7 ms·

If you don't own your OS, you don't own your BTC

ryanlol 7y ago
This guy is a downright idiot if he thinks that he has any more control over his keys on desktop Linux without actually auditing all the source code himself. The idea that ElementaryOS is less likely to steal your coins than Windows or OS X is simply laughable.
- api 7y ago
  ElementaryOS's repos were hacked a while back. The trojaned images didn't stay up long, but it illustrates your point. (Not singling out ElementaryOS... any software with a repo or updater could be trojanized, including software from big companies.)
  - merpnderp 7y ago
    I wonder what percentile of users have suffered financial harm on Windows versus Linux do to system insecurities. I have zero data on this, but history would imply Windows is far less safe.
    - api 7y ago
      In practice I would say Apple =~ Linux < Windows, though the latter can certainly be locked down if you know what you're doing. However I think Linux's security is partly an artifact of a more techie user base. For a non-technical or too busy to be technical user I would say Apple offers the best security out of the box.
      - fortran77 7y ago
        A file that sitting on Windows that's been encrypted with a piece of well-audited encryption software is pretty safe. And if you want to be really certain, don't keep the machine connected to the internet except for software updates, and never while you're accessing your encrypted BTC archive.
    - falcolas 7y ago
      Windows is targeted more (not exclusively, however), due to its popularity. If everyone moved over to Linux for the "security benefits", Linux would be targeted just as heavily. Both Linux and Mac users have been hit with ransomware.
      - jcranmer 7y ago
        The other factor is that the vast majority of Windows security administrators (i.e., random users) are incompetent. In terms of the security of the operating system itself, Windows may well be more secure than Linux. Many Windows applications, however, are going to be much less secure than the OS--although it's not like Linux applications are stellar in this regard as well (e.g., Docker).
        falcolas 7y ago
        Are they incompetent, or is the bar set so high that only trained professionals can be considered competent? I believe the latter is true; I've seen some incredibly intelligent individuals fall victim to shady crap. We (as in the entire software development community) need to lower that bar.
        ryanlol 7y ago
        Vast majority of Linux admins are incompetent. >Windows may well be more secure than Linux This is very obviously the case if you look into the deployed exploit mitigation technologies.
- vectorEQ 7y ago
  this says it all :D LOL
- hvidgaard 7y ago
  Not to mention, you have to evaluate this in context. What would MS stand to lose if they actually did this? Far far more than whatever Bitcoin they'd be able to steal that much is certain. But in any case, if you care about security, you have a hardware wallet and store the seed somewhere secure.
  - cmcd 7y ago
    It wouldn't have to be Microsoft exploiting this though, a few rogue employees that can modify their telemetry system could do this on their own. There is no external oversight for Windows but on Linux there are thousands of people looking at changes even if you aren't looking yourself.
    - AnIdiotOnTheNet 7y ago
      Linux Desktop isn't just the kernel, there's a lot of stack to exploit between that and the user, and history has shown that "many eyes" doesn't stop security problems from getting through. Hell, sometimes package maintainers introduce problems themselves independent of the developers. That isn't even counting the hardware stack underneath your kernel. What parts of your machine were manufactured in China? Is Intel IME trustworthy? What about all those firmware blobs?
    - paulgb 7y ago
      There is no external oversight to ensure that the compiled binaries in the Elementary OS iso match the published Linux kernel code, either.
    - ryanlol 7y ago
      > there are thousands of people looking at changes even if you aren't looking yourself. I’m sorry, but it’s really obvious that you don’t really know what you’re talking about. Very few commits are looked at by more than a handful of people. If you’ve ever had any involvement in FOSS development you must know this.
- cmcd 7y ago
  We already know Windows has some pretty excessive telemetry, it is not unreasonable to assume this or other elements of the OS can be exploited to gain control of a wallet. At least with Linux we have thousands of open source developers keeping an eye on things, chances are much higher that an issue would be caught with Linux since Windows is closed source.
