Hacker News new | ask | show | jobs
by meowface 921 days ago
>I just use isolated cheap laptops and encrypted usb's now.

I figure this isn't practical for most end users. Is there an alternative hardware wallet that you think is okay for most people? How do you feel about Trezor?

5 comments

I'm curious about coldcard as well, however what would you say are the benefits over a trezor / ledger device?
How? My set up is less secure, but more auditable than hardware wallets--a dedicated hard disk running a portable Linux doing nothing else than crypto. And only for sending out funds. For receiving funds I use my normal operating system with view-only keys.
I don't know which it more practical trusting an exchange, paying a hardware wallet or maybe encrypted file in s3
The modern solution is to use MPC wallets like ZenGo.
Thanks for the shout-out. Obviously I agree. Multi-factor wallets are more secure than single factor wallets, by default.

Having no seed phrase vulnerability (single point of failure) significantly reduces the surface area for attack vectors. Added layers of security (like the built-in web3 firewall) help protect against Web3 attack vectors.

I must be missing something. It couldn’t be as dumb as using a photo of your face as the key.
You are missing something. Happy to jump into the details if you're interested.

3D FaceLock is one of the parts of the wallet recovery process: It's a biometric liveness verification (backed by 600,000 USD bug bounty). But 1) It's only one of the factors, and 2) It's never been hacked/spoofed.

Zengo's MPC wallet uses a 2/2 signing mechanism (similar conceptually to a multi-sig). You initiate transactions from your Zengo app (inside the app is the Personal Secret Share, which interacts with your wallet's secure enclave/TEE during the signing process). The Remote Share on Zengo's server essentially co-signs the transactions.

By removing a single point of failure (private key or seed phrase) it is much more challenging for a hacker to steal/spend funds or take over a Zengo wallet - indeed... we have over 1,000,000 users (since 2018) and 0 wallets hacked, 0 wallets drained. More info here: www.zengo.com/security

Also happy to answer more qs. Cheers.

For "most people", I wouldn't know, but for the typical HN reader, I would advise something open-source, verifiable, DIY, stateless and air-gapped, and that is the seedsigner:

https://seedsigner.com

To me, this is the perfect solution for a long term saving account, completed with a Lightning wallet for spending. The coldcard and Jade wallet are also great options.