SSL

Kleecarim

To point 3: dont open websites that dont have an SSL certificate, dont open websites that dont use https, and never download anything at all if you dont know/trust the website. But if you dont click on any links you should be fine

brianddk

A bitcoin address is nothing more than a routing designation. People send TCP/IP packets with their real life IP address as well. Routing designations are only a privacy problem if a designation can be linked to someone's real life identity. Here's a real life, unused BTC address: `1BX1R7L7uaQmAiMjX5Y7JGy8ddEzyBZRZj`, now... who does it belong to IRL? Just like TCP/IP has stuff like VPNs, SSL, and TOR to make associating IP to IRL difficult, bitcoin has Lightning, Conjoin and other best practices making connecting BTC addresses to IRL difficult.

fsw0422

sigh... Too f\*in tired of people who just jump into show off their knowledge in tech... u/DarkFusionPresent the concern you're putting up is like a junior dev who just learned how to make an AWS Autoscaling Group to host a website. Probably just shouted out "Eureka" after setting up Let's Encrypt through Nginx (congratulations you just discovered SSL). Also before trying to troll, please know what decentralized means in crypto world. Second, please f\* read at least the infographic page about Radix in their website of what they provide that other mature DLT systems don't provide. I'll suggest some keywords for you since you just don't seem to have the capability to do so. "atomic composability" and "infinite scalability"

delmarvablockchain

In the last month, the Bitmain Antminer S19j Pro spot price has fluctuated from $10k up to $11k and now down to $9.3k. The hardware is basically a speculative asset and its price changes based on supply and demand. One day they're available, the next day they're sold out. No one really knows what happens behind the scenes during inventory control. The manufacturers likely use spot pricing to control product distribution into the aftermarket. The constantly changing prices and wire transfer requirements generally discourage buyers from scalping the units for a quick profit, at the expense of downstream buyers. ​ A business could be successful buying units low and selling them high, but with a 2-3 week turnaround from China, in addition to the 25% USA import tax, the concept of buying stocking and selling ASIC miners is very risky. Some credit card processors explicitly prohibit selling crypto miners, and others refuse to invalidate chargebacks from obvious scams. Unfortunately, the web is ripe with scam websites offering these and other machines for discounted prices and promising to ship within 24 hours. Realistically, these companies never stock and never ship, they just take your money and disappear. If they are outed by their web-host, they will usually pop up under another name and do it again. ​ The red flags you should not ignore when purchasing ASIC hardware are: no SSL lock next to domain, domain similar but slightly different than manufacturers real domain, crypto payments only (non-refundable, no recourse), websites without terms and conditions or refund/return policy. It is important to understand that there are professional developers carbon copying legitimate hardware sales websites and cloning them onto a similar domain - don't get caught up in that. Buy from the manufacturer or from a reputable company. Find out if the company is registered, in good standing, and definitely see if they have a BBB profile or trustpilot complaints. Generally, the hardware should be capable of paying for itself before the warranty expires (otherwise, your miner will be dead before you breakeven, and the only people getting paid are the manufacturers). ​ TH/s and wattage are the most significant technical specifications for ASICs because they ultimately determine profitability (kWh based on your local or colocated electric cost).

bobalazs69

this website does not use SSL why can't a mainstream site cover this

spritecut

Notable Cypherpunks, reads like a who’s who of cryptocurrency luminaries, and include Adam Back the inventor of Hashcash (a precursor of Bitcoin) and co-founder of Blockstream. Hal Finney the main author of PGP 2.0. John Gilmore co-founder of the Electronic Frontier Foundation. Marc Andreessen: co-founder of Netscape which invented SSL and Matthew D. Green, influential in the development of the Zcash system.

HonestBrah

SSL bro. Just look at the address bar. I'm actually surprised your browser didn't catch this one.

aaaaaaaarrrrrgh

Of course you shouldn't go ahead if the site doesn't even have SSL (and browsers will show warnings on password fields on such sites). What I'm saying is that almost all the scam sites will have SSL too, so just because it has a lock doesn't mean that it's trustworthy.

shubham00

Most of the time scam sites especially fake URL don't have these SSL certificate, so it's first step for precaution.

_forgot_my_pwd_

> Do you have ANY experience using an exchange? I have none. > How much did you pay for the bitcoin? I bought mine in 2008 or 2009, and back then these things were dirt cheap, I paid total of $700 something for 8 or 9 BTC back then. I used some to buy an SSL cert. How much money in taxes? Yes, this would be indeed a surprise tax, but if I am using it to buy a house, I may be able to declare it. I got to work with a tax attorney and see. Thank you for all the info. I appreciate it very much.

benjy500c

A VPN will hide your IP address and encrypt the communications. It's useless to hide your IP address with a VPN, if you do something illegal the VPN can give all your datas to the authorities. Your IP is already hidden to common users if you don't use torrents or P2P protocol. Your communications are already encrypted if the website uses an SSL or TLS certificate (HTTPS).

fifi_gaia

In case someone could not figure out if a name comes before a comment or after a comment. It almost like SSL cert's header and footer, where you have 10-15 dashes followed by BEGIN/END certificate.

sloopslarp

When they failed to create a working website with functional SSL, I knew.

CryptoNarf

Hmm maybe it comes close. Decentralized Identities and the Verifiable credentials will have a trusted source behind it to give a VC "weight". With LTO parties can establish such trust networks as they see fit, building on the already existing tech of extended-SSL certificates. It will likely help speed up adoption greatly as the step is not that big. In turn, crypto will become more usable for companies as they are able to verify each other's identities through such structures, letting adoption pace pick up speed again.

misstrauisch

Good POV, and I've seen good/interesting/important technology, especially around personal privacy, come and go over the years, despite being "world-changing" and so on. There may be a hard limit to the sophistication of end-users when it comes to any technology, and crypto may be one of those things that is just past that upper limit in terms of the core usability of it. Consider "real" multifactor authentication (not SMS) - something as simple as any "authenticator" app that TOTP based. Not that hard to set up and use, yet apparently too hard for most users to manage, especially things like a "cold start" of a new device. With Crypto, there are some intrinsic problems with the tech that still need work (for me, it's processing time and transaction costs) but ultimately, it's about marketplace behaviors. I've seen Venmo and Cash App and WeChat and all of those other "layers" on the traditional system stand up and take off in "ordinary" use far faster than crypto. I don't think most people care much about the philosophy, they care about the functionality. I can pay my neighbor at his garage sale with Venmo. I can buy things at CVS with Venmo. It's fast and simple. I don't really have to think about using it. But when I use Bitcoin, there's always some..thing...that I have to think about, and it's always a little "shaky" in some way. Crypto may also never shake the multiple hits to its reputation. It's become... \- A wildly speculative and volatile "investment" \- THE payment method for ransomware and other illegal/unethical activities. \- An ecological disaster (for PoW systems, at least) \- A, often slow, expensive way to do transactions \- A complex mess of barely inter-operating "currencies" \- A security risk ({another\_platform} announced on {insert\_date} it was hacked and {huge\_amount} stolen) \- A regulatory risk. All I need to say here is "China" Its a shame because the IDEA is so enticing. But I think there's definitely a difficulty in getting to real and "ordinary" usage. Maybe it will be like personal SSL certs - an idea that's been sitting there, forever, and nobody uses it.

forthecustard

Article gives an SSL error

PquePC

Hi! I got the same message about an hour algo by Discord. I did a couple of reliability/anti-scam checks (checking the SSL certificate, searching for the name of the website on Google (this is how I got here) and looking for "Discord Ethereum Scam" on Google. It seems to be 100% a scam. At the beginning I was wondering if it could be real, mainly because of two things: First, at the beginning they didn't ask for any sensitive data. On second place, I searched the Discord's bot's token and it was verified. Then they asked me for the "Begginers' deposit" and then I didn't have any doubt, it's surely a scam. The problem with this scam is that by sending it from discord they are getting to a lot of young people wich might not detect the scam, so it could be very bad for a lot of people. Now for the Google's overview: Bitlenx.com scam? : 100% READ FULL COMENTS BEFORE GIVING INFO OR MONEY

btcprint

It's like nuclear deterrence. Quantum computing could break all encryption which would be disastrous for anything internet/digital. SSL won't matter, etc. Crypto would be on the small end of oh noes.

InsideCold

I used to be in this camp, but came to the conclusion that this trade off is not worth it. The downside of on chain privacy is that you can’t verify the number of coins in existence. Since the 21 million cap is arguably the biggest value proposition for bitcoin, I don’t believe it’s worth giving that up. A better solution IMO is to use a second layer for privacy. Just like SSL keeps HTTP traffic private, the Lightning Network can add sufficient privacy to bitcoin transactions. Since privacy is one of many value adds afforded by LN, law enforcement can’t single out LN transactions as merely being attempts to evade surveillance. They don’t stand out the way a coin join would.

TheAmillion12

If I make enough to straight up by a house in cash I'll be set. At that point SSL my rent will just go to investing and I can retire a decade early

coinfeeds-bot

tldr; LTO Network will lead the way for cross-chain DIDs through their partnership with Chainlink. Using their mainnet in combination with the established trust network of extended-SSL certificates, LTO will act as an oracle for the DeFi world, one of the fastest growing use-cases of the cryptoworld. LTO is a Proof of Stake blockchain with a deflationary total supply driven by real adoption. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.*

coinfeeds-bot

tldr; LTO Network will lead the way for cross-chain DIDs through their partnership with Chainlink. Using their mainnet in combination with the established trust network of extended-SSL certificates, LTO will act as an oracle for the DeFi world, one of the fastest growing use-cases of the cryptoworld. LTO is a Proof of Stake blockchain with a deflationary total supply driven by real adoption. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.*

NikeshAdh

Don't forget to add SSL to your website. Good luck! 🥒🥒Don't forget to subscribe 🥒Crypto Pickles 🥒community on tg for Daily List of Upcoming Presales , project reviews, private calls

cushite_viper

"In 100 years someone might crack SSL, TLS, IPsec, SSH, and PGP and make communication networks worthless"

wengem

There is an issue with TCP/IP: packet sniffing. Enter optional L2 encryption: SSL. Or you could try redesigning the internet from the ground up and getting billions of people and trillions of devices to switch protocols every time a shortcoming in TCP/IP is found.

wengem

The main problem was already solved when the alt-coins came around... namely decentralized consensus/double-spend. Now, network effects take over. Any additional value or functionality that an alt-coin has can be added to a layer on top of Bitcoin. You could have argued that TCP/IP needed better built-in security because packet sniffers could see your traffic... but then SSL and other layer 2 encryption technologies solved that problem while leaving the base layer and its massive network intact.

LinkDrake

L1 chains are all going to get flipped by more direct value capturing protocols. Blockchain = Computer Blockchain + Oracles = Computer + Internet Blockchain + Oracles + DECO = Computer + Internet + TLS/SSL And it is largely a winner takes all layer. Sergey took control of [www.smartcontract.com](https://www.smartcontract.com) a week before the BTC white paper was released to the public. Ari Juels (Chainlink Labs head / scientist) co-founded the concept Proof of Work that BTC etc is built on and has over 40k academic citations, his circle wrote all the cryptographic theory this entire space is founded on. Chainlink won the war before the first shot was fired.

rgnet1

Peer to peer without a middleman implies non-custodial, doesn’t it? Digital payments in dollars are only possible because two custodians — sender bank and recipient bank — contact each other to verify the transaction. (Or payment processors like Visa who are the middlemen for the middlemen!) And the bitcoin protocol shouldn’t actively “disallow” anything — how could it? That’s the whole point of neutrality. Same reason the miracle of the Internet protocol is that it delivers packets and nothing else — only layers on top and service providers add restrictions or features (eg SSL for encrypted transfer). People can do what they want. The OP statement is quite simply: if you’re paying the perpetrators of the 2008 collapse (JP Morgan and other investment banks) to hold bitcoin for you, then you’re missing a really big, fat point.

na3than

They're looking at banning SSL and every other application of asymmetric encryption? Seems like a bad idea. That, or you read that wrong.

poopymcpoppy12

>What I totally don't get is this: why do coins/tokens which advertize their main function as facilitating smart contracts hold value in the same way as coins that are operating as a form of currency? Why is there a dollar amount tied to a piece of technology that is meant to facilitate a smart contract? Why would the value of that coin be tied to adoption? This is how crypto and blockchain work. In the case of Ethereum, ETH tokens are paid to miners for executing the smart contract and transaction. On top of that, users are allowed to buy and sell ETH tokens on the open market. This is what gives it its value. Imagine if you could have invested in Linux, SSL, or HTTP with a token that incentivized their development. It's kinda like that.

Unable_Ordinary6322

Looks great! Now about that SSL cert ;)

CryptoNarf

Well said. In addition, LTO's approach is slightly unique where many DID structures don't seem to think about how to link the digital identities to a real world trusted source. LTO has solved this by utilizing an already present source of trust, namely extended SSL certificates and linking them to Decentralized Identities and Verifiable credentials. It is one of the most overlooked aspects in other DID structures. Though, I'm not sure if ADA is making that same mistake as well, or not. What I do know is that LTO delivers where we're still waiting for stuff to happen with ADA :P

Anticomunachos

golden age, but it will be taken over by any competition ​ Eth like is netscape in 1998 ​ Yeah they invented things (like SSL) but it doesn't exist anymore

pamfrada

Curent 2FA codes are fairly easy to crack when you think of it, they tend to be sort, given enough time they could be easily cracked right now. 2FA Tokens have a sort lifespan and tend to be very rate-limited, so the computing power does not matter as much :). The major issue would be if SSL was defeated, you could intercept most/all connections and read them as if they were clear-text, allowing you to dump all sorts of information. Credit cards, login, trade secrets...

randsack

Is there a system simular to SSL certificates that could be used? Or what if the exchange makes a wallet that when connected to do a swap sends automatic encrypted connections?

mailarchis

I am digressing a bit but the projects talked about in the article feels very sketchy. For instance, [yefi.one](https://yefi.one) doesn't even have an SSL cert on their domain and feels like it's trying to ride on yearn. finance.

squidder3

It was actually the NSA that created it. I wouldn't look into it too much honestly. It's used in a lot of encryption protocols like SSL, TLS, IPsec, SSH, etc.

eyebrows360

> Just like the second layer apps on top of the Internet (TCP/IP) base protocol. No, they are absolutely nothing alike. It's not even close. > Base layers/protocols are basic infrastructure built for security not for 'speed' No. An SSL connection is limited by the constraints of the underlying HTTP connection which is limited by the constraints of the underlying TCP connection which is limited by the constraints of the underlying IP system. Layers on top cannot *add speed*, that doesn't even make any sense. > In your house In *my* house I make sure my analogies aren't completely and utterly pointless, actually. If bitcoin is the mechanism by which "changes in state" are recorded, then any and all things which "change state" and are built on top of it *are constrained by its underlying limits*, and that's that. If you want to go beyond those limits then you have to bypass storing the "changes in state", which is what e.g. Lightning does. It is not so much built "on top of" bitcoin, as entirely ignoring it for all the things it's actually used for. You might as well just run instances of a Lightning network as a completely standalone thing.