  - falcolas 7y ago
    > At least with Linux we have thousands of open source developers keeping an eye on things A bit of pithy sarcasm for your morning: Those thousands of eyes worked so well with OpenSSL, didn’t it? Those eyes are less vigilant than you might think, especially when the eyes aren’t being paid to monitor a particular chunk of code.
    - sudosysgen 7y ago
      Yes, they worked pretty well for OpenSSL. The issue was found eventually. In a proprietary system, it may have been there forever.
      - jcranmer 7y ago
        You're discounting the risk that, because it's open source, everyone assumes that someone else has done the security analysis. That is precisely what happened with OpenSSL--everyone assumed, since it's a big open source package, that somebody was keeping on top of this sort of issue, but nobody was. That there have been two major OpenSSL security fumbles (first was the Debian OpenSSL fiasco, second Heartbleed) sort of suggests that the value of "many eyes" for ensuring security is vastly overrated.
        pbhjpbhj 7y ago
        How's that different to MS Windows, we assume the code is good, but some of the errors/oversights that crop up beggar belief.
- Piskvorrr 7y ago
  Less likely...perhaps, but for all the wrong reasons ;) That is, Windows is a target that's an order of magnitude bigger - of course there will be more attacks. The kernel is auditable...maybe, possibly, theoretically, to a point - but what good is a kernel, when there's unauditable firmware between the OS and the hardware?
koalalorenzo 7y ago
The real question is: why he is not using an Hardware Wallet? A ledger wallet is cheap enough if you get worried about your BTC being in an unsafe device. Yes, then you have to trust the company selling it for you, but isn't that the whole business to not compromise their own devices?
- iRobbery 7y ago
  Even if he would have somebody would mention, 'yeah but if you did not make the hardware yourself, you dont own your BTC' I guess at least :)
  - tsukurimashou 7y ago
    his point is not "if you didn't make it you don't own it" his point is about proprietary software and how closed / how your control over them is very limited
- deweller 7y ago
  Hardware wallets are a good compromise here. Sure, you need to trust the hardware vendor. But the attack surface for a hardware wallet is way smaller than with a big OS. There are much bigger attack vectors than the operating system vendor. Even using with a FOSS OS, you are susceptible to viruses or other attacks not initiated by the OS vendor. Use a hardware wallet or cold storage. Use a multi-sig wallet for corporate-sized quantities. Holding your own BTC is not simple but there are good solutions. Be safe out there.
izzydata 7y ago
Even if you believed something was inevitable it doesn't mean it has already happened. You still own your BTC until they are actually stolen from you.
dubcanada 7y ago
The better question is why does he not build his own OS. He could build his own OS and make his own computer parts with his own tools and machinery and nobody would ever be able to access his BTC ever again. He would probably need to invent his own internet though.
- Piskvorrr 7y ago
  That's the beauty of the open protocols: you can make anything talk HTTPS over TCP/IP. This, of course, is quite an academic worry in comparison to the gargantuan quest "bootstrap yourself from raw materials to a computer...and don't make any mistakes along the way."
the_snooze 7y ago
Mass adoption any day now.
- fortran77 7y ago
  2020 is the year of Linux on the desktop!
ryuukk_ 7y ago
you know BTC price rise when: - USA announce new sanctions - People spam the internet about random BTC stuff
hluska 7y ago
I am torn on this article. If I read it through my developer lens, I’m not impressed - this cranks up the paranoia to a near useless level and the panacea offered is really a false hope. But, when I look at it through a more compassionate lens, I worry about this individual’s health. Hey writer, if you’re reading this and you need someone to talk to, my email is on my profile. Have a happy 2020.
- normalnorm 7y ago
  To me, your offer of "help" reads like a thinly disguised attack / insult. I guess we all know about the "humblebrag", this is "backhanded empathy". Or something. The author is not saying anything that is not true. Given everything that happened and was disclosed in the past decade, I don't think one has to be paranoid to be deeply suspicious of black box software controlled by big tech.
  - turc1656 7y ago
