Wall Observer BTC/USD - Bitcoin price movement tracking & discussion

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[SuperBitMan]

Gift someone Bitcoin today, make it a Christmas they will never forget.


https://twitter.com/saylor/status/1871539464541216888?t=k6OxtJd4hs7nxxEPgdUI0g&s=19

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[Richy_T]

Incidentally, I hope a jury of his peers will find a way to let him get away with it.

Well, they've made self-defense (including of others) defacto illegal, let's see how legalizing murdering richies does for the financial capital of the world.

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[Ambatman]

it photo green-yellow but its yellow.

Christmas should be fun. I got a nice hickory smoked turkey. a few pies. 🥧 we will leave very early christmas morning and visit my bro-in-law . his aide will cook some side dishes and we will eat up a storm.

Luckily investing in Bitcoin isn't as complicated as understanding colours.
Making our local dish egusi as the main dish. The house should be crowded in the evening . Enjoy your Xmas.

[Paashaas]

Ho Ho Ho Mery Christmas everybody!

[JayJuanGee]

Phil is pushing the pushups hard. very hard to crack 100k today
[im width=1500]image deleted[/img]

Your OpSec sucks.

This made me chuckle.

Phil, you're amazing. Keep it up.

it is something every once in awhile i look at the biceps 💪 and say nice 👍.

I am just jealous.

Hahahahahaha

[AlcoHoDL]

Phil is pushing the pushups hard. very hard to crack 100k today

The matching glasses and shirt knocked me out...

You're much younger-looking and fitter than I expected. Looking good!

Keep doing what you do, stay fit & healthy, because you've got some corn to spend...

Merry Christmas to you + family.

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[Gachapin]

Merry Christmas beloved WO Gang!


Still have to catch up some pages

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[Gachapin]

....
At the same time, I would suggest that you are wrong in regards to your description of the vulnerability being ameliorated by having a stronger pin number, which I believe hardly does shit if someone has  physical access to the device with a non-secure element.  
....

no no JJG .... The PIN is used to encrypt the seed on your device. A strong (long) PIN cannot be cracked via brute force, so it's not possible to decrypt your seed when someone gets hold of your device.

That's why Trezor enabled PINs with 50 digit length (maybe longer), when they fixed the vulnerability of physical access a few years ago.  

Means, if your PIN is long enough (has enough entropy) nobody can get the seed out of your device.

No (un)secure element needed !

[Gachapin]

plications to potentially lock us out of our coins, too..

just to pile on, these are ones ive owned
used Trezor One since they came out   -  no probs (but hardware itself can be compromised if someone has physical access to it and the equipment)
use Trezor T since they came out    -  no probs
used Ledger - FUCK NO   nothing but risk here. stay away

afaik, that's not true anymore. It depends all on the lengths of your PIN

If a bad person (who knows something or knows someone who knows something), they can get you private keys (or your seed words) in a matter of 15 minutes (or something like that), so they can get anything on your non-passphrase wallet, and your pin doesn't do anything.  But they cannot get you passphrase wallets unless they are able to guess them or brute-force them.

yeah, but we talked about the attack vector of physical access to the device.. (with regard to secure elements)

A passphrase should always be used, secure element or not

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[d_eddie]

Incidentally, I hope a jury of his peers will find a way to let him get away with it.

Well, they've made self-defense (including of others) defacto illegal, let's see how legalizing murdering richies does for the financial capital of the world.

Those are richies that made their goldy-gold by killing poo-poories who can't fight back in court or would die while doing so. The punishment is only fair if you look at it that way.

[philipma1957]

....
At the same time, I would suggest that you are wrong in regards to your description of the vulnerability being ameliorated by having a stronger pin number, which I believe hardly does shit if someone has  physical access to the device with a non-secure element.  
....

no no JJG .... The PIN is used to encrypt the seed on your device. A strong (long) PIN cannot be cracked via brute force, so it's not possible to decrypt your seed when someone gets hold of your device.

That's why Trezor enabled PINs with 50 digit length (maybe longer), when they fixed the vulnerability of physical access a few years ago.  

Means, if your PIN is long enough (has enough entropy) nobody can get the seed out of your device.

No (un)secure element needed !

I mentioned that for the  t-one. you can write a really long pin.  

but JJG may be recalling this hack of the trezor 1

https://jochen-hoenicke.de/crypto/trezor-power-analysis/

Conclusion

Side channel attacks are not as difficult as many people think. A simple power analysis requires only a simple oscilloscope and that can hardly be called expensive laboratory equipment. You also need basic soldering skills and deep knowledge about the code that is running. It took only a single recording of the computation of the public key, to recover the private key. On the bright side, this simple side channel attack can be mitigated by using constant-time code and as I showed this code does not have to be slow.

The new firmware 1.3.3 is immune against this attack since it (1) requires a PIN to compute the public key and (2) uses branch-free computations for deriving the public key from the private key.

There is no complete protection against all kind of attacks. If your TREZOR gets stolen and it has no passphrase protection (or if the passphrase is weak), you should transfer the coins to a different wallet. There are other attack vectors like fault injection that could still be used and may get around the PIN protection. Basically, they use the fact that the microprocessor does unexpected things if power supply or the clock signal is broken. These are much more difficult to perform, but they are probably less expensive than using an electron microscope to read the seed from the chip. Also, there may be a bug in the microprocessor that allows for circumventing the read-out protection.

but this should not happen any more since the firmware should be updated and you should have a longer pin

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com

[Gachapin]

I'm sorry if I'm repeating myself again, but a short update on my Lightning adventure.

I broke a new record last month, 680k sats in profits

So you got 0.00680000 btc correct?

that is around $670 usd correct?


other than gear and software how much of your btc is tied up to do this?

0.068 btc tied up means you get 10% payment a month 120% a year.  this is too good to be true


0.680 btc tied up means you get 1% payment a month  12% a year. this is still good as it beats inflation

or are you more like 1.36 btc tied up to do it which is 0.5% a month and 6% a year.

even if it is that it still grows the btc nicely.

Ok, so let break this down.

Yes, I received 680k sats in profit last month running a Lightning Node.

Yes, that's correct. That's around $670, give or take.

I have around 7 btc tied up on this Lightning Node.

I made a record profit last month, but looking back 12 months, I've made about 0.03 btc (3M sats) in profits this past year.

So, 0.03 btc out of 7 btc is about 0.4% APY.

It's not much, but it's honest work, and most importantly, it's all self-custody.

the self custody is a huge point! Nice play!

[ChartBuddy]

Explanation
Chartbuddy thanks talkimg.com