Melodic-Ad7689

It's been a rough year over here, some bags I had so much hopes on crashed to the mud, SSL rugged from $800 to nothing and DRC nearly took my life with it, lol. If there's any salvage for a soul like mine, then it's in fresh launches and I've seen holoride as one solid launch to anticipate

mr_sarve

Airport wifi is fine with SSL login, as long as that was actually the wifi you used

677f729e00f5474b98

I dont think you understand how software works. The code is not written by one person or group. There are many layers, developers use a whole bunch of third party code and tools. For example SSL (Secure Sockets Layer) is a third party library that allows secure communications, this is a specialist toolset. If SSL changes because of upgrades or bugfixes, the software using SSL must be updated. Also compilers like GCC will have upgrades and bugfixes, for software to remain compatible it must be updated. Operating Systems are also updated, this drives a need to kerp current with later versions if libraries too.

smeg_me_off

No thanks. Also please invest your time and install an SSL certificate.

c0horst

You're right, there is the possibility that you could have a crafted transaction that when sent to the wallet to be signed it somehow reveals the private key (kind of like the heartbleed SSL vulnerability a few years back), or some other sort of exploit. However, such a hack like that, if discovered, would be quickly patched. Anyone intending to exploit this would NOT want to scam random people with it, since it would cause it to be discovered, so they'd probably pick their targets carefully. I'm not holding enough ETH to be worth their time for a high skill attack. Basically, Ledgers are about making you a hard enough target that you don't fall for the basic hacks like keyloggers or trojans or anything that watches your PC. For the common crypto investor, I would say they are functionally hack proof. For anyone working in the range of millions or tens of millions of dollars... get a multi-sig wallet with different vendors of hardware wallets for self custody.

satoshi0x

MintCoin did a unique 5 week pooled public announced “pre-mine” then after that came both exchanges to buy MINT and Passive PoS where one earns passive income without even keeping a wallet running - every 20-40 days new MINT is created from ones MINT holdings... for me I get 5% of my Mature MINT balance every 20 days. Sure you can keep the wallet off... but fall behind a week and your going to regret how long it takes this old chain to catch up. Could have to do it being pure PoS after its first five weeks in spring 2014... and scrypt. Bootstrapping or a snapshot is almost necessary to use when trying to sync the chain from 0 in 2022. And if you can’t catch up to the lead nodes you can’t use your wallet to send out and receive crypto from exchanges. Imo the slower the sync the more memory and cpu intensive some of these early PoS coins are the more it seems they exist unnoticed for a reason. And maybe we don’t have a true dollar value or we have a fragmented consensus (the person who talks about faking a bitcoin node makes one think very early txs could be overturned with the right amount of consensus and that system of either checking every signature from genesis or perhaps just getting rid of one devs trusted CA-SSL certificates (Gavin is mentioned in the example)... it’s stuff that requires more time and explanation than I can give but those are concepts i at least can grasp. 10 years later governance, voting power, reputation staking these are all things the public is finally getting in on after this guy just rattled off some of the biggest reasons for PoS and yep- you never heard of the handle. Not shocked! Btw the two week window which that was written was the birth of an altcoin I’m fond of and did in fact do some sort of tweaking to distribution that may not be PoS on the surface but it does affect governance going forward and going back it’s played a great role in the widespread distribution of some ancient bitcoin alternative chains :P

Vast_Particular_30

Also is there a mechanism it bitcoin like this today? *I was thinking a future Bitcoin client would need a screen of trusted certificates - sort of how your web browser already has one for SSL (well hidden), that helps it decide whose signatures are trusted, and can ultimately be controlled by the user. Today, it is already a major pain in the ass to redownload the block chain, which takes hours, presumably while every single signature for every transaction is checked.  Yet, if I trusted a certificate from Gavin Andresen, and Gavin published a checkpoint certificate vouching for the correct hash of block 130,000 (for example), and this was relayed in a future version of the p2p protocol, then my client could just accept all blocks before that as valid without checking every bloody signature in every block.  And if I as a user didn't like or trust that behavior, I would merely remove Gavin's public key from my trusted certs list, or add a key of someone I trust more, the same way I can do this with SSL CA certs in my browser.*

WeGoToMars7

This advise was relevant in 2010 or something, now it doesn't cost shit to get SSL certificate for your site. Lock icon doesn't mean anything.

tomparker

Was a product manager for a major tech company building hardware encryption accelerators during the early days of SSL and I introduced a key metric for describing the performance of our new products. We were planning to go out of the gate with three encryption accelerator boxes. There was a low-end box that was designed to do 200 connections per second, a middle-range box that was designed for 400 connections per second, and our premium product, code-named “The Kilt Lifter,” that was intended to do 600 connections per second. Alas, none of our prototypes were performing anywhere near to these specs. Thus, at an internal pre-launch sales event (at a posh resort in Indonesia) I introduced my new metric for describing the performance of our three new appliances as 200 CPS BNR, 400 CPS BNR, and 600 CPS BNR respectively where “CPS” stood for “Connections per Second” and “BNR” stood for “But Not Really.” You’d be surprised how handy the technical acronym **BNR**can be for a product manager and it was quickly adopted by our engineering and marketing teams. Which reminds me of my favorite joke from those days: Q: What’s the difference between a car salesman and a software salesman? A: A car salesman *KNOWS* when he’s lying.

igadjeed

> many of them go through a strong verification process before they issue a cert Very few SSL CAs require proof of identity. CAs issue certificates automatically using a simple script which proves that the applicant controls the Web server. Proof of ownership of the domain, with documentation of company credentials, was a thing when Verisign had a monopoly, vanished when browser developers agreed to end Verisign's monopoly and allow competitors - more than 20 years ago

SlimSlayer19

BTC mining is no longer profitable unless you are using ASIC miners. So I'd recommend mining Ethereum. With your setup I believe you will only be able to mine with your RTX 3070. It provides a decent hashrate and should make close to 50 dollars worth of ETH per month. Maybe even more. If you wanna start mining right away, then you can: 1. Download T-Rex Miner/Phoenix Miner or any Miner you would like. 2. Create a wallet account in Metamask or any other wallet. 4. Select a mining pool. I would recommend Ethermine. Collect pool addresses and Stratum/SSL port info etc. 3. After downloading the Miner folders, you have to extract them. Depending on your Miner, you would have to create (T-Rex) or edit(Phoenix) a .bat file. 4. In the .bat file, you have to edit or input the info as per instructions. Such as a stratum or SSL port, your wallet address, your mining pool pointer. I will add an example of a .bat file later. 5. After you've done editing, just double click it. If you've done everything correctly, then it should start mining.

