Artwork for podcast Generation Bitcoin
Don't Get Hacked!
Episode 820th September 2021 • Generation Bitcoin • McIntosh
00:00:00 00:22:56

Share Episode

Shownotes

When your financial assets are digital and frequently stored online with other entities being hacked is a concern. Learn some common sense items and practical tips you can implement to manage your assets in a secure manner.

Metamask software wallet: https://metamask.io

Forbes article on hardware wallets for cryptocurrency: https://www.forbes.com/sites/forbes-personal-shopper/2021/07/19/best-crypto-wallet/

Transcripts

Speaker:

Hey everyone, no one on this podcast is a financial advisor and all information presented on this podcast is for informational purposes only

Speaker:

And now that we have the legal stuff out of the way, let's jump on in

Speaker:

Welcome to the generational wealth with cryptocurrency podcast. I'm your host McIntosh and today we're going to be talking about hacks now

Speaker:

We're gonna jump on in this is going to be a fairly short session. I believe

Speaker:

But we do need to discuss it. We're dealing with your

Speaker:

You know, we're dealing with money. We're dealing with your finances potentially. We're dealing with a lot of money

Speaker:

so we want to be careful with that a

Speaker:

lot of a

Speaker:

Lot of this honestly revolves around common sense

Speaker:

so I

Speaker:

know

Speaker:

You know when we first got when we first got cell phones that you didn't have people randomly texting you with some

Speaker:

scam trying to get you to click on a

Speaker:

on a link so that you could win a prize or

Speaker:

Or whatever and

Speaker:

Yet now these are quite common I get messages all the time

Speaker:

Things like oh

Speaker:

Oh, let's see. Do do do do do I

Speaker:

Have I have one in a couple of days apparently

Speaker:

But bump a bum

Speaker:

Well, here's one where it's just a link

Speaker:

Why would I click on that and it was sent to a whole bunch of people from somebody that I didn't know?

Speaker:

There's no telling where that's gonna go

Speaker:

So there's things click here to confirm your

Speaker:

$500 gift card from Walmart, you know junk like that stuff that

Speaker:

Doesn't really make a whole lot of sense if you stop and think about it for just a second

Speaker:

But we've learned to deal with that right? That's just part of the reality of having a cell phone

Speaker:

Same thing with crypto. You're going to get a lot of

Speaker:

messages

Speaker:

Online if you're on say a discord group about cryptocurrency

Speaker:

You will have people who will direct message you saying hey

Speaker:

Blah blah blah. Here's this thing, you know, send me money. Well, however, they word it and

Speaker:

99 times out of a hundred

Speaker:

It's scam and so you need to be very careful when you're dealing with stuff like that

Speaker:

We've talked in the past about wallets wallets. We used to store our currency in our crypto in

Speaker:

Do not so with any wallet as I've said, you've got a private key

Speaker:

You've got a public key do not ever ever ever ever ever ever

Speaker:

Give people your private key

Speaker:

when you give them the private key you give them control and they will clean you out just like that so

Speaker:

Don't ever do that

Speaker:

If you have more than a minimal amount of crypto and that's up to you as to what that means

Speaker:

You might want to split that up and keep it in multiple places

Speaker:

Especially especially if you're using these centralized exchanges

Speaker:

like Coinbase or Kraken or I don't know by Nance or one of these other exchanges because

Speaker:

Hacks do happen on a centralized exchange

Speaker:

And they do things to help mitigate that and actually I'll mention that again in a minute as to one of those ways that

Speaker:

They do that, but they do happen infamously Mount Gox, which I've mentioned before

Speaker:

Ironically, I was actually looking through I was

Speaker:

Going through something and I told y'all that I actually lost some money on Mount Gox and I thought I'd gotten it back

Speaker:

Or at least most of it or whatever

Speaker:

But it happened back in 2014 and I don't really room and it was fairly soon after I gotten involved in crypto

Speaker:

And I don't really remember the details

Speaker:

But I was going through my email

Speaker:

And I did find I had a login on Mount Gox

Speaker:

Back in 2014 and I did find um on Kraken actually where they were pointing people to a claim site for something

Speaker:

Some type of settlement. This is like the final sell settlement of the creditors

Speaker:

And as a person who had crypto on that exchange, I would be a creditor

Speaker:

Hopefully will get us

Speaker:

Either money or more money. I don't even know at this point. It doesn't matter

Speaker:

I'm going to go through the process. I didn't have a whole lot on there

Speaker:

That I well I didn't have a whole lot on there in terms of money

Speaker:

But the interesting things is that if you look back at bitcoin price in 2014, it was only like five hundred dollars

Speaker:

So even if I had a couple hundred dollars on there

Speaker:

It would have been like half of bitcoin and so it's worth

Speaker:

Going through the process

Speaker:

to try and figure out

Speaker:

this

Speaker:

System that's in japanese

Speaker:

Converted, you know with translations into english and hopefully I can navigate this because

Speaker:

If I can recover 90 percent of what I had on there

Speaker:

Potentially, it could be a lot of money. I don't know. I'll I'll let you all know maybe at some point

Speaker:

I doubt it's going to turn into anything, but I've got to thinking about that because of the prices

Speaker:

You know in 2014 versus now, it's worth me pursuing certainly

Speaker:

So we'll see anyways, that's an example certainly the most

Speaker:

Widespread example of a hack of a crypto uh central exchange

Speaker:

Uh, there's been others

Speaker:

And so it's just prudent. You know, maybe maybe you're not comfortable keeping more than a thousand dollars on a on a central exchange

Speaker:

I don't know

Speaker:

I think you'll find as you're as your account grows

Speaker:

You're not going to divide up 10 different crypto exchanges, you know to keep

Speaker:

Ten thousand dollars, but you do what?

Speaker:

What you're comfortable with

Speaker:

And it's a simple thing to do. You know, you transfer money transfer your coin from one one account to another

Speaker:

No big deal

Speaker:

That's one way of minimizing your risk on a central

Speaker:

On a centralized exchange. I would also recommend if you're using a centralized exchange

Speaker:

And virtually all of you will be to at least at least to an extent if only to trade

Speaker:

I would also recommend in your settings that you're going to use what's called two-factor authentication

Speaker:

So you may get a text

Speaker:

When you log in that it gives you some code numbers. You've probably seen this with maybe a bank account

Speaker:

2fa two-factor authentication

Speaker:

But you know, you're you're going to plug in those numbers to after you plug in your password

Speaker:

So you're providing two forms of authentication

Speaker:

Or you're going to use an app that generates numbers that you would plug in something like that

Speaker:

That's called two-factor authentication

Speaker:

You definitely want to use that that way if your password were to be compromised. They would also have to have your authentication

Speaker:

Method in order to log in

Speaker:

Which makes it very unlikely

Speaker:

Another thing that you should do is enable

Speaker:

the options so that when you

Speaker:

log in when you

Speaker:

Send money or when you deposit money you get an email you're getting visibility into

Speaker:

Into your account activity

Speaker:

So that may be a way that potentially could keep you from losing money there

Speaker:

So I would definitely recommend all of that

Speaker:

This is kind of going back to the common sense stuff. You also need to keep hard copies of your passwords

Speaker:

And your recovery words, which we'll talk about in just a minute for your software wallets

Speaker:

Stored in a safe or another secure location. I personally don't trust myself to remember

Speaker:

My if if i'm not logging in frequently to a system, i'm not going to remember a password

Speaker:

So if I maybe I throw some money in there and then five years later

Speaker:

I come back to it, but I can't remember my password and i'm locked out of my account and that would be bad

Speaker:

Especially if you're not using a centralized exchange if you're using a centralized exchange

Speaker:

They usually have a process to reset your password and you have to prove yourself, but you can do it

Speaker:

But if you are running your own wallet

Speaker:

A software wallet and you lose the password then you lose the money

Speaker:

This isn't really security, but I did want to throw this in

Speaker:

And this is something that people can maybe they don't like talking about this, but I think this is important

Speaker:

You need to have a plan in case you become incapacitated

Speaker:

Or in case that you die

Speaker:

You know if you're married

Speaker:

You're safe and secure

Speaker:

You know if you're married your spouse needs to have

Speaker:

Access they they need to have a list of the accounts basically they need to have access

Speaker:

Otherwise

Speaker:

If you were to die

Speaker:

Unexpectedly they won't have any way of getting access to that and and that would be a shame

Speaker:

They really it's so that's just something that you need to think about

Speaker:

now

Speaker:

I want to talk about the three main ways that you can store your crypto

Speaker:

The first way of course is a centralized exchange. We've been talking about this already

Speaker:

You know, these are companies that you log into like coinbase or kraken they store your money

Speaker:

Technically there's no private key that you own

Speaker:

And that really means you don't actually own the money and i've talked about that

Speaker:

But most people are okay with that. It's like a bank

Speaker:

You are depending on them to secure your

Speaker:

Crypto and they can do that in a variety of ways. You may want to look into

Speaker:

How your central exchange stores it the majority of their crypto

Speaker:

They should be keeping in something called cold storage and we're going to talk about that more in just a second

Speaker:

But it's a very secure way

Speaker:

Of keeping crypto

Speaker:

They have to keep some on hand for people to move around to trade with this kind of thing

Speaker:

but

Speaker:

I don't know 90 percent of their crypto should actually be kept in cold storage. It should be kept offline because

Speaker:

That is what keeps

Speaker:

If the system were to be compromised, it would be what would keep the hackers out of the vast majority of that crypto

Speaker:

So if coinbase were to be hacked

Speaker:

Uh, and I do believe coinbase does keep the majority of their coin in cold storage

Speaker:

Maybe they get five percent of their total crypto. It'd probably be less

Speaker:

but let's just say that coinbase being as large a company as they are with the amount of

Speaker:

Coin that they're dealing with with the profits that they have

Speaker:

They could manage that

Speaker:

They should be able to turn around to any customer who's affected by that

Speaker:

If if this hack was caused

Speaker:

By their negligence and pay for it and it not shut down the exchange

Speaker:

so

Speaker:

That's the best way to keep

Speaker:

A coin on a central exchange if it's a an exchange that's built a system like this now

Speaker:

I already mentioned cold storage. There's two types of storage where you're holding it yourself

Speaker:

There's what's called a hot wallet and there's what's called a cold wallet

Speaker:

A hot wallet is a digital wallet. That's on the internet. It's on your computer

Speaker:

It's on your smartphone a very common example of one would be called metamask. I believe

Speaker:

And I haven't looked up this figure but just anecdotally. I believe it's it's probably the most common software wallet

Speaker:

That's out there now somebody may be able to send me a figure saying that it's not but it's certainly a very common one

Speaker:

Metamask.io

Speaker:

Is the website?

Speaker:

I'll have that in the show notes as well, but it is open source. It's got a long track record

Speaker:

And it's a high quality product. I actually use it. I actually use it

Speaker:

but with a hot wallet, you've got your private keys and your

Speaker:

public keys

Speaker:

for your coin

Speaker:

online

Speaker:

so if there's a

Speaker:

A flaw that can be exploited in your system

Speaker:

a

Speaker:

Hacker could potentially take control of that wallet

Speaker:

and drain your coin

Speaker:

so it's not

Speaker:

It's not a panacea. It's not perfect. I would say

Speaker:

Probably and this is not advice, but for me personally, I would say that it's better

Speaker:

To keep it in a hot wallet rather than on a crypto exchange. Now. I use centralized exchanges

Speaker:

centralized exchanges

Speaker:

From time to time to trade coin. I tend to not keep my coin on that exchange though

Speaker:

I just don't trust them. I've seen too much. I guess. I don't know. I'm too old. I don't know whatever

Speaker:

But I just don't keep my coin there, but I do utilize them. I'm not

Speaker:

I'm not to the point where I like I only use decentralized exchanges

Speaker:

all right, so

Speaker:

hot wallet

Speaker:

Metamask there's a a number of others

Speaker:

a cold wallet cold storage

Speaker:

Really?

