This. It's the classic story of "I did everything right and I still got fucked." Because even though you can own your Bitcoin keys, you MUST trust the code that generates that key. And that trust was breached with this incident. Which is why it feels so tragic.
zaytun's avatar zaytun
For wise-asses moving the goalpost of securing your bitcoin today, you can royally go fuck yourself. If a person has taken the steps to: 1. Buy a bitcoin only hardware wallet, which is widely respected and mentioned by most of the big bitcoin proponents in the space where one might be getting their info from, such as podcasters etc 2. Keeping it airgapped 3. Not even sharing home address during purchase to avoid wrench attacks 4. Taking good care to stamp seed on steel 5. Maybe even doing yearly drills to check up on funds and hardware 6. And lost their funds today despite all the above measures 7. NOT following the vendors guide under the subpage /paranoia 8. Being told to only do multi-sig only if very comfortable to avoid locking yourself out of funds Then don't be coming at them today and say "you should have known you needed to roll dice too, it's your own fault" The steps this person has taken were FAR BEYOND what is imaginable for a non-techie person and accusing them of not taking enough care to secure funds is bat-shit crazy to me and is simply evidence that this experiment has failed. Bitcoin has not been secure today. Loss of funds from highly secure setups has occurred. "Best devs in the world" claim thoroughly debunked, now both on the bitcoin software implementations side AND the bitcoin hardware side. This event is devastating and as much as the loss of funds breaks my heart it is also an identity crisis on my effort and belief in this incredible project. Bitcoin has not been secure today and the threshold to actually make it secure has shown to be overwhelming and not at all ready for anyone who is not an expert in cryptography. I'm just so devastated and this has been a hard day and i'm extremely tired and sad.
View quoted note →

Replies (2)

I hardly trust if I do not know any emergency alternatives or buffer when things go haywire. ๐Ÿ˜ฌ a tough lesson for everyone โ€” perhaps a wake up all. maybe we put too much faith in the people who built the tech without verification. Stuff I do not need to check in details are things I can afford to lose.
I put too much faith in the stories and the mystique around Coinkite and NVK for being paranoid and dedicated leaders in Bitcoin security. But in doing so I turned a blind eye to all of his arrogance against his competitors and all of his contempt for people who tried to build on his work. That kind of character bleeds into your work, so I'm not altogether surprised that this coldcard exploit happened.
โ†‘