Live data from Hacker News

Casa Client Case Study: The Tinder Trap

blog.keys.casa

21–30 of 211 posts

Re: Casa Client Case Study: The Tinder Trap

#22

While the article seems part-advertisement, the risk is real. Best not to let strangers know your worth, and use multi-factor authentication everywhere. It's a disgusting (and beautiful) world we live in!

But one point of the article was that he did have MFA - and it's no use in this scenario (attacker had physical access to second factor)

Re: Casa Client Case Study: The Tinder Trap

#23

While the article seems part-advertisement, the risk is real. Best not to let strangers know your worth, and use multi-factor authentication everywhere. It's a disgusting (and beautiful) world we live in!

> While the article seems part-advertisement

It's all advertisement. The first paragraph is "Spoiler alert: their funds secured via Casa multisig remain safe."

> the risk is real.

I'm not so sure, I think there's a good chance this was made up. Unless this victim let on how much cryptocurrency he had early on in the conversation, this whole scenario seems too high-risk/low-reward to be very real. I mean, a Tinder account backed by a real person (supposedly with real photos to not put off the mark), waiting for people interested in cryptocurrency to steal it? Not drugging a lot of small fish who were bragging and attracting the attention of the police before finding a whale?

Re: Casa Client Case Study: The Tinder Trap

#24
post #7

This is one of my biggest fears. As a result I use the supposedly not ok, security by obsecurity. (Along with other normal precautions) I don't tell people which Bitcoin wallet I recommend, I simply say "I don't tell people where I hide gold". Although not sure if I could survive devil's breath.

I prefer to use security by obesity. Meaning I won't get any Tinder dates so my accounts are safe.

Overweight people are worthy of, and capable of, finding love. I know your comment is in jest but it also propagates negativity in a way that is corrosive to others’ self-worth.

For those who read your comment and feel bad that the humorous angle is reality to them… it isn’t. Don’t let the world make you feel bad about yourself.

For those who read it and get a chuckle about fat people… your world view may benefit from some compassionate adjustment.

Re: Casa Client Case Study: The Tinder Trap

#25

But if you don't have the keys to move your money, it becomes a lot less useful as money. It's still like gold though, something that you have a sort of vault that you rarely visit. If you got drugged and someone took your phone to do a bank transfer, I would imagine there would be some hope of reversing the transfer, with a whole lot of painful steps. With crypto it's pretty futile if they manage to move it. Also th…

It’s pretty easy to make it hard to move your crypto while you maintain access to all keys involved. It becomes even easier if you use a blockchain that supports smart contracts.

Something as simple as using a contract to delay any coin transfers with one or more keys that can stop the transfer is trivial to implement.

Even simple multi-sig is pretty good assuming you don’t rely on two keys both stored in your phone.

For everyday payments, you can use a mobile phone wallet without these protections and worst case you lose a small amount of money if someone takes your phone. It’s just like getting your real wallet stolen and losing cash.

Re: Casa Client Case Study: The Tinder Trap

#26

If the money were in a bank or investment account, the worst this guy would have to deal with (in the US) is a little aggravation when getting the fraudulent transactions reversed. Personally I wouldn't reveal to strangers that I'm into crypto. It's like broadcasting the fact that you've got thousands of dollars of cash in your pocket.

I got roofied once in a bar and the next thing I knew I was going back to my place in the back of a car. They gave me weed, too. You are completely out of it, you will say whatever they ask you. This is how truth serum works, at its core.

So, the girl(s) called Chase posing as my wife and transferred $500 out of my account. A nice chunk of cash, but not too greedy so I could let it go and not pursue it any further. You swallow the embarrassment and move on with your life.

Re: Casa Client Case Study: The Tinder Trap

#27

"Not your keys, not your Crypto" is good advice, but I personally prefer to leave my wallet in the hands of a trusted large exchange like Gemini, Coinbase, or Kraken. Not only do they have better security than I do, they also have a whole slew of extra barriers in the event a malicious actor wants to drain my funds. I can freeze withdrawals, whitelist specific addresses, and put time/wait barriers to all of these thi…

What if any of those exchanges get hacked or exit? Store offline.

What happens if you get hacked? You lose all your money.

The question isn’t what happens, but rather how likely it is to happen. I wouldn’t trust any of the current exchanges with my life’s savings, but up to around 20% is a different story.

Re: Casa Client Case Study: The Tinder Trap

#28

But if you don't have the keys to move your money, it becomes a lot less useful as money. It's still like gold though, something that you have a sort of vault that you rarely visit. If you got drugged and someone took your phone to do a bank transfer, I would imagine there would be some hope of reversing the transfer, with a whole lot of painful steps. With crypto it's pretty futile if they manage to move it. Also th…

I suppose you can have a spend wallet and a net worth wallet.

Makes sense to me. I keep maybe $1200 USD in the account tied to my debit card, and anything above that in an account w/o a debit card.

Re: Casa Client Case Study: The Tinder Trap

#30

If the money were in a bank or investment account, the worst this guy would have to deal with (in the US) is a little aggravation when getting the fraudulent transactions reversed. Personally I wouldn't reveal to strangers that I'm into crypto. It's like broadcasting the fact that you've got thousands of dollars of cash in your pocket.

A little aggravation? lol not in my experience
Post reply on HN