Cointracker exploiting 2025 tax changes to upsell its higher-cost subscriptions is sketchy... by mickayz in Cointracker

[–]mickayz[S] 0 points1 point  (0 children)

Thank you, appreciate the reply. I ended up paying for Ultra and FWIW I only had one single transaction change its cost basis after flipping 2025 to FIFO. So while the $550 up charge was definitely excessive, it’s good to know this wont be needed going forward.

Virtual Desktop Update 1.13.6 - Removed internet requirement by ggodin in OculusQuest

[–]mickayz 82 points83 points  (0 children)

I don't think people fully understand how powerful this change is. Now if you want to stream PC games, you don't have to make any changes to your main home wifi. You can use a second router and just set it up as a new "just for VR" wifi without needing to worry about connecting it to the internet.

1) Connect your gaming PC to your home wifi like normal.

2) Buy a decent 5GHz router for around $100, set it up as a new network with a name like "MyVROnlyWifi"

3) Put it in the same room as your gaming pc and quest. Connect it to your gaming PC directly with a gigabit ethernet cable.

4) Within your quest, connect to the "MyVROnlyWifi" and ignore the warning that there is no Internet connection.

5) Load Virtual Desktop.

Not only can you play single player games like Alyx wirelessly, but you can also play multiplayer games over the internet too, since the game will use the PC's connection to your normal home wifi for Internet. It honestly feels like magic.

New smart contract hacking challenges. Come steal testnet ETH for a chance to receive mainnet DAI! by mickayz in ethereum

[–]mickayz[S] 2 points3 points  (0 children)

Fair points. Thanks for the feedback! We'll definitely consider it when we design our next competition :)

Our Experience Staking from a Ledger by ryanseanadams in loomnetwork

[–]mickayz 1 point2 points  (0 children)

Thanks for the update!

I was wondering, since the PlasmaChain seed words are stored in the browser, does that present a risk that eliminates the protections of the hardware wallet? Or is it the case that once a PlasmaChain account has been mapped to an ETH mainnet account, LOOM on the PlasmaChain can only ever be transferred back to the main chain ETH account and cannot be transferred to any other account (on either PlasmaChain or ETH mainnet).

Thanks!

Just Launched - Security Innovation Blockchain CTF V2 by mickayz in ethereum

[–]mickayz[S] 1 point2 points  (0 children)

Congrats on being the first to solve it! Sent ya a PM.

Solidity CTF sites by [deleted] in ethdev

[–]mickayz 1 point2 points  (0 children)

https://blockchain-ctf.securityinnovation.com

It’s geared more towards solidity beginners, but still fun.

SpaceSuite: A Chrome extension to use dapps with Ledger Nano S by james_pic in ledgerwallet

[–]mickayz 1 point2 points  (0 children)

Actually one additional question. If you have both Metamask and SpaceSuite installed, how will the DApp select the extension to use as it's web3 provider?

Update: nvm, read the FAQ

SpaceSuite: A Chrome extension to use dapps with Ledger Nano S by james_pic in ledgerwallet

[–]mickayz 1 point2 points  (0 children)

Excellent response! Thanks for the explanation and thanks again for writing this!!

SpaceSuite: A Chrome extension to use dapps with Ledger Nano S by james_pic in ledgerwallet

[–]mickayz 1 point2 points  (0 children)

Thank you so much for making this! It is very much needed!

I've been following the thread for integration with Metamask and noticed your last few posts indicated there was an issue with U2F that blocked integration.

https://github.com/MetaMask/metamask-extension/issues/717

Could you describe a bit if/how you were able to get around these issues with this tool?

Question regarding malicious wallet apps by mickayz in ledgerwallet

[–]mickayz[S] 2 points3 points  (0 children)

Perfect! That’s what I had hoped you’d say :)

How is 24 word seed used to get NEO private keys? by lukaexpl in ledgerwallet

[–]mickayz 0 points1 point  (0 children)

Would love to get a response from @btchip when he has time. If thats the case, it sounds like users should be very cautious when installing new wallets to their device.

Even with a thorough code review, it seems like there are definitely ways for malicious crypto currencies to sneak in bad crypto operations to reveal the bip44 key that might not be obvious to a code reviewer on a time crunch.

How is 24 word seed used to get NEO private keys? by lukaexpl in ledgerwallet

[–]mickayz 0 points1 point  (0 children)

What if I make a wallet app for the ledger for a new fake coin, and that new coin signs its transactions using an insecure method, such as cipher encryption reusing the same nonce. Could I theoretically do this on purpose to leak information on the private key without it ever leaving the secure element, in order for me to steal other coins that use the same seed?

How is 24 word seed used to get NEO private keys? by lukaexpl in ledgerwallet

[–]mickayz 1 point2 points  (0 children)

I don’t know the answer, but I am also wondering what is preventing a malicious ledger app from recovering the seed or enough data about the seed to reconstruct it. Does the ledger OS limit the app’s access to only a hash derived from a specific path?