Nyct0phili4

If you are able to force alle people over one technical backend for "Internet" communication, then you can censor it centrally with enabled SSL-decryption. So yes, it is technically possible to censor/block miner/node communication. <tinfoilhat on> - Cyberpolygon 2021/World Economic Forum/Klaus Schwab - Elon Musk's Starlink Internet with stallite dishes (Our "hero" if a global internet-virus would disable all the main Internet node distribution points) <tinfoilhat off> You can always have your own home-made mesh/p2p backhaul for "Internet" communication, but it won't be as stable, far reaching around the globe and probably illegal at some point. Do not underestimate the power of the richest on this planet. I don't fear the government, nor do I fear the richest people on the planet, I only fear the nearly unreal amount of stupidity/blindness of the the masses. But even if all of this distopya would happen, at some point, people will finally have enough of tiranny, like it always has been in the history. Hint: I'm not forcing my opinion down to anyone's throat, this is just dystopic food for thought.

alexd281

Does anybody know if site has an SSL connection? I would check but not trying to give my device digital herpes. Found the WHOIS data: > Registrant: > Handle: 5legb4dxv2c6hifc > Name: Withheld for Privacy Purposes > Organization: Privacy service provided by Withheld for Privacy ehf > Email: 7ca7a6632e0d4ee29c2c826c193d5600.protect@withheldforprivacy.com > Phone: tel:+354.4212434 > Kind: individual > Mailing Address: Kalkofnsvegur 2, Reykjavik, Capital Region, 101, IS If anybody reading this was scammed through that site, you can report them via their registrar below: > Name: NAMECHEAP INC > Email: abuse@namecheap.com > Phone: tel:+1.6613102107

alexd281

I hardly dabble in defi on BSC but when I do it is via CubDefi from LeoFinance. Believe they have a bridge service as well which may be worth looking into. Looking at the other comments, looks like people got scammed by following the wrong URL. That makes me wonder if the site had a trusted SSL certificate that would make it appear more legitimate. If so, there may be an avenue to report them to the certificate authority that they purchased the certificate. I'm thinking this probably isn't the case though.

HeviMetalTitan

> QANplatform can be seen as a bet against quantum supremacy, which would instantly render everything from SSL to SHA-256 blockchains such as Bitcoin obsolete. Yeah, I just bought some on pancakeswap for this exact reason. I put 1% of my portfolio into it, in case there's a 1% chance that quantum computers render other coins useless.

Knurlinger

Ah yes. They had a pretty serious SSL fuckup which affected some users. I hope they learned from that issue.

overflow_buffer

Yes, this exactly. I think most People don’t understand the math behind Bitcoin or monero/other. Similarly to how most users of the internet don’t really understand SSL.

iamnotbart

See.. this what you don't understand. Encryption means absolutely nothing if you find a way to bypass the encryption altogether. Read up on the Heartbleed vulnerability. [https://heartbleed.com/](https://heartbleed.com/) SSL used encryption too, but it didn't matter because the vulnerability allowed the attacker to read the memory of the system, and thus was able to steal the private key. Time + any software = vulnerability being found. It's just a matter of time. The biggest issue is that there is NO organization ensuring that this software remains secure. Does it have to be an organization controlled by a government? No, absolutely not. But it has to be someone. If shit hits the fan, there is no one to pick up the pieces.

note2self-urnot-anon

This is actually true in some cases where the crypto is slaved to an external reality rather than serving as its own, i.e. where the crypto isn't sovereign. An NFT representing title for land could be lost, for example. Does this mean the land can never be owned again? Obviously the presiding muscle owns the land and may recover or issue NFTs as needed. This is a system of cryptographic trust propagation similar to SSL/TLS certificate authority. You don't trust the cert, you trust the authority via cryptographic means. But Bitcoin is sovereign or it isn't Bitcoin. Let's not confuse trustless systems with trust propagation systems.

blario

@tipschi is correct. The problem with everyone using the same code base for consensus is that if there a bug, everyone is f’ed at the same time. Consensus does not require same codebase. Consensus is API layer; it is the set of rules. It does not require same codebase. It only requires the same set of rules. Think of TCP and SSL; you can use whatever OS and other software, But they all know how to speak TCP.

checkso

Not even SSL...

honestlyimeanreally

Can you explain the intricacies of HTTPS/SSL? (Rhetorical) Crypto will go the same route. Millions of people rely on tech every day that they can’t even begin to fathom how it works. Ease of use is the most important precursor in adoption. Complexities can be streamlined behind the scenes.

PolitimesterBastian

i get SSL\_ERROR\_NO\_CYPHER\_OVERLAP error code. seems like i need to let Firefox visit sites they deem unsafe. Weird that it didn't happen before though, same laptop and same wifi and same browser I've been using for several months!

KJ275

You are a nerd badass. Very impressed. I published a similar analysis a month ago on my linkedin page, but my criteria was vastly different. It would be cool to merge findings, if there's interest: *Actually private (blockchain must lock transactions/data on the blockchain but not contain wallet ID’s or transaction amounts on the blockchain) *ASIC-resistant, good ol' Proof-of-Work (people everywhere should be mining on easily-obtainable, affordable hardware) *Mining traffic must at least be encrypted via SSL (preferably TOR) *Must have Android and IOS wallet apps that are easy for the non-technical consumer, on par with PayPal *<1 minute block time (fast confirmations 3 blocks deep, Bitcoin’s 10min x 3blocks = 30 to 45 minutes for payment confirmation is obnoxious) *Must have a small treasury for continuous development (anyone can volunteer an improvement idea, everyone votes on the backlog acceptance/prioritization, the dev who completes the work gets paid for completion of the improvement from coins taken from every mined block, thus incentivizing everyone correctly) *Can’t be pre-mined or have an ICO (further resolves the vanishing dev team/unbalanced incentives problem) *Must be deflationary, with halving on a 100+ year schedule (mining is inflationary, reward-halving properly combats this, it means a well-adopted coin natively becomes more valuable over time, outside of any speculatory investment instrument angle) *Transactions-per-second (TPS) scalability limitation mitigation must at least be on the roadmap (lightning networks, tangles, something... for reference: Visa does nearly 1700TPS, BTC only does 4TPS, ETH only does 20TPS, but there's a roadmap for both) Beam was the winner of this fight. Also, OP- if you comment with a beam address, I'll send you a few for your time.