    Being suspicious of activity monitoring is one thing. Being suspicious that one of the largest companies in the world is actually keylogging your passwords so that they can steal bitcoins is another. Or that a few rogue employees at said company would be able to commit code that makes it all the way to end user machines to achieve that, bypassing all code reviews, testing, etc. is sort of insane.
  - Nitramevfank 7y ago
    I never touched Bitcoin so maybe you can clarify how this makes sense: > If Microsoft decides to terminate your license, what happens to your Bitcoin? Your Bitcoin is represented by some kind of data stored on your computer I assume. So this data should be backed up, right? So the anwser is that you would access the bit coins from some device which you have a license to use? If my understanding is right then I would consider the quoted statement to be a bit FUD:y.
    - grifball 7y ago
      if you're using security methods like bitlocker (an MS product that encrypts your disk), it's possible that, after losing your license to use that program, your data would become unrecoverable without some serious reverse engineering efforts. I'm probably just adding to the paranoia though. In reality, this whole thing is a very unrealistic attack. What hluska has stated is mostly true, but I'd like to add that an employee that could write code into an OS that would steal bitcoin and stay undetected would have to have a lot of skill. More than that random engineer that they just hired, think a guy with a PhD. Those types of people generally don't risk their jobs to steal because they're usually committed to their work and make a lot of money.
raimille1 7y ago
1) "... am sure you entered the password into some input field, which means that you have handed your password over to your Operating System" ... 2) "The easiest way to get started is to install Linux in a Virtual Machine and get yourself familiar with the system." Therefore, enter your password into an input field, in a virtual machine inside your proprietary Operating System key logging you?
- grifball 7y ago
  Keyword: "get started". Most ppl don't want to dual boot, so installing a VM is a stepping stone to getting fully comfortable with the OS so you can then use it on bare metal.
awt 7y ago
If your bitcoin is being stored on a machine connected to the internet, it’s not your bitcoin.
- JohnJamesRambo 7y ago
  Bitcoin is “stored” on the blockchain’s ledger, we just own the private keys to unlock some of it.
mirimir 7y ago
This is also an issue for Android and iOS. And some of the newer cryptocurrencies are more or less restricted to those platforms. And with smartphones, adversaries can access the OS using StingRay etc. Edit: I should have said "devices like StingRays". Perhaps StingRays can only track, and maybe see traffic. But the baseband is poorly secured, and has privileged access.
- johnnycab 7y ago
  >And with smartphones, adversaries can access the OS using StingRay etc. I was not aware of StingRay possessing any advanced capabilities, other than being used as a IMSI catcher and providing LE with 'tower dumps'? https://en.wikipedia.org/wiki/Stingray_phone_tracker https://en.wikipedia.org/wiki/Stingray_phone_tracker https://eu.usatoday.com/story/news/nation/2013/12/08/cellphone-data-spying-nsa-police/3902809/ https://eu.usatoday.com/story/news/nation/2013/12/08/cellpho...
  - mirimir 7y ago
    I'm not sure about the StingRay brand per se, but it's likely that malicious fake cell towers can pwn the baseband radio. And we know that the baseband radio is privileged over userland. Also, baseband firmware is totally black box, so we have no clue what its capabilities are. So the safest bet is isolating it in a subsystem, or better in a separate device, which can be firewalled. https://www.osnews.com/story/27416/the-second-operating-system-hiding-in-every-mobile-phone/ https://www.osnews.com/story/27416/the-second-operating-syst...
abdullahkhalids 7y ago
A number of comments in this thread strawmanning the OP's argument. The main point is simply that if you don't have complete legal control, in perpetuity, of the system that you are storing your cryptocurrency on, then if your license is cancelled by legal means, you may lose your data [1]. OP is not talking about whether FOSS or proprietary software has more bugs or has more chances of having backdoors. OP is not talking about source code audits etc. He is only making a point about the legal ramifications of OSCorp EULA vs FOSS licenses. [1] There is a secondary point that employees within OSCorp cannot be trusted to not access your data.
- thayne 7y ago
  > if your license is cancelled by legal means, you may lose your data Maybe I'm missing some legal nuance. But if the license is revoked, wouldn't you still be able to recover your Bitcoin using a FOSS OS? Especially if it is stored on a separate disk or partition from the OS.
- pjc50 7y ago
  > if your license is cancelled by legal means This basically never happens to private individuals - the license enforcement focuses on getting you to pay for it instead. The data in any case remains yours and you can theoretically lift it off the drive (or your backups!) with FOSS. In the very unlikely event of getting raided for copyright infringement, they'll take all your hardware and sort it out later. (Of course the whole thing is a tremendous anti-advert for bitcoin if it can't be safely used on normal computer systems...)
  - abdullahkhalids 7y ago
    I did not say that the linked article is making a sound argument. I agree with you that even with a non-FOSS OS, you can set things up that cancellation of the license does not make you lose your keys. I was merely annoyed by the strawmanning.
whoo 7y ago
Additionally, if you don't run a full node, you don't know if you own btc. For those interested in BTC security, the best you can do IMO is glacier protocol (which I'm surprised isn't mentioned in this article) https://glacierprotocol.org/ https://glacierprotocol.org/ ColdCard wallets are also an excellent choice, even better when used as a part of a multisig setup with your desktop, more cold cards, or another hardware wallet. Multisig across multiple hw wallets / computers (2/3 at least) is the best solution to self custody IMO. Single sig is SPOFfy.
grifball 7y ago
I love FOSS, but there's a lot of problems with the arguments in this article. >"it is highly recommended to run on Free and OpenSource Software...This way, you know exactly what is running on your system" I get this feeling as well: that when I use FOSS I know exactly what my computer is doing. But I don't. Linux is about 14 million lines of code, and that doesn't include your distro. You might be able to cut this down by compiling it yourself, but you'll still have to be an expert to understand everything that is happening on your computer. It's the same thing with Windows, millions of lines of source code written by thousands of people. I think that until you hear that someone lost their wallet key and MS was to blame, you're probably safe. Key theft (through keylogging) may be harder to detect on a closed-source OS, but there are still a lot of people (outside of MS) working on MS security and playing around with the OS to learn things about it. That all being said, Linux is easier to become an expert on due to all of the public resources/documentation. Microsoft tends to clam up when it comes to documentation about their OS.
- orestarod 7y ago
  Even if you, specifically, cannot check the entirety of the Linux code, at once, right now, the Linux kernel code is open for checking and auditing. Anyone can check what code is written in it, and numerous experts have done so independently. Moreover, every single change in the Linux kernel is incrementally recorded and documented, so every change was audited and evaluated all on its own, when its commit was introduced. Like a blockchain, you can at some degree trust that the code written before you started checking things has been adequately audited by experts, and you can continue the trend from this point onward. None of this can happen or has happened with Windows. You gotta trust a company firmly shut to the outside world.
drivingmenuts 7y ago
If you don’t trust MacOS or Windows, why would you trust Linux? With the first two, sure, they could “do something bad” to compromise you, but why would they? With Linux, yes, you have access to the source, but can you absolutely guarantee that someone hasn’t “done something bad” to compromise your system? It’s not a matter of idealism, it’s a matter of reality. How long would it take a person of the Posters level of paranoia to guarantee they weren’t somehow compromised? And how long would it take to recheck on update? There’s a point where the fear of bad actors becomes counterproductive.
- perl4ever 7y ago
  Linux has been improved over the years with patches originally developed by the NSA, and what paranoiac wouldn't welcome that? https://en.wikipedia.org/wiki/Security-Enhanced_Linux https://en.wikipedia.org/wiki/Security-Enhanced_Linux
Vanit 7y ago
I get the point the article is making, but as others have pointed out you could extend this logic to the entire stack of your software/hardware and conclude you're not safe unless you audit every bit. At some point you're going to have to trust software you haven't personally reviewed, as the article awkwardly demonstrates. It's obviously a matter of risk management (a term I was surprised to not see in the article); the more crypto you have the more care you should put into storing the wallet.

