whoisjohnkid

The hardware wallet a.k.a cold storage, is predominantly protecting you from key exposure.

The thought process is if your private key is on an internet connected device there’s always a possibility that it can get compromised.

A hardware wallet will generate a private key for you offline and you can sign transactions in an air gapped fashion. e.g.

You might have a ‘watch only’ wallet on your phone that only has the public keys. When you want to move your funds the watch only wallet will create a transaction that is not signed. It will then display the transaction as a QR code that your hardware wallet can read.

From there the hardware wallet gets the transaction and is able to sign it. Then your ‘watch only’ wallet can read the signed transaction via an QR code from the hardware wallet; all without ever exposing the private keys to an internet connected device.

Thinking in Systems by Donella Meadows

This introduced me to systems thinking which gives an interesting perspective on how to solve complex systemic problems.

Concepts can be applied to engineering or any other field

terraform and AWS’s free tier. Only costs are route53 costs which depending on your setup you can also eliminate.

I’m usually utilizing a static site generator for main site; usually S3 behind a CDN.

Then I’ll typically have my services written in go running serverless behind apigateway. Then locally I just have my services running on a generic http framework.

Hmm, even though LastPass doesn’t have access to your pass, couldn’t a malicious software update cause attacker to view your passwords when it runs since the software ultimately has access?

This doesn’t seem to be the case in this incident though.

Air gapped wallets can utilize QR codes to sign transactions. Look into PSBTs (partially signed bitcoin transactions).

Gist is you can create a transaction from any device that doesn’t have your private key … send that transaction via a QR code to your cold wallet, then your cold wallet can sign transaction and create a new QR code for the other device to use.

Woah thanks for sharing your situation. Talking about it to others sounds like a step in the right direction.

One thing to consider is what you are teaching your kids by staying. Kids have a habit of picking up on these things at an early age and can internalize the unhealthy relationship you have as ‘normal’.

Woah this is awesome. Does anyone know if this is using web authn under the hood? Or is this a new spec? Would love to see Pub/Priv replace passwords

This is great. I’ve been looking for documentation of using the new al2 runtime with go and this fits the bill. Thanks for the excellent article.

I absolutely love DynamoDB. Would definitely recommend the DynamoDB Book by Alex Debrie and Advanced DynamoDB Patterns by Rick H on YouTube.

Once you understand how to properly use dynamo and what it’s good at it you get so much power; at a fraction of the cost depending on your workload.

Was a breeze to setup multi region applications that utilize the single table design strategy.

If you ever need complex queries just use dynamo streams to power whatever search solution you are comfortable with.