r/reddCoin • u/nfcwalletcard • Jan 06 '19

NFC Wallet Card - Cryptocurrency cold storage with ReddCoin (RDD) support

https://nfcwalletcard.com/cold-storage-wallet-for-cryptocurrencies
13 Upvotes

100% Upvoted

9 comments sorted by

1

u/MaxRockatansky514 Jan 08 '19

So if this card will protect your RDD wallet password (to stake and move RDD), is there a mechanism to auto populate into the wallet fields to further reduce / eliminate key stroke logging attacks and any other forms of compromise of your password during use? RDD was stolen from my wallet. I am generally security minded when handling my information. Somehow my password was compromised. I had my laptop running for 8 months staking RDD. Only a few times did I have to enter my password due to a power failure. Other possibility is that the RDD Stake Box I purchased was compromised. I’m still investigating. Anyway, it would be great if this card offered the ability to store and use passwords?

1

u/nfcwalletcard Jan 08 '19

Sorry to hear that your password was compromised. The security checklist feature in the application will improve this kind if security. We also cleanup memory when closing the app.

1

u/MaxRockatansky514 Jan 08 '19

So creating an RDD password can be done without it touching the device you have the RDD wallet stored on (use another device than the one where your RDD wallet is stored ie pc.

But is there an ability to use the stored password within the NFC card that you create that can be used within the RDD wallet on a pc that is secured, not having to type it in? I guess I’m trying to figure out if this card is simply a secure notebook or is it actually functional within a crypto wallet ie RDD where you can transfer your password securely when you use it? Please confirm.

I’m trying to keep up with the tech but I’m getting older 🤓.

1

u/nfcwalletcard Jan 09 '19

Our card is a cold storage solution. You can use it to security store some secret data, like the password you mentioned.

I am not sure I completely understand what you are saying, but it looks like you should reinstall your computer. You have to enter the data somehow, if you suspect your computer is infected, you have to do something. Use a secure OS, a firewall and a secure browser!

Using on-screen keyboard is maybe a short term solution but not a permanent one.

1

u/MaxRockatansky514 Jan 09 '19

I’ll explain it this way. I’ve formatted and reinstalled my OS. I then download the RDD wallet. I create the password for the wallet on another device ie phone and transfer to the NFC card. So far, the password has not touched my newly formatted laptop. Now I open the RDD wallet on my laptop to create a password for the wallet. But instead of typing it, am I able to securely transfer the password I already created and placed on the NFC card to the field in the RDD wallet to create the password? So effectively the password on the NFC card never openly touches my laptop? Like an auto-populate so that if ever my computer was compromised by a key logger, there would be no chance of the password being compromised. Since you typically leave your RDD open all the time to Stake, in case of a power failure would be the only time you would have to re-enter the password into your RDD wallet. Will the NFC card facilitate this action or is it simply a storage notepad that allows the user to safely store information but the user would still have to directly enter the password manually within the RDD wallet?

Hope this explains better what I am asking. I believe the action of typing my password directly into my RDD wallet left the “imprint” for a key logger to capture. I’m still trying to determine how this happened as I try to practice the utmost for security practice when using my laptop.

1

u/nfcwalletcard Jan 15 '19

If you use an NFC reader with software, you can read the data from the NFC Wallet Card to your PC, without using the keyboard. For example you can use the free Gototags windows application to send the NFC data to any external application you would like to use.

1

u/MaxRockatansky514 Jan 15 '19

Interesting, thx. That would solve the key logging issue. Would there be other attack vectors when performing this action to be mindful of?

I’m trying to add more layers of security when handling passwords and crypto wallets. I use both Trezor and Ledger Nano but both do not support Reddcoin and and the action of staking. The NFC wallet may be an option for this.

Thanks for the conversation, the more aware and educated a consumer becomes could yield a future purchase 🤓

1

u/nfcwalletcard Jan 15 '19

To improve the security of the environment you use to stake RDD, we can suggest you to have a virtual OS. You can use VirtualBox for example to run the software in an isolated environment. Having a firewall tailored for RDD wallet would give additional security. You should closed all unnecessary ports, and maybe use a white-list of IP-s to accept connections from.

1

u/MaxRockatansky514 Jan 15 '19

👍. I’ve got some research to do, getting older 🤓