AJoyfulProcess

Curious what the objective of your project is. Is it to provide a ISP free option for traffic to "stay off the grid" or to provide more security? IMO security has to be the top priority. Today when buy or sell on my phone I at least know that the traffic is encapsulated it a GTP tunnel from over the radio link from my device to the edge of the cell provider's network and inside that tunnel my transactions have another layer of SSL encryption that extends all the way to the destination. Using unlicensed spectrum or something similar just feels inherently less secure.

chollrlleiwfggoro

ok thank, I gathered more info for you please try to help when you can: 1. Has EPS a UI or does it only use the command line? 2. in EPS config.ini I wrote wallet = [my xpub/zpub]. I tried it with xpub and zpub different times. Do I need to write something else before or after that xpub line? 3. I did all the rpc 8332 port settings with passwords. Electrum binds also to localhost 5002. But the .cookie method does not require passwords, I tried both the cookiie method and your password method. What server configs have you put inside Electrum? 4. Do you use the defailt SSL .cert file coming with the downloaded EPS package? How does the cert line look in your EPS config.ini? 5. Can you please test this, is EPS also launching nd showing your wallets when your Electrum program is not running at the same time? 6. When the wallet (the xpub) is newly created and was never used for any operation would EPS still load its wallet addresses in the command line? 7. INFO:.........:Displaying first three addresses of each master public key: What is EPS showing after this third line in your case when you launch it and do transactions with your Electrum? What does it show besides loading your wallet addresses?

tsumy

I checked on the developer forums in how to create a SPA with ICP... And they don't even support SSL. The fuck, it's just a centralised prototype right now with an absolutely insane launch price and a private sell.

Rrdro

In order to hack bitcoin you would first need to be able to hack SHA256 which is used for a lot more important things than Bitcoin. SHA-256 is used in some of the most popular authentication and encryption protocols, including SSL, TLS, IPsec, SSH, and PGP. In Unix and Linux, SHA-256 is used for secure password hashing. If SHA256 was hacked you wouldn't be reading this message because the whole internet would be fucked.

BananTarrPhotography

The OP said "only the best remains", which contextually means "only bitcoin will remain" and everything else will die. TCP/IP is the most widely used protocol but it is far from being the only one and there are very important functions it does not handle, such as providing the security that is essential for e-commerce be trusted, which is handled by SSL. And let's just ignore HTTP, which is nearly as widely used as TCP/IP and is a protocol unto itself. Let me make this abundantly clear to you: I never argued against myself for a single second. Your comment is a sad reflection of the average lack of depth and effort Bitcoin maximalists are willing to go in order to prove their point and this woman who was in the video epitomizes that. Because if you went any further you would quickly realize how clouded your current viewpoint actually is. Regarding Bitcoin being the only one which remains: The reality is the opposite is likely to come true as people like yourself contribute to the internal implosion of Bitcoin's community (and continued fracturing) because you adhere to a maxim so blindly that it will tear you apart when it becomes time for Bitcoin to evolve. We've seen it already several times and it's only a matter of time before it happens again, and before other much better networks show they provide more decentralization and more utility whilst using a fraction of the energy. Enjoy your eyelids. I'm sure they help you ignore the world around you. But maybe do try opening your eyes sometime.

MaltMilchek

Get an SSL for HTTPS btw, free via https://letsencrypt.org/

Any-Teaching4430

Low quality website, site doesn't even have a free SSL certificate, low quality post, none of the comments are showing up and it's already trending in the hot section within 20 mins of posting. Now if you want to downvote this comment using the same accounts that you used to post the comments then be my guest.

Royalty513

Below is the message from the owner/Dev, Mr Saito. I’m nobody just an individual who is super eager about this project as the dev is from Silicon Valley. If you are in tech, you know how smart these dude there are :)) from building the robot to kill all the tech, they are the ones. Please spend sometimes to read the owner’s message These questions are who is he? Whether he is a dev or what role he plays etc? This is not to cause fud. This guy has a goal of the project. Please be patient as the token is just a 3 day old or so I'm essentially a co-developer and the face, the TG, FB, Twitter. I have ideas and goals but some things are beyond my reach. We each have our own strengths and are moving forward strong! We all have divided jobs to make it happen. The reason why I got into this...I love cryptocurrency...all aspects but mainly the fact that it's global and it's accessible, it allows people to share in the wealth across the globe. It creates a new era of tech helping us move forward. The reason why we decided to go ahead and create a token...I like Uniswap but loathe the scams. We wanted to create a safe token that people can invest in, a token that given realistic genuine marketing, takes off and creates wealth for those who support it. I want those who don't have much, to be able to invest with the little they can afford and turn into an amount that could change their life. I live in a country that's safe, but there are those who don't have that privilege, I wish that safe projects like these can help them. We are pro renewable energy, thus proof of stake. We hope that this project and more, can be a starting block for changing this world. In relation to renouncement of ownership...all details of socials, links etc will be locked in. Once renounced, Saitama will become owner free, to do this we'll need to have stage one compete. All socials, upgraded website with SSL Cert etc...it is a work in progress, Saitama is only days old at this moment, some approvals take quite some time, speedbumps in deaigns, hosting etc. We were quite ambitious when we launched, however bit by bit, all will be done. The plan is to create everything to the point where Saitama can be let free and just roam on its own without anyone holding onto the leash. Hope that answers some questions, no doubt will create more, personal questions can be answered at the point, some because of conflict of interest. When we added liquidity and finally launched, everyone on the team bought with the rest of community watching new pairs. There are couple of people in here who actually hold more tokens than us. Good luck and good day/night to everyone, appologies for the delay in answering some questions.

Visfire

>You think SSL is same kind of security for decentralized montery network all over the world SSL is not related to money transfer at all. Yes it is used when you place an online order or transfer money, but SSL is essentially the backbone of internet security. Every website you go to that starts with https:// means your computer has established an SSL connection with them. SSL makes use of SHA 256 hashes, but it uses a couple. It also makes use of RSA which is similar. But all of these hashes that are created are used to transfer data securely. Meanwhile BTC creates hundreds of millions of hashes and then throws them away essentially. They are wasting large amounts of electricity. >your messages so how difficult even these basic principles with new assets classes are for people. I literally have made a couple cryptos for fun just to learn how they work and do CS work for money.

Western_Boris

Nope. Still you don't get it. You think SSL is same kind of security for decentralized montery network all over the world, without any banks or centralized organizations... PoS too is not so safe as PoW is. Im sure the crypto world will keep developing but your messages so how difficult even these basic principles with new assets classes are for people.

Visfire

> are stating that hashes are absolutely useless but in real world they are the security system of a worlds biggest monetary system Yes SHA256 hashes are used for security, but that's a couple of hashes. Look into SSL if you are interested in learning more about internet security. The way new blocks are created in BTC does not take 1 hash. You put all the transactions, the timestamp the block was created, the previous block hash and some more data, and then you add a nonce. The nonce is a random number essentially, and you hash the block over and over and change the nonce every time. Your goal is to get a hash for the block that starts with a certain amount of zeros with BTC. Most coins use some variation of this. SHA 256 is not useless when used in security applications such as banks and SSL on websites. But with BTC, millions upon millions of useless hashes are done every second. >And you don't seem to understand how cryptos are helping humanity Did you even read the bottom part of my comment? Yes Crypto is good, but it also has bad with it. >all that energy is wasted when you don't understand what it is used for It's literally wasted doing millions of hashes until you find the right nonce which gives you the hash you want >The answer here is not that cryptos need to change Yes it is, crypto is an amazing idea, but most of the current implementations with proof of work need to change. They are way too energy inefficient. ETH 2.0 is going to switch from proof of work to proof of stake, and there are already many cryptos out there that use proof of stake. Hopefully we find some new method in the future which doesn't involve the downsides of proof of stake or work.

