Avatar
SLCW
65912a7ad17fd5cf3bacce9759f3bea3a44f9a3397340e559cf067945dc638bf
Handyman engineer. I bounce from project to project. I'm often called in to do the finishing touches, bringing 90% complete projects over the finish line. I'm good at making disparate systems talk to each other. * Zaps powered by nostr:nprofile1qqsf07zg4hxyccnkdp07fppxmetpfzru3fg6mgzx3nk8r7af8qnjjyg76vulm * On-chain powered by nostr:nprofile1qqsvxq03xdev3uxehjqcdkr5lfzl5vawmcf7vm6ps73m6ghwg8y4k2shaefxp *Always Buy the Dip* #privacy #security #linux #Android #networkengineer #infosec #SimpleX #dogs #cats #pets #cooking

You're free to host your own vault if you don't trust Bitwarden's secure cloud. But I think Bitwarden has earned the trust so many businesses and individuals put in them. They're not some fly-by-night operation. And hosting your own Bitwarden vault is a hell of a lot better than managing your own KeePass vault file. It's significantly more functional. But security wise they're about the same, so if you're more comfortable with KeePass, use KeePass. Just make sure you understand the features and pros & cons of each before making your decision.

I think the digital storage layer is a smart play. It provides protection in virtually every circumstance, and is impervious to local events that may put your seed in danger. It's only one layer, but an important one. If something happens, the digital copy will be your first stop in restoring your wallets. It's secure, protected, and available.

KeePass is OK. It's as secure at Bitwarden, but you have to manage and maintain your vault, which is both good and bad, depending on your outlook. Managing your own vault means you're entirely responsible for the storage of your secure data. There's no production network backing you up. When it comes to seeds, I think there's something to be said for using a high-availability cloud that's fully integrated with the client. And if you use your own external encryption before sending data to your vault, you have security that's more than sufficient for a redundancy layer. It really comes down to whether or not you want to be responsible for the hands-on management of the vault.

I wouldn't use Proton for my passwords or storing my seeds. Bitwarden has been in business since 2016, and securing passwords and sensitive data has been their sole focus. Proton has only been in the password game for a year or so. Proton is a good company, but Bitwarden has the sort of institutional knowledge relating to secure data storage and protection that only comes from experience.

I use Bitwarden. They've been excellent. And if you're not comfortable hosting your data with them, you can host it yourself on your own hardware. But personally, I think their cloud is sufficiently secure and maintained. They're a great company and they provide enterprise-level password management to a ton of businesses in addition to individual users. But I don't rely entirely on their encryption. The seeds are encrypted externally before they're stored in the password manager.

Nunchuk Wallet also has an assisted multi-sig option you can subscribe to. They also do inheritance management so that in the case of your demise, your selected heir(s) can access the funds you have earmarked for them.

I also maintain multiple seed copies. I keep encrypted copies of all my seeds secured within my password manager. A keep a second encrypted copy on an encrypted file system that lives on my high-availability cloud. And I keep metal for each seed secured in my home safe. I believe this level of security and redundancy will ensure that I'll have access to my seeds in nearly every circumstance. My next upgrade will be to the two-plate Graphene system that requires two plates to read the seed. Each plate can be stored in different locations ensuring that someone would have to obtain both plates to access the seed.

Yes, absolutely. It's entirely based on BIP standards, and you can import your seeds into any other wallet, and reconstruct the multi-sig.

I think metal backups in a bank safety deposit box provides the most reliable security. But you've got to pay the monthly rent expense, so it may not be financially feasible for everyone. If you're holding more than $50k worth of Bitcoin, I think it makes sense as you wouldn't need a large box.

Otherwise, two metal devices would be sufficient, I think. One kept locally in your possession, and another held by a trusted family member in another state or geographic area.

If you're worried about your seed being in someone else's possession, you could get one of those Graphene plate systems that uses two plates that can't be read with only one plate.

Ya, Loggins was contracted to create a high-energy theme song for the movie, something that would stand up to the intensity of the flight scenes. And he delivered!

Replying to Avatar Hanshan

hey remember that time nostr:nprofile1qqspflu4vv8g0hh6musarykrev6353kmywn7qrdd4a6jkf7d2u3vn7spzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtcphms2d tried to stir up the shit by claiming Monero bros were developing nostr clients with hard-coded XMR only paid relays?

i guess because we were so afraid of his fact-checking and wanted a safe space?

that was fun.

I don't have a dog in this fight, but I've never seen such a client.

Replying to Avatar whit

Danger ⚠️ Zone nostr:npub1hzz35pkl67w53lpj2g62zh56g63j5zvz4q3m2nxlsfg5hxcjpwssaynqel 🫂

“This will be my last war. For #humanity “

Sacred promises must be fulfilled. 🫡🫂🗽

https://youtu.be/siwpn14IE7E?si=9G7FOFbvHLvAxuRy

Another great 80s montage song! He wrote this specifically for Top Gun!

The number of keys doesn't matter. You would have the seeds for every associated key, and would therefore be able to easily import into another wallet.

The multi-sig wallet is dependent on Nunchuk. You would have the seeds for every signing key, and so you could easily import them into a different wallet.

Makes more sense than Gulf of America.

I've worked for two companies that used H1B visa workers, and I knew what they were being paid. Their salaries were in line with domestic workers in their positions. Now, my experience is based on a small sample size, but in talking with those employees about the H1B and their related experiences, I didn't come away with the feeling that these employees were being underpaid. But again, that's just based on my personal experience and what I've been told by employees in that program.