[ 3 / biz / cgl / ck / diy / fa / ic / jp / lit / sci / vr / vt ] [ index / top / reports ] [ become a patron ] [ status ]
2023-11: Warosu is now out of extended maintenance.

/biz/ - Business & Finance

View post   
File: 93 KB, 296x297, 1530039956464.png [View same] [iqdb] [saucenao] [google]
16851465 No.16851465 [Reply] [Original]

Anyone use an encrypted VM inside of their host machine to access their cryptos and hardware wallets? Thinking of doing this on a Windows 10 machine and use truecrypt to hold the VM container for max security. Look to see if anyone else has a set up like this.

>> No.16851484

1) AIRGAPPED LAPTOP
2) PAPER WALLETS
3) FULL NODE FOR VALIDATION

encrypted vm ... don't make me laugh

>> No.16851492

>>16851484
D:

>> No.16851793

what

>> No.16852432

>>16851465
hardware wallets are secure enough. smartcards isolate the private key from the computer altogether.

>> No.16852455

>>16852432
just use a ledger, I know their CSO and the guy actually knows his stuff

>> No.16852478

>>16851465
Wont help you if your host system gets pwned and attacker can keylog you typing the password and shit

>> No.16852483

>>16852455
how safe is using my trezor?

>> No.16852503

>>16852483
safer than the VM idea

The VM thing is safe if you do it on an airgapped machine though

>> No.16852505

>>16852455
>The ledger hardware cryptocurrency wallet is a confirmed scam.

>> No.16852586
File: 205 KB, 1433x2025, ENw2uNZW4AAH8nT.jpg [View same] [iqdb] [saucenao] [google]
16852586

>>16852483
"pretty" safe against most threat actors *right now*, I'm not aware of any vuln being exploited in the wild but it is an inherently inferior architecture simply because the chips they use are pretty cheap stuff with none of that fancy built-in cryptography and counter-measures that "secure chips" (like Ledger's - which are basically used in the wild for a ton of other high security appliances in the military). If you look at the Ledger's specs and look up the components you will get a better idea of how "bad" the gap is. tl;dr Trezor is okay (and VM certainly aint overkill in that context) but Ledger is better (no need for a VM - private keys are very isolated from the software, chip with ton of builtin cryptography available makes for easier wallet support too)

>> No.16852616

>>16852586
addendum: you want to balance between opsec protocols and usability. when you have an overkill (but safe) process you tend to develop "security fatigue" over time and become negligent. => use a safe and reasonable opsec protocol (where threat is state actor though) that you can repeat over time without becoming complacent about it.