This guy is a downright idiot if he thinks that he has any more control over his keys on desktop Linux without actually auditing all the source code himself. The idea that ElementaryOS is less likely to steal your coins than Windows or OS X is simply laughable.

api 7y ago
ElementaryOS's repos were hacked a while back. The trojaned images didn't stay up long, but it illustrates your point. (Not singling out ElementaryOS... any software with a repo or updater could be trojanized, including software from big companies.)
- merpnderp 7y ago
  I wonder what percentile of users have suffered financial harm on Windows versus Linux do to system insecurities. I have zero data on this, but history would imply Windows is far less safe.
  - api 7y ago
    In practice I would say Apple =~ Linux < Windows, though the latter can certainly be locked down if you know what you're doing. However I think Linux's security is partly an artifact of a more techie user base. For a non-technical or too busy to be technical user I would say Apple offers the best security out of the box.
    - fortran77 7y ago
      A file that sitting on Windows that's been encrypted with a piece of well-audited encryption software is pretty safe. And if you want to be really certain, don't keep the machine connected to the internet except for software updates, and never while you're accessing your encrypted BTC archive.
  - falcolas 7y ago
    Windows is targeted more (not exclusively, however), due to its popularity. If everyone moved over to Linux for the "security benefits", Linux would be targeted just as heavily. Both Linux and Mac users have been hit with ransomware.
    - jcranmer 7y ago
      The other factor is that the vast majority of Windows security administrators (i.e., random users) are incompetent. In terms of the security of the operating system itself, Windows may well be more secure than Linux. Many Windows applications, however, are going to be much less secure than the OS--although it's not like Linux applications are stellar in this regard as well (e.g., Docker).
      - falcolas 7y ago
        Are they incompetent, or is the bar set so high that only trained professionals can be considered competent? I believe the latter is true; I've seen some incredibly intelligent individuals fall victim to shady crap. We (as in the entire software development community) need to lower that bar.
      - ryanlol 7y ago
        Vast majority of Linux admins are incompetent. >Windows may well be more secure than Linux This is very obviously the case if you look into the deployed exploit mitigation technologies.
vectorEQ 7y ago
this says it all :D LOL
hvidgaard 7y ago
Not to mention, you have to evaluate this in context. What would MS stand to lose if they actually did this? Far far more than whatever Bitcoin they'd be able to steal that much is certain. But in any case, if you care about security, you have a hardware wallet and store the seed somewhere secure.
- cmcd 7y ago
  It wouldn't have to be Microsoft exploiting this though, a few rogue employees that can modify their telemetry system could do this on their own. There is no external oversight for Windows but on Linux there are thousands of people looking at changes even if you aren't looking yourself.
  - AnIdiotOnTheNet 7y ago
    Linux Desktop isn't just the kernel, there's a lot of stack to exploit between that and the user, and history has shown that "many eyes" doesn't stop security problems from getting through. Hell, sometimes package maintainers introduce problems themselves independent of the developers. That isn't even counting the hardware stack underneath your kernel. What parts of your machine were manufactured in China? Is Intel IME trustworthy? What about all those firmware blobs?
  - paulgb 7y ago
    There is no external oversight to ensure that the compiled binaries in the Elementary OS iso match the published Linux kernel code, either.
  - ryanlol 7y ago
    > there are thousands of people looking at changes even if you aren't looking yourself. I’m sorry, but it’s really obvious that you don’t really know what you’re talking about. Very few commits are looked at by more than a handful of people. If you’ve ever had any involvement in FOSS development you must know this.
cmcd 7y ago
We already know Windows has some pretty excessive telemetry, it is not unreasonable to assume this or other elements of the OS can be exploited to gain control of a wallet. At least with Linux we have thousands of open source developers keeping an eye on things, chances are much higher that an issue would be caught with Linux since Windows is closed source.
- falcolas 7y ago
  > At least with Linux we have thousands of open source developers keeping an eye on things A bit of pithy sarcasm for your morning: Those thousands of eyes worked so well with OpenSSL, didn’t it? Those eyes are less vigilant than you might think, especially when the eyes aren’t being paid to monitor a particular chunk of code.
  - sudosysgen 7y ago
    Yes, they worked pretty well for OpenSSL. The issue was found eventually. In a proprietary system, it may have been there forever.
    - jcranmer 7y ago
      You're discounting the risk that, because it's open source, everyone assumes that someone else has done the security analysis. That is precisely what happened with OpenSSL--everyone assumed, since it's a big open source package, that somebody was keeping on top of this sort of issue, but nobody was. That there have been two major OpenSSL security fumbles (first was the Debian OpenSSL fiasco, second Heartbleed) sort of suggests that the value of "many eyes" for ensuring security is vastly overrated.
      - pbhjpbhj 7y ago
        How's that different to MS Windows, we assume the code is good, but some of the errors/oversights that crop up beggar belief.
Piskvorrr 7y ago
Less likely...perhaps, but for all the wrong reasons ;) That is, Windows is a target that's an order of magnitude bigger - of course there will be more attacks. The kernel is auditable...maybe, possibly, theoretically, to a point - but what good is a kernel, when there's unauditable firmware between the OS and the hardware?

