@sid_nirvana_fi
@sid_nirvana_fi

I left a little gift for you. Do not open til Christmas 40,000,027 AD. -----BEGIN AGE ENCRYPTED FILE----- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNjcnlwdCAxZkFiRzhPU24vU0pnQy8x YWlBY1R3IDE4CnN6UFFTcVg0VTF4K0xDZTlpYVNZUnJQQmpQZWxySUNQMkdlYXhu Z2MyNHcKLS0tIDBvTjQwbFE4bTgydTVwV1VZUWg5dG5OQXVNWTVHdFE4RzZrR2xT eUt4aHcKLevHi4k80grNqdAU103UrMNX5h++THwl+ReCwzOfDHMwj4AuCW2R5qGz xpNdWWX1eodU309FXoNCgw== -----END AGE ENCRYPTED FILE----- This is what "paper keys" should look like. And this is how you can store them. The zen of key management is: there is no "key" to steal or to lose. Just encrypt, and exhale. Otherwise: If you try to lock down a plaintext key, you're in a double bind: 1. If the only copy of your key is in the fire-proof safe that got washed away in a flood, game over. 2. If the key gets stolen, game over. What a constant-anxiety cocktail. But if the key is encrypted? Well, it's pretty hard for me to lose it now that I put it on Twitter. And those would-be key thieves can have at it all they want. Whenever I need to use this key, I'll just type in the password, and be back to slinging my stack of CryptoKitties NFTs. Oh - did I just give away the surprise? But where is the "actual" key? No where. Not in a safe. Not in a password manager. Not etched in platinum. There is nothing to leak, and nothing to misplace. -- If you got yourself a Ledger "hardware wallet", you'll see they ship it with a little piece of paper that has the plaintext key written on it. (Just typing that last sentence makes me want to pull my hair out) Now, my brother, what do you do with this paper? Hide it? If the Ledger bricks (which I've seen happen) and the paper gets lost/stolen (which everyone has seen happen), you're done for. The fragility of that method is nerve wracking to the extreme. Here is how to reduce your key management anxiety dramatically: 1. Create an encryption key. This is your Master Key, and new best friend. 2. Encrypt that encryption key with a strong password. 3. Shred all remnants of the plaintext Master Key. 4. Now use your encrypted Master Key to encrypt all your "wallet private keys". It's easy: type in the password to decrypt the Master Key, and use that to encrypt all your "private keys." 5. Shred all remnants of your plaintext private keys. 6. Whenever you need to use your private key to sign something, reverse the process: decrypt the Master Key to decrypt the private key, and sign the thing. Diversify and make redundant to taste. Store copies of your encrypted private keys. Store copies of your encrypted Master Key. However much or little you want. As long as you have a good password, it doesn't really matter if it leaks. In one line: The key to storing keys is encrypt them with an encrypted key.

x.com
@ciphrd
@ciphrd

Statement about the future of fxhash Hey fx community, As you are aware, these times have been hard for platforms on NFT markets, and we're no exception. We recently had to scale down the team and have been working on scaling down our infrastructure. At this point in time, no one in the team is getting paid, there's myself and a handful of volunteers, as we're essentially running out of cash. I can understand why many platforms stopped trying, building this kind of product is draining you to the bone. That being said, I am committed to getting us through this rough patch as I still deeply believe in such a tool existing for artists, but it's clear that the current model is not working. I've been thinking a lot about the future of fxhash, if any, and it came clear to me that the platform drifted from its initial goal of serving artists primarily along its journey. I think at the root of the problem is that a tool serving artists should be fully owned by its users, and not operated by a small team of people, regardless of how benevolent might their intentions be. While it's always been a long-term goal of ours to fully decentralize the protocol at some point, now seem to be the only opportunity we'll have at it. It only seems like a tangible path towards the future in case the company could not keep supporting the product. We're close to securing some money as a loan / investment, targeting end of June. Once we get this cash, it's clear that we will need to immediately change our trajectory. The plan - reduce operational costs to a minimum - 4k$/mo in services -> will require 1-3 months of work - 8k$/mo in employment -> reemploy a very small and focused team - 2 devs - 2-3 part-time members for helping across the board (admin, marketing, artist liaison, community, etc...) - transition towards decentralization - implement a DAO - open-source everything - figure out pipelines to slowly decentralize decision-making and ownership, from governance towards implementation - open books: company financials for everyone to see - first order of business to solve together: financial sustainability, targeting profitability - consolidate the core product through governance - chains supported - features available - etc... This is the very last time we'll be able to raise cash in our current state, so essentially this will be our last shot at finding a way to build a sustainable long-lasting ecosystem. But I deeply think that the only way to do so will be collectively. It's essential that we reduce operational costs to a minimum until we figure out a sustainable path in the future. The bridge till June It's unclear whether we will be able to keep all the services running until we get cash. We took all the steps that we can and informed our providers, but their policies are understandably strict, I'll keep you updated about this.

x.com