mark727

They just launched the website and said the cert is coming in a few hours, let's see if they keep their word I suppose. But without an SSL certificate information cannot be stole if no information is collected as all the cert brings is encryption

igadjeed

"correct horse battery staple" obviously became insecure when the comic was published When single address keys were common, some people thought brain wallets were a good method of combining secure with easy to remember. They are not secure https://www.forknerds.com/brainflayer-crack-bitcoin-and-ethereum-private-keys/ There's no equivalent for BIP39 seed phrases. Everybody lets the wallet software build the keys from a random bitstring, apart from a few people who think it would be cool to make their own seed words https://seedpicker.net/calculator/last-word.html For the serious risk-taker there's abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about and the others in this list https://github.com/trezor/python-mnemonic/blob/master/vectors.json FWIW, 4 words of BIP39 is 44 bits, and 4 words of Diceware is about 51 bits, both weaker than the pre-2000 export-permitted 56-bit versions of SSL. Expanding the xkcd example to 6 Diceware words plus one letter would bring it to 82 bits Also: https://keys.lol/

csharp

I have used all the apps mentioned here and I’m currently on voyager. The issues they had this weekend we are a complete shit show and their SSL certificate had expired. That issue aside it seems to only go down or be untradable during high volumes and often times other exchanges are also down. It’s getting better and the interface is pretty simple. Also they will have a desktop app soon so keep that in mind. I think all the others mentioned here are also fine. For me it was about funding the account and the simplicity of getting money in and out. I’m hoping that once they actually launch their loyalty program Voyager will become better. There are also plans for a debit card in the works which works off your coin wallets and earns you rewards. Of course having your coins in a hardware Wallet or paper wallet are safer, but it’s really hard to avoid using exchanges just given how easy they are and more and more momentum in the crypto space is moving to those.

IvanMalison

First of all, SSL has been suceeded by TLS for a pretty long time now. Second of all, by the way you're talking about it I don't think you know what SSL is... If you are talking about the fact that there is no cert for [dfopen.chat](https://dfopen.chat), that is because the domain just redirects to a different one, and there is no cert for [dfopen.chat](https://dfopen.chat). If you use the second link there shouldn't be a problem.

musashiro

so not having basic SSL on your chat client is cool?

PRONTO-she-said

>Hereby an answer to each of your points. Let me know if you have further questions or if I could convince you to get onboard :) > >Uhh yeah so can SSL/TLS which is in use almost everywhere on the internet to protect data integrity. This is already solved since more than a decade back &#x200B; With IOTA Data integrity also refers to the data cannot be tampered with as it has been embedded in the tangle (DAG structure). IOTA has partnered with Dell and Intel to further develop this. See project Alvarium: [https://blog.iota.org/together-iota-and-dell-technologies-demonstrate-project-alvarium/](https://blog.iota.org/together-iota-and-dell-technologies-demonstrate-project-alvarium/) &#x200B; >Just like any other blockchain that uses asymetric cryptography, which is all normal blockchains so your usual suspects - bitcoin, ethereum, hell even doge ! The big advantage of IOTA over the other blockchains you mention is that with IOTA you can do this without paying any fees! &#x200B; >Data markets, such a bad use case literally no point in using a blockchain other than to handle payment for dataset - which can be done by any payment system. Nothing is gained with blockchain here. The benefit is that both: the data and the payment go over the same protocol/network, much simpler this way. Moreover, IOTA also allows to get data with a trust rating (see project Alvarium above) &#x200B; >Digital twins are virtual models of physical things - please actually explain how IOTA is useful here rather than just writing this corpo buzz word. IOTA is useful in the digital twins field for digital tween interoperability and trust between different companies. See it all explained here: [https://www.linkedin.com/pulse/zero-defects-iota-digital-twins-sven-o-rimmelspacher/](https://www.linkedin.com/pulse/zero-defects-iota-digital-twins-sven-o-rimmelspacher/) &#x200B; >Because Bitcoin processes transactions sequentially no one can spend their bitcoin twice. It is detected when the miner picks up the transaction and orders it in the block. If its parallel like you claim IOTA does then what about double spends? IOTA 2.0 will have FPC or "fast probabilistic consensus" to decide which transaction to approve in case of a double spend attempt. You can find it explained in this video: https://www.youtube.com/watch?v=eTdqM1CvKmY

stephanahpets

SSL/TLS: How are you planning to broadcast data over SSL/TLS? Which low-resource IoT device would be able to handle even a single connection, let alone multiple in parallel? Data markets: in no part of OPs post they claim that data is actually stored in the blockchain/DAG. Data is transported over the DAG. Of course it does not make sense to store big amounts of data in these transactions with low payloads. Identity: transactions need data payloads to store anything interesting. And since you want your own data, you will want to stream only part of your data to a 3rd party instead of giving your public keys away. That's nothing better than sending copies of your ID around. Since transactions are feeless, it's a simple and feeless use case to share only necessary parts of your ID. Digital twin practical implementation information: https://www.linkedin.com/pulse/zero-defects-iota-digital-twins-sven-o-rimmelspacher Double spending; https://blog.iota.org/explaining-mana-in-iota-part-2/amp/

Irrationalender

Yes check my comment in this thread where I directly talk about the solution everyone uses everyday for data transport integrity. Hint: look at that padlock on your webbrowser - its called SSL/TLS https://www.reddit.com/r/CryptoCurrency/comments/nfghhc/iota_explained_from_the_perspective_of_someone/gymen47?utm_medium=android_app&utm_source=share&context=3

Irrationalender

>IOTA use cases >In general, IOTA is located in the Internet of Everything. >Everything that is digital can be supported by IOTA whether it’s value or data-based. This doesnt mean anything. Conveys no information. >Web of trust >Whenever data is traded or sent in a trustworthy manner, IOTA can assure data integrity with various frameworks. Uhh yeah so can SSL/TLS which is in use almost everywhere on the internet to protect data integrity. This is already solved since more than a decade back. >This comes into play in the following applications: >-Self-sovereign identity in the mobility sector or for human ID verification (like a vaccine-passport). Just like any other blockchain that uses asymetric cryptography, which is all normal blockchains so your usual suspects - bitcoin, ethereum, hell even doge ! >-Data markets for science, the industry, or mobility use-cases. A self-driving Tesla had to rely on trusted data, a smart infrastructure could offer that. Data markets, such a bad use case literally no point in using a blockchain other than to handle payment for dataset - which can be done by any payment system. Nothing is gained with blockchain here. >-Digital twins are copies of industrial environments that can create data digitally to test and improve parameters. The data generated is valuable. Digital twins are virtual models of physical things - please actually explain how IOTA is useful here rather than just writing this corpo buzz word.

micklee87

Not sure if the other guy is trolling. In some way he is right about the risks of opening a random site but you can also take extra precautions like using a secure web browser like Brave. Also, always verify that a padlock (or lock) icon is displayed in the web browser which indicates a secure communication channel between the browser and the server on which the website is hosted. 'It signifies that the connection to the website is encrypted using HTTPS and has an SSL/TLS certificate.'

b__q

No SSL? Past.

magus-21

Cryptography is a hell of a lot bigger than just blockchains. But there is such a thing as quantum cryptography, and in some ways it's more secure. 25 years is a long time for both quantum computing and quantum cryptography to develop. Just think about where the Internet was 25 years ago; SSL had only just been invented.

