77
submitted 1 month ago by corbin@infosec.pub to c/technology@beehaw.org
you are viewing a single comment's thread
view the rest of the comments
[-] GenderNeutralBro@lemmy.sdf.org 15 points 1 month ago

Are there any that are cloud-hosted, secure, and private? My experience is limited, but I've never found an easy way in. I can't imagine anyone who's not tech-savvy getting started without walking through a minefield of scams.

Every now and then I look at options for how I might actually use crypto, and everything looks either outrageously scammy or way too much trouble. Pretty much every exchange I've looked at holds the keys to your account, and several have gone under or outright stolen their users' funds.

The question is, when Proton embraces bitcoin, should it make me trust bitcoin more, or trust Proton less? I don't know. I'm still skeptical. Their blog post is interesting, but also doesn't answer a lot of questions. https://proton.me/blog/proton-wallet-launch

I mean, look at this:

Buy Bitcoin securely in 150+ countries

If you are new to Bitcoin, Proton Wallet also has integrations that make it easy to buy Bitcoin in 150+ countries, and we have also put together a comprehensive Bitcoin guide for newcomers.

That "comprehensive" guide spends three paragraphs talking about the "Blocksize War", and makes absolutely no mention of how a user can actually buy bitcoin using Proton Wallet. WTF, Proton? Who is your target audience here exactly?

[-] jarfil@beehaw.org 4 points 1 month ago

cloud-hosted, secure, and private

Until homeomorphic encryption becomes a thing, cloud can't be secure or private.

every exchange I've looked at holds the keys to your account

Exchanges, are not wallets. You're supposed to move the coins out of the exchange for safekeeping. If you can't, then it's not a crypto exchange, it's an ETF peddler.

how a user can actually buy bitcoin using Proton Wallet.

Wallets, are not exchanges. They can link to exchanges, like Metamask does, but their core function is to hold your keys.

[-] cadekat@pawb.social 3 points 1 month ago

Until homeomorphic encryption becomes a thing, cloud can't be secure or private.

Why do you need homeomorphic encryption? Isn't client-side encryption good enough for most use cases?

[-] GenderNeutralBro@lemmy.sdf.org 3 points 1 month ago

Yes. Homomorphic encryption is for data processing, not data storage.

[-] cadekat@pawb.social 2 points 1 month ago* (last edited 1 month ago)

I am aware. What processing is only possible in the cloud, and not locally?

Edit: My apologies, I didn't realize you weren't the same person I originally replied to. Please disregard!

[-] jarfil@beehaw.org 1 points 1 month ago* (last edited 1 month ago)

Client-side is not cloud.

Yes, you can keep client-side reasonably secure. You can't send the data for cloud processing and seriously expect much security or privacy... for now. Encrypt client-side and use cloud as storage... maybe; encryption algorithms also have a "best by" date.

My point is:

  • "Cloud hosted" can not be fully "secure and private" right now.
  • "With cloud storage", has a "best by" date.
  • "Not cloud"... well, is not cloud 🙂

Letting anyone with the ability to switch the software without you noticing, anywhere near the keys controlling some Bitcoin funds, is a really bad idea.

this post was submitted on 24 Jul 2024
77 points (100.0% liked)

Technology

37554 readers
172 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS