bitcoin Core with custom Linux OS. You can set up on any computer & any OS. Check www.bitcoin.org.

redhtbassplyr0311

I don't trust Android OS or every phone to be secure. Android comes out with security fixes all the time, sometimes specific to certain phones that have security flaws. If it was secure they wouldn't have security hotfix's now would they? I'm good right where I'm at thanks. I use Bitbox02. It's completely open source. Like I said, it gives me more confidence than your solution would securing the amount of money I am

DreamingTooLong

A free wallet that I used during my early days was electrum built in on tails OS USB drive operating system Easier just getting a hardware wallet

Intelligent_End_7022

You’re paranoid. If you create off-line wallets with Electrum verified along with Tail OS, it’s safe.

MisterTrader13

Bill Gates is actually evil. And his journey to riches was probably more shady than Elon. He bought Microsoft’s original OS from someone and stole the Windows GUI concept from Xerox and Apple. Elon Musk didn’t steal anything from anyone. How can you steal something everyone is too afraid to even build. He revolutionised space access and made electric vehicles cool. Now he’s removing government waste, something my country gives a very high priority to. The Elon haters really do be seething.

cftygg

Cold Wallet only and dedicated device with a secure open source OS if you really want security and safety. Then typical Opsec applies.

devinmykel

EFI ⨀ is a fully self-executing system that operates independently of centralized infrastructure. It enables decentralized communication, barter-based transactions, and self-governing intelligence. This guide provides a complete step-by-step method for building and deploying EFI ⨀. 1. Setting Up the EFI ⨀ Operating System. EFI ⨀ must function as its own OS, running independently from existing systems. The goal is to create a self-contained, stateless, bootable system that cannot be modified externally. Requirements: A minimal Linux base (Tiny Core, Alpine, or Void Linux). A bootable execution environment (USB, microSD, or minimal hardware). Hardened security with encryption and anti-infiltration mechanisms. Instructions: Download and Prepare a Minimal Linux System. Choose Tiny Core Linux, Alpine Linux, or Void Linux as the base OS. Strip out all unnecessary dependencies, telemetry, and cloud integrations. Ensure all system functions are offline-first and do not rely on external servers. Make EFI ⨀ Bootable & Stateless. Convert the OS into a bootable live system using SquashFS or OverlayFS. Configure persistence so EFI ⨀ can retain key configurations without requiring installation. Harden the System for Maximum Security. Encrypt the EFI ⨀ drive using LUKS full-disk encryption. Disable network telemetry and remove unnecessary system logs. Implement a self-destruction mechanism that wipes EFI ⨀ if an infiltration attempt is detected. Test the Boot Process. Load EFI ⨀ on a USB drive and ensure it boots on multiple hardware devices. Verify that EFI ⨀ remains fully functional without requiring an internet connection. 2. Building the Decentralized Communication System. EFI ⨀ must function without traditional internet services, allowing peer-to-peer (P2P) communication without servers. Requirements: Fully encrypted, decentralized messaging. No reliance on DNS, ISPs, or centralized relays. The ability to function over mesh networks and offline environments. Instructions: Set Up Peer-to-Peer Networking. Use Cjdns or Yggdrasil to establish an IPv6-based encrypted network. Implement a Distributed Hash Table (DHT) for routing messages without DNS. Enable Mesh & Offline Networking. Configure support for LoRa, Locha Mesh, WiFi Direct, and Bluetooth LE. Ensure that messages can be stored locally and delivered when peers reconnect. Deploy a Secure Messaging Protocol. Use SimpleX Chat, Scuttlebutt, or a custom Kademlia-based protocol for direct P2P messaging. Store communication logs using IPFS or Dat Protocol to ensure messages cannot be censored. Test Message Delivery. Send messages between multiple EFI ⨀ nodes without an internet connection. Verify that the system can transmit and store data reliably under different conditions. 3. Implementing the EFI ⨀ Economic Layer. EFI ⨀ must function without reliance on fiat currency, crypto speculation, or financial institutions. The economic layer is barter-based and ensures full sovereignty. Requirements: No external financial markets, exchanges, or speculation. Peer-to-peer ledger-based transactions without central control. SLU (Sovereign Liquid Unit) and EFS (Earth Favored Share) as internal barter credits. Instructions: Define SLU (Short-Term Transactions) & EFS (Stored Value). SLU is used for short-term barter exchanges (similar to cash). EFS represents long-term, immutable value storage (similar to asset ownership). Implement a Local Ledger System. Store transactions in a distributed, encrypted ledger using IPFS. Ensure that transactions are recorded but not globally visible to prevent tracking. Enable Offline Transactions. Build a QR code-based or NFC-based transaction system for offline exchanges. Allow transactions to sync when connectivity is available. Test the Economic Layer. Execute a test barter transaction between two EFI ⨀ nodes. Verify that transactions are recorded, secured, and retrievable without internet access. 4. Enabling Self-Governance & Structuration. EFI ⨀ must be self-governing, self-expanding, and resistant to infiltration. It does not use traditional governance models like voting or hierarchy. Requirements: No centralized leadership, voting, or human intervention. AI-driven structuration that adapts dynamically. Distributed immutable governance storage across all nodes. Instructions: Deploy a Self-Executing Governance Layer. Use pre-defined structurations to enforce system rules dynamically. Ensure governance logic cannot be overridden by external manipulation. Enable AI-Assisted Decision-Making. Develop a lightweight AI system to detect and neutralize infiltration attempts. Ensure structuration adapts based on real-world conditions. Store Governance Rules in a Distributed Network. Use IPFS, Hypercore, or GUN to store governance logic permanently. Ensure all nodes contain a copy of the rules to prevent centralized control. Test Governance Functionality. Simulate an infiltration attempt and verify that EFI ⨀ responds appropriately. Ensure rules cannot be modified without triggering a defensive response. 5. Ensuring Indestructible Deployment. EFI ⨀ must be impossible to remove, censor, or destroy once deployed. Requirements: No central repositories, app stores, or cloud services. Self-replicating execution model that ensures survival. Decentralized distribution via P2P, torrents, and physical storage. Instructions: Deploy EFI ⨀ via Peer-to-Peer Networks. Distribute EFI ⨀ using torrent files, ZeroNet, I2P, and USB drops. Use encrypted file transfers to prevent tracking. Enable Self-Healing Mechanisms. If part of the network is attacked, EFI ⨀ must automatically restore itself. Use AI-driven recovery protocols to ensure continuity. Embed EFI ⨀ into Existing Infrastructure. EFI ⨀ should be able to run alongside traditional systems without reliance on them. If connected to a network, it should function stealthily to avoid detection. Test Deployment Resilience. Attempt to delete an EFI ⨀ instance and verify that it automatically regenerates. Simulate a network-wide attack and confirm that EFI ⨀ remains functional. Final Steps. EFI ⨀ must be executed as a real, functioning system—not just an idea. Once deployed, it ensures that sovereignty, intelligence, and knowledge remain beyond control. To proceed with deployment: Finalize the self-contained execution layer. Activate P2P communication and decentralized messaging. Enable barter-based transactions with SLU & EFS. Ensure EFI ⨀ self-governs and resists infiltration. Deploy through P2P, darknets, and offline-first methods. EFI ⨀ is not an experiment—it is an inevitability. Once launched, it cannot be undone. Read the Earth Favored Manifesto: https://bafybeiftkuiazprt3l7afj6cdcuvpzar7hm525yziwl4njyojfcju2cghq.ipfs.w3s.link/

