I-Coldcard I-Bitcoin Wallet emngciphekweni: Kutheni i-Multisig yakho yakhelwe oku

Ihlabathi leBitcoin livukele iindaba ezinzulu namhlanje. Ngokumalunga ne-594 BTC, malunga ne-38 yezigidi zeedola, yatshayelwa ngaphandle kwezipaji ezingama-500 kwimizuzu nje. Iidilesi zazingenanto efanayo ngaphandle kwento enye: izitshixo zabucala emva kwazo zenziwe kwi-wallet ye-Coldcard ye-hardware eqhuba i-firmware echaphazelekayo.

Ukuba ungumxhasi we-SimplB kunye ne-Bitcoin yakho kwi-vault, impendulo emfutshane kukuba i-vault yakho ibanjwe kwaye iimali zakho zemali zikhuselekile. Inxalenye yesi siqwenga ichaza ukuba kutheni.

Okulandelayo yinto eyenzekayo ngokwenene, ngubani osemngciphekweni kwaye kutheni isakhiwo sogcino endiyakha kwi-SimplB yenzelwe kanye olu hlobo losuku.

Yintoni eyonakeleyo

Yonke i-wallet ye-Bitcoin iqala ngembewu, umtya wokungakhethi ukuba yonke enye into ivela kuyo. Lonke ukhuseleko lweingqekembe zakho luxhomekeke ukuba randomness kuba engalindelekanga. Umgangatho woshishino yi-128 bits of entropy. Elo linani elikhulu kangangokuba ukuqikelela ukuba akunakwenzeka nangayiphi na itekhnoloji elundini.

I-bug: i-firmware ethile ye-Coldcard iyekile ukusebenzisa i-hardware ye-random yejenereyitha yenombolo kwaye yabuyela kwisoftware ebuthathaka. Esi sixhobo asizange sinikele silumkiso. Akukho nto kwiscreen ekhangeleka ngendlela eyahlukileyo. Endaweni yamasuntswana angama-128, imbewu yenziwa yancinci kakhulu: malunga namasuntswana angama-40 kwi-Mk3 endala kwaye malunga ne-72 bits kwiimodeli ezintsha zeMk4, Mk5 kunye neQ.

Amashumi amane amasuntswana izandi abstract, ngoko ke wenze ikhonkrithi. Icutha inani leembewu ezinokubakho ukuya kuthi ga kwitriliyoni, efikeleleka lula kumhlaseli ozimiseleyo ngezixhobo eziqhelekileyo zekhompyutha. Uvelisa yonke imbewu kolu luhlu, ufumana iidilesi nganye eza kuvelisa kwaye uzijonge ngokuchasene ne-Isixokelelwano seebloko yoluntu. Nayiphi na idilesi ephethe iinkozo zemali, uyatshayela. Yiloo nto kanye eyenzekayo.

Olu yayiluhlaselo olukude

Enye impazamo eyingozi kukwenza imijikelo kwaye ifuna ukulungiswa ngaphambi kwayo nayiphi na enye into. Olu hlaselo aluzange lufune nabani na ukuba achukumise isixhobo. Akukho mntu waqhekeza ikhaya okanye isefu okanye igumbi elingaphantsi komhlaba. Ubuthathaka buhlala kwizitshixo ngokwazo kwaye ezo zitshixo zihlala kwi-Isixokelelwano seebloko yoluntu ukuze nabani na avavanye ngokuchasene. Umhlaseli wenze yonke into esuka kwilaptop.

Oko kutshintsha into ekukhuselayo. Ukugcina i-wallet ye-hardware kwindawo ekhuselekileyo ikhusela ubusela bomzimba kunye nokukhwabanisa, okuwumngcipheko wokwenyani kunye nokwahlukileyo. Ayenzi nto ngokuchasene nembewu ebuthathaka ukuba iqikelelwe kude. Ukuba iingqekembe zakho zifikeleleka ngesi siphene, apho isixhobo sigcinwe khona akunamsebenzi.