grotness

What would be one unique think you would buy if you have some fuck you money out of this? I'd buy an SSL 6000 series

I_am_fed_up_of_SAP

Hahahah we live and learn. My plan is to eventually learn what SSL is

DrSilveira

They actually categorized it as a minor flaw and I'm not sure why. The addLiquidity function was the one with a major flaw. It's SSL-13 if anyone wants to [check.](https://www.certik.org/projects/safemoon)

Fungunkle

Get SSL

AlphaRedPup

Bullrun (decryption program) ADD ARTICLE DESCRIPTION Bullrun (stylized BULLRUN) is a clandestine, highly classified program to crack encryption of online communications and data, which is run by the United States National Security Agency (NSA). The British Government Communications Headquarters (GCHQ) has a similar program codenamed Edgehill. According to the BULLRUN classification guide published by The Guardian, the program uses multiple methods including computer network exploitation, interdiction, industry relationships, collaboration with other intelligence community entities, and advanced mathematical techniques. Bullrun classification guide published by theguardian.com Information about the program's existence was leaked in 2013 by Edward Snowden. Although Snowden's documents do not contain technical information on exact cryptanalytic capabilities because Snowden did not have clearance access to such information, they do contain a 2010 GCHQ presentation which claims that "vast amounts of encrypted Internet data which have up till now been discarded are now exploitable". A number of technical details regarding the program found in Snowden's documents were additionally censored by the press at the behest of US intelligence officials. Out of all the programs that have been leaked by Snowden, the Bullrun Decryption Program is by far the most expensive. Snowden claims that since 2011, expenses devoted to Bullrun amount to $800 million. The leaked documents reveal that Bullrun seeks to "defeat the encryption used in specific network communication technologies". Naming and access According to the NSA's BULLRUN Classification Guide, BULLRUN is not a Sensitive Compartmented Information (SCI) control system or compartment, but the codeword has to be shown in the classification line, after all other classification and dissemination markings. Furthermore, any details about specific cryptographic successes were recommend to be additionally restricted (besides being marked Top Secret//SI) with Exceptionally Controlled Information labels; a non-exclusive list of possible BULLRUN ECI labels was given as: APERIODIC, AMBULANT, AUNTIE, PAINTEDEAGLE, PAWLEYS, PITCHFORD, PENDLETON, PICARESQUE, and PIEDMONT without any details as to what these labels mean. Access to the program is limited to a group of top personnel at the Five Eyes (FVEY), the NSA and the signals intelligence agencies of the United Kingdom (GCHQ), Canada (CSE), Australia (ASD), and New Zealand (GCSB). Signals that cannot be decrypted with current technology may be retained indefinitely while the agencies continue to attempt to decrypt them. Methods Slide published by The Guardian diagramming the high-level architecture of NSA's "Exploitation [Cracking] of Common Internet Encryption Technologies" Through the NSA-designed Clipper chip, which used the Skipjack cipher with an intentional backdoor, and using various specifically designed laws such as CALEA, CESA and restrictions on export of encryption software as evidenced by Bernstein v. United States, the U.S. government had publicly attempted in the 1990s to ensure its access to communications and ability to decrypt. In particular, technical measures such as key escrow, a euphemism for a backdoor, have met with criticism and little success. The NSA encourages the manufacturers of security technology to disclose backdoors to their products or encryption keys so that they may access the encrypted data. However, fearing widespread adoption of encryption, the NSA set out to stealthily influence and weaken encryption standards and obtain master keys—either by agreement, by force of law, or by computer network exploitation (hacking). According to a Bullrun briefing document, the agency had successfully infiltrated both the Secure Sockets Layer as well as some virtual private networks (VPNs). The New York Times reported that: "But by 2006, an N.S.A. document notes, the agency had broken into communications for three foreign airlines, one travel reservation system, one foreign government's nuclear department and another's Internet service by cracking the virtual private networks that protected them. By 2010, the Edgehill program, the British counterencryption effort, was unscrambling VPN traffic for 30 targets and had set a goal of an additional 300." As part of Bullrun, NSA has also been actively working to "Insert vulnerabilities into commercial encryption systems, IT systems, networks, and endpoint communications devices used by targets". The New York Times has reported that the random number generator Dual_EC_DRBG contains a back door, which would allow the NSA to break encryption keys generated by the random number generator. Even though this random number generator was known to be insecure and slow soon after the standard was published, and a potential NSA kleptographic backdoor was found in 2007 while alternative random number generators without these flaws were certified and widely available, RSA Security continued using Dual_EC_DRBG in the company's BSAFE toolkit and Data Protection Manager until September 2013. While RSA Security has denied knowingly inserting a backdoor into BSAFE, it has not yet given an explanation for the continued usage of Dual_EC_DRBG after its flaws became apparent in 2006 and 2007. It was reported on December 20, 2013 that RSA had accepted a payment of $10 million from the NSA to set the random number generator as the default. Leaked NSA documents state that their effort was “a challenge in finesse” and that “Eventually, N.S.A. became the sole editor” of the standard. By 2010, the leaked documents state that the NSA had developed "groundbreaking capabilities" against encrypted Internet traffic. A GCHQ document warned however "These capabilities are among the SIGINT community's most fragile, and the inadvertent disclosure of the simple 'fact of' could alert the adversary and result in immediate loss of the capability." Another internal document stated that "there will be NO 'need to know.'" Several experts, including Bruce Schneier and Christopher Soghoian, had speculated that a successful attack against RC4, an encryption algorithm used in at least 50 percent of all SSL/TLS traffic at the time, was a plausible avenue, given several publicly known weaknesses of RC4. Others have speculated that NSA has gained ability to crack 1024-bit RSA/DH keys. RC4 has since been prohibited for all versions of TLS by RFC 7465 in 2015, due to the RC4 attacks weakening or breaking RC4 used in SSL/TLS. Fallout In the wake of BULLRUN revelations, some open source projects, including FreeBSD and OpenSSL, have seen an increase in their reluctance to (fully) trust hardware-based cryptographic primitives. Many other software projects, companies and organizations responded with an increase in the evaluation of their security and encryption processes. For example, Google doubled the size of their TLS certificates from 1024 bits to 2048 bits. Revelations of the NSA backdoors and purposeful complication of standards has led to a backlash in their participation in standards bodies. Prior to the revelations the NSA's presence on these committees was seen as a benefit given their expertise with encryption. There has been speculation that the NSA was aware of the Heartbleed bug, which caused major websites to be vulnerable to password theft, but did not reveal this information in order to exploit it themselves. Etymology The name "BULLRUN" was taken from the First Battle of Bull Run, the first major battle of the American Civil War. Its predecessor "Manassas", is both an alternate name for the battle and where the battle took place. "EDGEHILL" is from the Battle of Edgehill, the first battle of the English Civil War. See also United States portal Politics portal HTTPS IPsec Mass surveillance Mass surveillance in the United Kingdom Mass surveillance in the United States MUSCULAR PRISM Tailored Access Operations Transport Layer Security Voice over IP References External links ABOUT THIS ARTICLE View edit history Updated 116 days ago View talk page Discuss improvements to this article READ MORE RSA Security American computer security company Nothing-up-my-sleeve number Numbers used by cryptographers to show that they are working in good faith Random number generator attack The security of cryptographic systems depends on some secret data that is known to authorized persons but unknown and unpredictable to others. To achieve this unpredictability, some randomization is typically employed. Modern cryptographic protocols often require frequent generation of random quantities. Cryptographic attacks that subvert or exploit weaknesses in this process are known as random number generator attacks. Content is available under CC BY-SA 3.0 unless otherwise noted.