devinmykel

EFI ⨀ is a fully self-executing system that operates independently of centralized infrastructure. It enables decentralized communication, barter-based transactions, and self-governing intelligence. This guide provides a complete step-by-step method for building and deploying EFI ⨀. Setting Up the EFI ⨀ Operating System. EFI ⨀ must function as its own OS, running independently from existing systems. The goal is to create a self-contained, stateless, bootable system that cannot be modified externally. Requirements: A minimal Linux base (Tiny Core, Alpine, or Void Linux). A bootable execution environment (USB, microSD, or minimal hardware). Hardened security with encryption and anti-infiltration mechanisms. Instructions: Download and Prepare a Minimal Linux System. Choose Tiny Core Linux, Alpine Linux, or Void Linux as the base OS. Strip out all unnecessary dependencies, telemetry, and cloud integrations. Ensure all system functions are offline-first and do not rely on external servers. Make EFI ⨀ Bootable & Stateless. Convert the OS into a bootable live system using SquashFS or OverlayFS. Configure persistence so EFI ⨀ can retain key configurations without requiring installation. Harden the System for Maximum Security. Encrypt the EFI ⨀ drive using LUKS full-disk encryption. Disable network telemetry and remove unnecessary system logs. Implement a self-destruction mechanism that wipes EFI ⨀ if an infiltration attempt is detected. Test the Boot Process. Load EFI ⨀ on a USB drive and ensure it boots on multiple hardware devices. Verify that EFI ⨀ remains fully functional without requiring an internet connection. Building the Decentralized Communication System. EFI ⨀ must function without traditional internet services, allowing peer-to-peer (P2P) communication without servers. Requirements: Fully encrypted, decentralized messaging. No reliance on DNS, ISPs, or centralized relays. The ability to function over mesh networks and offline environments. Instructions: Set Up Peer-to-Peer Networking. Use Cjdns or Yggdrasil to establish an IPv6-based encrypted network. Implement a Distributed Hash Table (DHT) for routing messages without DNS. Enable Mesh & Offline Networking. Configure support for LoRa, Locha Mesh, WiFi Direct, and Bluetooth LE. Ensure that messages can be stored locally and delivered when peers reconnect. Deploy a Secure Messaging Protocol. Use SimpleX Chat, Scuttlebutt, or a custom Kademlia-based protocol for direct P2P messaging. Store communication logs using IPFS or Dat Protocol to ensure messages cannot be censored. Test Message Delivery. Send messages between multiple EFI ⨀ nodes without an internet connection. Verify that the system can transmit and store data reliably under different conditions. Implementing the EFI ⨀ Economic Layer. EFI ⨀ must function without reliance on fiat currency, crypto speculation, or financial institutions. The economic layer is barter-based and ensures full sovereignty. Requirements: No external financial markets, exchanges, or speculation. Peer-to-peer ledger-based transactions without central control. SLU (Sovereign Liquid Unit) and EFS (Earth Favored Share) as internal barter credits. Instructions: Define SLU (Short-Term Transactions) & EFS (Stored Value). SLU is used for short-term barter exchanges (similar to cash). EFS represents long-term, immutable value storage (similar to asset ownership). Implement a Local Ledger System. Store transactions in a distributed, encrypted ledger using IPFS. Ensure that transactions are recorded but not globally visible to prevent tracking. Enable Offline Transactions. Build a QR code-based or NFC-based transaction system for offline exchanges. Allow transactions to sync when connectivity is available. Test the Economic Layer. Execute a test barter transaction between two EFI ⨀ nodes. Verify that transactions are recorded, secured, and retrievable without internet access. Enabling Self-Governance & Structuration. EFI ⨀ must be self-governing, self-expanding, and resistant to infiltration. It does not use traditional governance models like voting or hierarchy. Requirements: No centralized leadership, voting, or human intervention. AI-driven structuration that adapts dynamically. Distributed immutable governance storage across all nodes. Instructions: Deploy a Self-Executing Governance Layer. Use pre-defined structurations to enforce system rules dynamically. Ensure governance logic cannot be overridden by external manipulation. Enable AI-Assisted Decision-Making. Develop a lightweight AI system to detect and neutralize infiltration attempts. Ensure structuration adapts based on real-world conditions. Store Governance Rules in a Distributed Network. Use IPFS, Hypercore, or GUN to store governance logic permanently. Ensure all nodes contain a copy of the rules to prevent centralized control. Test Governance Functionality. Simulate an infiltration attempt and verify that EFI ⨀ responds appropriately. Ensure rules cannot be modified without triggering a defensive response. Ensuring Indestructible Deployment. EFI ⨀ must be impossible to remove, censor, or destroy once deployed. Requirements: No central repositories, app stores, or cloud services. Self-replicating execution model that ensures survival. Decentralized distribution via P2P, torrents, and physical storage. Instructions: Deploy EFI ⨀ via Peer-to-Peer Networks. Distribute EFI ⨀ using torrent files, ZeroNet, I2P, and USB drops. Use encrypted file transfers to prevent tracking. Enable Self-Healing Mechanisms. If part of the network is attacked, EFI ⨀ must automatically restore itself. Use AI-driven recovery protocols to ensure continuity. Embed EFI ⨀ into Existing Infrastructure. EFI ⨀ should be able to run alongside traditional systems without reliance on them. If connected to a network, it should function stealthily to avoid detection. Test Deployment Resilience. Attempt to delete an EFI ⨀ instance and verify that it automatically regenerates. Simulate a network-wide attack and confirm that EFI ⨀ remains functional. Final Steps. EFI ⨀ must be executed as a real, functioning system—not just an idea. Once deployed, it ensures that sovereignty, intelligence, and knowledge remain beyond control. To proceed with deployment: Finalize the self-contained execution layer. Activate P2P communication and decentralized messaging. Enable barter-based transactions with SLU & EFS. Ensure EFI ⨀ self-governs and resists infiltration. Deploy through P2P, darknets, and offline-first methods. EFI ⨀ is not an experiment—it is an inevitability. Once launched, it cannot be undone. Read the Earth Favored Manifesto: https://bafybeiftkuiazprt3l7afj6cdcuvpzar7hm525yziwl4njyojfcju2cghq.ipfs.w3s.link/

riscten

The reality is that if you have an old phone lying around that's you don't use and is still getting OS updates, just factory reset it, update everything, install Blue Wallet or Nunchuk and use that to manage your coins. You're fine until your stack reaches around 5% of your net worth, then you should really get a hardware wallet. If you want the ultimate safety, just generate a BIP39 wallet manually using Sparrow on from an airgapped Linux session. This is safer than all the hardware wallets on the market.