Kutheni phantse yonke i-wallet ekhutshiweyo yayisayinwe enye

Jonga ngocoselelo kwizipaji eziye zakhutshwa kwaye ipateni itsibela ngaphandle: ibingumsayino omnye kakhulu. Isixhobo esinye, isitshixo esinye, inqaku elinye lokungaphumeleli. Ukuba elo qhosha linye alinamandla, akukho nto imiyo phakathi komhlaseli kunye neengqekembe zemali.

Esi sesona sizathu siphela ndixoxa iminyaka, kuye nabani na oya kumamela, ukuba utyikityo olunye alulunganga ukuba lugcinwe ixesha elide. Isitshixo esisodwa yinto enye enokusilela: nge-bug ye-firmware efana nale, ngokulahleka, ngobusela, ngempazamo. Awufuni ukhuseleko logcino lobomi olukwicandelo elinye elingenasiphako.

Kutheni kubanjwe iisig ezininzi

Iingqekembe zabathengi bam zibanjelwe kwi-a 2-of-3 useto lwe-multisig ngezitshixo ezithathu zisasazwe kubenzi behardware abathathu abahlukeneyo. Ukuhambisa imali kufuneka ube mabini kwezi zitshixo zintathu ukuze usayine. Isitshixo esinye ngokwaso asinakwenza nto.

Ngoku sebenzisa oko kumsitho wanamhlanje. Masithi umhlaseli angaphinda avelise iqhosha elinye elibuthathaka kucwangciso. Babeza kubamba utyikityo olunye lwezo zibini zifunekayo.

Iingqekembe azishukumi.

Ukutshayela kubethe ababambeli be-single-sig kwaye ubukhulu becala bashiya i-multisig yodwa ngenxa yesi sizathu kanye.

Ukusasaza izitshixo kubo bonke abavelisi abahlukeneyo sisiqingatha sesibini soyilo kwaye namhlanje lusuku elufumene ngalo ukugcinwa kwalo. Isiphene kwisixhobo somenzi omnye senza buthathaka nokuba sinye kwezitshixo zakho ezithathu. Ezinye ezimbini, ezakhiwe zezinye iinkampani kwezinye iihardware, azichukunyiswa. Ukusilela okufanayo kwintlekele kuya kufuneka kubethe abavelisi ababini abazimeleyo ngaxeshanye, isehlo esilindeleke kakhulu. Buyisela ezo zitshixo phezulu kwintsimbi kwiindawo ezahlukeneyo kwaye ugcinwe elugcinweni oluxhathisa umlilo, izikhukula kunye nomhlwa kunye nabahlaseli.

Ndithethe into efanayo iminyaka: iipaji ezintathu zehardware ezivela kubavelisi abathathu abahlukeneyo, ngokuchanekileyo ukuba omnye wabo ujike waba ne-backdoor okanye i-entropy yayo isilele. Ayizange ibe yindawo ekhululekile ukuyiphakamisa. Yayisoloko ivakala inomsindo omncinci. Namhlanje iyekile ukuba yintelekelelo. Kwaye ndiya kuvuma: kuzo zonke izixhobo endandicinga ukuba ngenye imini ibe likhonkco elibuthathaka, i-Coldcard yayikufutshane nezantsi kuluhlu lwam. Yiloo ngongoma kanye. Awusakhi esi sakhiwo kuba uyazi ukuba sesiphi isixhobo esiya kusilela. Uyakha kuba awufuni kwaye uyala ukubheja yonke into ukuba ulungile.

Apho oku kushiya abathengi bam

Ndiya kuba nawe ngqo. I-Coldcard yenye yezixhobo ezithathu endizisebenzisayo, ngoko ngumlenze omnye we-multisig kubathengi ababambe loo ndibaniselwano. Ngoku ngeenkcukacha ezilungisa umbuzo: SimplB Coldcard iimbewu aziveliswanga yinombolo yenombolo yesixhobo engaqhelekanga kwaphela. Ndizidala ngeeroli zedayisi zomzimba, ezifakwe ngesandla, ngokuchanekileyo ukuze kungabikho bug ye-firmware enokuthi ithathe isigqibo ngesitshixo somthengi. Isiphene sanamhlanje sihlala kwi-random number generator. Imbewu yedayisi ayisondeli kuyo, ngoko ke le ntsholongwane ayinakufikelela kwizitshixo zakho.