koalalorenzo 7y ago

The real question is: why he is not using an Hardware Wallet? A ledger wallet is cheap enough if you get worried about your BTC being in an unsafe device. Yes, then you have to trust the company selling it for you, but isn't that the whole business to not compromise their own devices?

iRobbery 7y ago
Even if he would have somebody would mention, 'yeah but if you did not make the hardware yourself, you dont own your BTC' I guess at least :)
- tsukurimashou 7y ago
  his point is not "if you didn't make it you don't own it" his point is about proprietary software and how closed / how your control over them is very limited
deweller 7y ago
Hardware wallets are a good compromise here. Sure, you need to trust the hardware vendor. But the attack surface for a hardware wallet is way smaller than with a big OS. There are much bigger attack vectors than the operating system vendor. Even using with a FOSS OS, you are susceptible to viruses or other attacks not initiated by the OS vendor. Use a hardware wallet or cold storage. Use a multi-sig wallet for corporate-sized quantities. Holding your own BTC is not simple but there are good solutions. Be safe out there.

izzydata 7y ago

Even if you believed something was inevitable it doesn't mean it has already happened. You still own your BTC until they are actually stolen from you.

dubcanada 7y ago

The better question is why does he not build his own OS. He could build his own OS and make his own computer parts with his own tools and machinery and nobody would ever be able to access his BTC ever again. He would probably need to invent his own internet though.

Piskvorrr 7y ago
That's the beauty of the open protocols: you can make anything talk HTTPS over TCP/IP. This, of course, is quite an academic worry in comparison to the gargantuan quest "bootstrap yourself from raw materials to a computer...and don't make any mistakes along the way."

the_snooze 7y ago

Mass adoption any day now.

fortran77 7y ago
2020 is the year of Linux on the desktop!

ryuukk_ 7y ago

you know BTC price rise when: - USA announce new sanctions - People spam the internet about random BTC stuff

hluska 7y ago

I am torn on this article. If I read it through my developer lens, I’m not impressed - this cranks up the paranoia to a near useless level and the panacea offered is really a false hope. But, when I look at it through a more compassionate lens, I worry about this individual’s health. Hey writer, if you’re reading this and you need someone to talk to, my email is on my profile. Have a happy 2020.

normalnorm 7y ago
To me, your offer of "help" reads like a thinly disguised attack / insult. I guess we all know about the "humblebrag", this is "backhanded empathy". Or something. The author is not saying anything that is not true. Given everything that happened and was disclosed in the past decade, I don't think one has to be paranoid to be deeply suspicious of black box software controlled by big tech.
- turc1656 7y ago
  Being suspicious of activity monitoring is one thing. Being suspicious that one of the largest companies in the world is actually keylogging your passwords so that they can steal bitcoins is another. Or that a few rogue employees at said company would be able to commit code that makes it all the way to end user machines to achieve that, bypassing all code reviews, testing, etc. is sort of insane.
- Nitramevfank 7y ago
  I never touched Bitcoin so maybe you can clarify how this makes sense: > If Microsoft decides to terminate your license, what happens to your Bitcoin? Your Bitcoin is represented by some kind of data stored on your computer I assume. So this data should be backed up, right? So the anwser is that you would access the bit coins from some device which you have a license to use? If my understanding is right then I would consider the quoted statement to be a bit FUD:y.
  - grifball 7y ago
    if you're using security methods like bitlocker (an MS product that encrypts your disk), it's possible that, after losing your license to use that program, your data would become unrecoverable without some serious reverse engineering efforts. I'm probably just adding to the paranoia though. In reality, this whole thing is a very unrealistic attack. What hluska has stated is mostly true, but I'd like to add that an employee that could write code into an OS that would steal bitcoin and stay undetected would have to have a lot of skill. More than that random engineer that they just hired, think a guy with a PhD. Those types of people generally don't risk their jobs to steal because they're usually committed to their work and make a lot of money.

raimille1 7y ago

1) "... am sure you entered the password into some input field, which means that you have handed your password over to your Operating System" ... 2) "The easiest way to get started is to install Linux in a Virtual Machine and get yourself familiar with the system." Therefore, enter your password into an input field, in a virtual machine inside your proprietary Operating System key logging you?

grifball 7y ago
Keyword: "get started". Most ppl don't want to dual boot, so installing a VM is a stepping stone to getting fully comfortable with the OS so you can then use it on bare metal.

awt 7y ago

If your bitcoin is being stored on a machine connected to the internet, it’s not your bitcoin.

JohnJamesRambo 7y ago
Bitcoin is “stored” on the blockchain’s ledger, we just own the private keys to unlock some of it.

mirimir 7y ago

This is also an issue for Android and iOS. And some of the newer cryptocurrencies are more or less restricted to those platforms. And with smartphones, adversaries can access the OS using StingRay etc. Edit: I should have said "devices like StingRays". Perhaps StingRays can only track, and maybe see traffic. But the baseband is poorly secured, and has privileged access.

johnnycab 7y ago
>And with smartphones, adversaries can access the OS using StingRay etc. I was not aware of StingRay possessing any advanced capabilities, other than being used as a IMSI catcher and providing LE with 'tower dumps'? https://en.wikipedia.org/wiki/Stingray_phone_tracker https://en.wikipedia.org/wiki/Stingray_phone_tracker https://eu.usatoday.com/story/news/nation/2013/12/08/cellphone-data-spying-nsa-police/3902809/ https://eu.usatoday.com/story/news/nation/2013/12/08/cellpho...
- mirimir 7y ago
  I'm not sure about the StingRay brand per se, but it's likely that malicious fake cell towers can pwn the baseband radio. And we know that the baseband radio is privileged over userland. Also, baseband firmware is totally black box, so we have no clue what its capabilities are. So the safest bet is isolating it in a subsystem, or better in a separate device, which can be firewalled. https://www.osnews.com/story/27416/the-second-operating-system-hiding-in-every-mobile-phone/ https://www.osnews.com/story/27416/the-second-operating-syst...

abdullahkhalids 7y ago

A number of comments in this thread strawmanning the OP's argument. The main point is simply that if you don't have complete legal control, in perpetuity, of the system that you are storing your cryptocurrency on, then if your license is cancelled by legal means, you may lose your data [1]. OP is not talking about whether FOSS or proprietary software has more bugs or has more chances of having backdoors. OP is not talking about source code audits etc. He is only making a point about the legal ramifications of OSCorp EULA vs FOSS licenses. [1] There is a secondary point that employees within OSCorp cannot be trusted to not access your data.

thayne 7y ago
> if your license is cancelled by legal means, you may lose your data Maybe I'm missing some legal nuance. But if the license is revoked, wouldn't you still be able to recover your Bitcoin using a FOSS OS? Especially if it is stored on a separate disk or partition from the OS.
pjc50 7y ago
> if your license is cancelled by legal means This basically never happens to private individuals - the license enforcement focuses on getting you to pay for it instead. The data in any case remains yours and you can theoretically lift it off the drive (or your backups!) with FOSS. In the very unlikely event of getting raided for copyright infringement, they'll take all your hardware and sort it out later. (Of course the whole thing is a tremendous anti-advert for bitcoin if it can't be safely used on normal computer systems...)
- abdullahkhalids 7y ago
  I did not say that the linked article is making a sound argument. I agree with you that even with a non-FOSS OS, you can set things up that cancellation of the license does not make you lose your keys. I was merely annoyed by the strawmanning.

whoo 7y ago

Additionally, if you don't run a full node, you don't know if you own btc. For those interested in BTC security, the best you can do IMO is glacier protocol (which I'm surprised isn't mentioned in this article) https://glacierprotocol.org/ https://glacierprotocol.org/ ColdCard wallets are also an excellent choice, even better when used as a part of a multisig setup with your desktop, more cold cards, or another hardware wallet. Multisig across multiple hw wallets / computers (2/3 at least) is the best solution to self custody IMO. Single sig is SPOFfy.

grifball 7y ago

I love FOSS, but there's a lot of problems with the arguments in this article. >"it is highly recommended to run on Free and OpenSource Software...This way, you know exactly what is running on your system" I get this feeling as well: that when I use FOSS I know exactly what my computer is doing. But I don't. Linux is about 14 million lines of code, and that doesn't include your distro. You might be able to cut this down by compiling it yourself, but you'll still have to be an expert to understand everything that is happening on your computer. It's the same thing with Windows, millions of lines of source code written by thousands of people. I think that until you hear that someone lost their wallet key and MS was to blame, you're probably safe. Key theft (through keylogging) may be harder to detect on a closed-source OS, but there are still a lot of people (outside of MS) working on MS security and playing around with the OS to learn things about it. That all being said, Linux is easier to become an expert on due to all of the public resources/documentation. Microsoft tends to clam up when it comes to documentation about their OS.

orestarod 7y ago
Even if you, specifically, cannot check the entirety of the Linux code, at once, right now, the Linux kernel code is open for checking and auditing. Anyone can check what code is written in it, and numerous experts have done so independently. Moreover, every single change in the Linux kernel is incrementally recorded and documented, so every change was audited and evaluated all on its own, when its commit was introduced. Like a blockchain, you can at some degree trust that the code written before you started checking things has been adequately audited by experts, and you can continue the trend from this point onward. None of this can happen or has happened with Windows. You gotta trust a company firmly shut to the outside world.

drivingmenuts 7y ago

If you don’t trust MacOS or Windows, why would you trust Linux? With the first two, sure, they could “do something bad” to compromise you, but why would they? With Linux, yes, you have access to the source, but can you absolutely guarantee that someone hasn’t “done something bad” to compromise your system? It’s not a matter of idealism, it’s a matter of reality. How long would it take a person of the Posters level of paranoia to guarantee they weren’t somehow compromised? And how long would it take to recheck on update? There’s a point where the fear of bad actors becomes counterproductive.

perl4ever 7y ago
Linux has been improved over the years with patches originally developed by the NSA, and what paranoiac wouldn't welcome that? https://en.wikipedia.org/wiki/Security-Enhanced_Linux https://en.wikipedia.org/wiki/Security-Enhanced_Linux

Vanit 7y ago

I get the point the article is making, but as others have pointed out you could extend this logic to the entire stack of your software/hardware and conclude you're not safe unless you audit every bit. At some point you're going to have to trust software you haven't personally reviewed, as the article awkwardly demonstrates. It's obviously a matter of risk management (a term I was surprised to not see in the article); the more crypto you have the more care you should put into storing the wallet.