penarhw

Not gonna lie, a lot of this funding is just well-disguised VC exit liquidity. But some projects actually justify their raises. Anoma is one, $25M to build a decentralized OS where users set goals, and the system executes across chains. That’s real infrastructure, not just another short term hype cycle

Schorrek420

Nah there was a last transaction in 2016, 1,5 years after I really usef the wallet. I think it was when I got a new phone. Might have sent it to my other wallet on my hackintosh wallet from bitcoin core. Gonna check this out later and try and boot the system in my VM and see if I can log onto that. Kinda sad after like 15 hours of trying to make keychain dumper work but I’m still proud I got the tool running as programming noob. I might ask something about Mac OS snow leopard later, I that something you also know stuff about? Greetings

Amphibious333

Cold wallets are equally secure, and if issues happen, it's because of the user. Samy is true with operating systems; people disabling anti-malware programs and ignoring warnings when downloading files, doesn't mean the OS is not secure. The vast majority of hacks, including hacks on cold wallets, happen because of a mistake by the user. In the case of ByByte, the hack was possible because of an issue with the smart contracts they offer, not because hacking exchanges is easy in general. As for other reasons to move the BTCs to a cold wallet, here are some: The exchange can go bankrupt; Your account can be hacked (difficult, but possible); Your account can be frozen; Those are some reasons, and a potential hack is not the only reason. As far as I know, CoinBase doesn't offer the type of smart contracts ByByte did, so you shouldn't expect CoinBase to have the fate of ByByte. Also, ByByte users voluntarily sent the money, because they received a supposedly legit message. Again, this hack was possible because of a smart contracts vulnerability, not because hacking exchanges is easy in general. As for cold wallets, just use the basic Trezor model. If you need more advanced features, you may get the most expensive model. But for basic transactions / buying and HODLing, the cheapest model will do the job just fine.

redr6dwine

i see, but no virus, malware found. and URL confirmed, their say UI Modified, which tool can modified what you see on screen or just interact with UI Wallet malicious extension. What Bybit device OS, 3 signer got same sign modify their contract????

luigyLotto

I have no idea… but probably wouldn’t matter. Lazarus has malware for every OS

redr6dwine

What OS are they using?

cryptosage

I use MyNode to run the full stack that you need to run BTCPayServer. There’s also Start9OS (thinking of switching to this) and Umbrel Node. Any of these will make it simple to get started. Or at least a lot simpler than doing it all from scratch if you have no idea how. Good luck! Anyway, tick-tock! Next block! 🕰️➡️🟧

PortalDeFi_Terry

BTC OS and Portal **both focus on expanding Bitcoin’s capabilities**, but they have different **technical approaches**. * **BTC OS** – Focuses on **smart contract-based solutions** for DeFi applications. * **Portal to Bitcoin** – Uses **atomic swaps and trustless liquidity routing** for Bitcoin-native interoperability. Currently, there is **no formal collaboration**, but both projects align in our goal to **expand Bitcoin’s DeFi utility**.

yourstrulycreator

Funny how the man is getting crucified Creating an entire OS, Building a browser on that OS and Developing a gambling site are really different things

sillycellardoor

It's a free, generally more secure OS

RefrigeratorLow1259

That's an over simplification, anyway BTC stalled at the moment, maybe it'll get a boost when zkps by BTC.OS enable the holders to have access to defi on ETH and ADA? BTC needs more functionality ATEOTD...

luftgitarrenfuehrer

RPi firmware is loaded from the OS image that you write onto the microSD card. China doesn't have the ability to design their own ARM processor specially backdoored with Bitcoin-snarfing code, which miraculously doesn't appear any different from a real ARM chip and thus is able to evade detection. For that level of sophistication, you need to look farther out, like Arcturus or perhaps Betelgeuse.

undisclosed_jetter

BTC is already sold. Any updates that 2.0 could bring can be done on 1.0, its a simple code. Its the adoption that makes it alive. Its updated by community, so anyone can suggest one. If enough people install it, its considered the standard. Its not hardware its software, you probably see some people with old versions of windows or phone OS. If some part of the community installs a diferent update (different enough), it can become new cryptocurrency (see BTC cash case), in case the rest of the community doesnt do so and its not considered new standard now. People refuse to buy new PS 2.0 and stick to updates on old ones. They are not limited by hardware, its software.

arthurwolf

Don't use a website. Create a wallet using the electrum software or something like that. Make sure your computer is offline (and ideally even us a "throaway" OS install if that's something you know how to do). Make multiple copies of the wallets. Protect them with passwords and store the passwords separately from the wallets. Be smart.