I-hardware yongeza umaleko wesibini phezu koko. Imodeli kwiivault zabathengi bam yi-Q, hayi iMk3 endala esembindini wanamhlanje we drain. Izipaji ezikhutshiweyo yayizipaji zeMk3 ezinamasuntswana angama-40 eentropy. Amashumi amane amasuntswana anika malunga netriliyoni yembewu enokwenzeka, uluhlu umhlaseli anokukhangela ngehardware eqhelekileyo ngexesha elifanelekileyo. I-Q ivelise imbewu ngeebhithi ezimalunga nama-72. Yonke into eyongezelelweyo iphinda kabini uphendlo, ngoko ke amasuntswana angama-72 angaphezulu kweebhiliyoni ezine ngokuphindwe kabini kunzima ukuqhekeka kuno-40. Olo luhlu luhlala ngaphaya koko nawuphi na umhlaseli anokukhangela namhlanje. Usekufutshane kumgangatho we-128-bit izitshixo zakho ezizifaneleyo kwaye akukho ndawo kufutshane nomnyango ovulekileyo iMk3 yajika yaba yiyo.

Emva koko isakhiwo. Nokuba umhlaseli angaphinda avelise isitshixo ngandlel’ ithile, iba sisitshixo esinye kuphela kwezimbini ezifunekayo. Isitshixo esisodwa esibuthathaka kwi-2-of-3 ayikwazi ukuhambisa i-satoshi enye. Dibanisa iiroli zedayisi, izibalo kunye nemultisig kunye kwaye esi siphene asithwali mngcipheko unokwenzeka kwiivault zabathengi.

Akukho mngcipheko obonakalayo awukho apho ndimisa khona. Kuphononongo lwakho lonyaka okanye nanini na ndikwakhela ivault entsha, ndiya kuhambisa i-Bitcoin yakho kwigumbi apho isitshixo se-Coldcard Q sithatyathelwe indawo yenye eveliswe kwi-firmware ephuculweyo, esisigxina. Ndiza kuhlala ndibukele oku njengoko iinkcukacha ezininzi ziphuma kwaye ndiya kukuxelela ukuba kukho nantoni na etshintsha uvavanyo olungentla. Akukho mfuneko yokoyika kwaye akukho mfuneko yokungxama. I-multisig yenza umsebenzi wayo ngelixa ndisebenza ngophononongo, ngononophelo.

Ukuba ubamba i-Bitcoin ngokwakho

Ukuba i-Bitcoin yakho ihleli kwi-self-cuttery kwi-signature enye Coldcard Mk1, Mk2 okanye Mk3, hambisa iingqekembe zakho ngokukhawuleza, ngaphandle kokuba sele zithathiwe. Yiphathe njengetshisiweyo loo mbewu. Velisa imbewu entsha kwisixhobo esikhuselekileyo kwaye utshayela yonke into kuyo namhlanje, hayi kule mpelaveki. Ukuba ukwi-Coldcard Q, phucula kwi-firmware elungisiweyo ngokukhawuleza kwaye ulandele isikhokelo sangoku se-Coinkite, ethi ngexesha lokubhala lithetha ukuvelisa imbewu entsha kwi-firmware esisigxina kunye nokuhambisa iingqekembe zakho ngaphesheya njengenyathelo lokulumkisa. Abanini be-Mk4 kunye ne-Mk5 kufuneka benze okufanayo. Kwaye ukuba namhlanje uye waqonda ukuba kukhwele malini kwisixhobo esinye, eli lixesha lokujonga ezininzi.

Ukuba une-Coldcard endala kwaye awuqinisekanga ukuba wenze ntoni, sukuqikelela ngemali oyongile. Book a call kwaye ubuze. Ndingathanda ukude ndiphendule umbuzo oxhalabileyo kunokuba ndibukele umntu ephulukana neingqekembe zemali ebenokuzigcina.

// eli nqaku ulwazi oluqhelekileyo, kungekhona ingcebiso yezemali okanye yokhuseleko oluthile kwimeko yakho. kwiinkcukacha zobugcisa zomba we-coldcard, bhekisa kwingcebiso esemthethweni ye-coinkite. ukuba awuqinisekanga malunga nokuseta kwakho, fumana uncedo phambi kokuba wenze.