the_chilezuelan

Netscape went up in the stocks in the dotcom era because they invented SSL which was revolutionary, Ethetereum also has invented revolutionary things but thst doesn't mean it will be a mainstream platform

MSRyujin

There is a SSL on the website, it shouldn't say that. Which browser are you using tho?

the_chilezuelan

Netscape brought SSL and everyone thought it was gonna take the world. In 15 years anything can happen. Eth is still only speculation and kryptokitties

nutcase2019

Well, I would say start with an assessment of the resources you have at hand. Do you have a PC at home? What is the OS? I had a VPS that I rented awhile back that I had planned on using for another project that I never got around to. I was paying $6 a month for it and I thought about cancelling it but it I got it on special so it had plenty of HD space and I didn't want to give it up. I got stuck in quarantine back in January so it was a great project to kill some time. You don't have to have a VPS in a datacenter, you could just install a VPS on your PC at home and slap a linux distro on it and go to town with it. Virtualization software is available open source for all the nix flavors so that's a freebie. If you choose to use Bill's or Tim's OS then you might have to pay for it, I don't so I don't know. I keep using the VPS I have because it affords me 100% uptime and also the IP isn't tied to my actual location so I haven't setup Tor routing yet but I plan to. 1. Pick a linux distro Debian/Centos/gentoo/whatever (Free) 2. Install bitcoin-core and sync it, create a wallet but you don't have to use the wallet (Free) 3. Install Lnd or C-lightning or eclair for your node software (Free) 4. Install a GUI management interface like RideTheLightning. This is optional as you could just use the command line. The GUI is nice though. (Optional but Free) 5. I use LndHub with Bluewallet for my mobile wallet. (Optional but Free) 6. For SSL certs use [Letsencrypt.org](https://Letsencrypt.org) this would be for remotely logging into your node via RTL. If you do this definitely enable 2FA (Free) 7. Open some channels. No way around this one, you got to pay some miner fees but you can wait until fees are low. 4 sat/vb was clearing yesterday so...what's your patience level? (miner fees) 8. You'll need inbound liquidity so your node can receive funds. There are several ways to do this. 1. You can find a nice chap who will open a channel to you. (Free) 2. You join a liquidity swap on the weekend and (miner fees) 3. You can send a nice big chunk via lightning to an exchange and then withdraw back to yourself on-chain. (withdrawal fees) 4. You can buy inbound channels like Thor/Pool (Gotta pay $) 5. You can use Loop (miner fees) So there are some expenses to get it going, so maybe I was 100% accurate saying no initial investment. But you don't have to have dedicated hardware. There's always going to be an expense somewhere, shit like chain fees are unavoidable at some point, but if you're smart about it you don't have to spend a bunch of money. I don't see miner fees as an initial investment, it's more of an operational cost. I'm happy to help with any questions but this is the bitcoin sub. Perhaps plan it out and ask questions on r/TheLightningNetwork or r/lightningnetwork Those are both super subs with great people who WANT to help out. r/TheLightningNetwork tends to be a bit more relaxed and is also a great place to join in liquidity swaps when the time comes that you're ready.

HokkaidoNights

It’s tough, and newcomers DO need help, but: - Phishing emails are rife in all industries and walks of life - so even more caution should be taken when it comes to crypto related stuff. My mother knows all about this and can barely use her tablet and phone! - The website is verified via SSL certificate (but sure, the host record could have been hacked on their computer, or worse) Ultimately; again - the hardware IS secure by design, but it’s upto the user to take precautions, many of which they should be doing as part of day-to-day life. There’s no compensation or insurance - YOU are the Head of Security of your own bank when it comes to crypto, and the sooner people realise this the better.

magus-21

> -A way to be able to make sure a Ledger website is authentic. (To avoid phishing attempts) It’s called SSL. The problem is that phishers will just use tricks like registering “www.1edgerwa11et.com” or something to phish the most gullible people. >-A message when activating the ledger device on wether a phrase has been made yet. (To avoid third party tempering) >-Add those up to date scam attempts or the most popular ones on a paper in the ledger box. >-Add seals, stickers, or other things to make sure the box hasn't been tampered with. And exactly none of those will be effective if the Ledger device has already been tampered with. The fact is, it’s hard to know whether a Man in the Middle attack has already happened without being familiar with those MITM attacks ahead of time.

Final-Classroom-1843

It’s a scam, that domain was only created 3 months ago, they don’t even have SSL. If you have sent crypto to an address there you can pretty much say goodbye to it. Don’t give them any more money please, sorry this happened to you.

Leading_Zeros

Bitcoin is psudonamous. Just like the internet your IP address is public your bitcoin addresses are public. But only if some other data ties your identity to your addresses are you unmasked. By default that happens as most buy BTC from an exchange where they take KYC information. There are tools and methods to claim back privacy online like VPNs, SSL, tor, etc. Depending on your threat model you employ tools suited to your situation. Buying on a P2P exchange, coin-mixing, good coin control, second layer solutions, etc.

CryptoCoinCounter

All you need to know is how a domain name works. 1. You read them from RIGHT to LEFT 2. First comes the Top Level Domain (TLD). This would be something like .com, .org, .us, .eu, etc. 3. Then comes the domain name. A domain name can have almost any character in it. It CANNOT have a period (.) in it. 1. COINBASE.COM 2. C0INBASE.COM 3. CO1NBASE.COM 4. COlNBASE.COM 4. To the left of the domain name is a sub domain. The parent domain is the ONLY one who can create a sub domain. So payments.coinbase.com will ALWAYS go to a coinbase controlled site. 5. CHECK THE FREAKING SSL CERTS. If you click the lock next to the domain name in the address bar of the web browser it will show you details about who made the certificate. 6. DO NOT EVER click on a hyperlink in your email. ALWAYS go directly to the site and check for messages. 7. Use a dam mail client that blocks ALL web content by DEFAULT. This stops numerous attack vectors. 8. Anytime you hover over a hyperlink it should show you where it goes. Usually in the bottom right of the screen window it will show the full address. This is one of the reasons URL shorteners are dangerous. USE GOOGLE PASSWORDS. They automatically check if your passwords have been breached. I'd assume they use the same lists as [haveibeenpwned.com](https://haveibeenpwned.com) A few other browsers do include this check as well.

cheecheese45

Hi, thanks for your work. I tried refreshing price and it shows error, \[DataSource.Error\] The request was aborted: Could not create SSL/TLS secure channel. And I go to the workbook queries This is what I got: Details: [https://api.coingecko.com/api/v3/coins/markets?vs\_currency=USD&order=market\_cap\_desc&per\_page=250&page=1&sparkline=false&price\_change\_percentage=1h%2C24h%2C7d](https://api.coingecko.com/api/v3/coins/markets?vs_currency=USD&order=market_cap_desc&per_page=250&page=1&sparkline=false&price_change_percentage=1h%2C24h%2C7d) Do I need to change the source in the queries to which api? Thanks in advance