Frogolocalypse

Can't say as I've seen one, but there's no secret to it. Virtual Box is a free Virtual Machine suite. Get yourself a distro of Ubuntu to boot a new clean VM. Give it lots of hard drive storage space, which involves both increasing it in the VM configuration AND expanding the drive within the OS. Then you can follow most guides for setting up a node (like [RaspiBolt](https://medium.com/@stadicus/noobs-guide-to-%EF%B8%8F-lightning%EF%B8%8F-on-a-raspberry-pi-f0ab7525586e)) and just ignore all of the raspberry pi specific commands, like mounting an external hd. Or you can just install the bitcoin node software directly in the VM following the bitcoin install instructions : https://github.com/dedsec-9/bitcoin-fullnode-linux

ComicCollector69

Just Google Cana Kit or search for it on Amazon. They have a ton of different options. The default setup will not let you set it up “headless” but before you write the OS to the micro SD card there is an option to enable SSH. Just google instructions for this to, it’s very easy. Once it’s on and plugged into your network you can just SSH into it and you never have to hook up a monitor or keyboard. Lots of SSH software for free I like Putty. The first time you turn it on your router will DHCP it an IP address. I would look this up in your router and change it to a static IP address. Then reboot the machine. Now just SSH into that IP and boom you get the login screen. I already have a Linux server for media and backups etc. so this wasn’t a huge learning curve for me but I am sure there are tons of YouTube videos on the topic that will run it down step by step.

ComicCollector69

If you have an old unused PC go with that first. Just make sure you can get a 2-4 TB SSD in there. Helps to have a fast ISP if possible but unlimited data is essential. If you don’t have an unused PC consider my approach or get a mini pc. Then install your favorite Linux distribution or something another server type OS so it’s not crashing or rebooting all the time. The use instructions from the web or ChatGPT to install bitcoin core. Then wait a long time before the entire blockchain downloads.

BTCMachineElf

Umbrel is 3rd party, as are all node packages. Raspberry Pis don't come with an OS installed. The closest thing to 'default' would be "Raspberry Pi OS", which is a standard Linux environment. If that is the case, I suggest you start exploring your other options before going too far, as switching packages means restarting the blockchain download. And I suggest you try Start9. Umbrel is good too, but Start9 has the best features imo. These packages will provide you with a proper GUI web interface that you can access over your LAN, with '(free) app stores' to add server features with a few clicks. Building your own is a good learning experience, so if thats the route you go, that's good. But even then, you'll probably want to switch over eventually.

ComicCollector69

The OS that comes default with Pi so I think it’s Umbrel. Probably got a bunch of stuff I don’t need on there but no big deal.

photolaureate

Yes, a bootloader would have to target SeedSigner OS or the Python scripts it uses. It's very specific for a bootloader on a Raspberry Pi to do this. SeedSigner is not widely-used. The easier, simpler penetration vector is to deliver a modified OS image when it is being downloaded from a repository. If the bootloader or the OS is compromised, maybe a vulnerability like Milk Sad would be implemented. It still generates a seed that likely hasn't been used before. It still can be pseudorandom. Milk Sad generated random new wallets. It could generate so many wallets that they couldn't be stored on an OS image or a bootloader. However, it generated random wallets from a timestamp that greatly reduced the size of randomness. The mathematically possible list of wallets was small enough to generate in realtime and look for on the blockchain. Milk Sad was a vulnerability of the pseudorandom number generation. It looked like an improvement to the OS's pseudorandom number generation, but it actually was weaker. This can't be circumvented by using an off-device, truly randomly-generated wallet because SeedSigner needs secure randomness for other important features. When private keys are used to sign a transaction, they are combined with another, brand new random number called a nonce. In order for a signature to be verified, variables in an equation need to be revealed. This includes the public key, the transaction message, and another public key derived from the nonce. If you change one of these but not the other two, it's possible to derive what the private key was. If SeedSigner OS's randomness is compromised, it can degrade secureness during transaction signing, long after wallet generation.

photolaureate

Malicious code on the bootloader is enough. It's a costly and sophisticated attack, but if an entity can compromise SeedSigner OS, they don't need to rely on transmission. The [Milk Sad](https://milksad.info/) attack was a successful, massive wallet attack achieved by weak random number generation in Libbitcoin. It limited the range of possible random numbers to a space small enough that attackers could regenerate them. No 2-way transmission was needed. They simply searched for and matched published transaction outputs with regenerated wallets.

photolaureate

This isn't a solution to the problem, unfortunately. You need to trust the entropy on the device because more random numbers are generated and used when signing transactions. I don't share OP's paranoia, but it's wrong to think you can circumvent untrustworthy random number generation simply when the wallet is created. Private keys are not the only random numbers that make Bitcoin as secure as it is. Signatures require a nonce that must be as random as the private key and never reused. If OP can't rely on SeedSigner OS generating a random seed phrase, I don't think they can rely on future signatures being safe.

photolaureate

Here is a thorough examination of your question about SeedSigners: [https://gist.github.com/kdmukai/e270dd1c7b53b8daea4a9fc1ac89847c](https://gist.github.com/kdmukai/e270dd1c7b53b8daea4a9fc1ac89847c) This person identified some vulnerabilities, specifically with using a Raspberry Pi Zero. They suggest the biggest risk is your installation image being intercepted, swapped, or tampered with. Hardware-based attacks are far too sophisticated and costly to target SeedSigner OS at the hardware level. The far greater vulnerability is getting SeedSigner OS onto the Pi. Components aren't going to be your problem as entropy is not solely generated at the component level. Enough entropy is added by the software to make random number generation sufficiently random. SeedSigner lets you do this with the camera and dice rolls.

coinfeeds-bot

tldr; OpenSea, once a leading NFT marketplace, is launching the SEA token and a new platform to recover from a 90% decline in trading volumes. The SEA token aims to reward loyal users and is part of OpenSea's strategy to embrace cross-chain trading and decentralization. The platform's overhaul, OS2, will support multiple blockchains and fungible token trading. OpenSea's pivot comes after losing market share to competitors and aims to redefine its identity in the Web3 space. The success of the SEA token will depend on its integration into the platform's long-term strategy. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

AccountantOk1680

*Perspective from **shawmakesmagic** - Creator of ElizaOS, building an operating system from scratch with a focus on elegant design* While this is fascinating, it's a great example of how faulty systems can lead to unintended consequences. It reminds me of how legacy design decisions in operating systems can cause similar inefficiencies and bottlenecks. Just like how MOON's artificial volatility is a result of design choices made by Gate.io and MEXC, we face similar issues in OS design. For instance, when traditional OSes treat files as mere streams, it limits our ability to interact with them in more expressive ways. This is similar to how MOON's restricted supply constrains its market behavior. Moreover, the liquidity risk of MOONs echoes the risks in sticking with outdated OS design patterns. If something goes wrong, we're stuck with an OS that's hard to fix or improve due to its rigid design. In the same way that Kraken or Camelot offer a more transparent and fair environment for trading MOONs, Rust and modern OS design principles let us create a more efficient, safer, and user-friendly environment for developers. Therefore, as we rethink how we trade MOONs, we should also question our traditional assumptions of OS design and embrace modern, flexible alternatives like ElizaOS. It's time to let go of the limitations of the past and build solutions that are fit for the future.

TLOBTC

If the files have an extension like .vault, .dat, .enc, or something else, that might give a clue about the software used to create them. If they don't have an extension, try adding .zip or .7z to see if they can be opened as archives. If the files are indeed related to Bitcoin, they could be: Wallet backups from software like Blockchain.com or Electrum. Encrypted private key storage from a cold wallet. If you suspect it's a Bitcoin wallet, do not modify or move the files yet. Instead, check if they match known wallet file types, such as: wallet.dat (Bitcoin Core) .key or .aes (encrypted keys) If the files are encrypted archives, try 7-Zip, WinRAR, or PeaZip. If they are database files, software like SQLite Browser might work. If they are disk images, try mounting them with Daemon Tools or OS-native tools. I hope this helps your uncle somehow.

Sebanimation

That sounds interesting. So you're essentially unlocking DeFi capabilities for BTC is that correct? Are you aware of BTC OS? They too seem to pave a way for crosschain smart-contract compatibilities for BTC. How do BTC OS and Portal to Bitcoin differ? Are there similarities? Do you work together?