Speaker:

It's probably a better word for it and I already mentioned cold storage talking about

Speaker:

Centralized exchanges cold storage is some type of storage that's not connected to the internet

Speaker:

Cannot have an internet connection if it does then it's not cold storage

Speaker:

How do you do that? Well

Speaker:

You can do that in a variety of ways

Speaker:

One of the best ways and if you have a significant amount of crypto

Speaker:

This is probably something you ought to think about is a hardware wallet

Speaker:

So this is basically like a usb drive most of you

Speaker:

If not, everybody's probably familiar with like a usb thumb drive

Speaker:

And you plug it into your computer

Speaker:

Which your computer should not be connected

Speaker:

when you do this, but you

Speaker:

You can

Speaker:

Load your coin up disconnect it put it in a safe put it in your pocket

Speaker:

Actually, you could carry it around with you. You could have millions of dollars

Speaker:

in your pocket

Speaker:

And that may sound crazy

Speaker:

And if I had millions of dollars on one, I probably would not carry it around with me, but it is certainly possible

Speaker:

One of the immediate questions that popped to my head when thinking about this is well

Speaker:

What happens if it breaks what happens if?

Speaker:

Uh, it gets smashed accidentally for whatever reason

Speaker:

So you can actually recover

Speaker:

What's in there?

Speaker:

Through what is called a seed phrase

Speaker:

now

Speaker:

This is not your private key

Speaker:

And there are differences

Speaker:

But you can use a seed phrase to recover a wallet

Speaker:

Actually, you can use the seed phrase to recover a metamask wallet

Speaker:

I've actually done that

Speaker:

But you can do the same thing with a hot wallet

Speaker:

So you can set up a new wallet and basically you can transfer over to it

Speaker:

Now that is pretty cool. So I have a hardware wallet

Speaker:

Maybe i'm in a car crash and it gets smashed up because I keep it in my

Speaker:

Pocket because I that's just how I roll

Speaker:

And

Speaker:

No, no now what will I order another and I put in my seed phrase and I recover it

Speaker:

And I go on my merry way now if i'm carrying it around and somebody says hey, give me that

Speaker:

And they're a mugger

Speaker:

What am I going to do? I'm going to give them that

Speaker:

Because they don't have the private key. They can't get into it

Speaker:

And they don't have the seed phrase so they can't recover it

Speaker:

So it's it's a it's a very secure system. It's not, you know, there's no system. That's unhackable

Speaker:

But it's very secure

Speaker:

That's not the only type of cold storage

Speaker:

Interestingly, well, you can use a software wallet in the same way

Speaker:

On an offline computer now to be cold storage. You have to be offline

Speaker:

But you could use software on your computer to actually manage that

Speaker:

You can use paper

Speaker:

Understand bitcoin. It's just a series of characters and you can actually write it out

Speaker:

I don't really recommend it. It's not very

Speaker:

durable

Speaker:

Uh, people could see it and especially these days when everybody's got a camera in their

Speaker:

In their back pocket, you could snap a picture of it real quick

Speaker:

And reconstitute it later if you knew what you were doing

Speaker:

You could even do it as a qr code. So those last couple of methods

Speaker:

They're not really very durable, but they do work and they're not online

Speaker:

So as long as they're not online, it's cold storage and as long as it's cold storage

Speaker:

You can consider it to be highly secure if not highly durable

Speaker:

Now if I were doing it on paper for some reason, I would have that locked up in a fireproof safe

Speaker:

Right now my thumb drive. I may choose to do the same thing with a software wallet

Speaker:

obviously, I can't put that in a safe and even though a software wallet may be

Speaker:

Free versus a hardware wallet, which they run between like 50 and 150 bucks

Speaker:

It's more difficult to work with a software wallet and I don't know. There's just to me the hardware wallet

Speaker:

Once you're serious about this, if I know that for the next 10 years, I'm going to be buying crypto

Speaker:

Cryptocurrency, I'm going to be stacking sats as the bitcoiners say or

Speaker:

You know, I'm going to be dollar cost averaging for the next 10 years and I know over that period of time. I've got a

Speaker:

An opportunity to to make a large amount of money

Speaker:

Right because I've looked at the last 10 years and I've realized that

Speaker:

I've realized that the adoption of crypto is just taking off and the next 10 years

Speaker:

Are going to make the last 10 years look like child's play that even if I were to lose one little

Speaker:

Piece of a coin it could potentially be a lot of money. Even if it's not a bitcoin, which now they're you know, 45,000

Speaker:

47,000 whatever it is

Speaker:

Because we don't know what it's going to be 10 years from now

Speaker:

10 years from now, my estimation is is it's going to be a lot more than it is right now

Speaker:

So if I were to even lose part of an eath right now, I would not be happy because i'm looking at the 10 years down the road

Speaker:

So to me spending the 150 bucks

Speaker:

The hundred hundred and fifty dollars or fifty dollars on my hardware wallet

Speaker:

It's an investment. It's not an expense

Speaker:

Hardware wallet. It's an investment. It's not an expense

Speaker:

That's probably the safest way that you can keep your crypto in the long term

Speaker:

It's not as easy to move it on and off but

Speaker:

It's definitely more secure and it's definitely something you should think about

Speaker:

Certainly in the long run if you're not if you're just getting started then, you know, maybe you don't want to spend

Speaker:

Even fifty dollars to do that. That's okay

Speaker:

Uh, just get going do something don't stand there

Speaker:

And do nothing

Speaker:

Uh, i'm going to include an article that was in forbes actually back in july of this year

Speaker:

About the best crypto wallets. I looked through it. It looked fairly reasonable

Speaker:

The top brands that they're recommending are certainly the most common

Speaker:

Top brands out there. It's not like they just

Speaker:

You know pulled something out of thin air. So i'm going to include that in the show notes

Speaker:

If you have any interest in that, I certainly get no

Speaker:

Compensation from that not looking to make any money off of that. It's not the deal

Speaker:

Not at all

Speaker:

I just want you guys to be safe. I want you to be secure

Speaker:

I want you to not be up at night worried about your coin. Oh my i've got thirty thousand dollars

Speaker:

On this exchange and what would happen if you know, the exchange came apart. I don't know

Speaker:

Six years later, maybe you'll get money back possibly right like what I was talking about with mount cox

Speaker:

And the funny thing is they expect us to remember our password

Speaker:

so

Speaker:

Anyways, that's kind of my brief introduction

Speaker:

Looking at probably 15 or 20 minutes talking about hacking

Speaker:

Uh certainly would get you off to a good start give you an idea of

Speaker:

You know, where are you at?

Speaker:

And where you need to be. I didn't actually talk about password security

Speaker:

I've been in the computer industry for a long time. This almost falls under common sense, but

Speaker:

You know don't use password for your password. Let's not be stupid come up with good passwords

Speaker:

Preferably a completely randomly generated one. Do not use the same password

Speaker:

on different sites

Speaker:

Beyond the scope of what we're really talking about. But if you can't keep up with your passwords get a password manager

Speaker:

I actually use um

Speaker:

I've used two for a long time. I use data vault. I just recently switched to key pass

Speaker:

Which is an open source password manager works really well across a wide variety of

Speaker:

A wide variety of computers guys. That's going to wrap it up for the week. There's no real news this week

Speaker:

I don't really have any news items to cover not aware of any countries that adopted bitcoin this week

Speaker:

I wouldn't be surprised if one stuck past me

Speaker:

market's actually been kind of

Speaker:

Going sideways got a little bit of dip going on over the weekend, but i'm pretty sure that tomorrow

Speaker:

Early next week. It's going to pick back up

Speaker:

but uh

Speaker:

You can always reach me at mccintosh.fintech

Speaker:

At gmail.com that's m-c-i-n-t-o-s-h

Speaker:

dot f-i-n

Speaker:

t-e-c-h

Speaker:

at gmail.com

Speaker:

Let me know what you're thinking got questions. I'll certainly do my best to answer those

Follow

Links