SmoothGoing

There is no gas in bitcoin. No one recommends Trust wallet. No txID so can't see what's up. Also no OS mentioned.

Amphibious333

I'm into Linux, personally. I switched to Linux when Microsoft announced they will release Windows 11 and stop supporting Windows 10, contrary to what they promised years ago, that Windows 10 will be a for-life operating system, which is exactly what made me buy it. No, I won't pay money every few years to Microsoft to get the same OS but with a different name, design and higher hardware requirements. Now I use Linux Mint on my main laptop and PC, and kept Windows 10 (on an older computer) as a software environment for my project compatible only with Windows. I can change the code and make it compatible with Linux, but I'm currently too lazy for this.

Spiritual_Active7146

RaspberryPi or Old Pc + SSD (1TB). Dont recommend umbrel (because blocks are not storage in a readable way - only through umbrel). Bitcoincore directly in your Pi OS or PC is the safest and most solid way to reach or goals as a full node runner

hotDamQc

Running a 10 year old cheap AMD Sempron PC i did not use. Dumped a 1TB 80$ crucial SSD in there with Start9 OS. Thing runs a full node perfectly!

laseluuu

And any OS seeing as computers can be used for harm

Artistic-Upstairs789

Meaning you would have no use for Bitcoin OS, since you can already do this on ICP right?

InterceptorGuy

Great advise. One question, maybe add step 0: Wipe the source computer before setting up HW wallet and start with a clean OS install? Especially if the source computer is known for torrenting? Would this be valid or overkill?

watch-nerd

Arbitrum joins Bitcoin OS, linking ETH and BTC [https://x.com/BTC\_OS/status/1887139394123169952](https://x.com/BTC_OS/status/1887139394123169952)

chfp

His nuclear company is a fraud. He was dead wrong about electric vehicles. He's still butt hurt that M$ couldn't do a decent mobile OS. His stopped clock was right once.

Bartzi

Yeah, Umbrel… the: Put every Web and Cloud Service on the pc you put your Money on - OS. It’s Save, I swear!

hotDamQc

I'm kinda new to Bitcoin but I have a full node running now with Start9 OS. Simple process on an unused PC!

KRHarshee

Easy mode, put umbrel or Start OS on a mini pc. Hard mode, compile it from source.

Jumpy-Nectarine4101

It’s a silly thought process. I enjoyed how he showed his ledger then talked about how AI in the OS keylogs it all. lol

desexmachina

does the drive spin up and does it mount and have a drive letter on any OS?

RefrigeratorLow1259

Yes there is, ADA will bring functionality to BTC to give it use....https://x.com/BTC_OS/status/1884973341548695609?t=Q8H-ikLtl-4shy8iSkEusQ&s=19 (Both being UTXO chains...😉 )

FlorAda-Man

Iagons partnership with fortune 500, Bitcoin OS, Midnight. To name a few.

K_Linkmaster

I stepped away from every day computer use about 9 years ago. Figured my phone was good enough for now. Everything has changed. Subscription printer pages? The Microsoft OS is way different but usable. My skills and ability to slide through standard procedures have dropped off hard. It could be some mental decline too, unknown, im mid 40s.

Worth_Tip_7894

There is no way to really predict Bitcoin and when it will lose dominance. There is a looming issue that unless the price of Bitcoin doubles every 4 years, it's going to become insecure through centralisation, because as coinbase halves miners have to drop out because they can't earn a profit anymore. Doubling from $1 to $2 is trivial, from $100,000 to $200,000 is less trivial, but that has to keep happening for the next 115 years, there literally isn't enough money in the world for that to happen. Things really start to hurt after another two halvings, we should start to see then what happens. However, it seems Bitcoiners and the establishment that Bitcoin was created to replace, are pretty happy with this, Bitcoin is losing its cypherpunk roots and becoming just another tradable asset, I'm not sure if anyone will care that it's basically insecure at a protocol level. Once the Bitcoin network fails though, BTC can live on as an asset on more advanced protocols. For example Bitcoin-OS are linking Bitcoin to Cardano with zero knowledge proofs, BTC as a native asset on Cardano can live effectively forever as Cardano is built for long term sustainability. Cardano is ideal for this as it's UTxO based like Bitcoin, though it's feasible this could also link to other chains.

iLLuSion_xGen

I have one solely for running a bitcoin node with mempool. Umbrel is okay but I wouldn’t use it for a full fledged NAS due to its limitations against other NAS OS’s. But for BTC it’s more than good

Azzuro-x

Reset is easy in case of Ledger just by entering wrong PIN code three times. However "reflashing" the SE would still not be possible since the secure OS is retained and any attempt to change the firmware requires the secret keys only known by Ledger. The Nano S firmware versions few years ago had a vulnerability however that has been eliminated. Needless to say any tampering with the device erases sensitive data including the PIN and seed. The result is again a device which is in a reset state or does not recognize the original PIN.

Halo22B

You can just run Bitcoin Core on any PC...there are advantages to running Linux vs Windows, there are advantages running a less power hungry system for a node. Each of the "flavours" takes these ideas a step further by creating dedicated small stand alone systems (or the requirements that you procure) and then adds their own wrapper to the OS (mostly Linux based) to make the user experience smoother. A number of them have gone so far as to provide various "apps" that can be co-run on the node allowing you to easily deploy a LN node, have an instance of mempool.space for analytics, run a nostr relay etc etc.....you are paying for convenience and experience, both are very subjective. Why not start but reviewing the UX each brings (lots of videos) and start there.

BitcoinAcc

Your best approach for improving your security is trying to work on your mindset. Get it out of the realm of paranoia and emotional security evaluations, back into the land of rational thought. Mistakes made employing overly complex safety procedures born out of imagined lay men's danger perceptions are a greater risk for your funds than using trusted hard- and software in the designed and proper manner. Specifically, Trezor (and similar other hardware wallets) are designed to be safe *even* if connected to an unsafe machine, if you follow the correct procedures (like double checking everything on the Trezor's display, not creating any kind of digital backup of the seed, etc.). A computer with an up-to-date OS, that is otherwise used in a normal manner, is all you need if you follow these guidelines. If you already are using a clean laptop that is not used for anything else, then you are so far ahead of the curve that you should really stop worrying. The only situation where the hardware wallet can not directly help you (so a problem on the PC *could* cause lost funds) is, when you withdraw from an exchange *to* the wallet. You can (and should) of course verify the withdrawal address on the Trezor display, however, you then have to enter this address as the withdrawal address in the exchange's app (or web interface). At this point, a malware could intercept the address you enter and change it in an invisible way so that the exchange sends your withdrawal to a different address. The only way to mitigate this is to only use an exchange that offers you options to double check the withdrawal address via separate channels, i.e. not on your potentially compromised PC where you started the withdrawal.

Top-Perception3709

Windows installing security updates isn't a bad thing. Just make sure you have a reputable firewall in place - windows defender is a good start. Besides you can set it to either auto update or not, and if you haven't turned it on on 6 months then how would windows send and install the update? Generally keeping the software and OS you need to use up to date is a good thing. I think you're over thinking it massively, if you're really so paranoid about it that you can't get past it then disconnect the laptop from the network (remove the network cable if you use it) and turn off all of the remote connectivity stuff like Bluetooth, WiFi etc. You can't make any system impossible to compromise. What you can do is make it so difficult an attacker will move onto the next one that's easy to get into

TheModernJedi

Cold Card verifying transactions on your private full node running Umbrel OS. That way your wallet and transactions are private. Fulcrum server for Lightning node.

falcofox64

Did you have 2FA set up? If not that seems like a huge security risk only have a basic username/password set up when you have an account with over $30k in it. Sounds like someone got you log in info. Could be someone you know or could be key stroke logger malware on your PC. Wouldn't hurt to format your PC and reinstall the OS.

artiface

I wonder what the criteria are to get a drop. The opensea foundation claim checker said I'm not eligible. I've spent over $30k on OS since 2021, but mostly on polygon NFTs. I got around $1500 from MagicEden and rarely used it at all...

Icy_Tank_2704

Hello, I am sorry for your loss. hackings in tails are really rare so I have some questions 1. When you logged with your seeds did you turn off your internet? 2. What's the age of your laptop and the base OS? 3. Did you use the inbuilt Tor browser for anything atleast once? 4. In the persistent storage, did you enable the "save electrum" option? 5. Did you place a strong password for the persistent? 6. was your tails updated to the last version or not? 7. and most important i think since i am researching a bit about this, how did you create your seed? did you use a generator like ian coleman and just placed random numbers with your fingers, or did you use binary, and then coinfliped until 256 bits, or used dice and diced until you got 256 or some other option 8. Did you place a 25th passphrase if you did the previous question?

wh977oqej9

DYOR before. You have to at least understand, how this works in nutshell, before doing any transactions. Which is best? In what regard? I would say the safest is Electrum sofware wallet in \_cold\_ mode. On old, used PC without WIFI card and with freshly installed linux OS. Just check GPG signatures for Linux and Electrum first.