I'm steady trying to find the motive.

Wait a minute.

Close.

Car stolen. Stolen registration.

Stop me and I get blocked.

Ballet.

They won't let me down. They won't let me. They won't let me.

No.

They won't let me know. They won't let me go. They won't let me.

Turn Uptown to.

Water blocks on fire.

Thank you so much. Money products moving fast. Put away those fast as a soldier left back around and got locked up won't let me down.

They won't let me.

People like me.

The homeless.

No.

They won't let them.

They won't let me.

Good morning.

Visitation no longer comes by. Seems like they forgot about the commissary is getting empty cell.

Good evening, good evening, good evening everyone.

Wait to see you guys joining us for Ohh Naji, you presents the Commons. If you would please toss a couple of emojis up, let me know you can hear me. And while we're doing that, go ahead and tweet the space out. We would love to. OK, I see one. Thanks. Awesome. Yeah, great. OK, cool, cool, cool, cool. If you've got a free moment, take a moment to tweet out the space. I'm very excited for our conversation.

Today.

Um, hold on just one second.

We're going to get started with our wallet security.

The conversation with Kenneth Therium. So Dr I think you have requested we're going to wait until a little bit toward the end for to open up and allow others to grab the mic. We're gonna talk how to get our conversation started and if you would like feel free to to stay with us and we can come on back up. And until then if you have any questions or if you got some comments that you would like to that you would like for us to see go ahead and use that.

Purple bubble right down on the lower right hand corner. That's our messages in our chat, so feel free to pop any questions that you might have there before we open up our space. So from our formal introduction, I guess I should give today. Welcome to anaji, you present the comments. I'm boss 2.0. My special guest today is Kid Etherium. We will be talking about wallet security if you have been on my timeline or you follow me or.

Get there, we've been seeing.

A great thread that we that Kitty Therium posted last week about multi Sigs and we're gonna pop that up as we get things started, but if you would please get in there and go ahead and introduce yourself to our comments guests today.

Hello, can you hear me fine?

We can hear you. We can hear you.

Awesome, awesome. Yeah. So yeah go by Kenneth Therium or Kianu. But yeah I'm a cyber security researcher. You know, smart contract, dabbler, all sorts of different things. Like to think of myself as a cipher punk. But yeah today I'm going to go over some like wallet security, hunk, cold storage, multi SIG, how they all kind of like tie in together and just taking like a a different perspective and lens at it.

Awesome. I'm, I'm excited for the conversation. I came across Kenneth Therium in a space with take up space, another diversity, equity and inclusion project. And you were talking about security in that space as well. And I remember following you and was like, hey, that was like a super great space. Like I got some great information out of it.

And you know, we've now come full circle to you out in the space and then you're back in in a space talking about while security again. So I'm super excited for our conversation.

And it's it's one and we've we've had this this conversation it's one that.

We talk a lot about, but it's I many times. I don't really feel like we get as in depth as we need to to be able to really share the information and the education with people who are new to the space or people who are continuing to learn more about being here in the blockchain tech space and about how to keep yourself safe. As you saw play Acons locked up, I feel like that's what my.

My NFT's be singing over there in my wallet cause I don't connect to that thing.

But let's see as we jump into our our conversation if we can get some great tips. So I'm excited to jump in and get started. So I believe we're going to start with with some with some metamath security. Is that true?

Yeah, definitely. So meta mask. There's just a couple things with Meta mask that I like to like go over with people using. We're setting up their first wallet and everything. And the way we got to think of Meta mask is it's an access to the blockchain that creates a wallet for you, essentially, that you can use to, you know, log into different sites, store, enter PPS tokens, all sorts of different things like that. But there are a few things that people don't really go to.

That are quick easy tips like going into the settings and you know if you open up your meta mask and click on your wallet you'll see an option there that says settings and down in there.

Pull this up. My computer is being really slow right now.

Yeah, so if you open up the settings in your meta mask wallet on your phone, you'll be able to actually see what connections are attached to your wallet. And you know, if you are buying NFT's, if you're staking things, they'll be across a lot of different platforms and you'll see these things attached that might still be there that you kind of don't want to. If you've connected it to a website to go into mint something, your wallet will be there and it's just public, so it's not anything bad. Yo

Oh, I think we lost you there for just a second.

And we were right in the middle of some good stuff. Alright, hold on just one moment.

As we can figure this out.

Then you know they might see your wallet address, but they don't get any information from that. So if you open up like your setting.

There you are, you coming back.

All right, hold on just one second. We'll get him back up.

Leaving and come back. Alright, so as as we were talking about as we get there and back again, we.

There we go. A lot of the information that we have today, well, I'll definitely make sure to.

Make note of and share later. Not only I'll probably toss it, toss it in the thread as well because some great information that that we all need to know. Alright, we've got you back. Go ahead and give us a test real quick. Can you hear us?

There we go.

Sorry about that. I opened up my meta mask wallet and then like did my facial recognition and then popped off. So yeah, there's that's like one of the few things that you can do with meta mask is removing wallets and stuff from the settings. You also can go into ether scan and there is a function within there that I'll actually post the link to here in the comments, but you can go in there and actually you get a little bit more in depth you can. So I have these NFTS and they were called like maj

I was staking on their website, kind of just messing around with these NFT, seeing like what happened when I wouldn't stake them on the website. And actually I had forgotten about it last night. I was in Etherscan and you know, we were having our conversation. Plus, you know, I was going through and removing all these websites that were connected and staking things and contracts that were actually connected to my wallet. So yeah, it was really simple to use. You just go and either scan, there's

Connect to Web three wallet, and. So you connect your wallet, it shows you what's currently going on, and then it does cost a little gas to remove those items, but.

It was like maybe a dollar to $3.00 at most, so nothing too crazy. But those are like the two big things with keeping your meta mask clean, making sure it's, you know, you got your hygiene going on every day and, you know, checking every connection that you fill and create, whether it's on a website, whether it's on some sort of staking mechanism, DEFI apps, or any sort of stuff like that.

Yeah, that I think that was the on meta mask, it was called the token approvals, right?

Correct. Yeah.

Yes. So yeah I got a chance. I checked all my wallets went up up against that because just like with ether skiing you can you can connect those those wallets and you can also just look at look at other ones that you put into that that search bar as well. And I did have a couple in some minting wallets that I don't use very often like I might miss something else to transfer to to one of the other women so that that I keep there a little bit safer than the things that I than the wallets I used to

But it was pretty easy to go in and revoke those and it'll tell you if there's one that's at risk or there's something that looks a little bit fishy. So I did not know that you could that that same functionality was available through either skin. So that was something that I thought was was really super beneficial.

Yeah, the ether scan one is definitely more in depth. It's like actually removing those contracts from your wallet and detaching and completely so like. And then just for clarity because I might was kind of cutting out earlier with the meta mask thing. If you open up your meta mask, I can't do it on my phone and now it's trying to follow with it. But if you open up your meta mask and click on your wallet, you'll actually see these three dots over on the right side. And if you click on that optio

Account details view on etherscan and connected sites and what you want to go to there is connected sites and then you know I can see like ohh I'm connected to Decentraland still I'm still connected to ENS and poet and Centra and lens and like all these different sites and I'm like I go across all the time if I'm buying NFTS and stuff like I build up a lot of them. So essentially what you're doing with this is like a clearing a cache and cookies and then going on ether scan to the link that we'l

Our contracts from any interaction with your wallet address.

And so is that, is that different than the functionality going through meta mask or is it the same are they do, are they pretty much doing the same thing like pressing that disconnect versus going to either skin and paying the gas to remove the contract?

They are different. So when you go into meta mask and disconnect your account from the website, basically what you're doing is just logging out of that website with your meta mask. And then so you know, if the if a hacker gets on any of their stuff and they're like OK, these are all the wallets that are attached to your website, you know, and they find that data and they start using it to you know, somehow start, you know air dropping you NFTS or whatever. It's just logging out of those websites

You know, if you go into etherscan, that's where you're actually detaching your wallet address from the smart contract.

Alright, so that is that is that is very, that's very much that's.

That's a larger line of defenses. It's actually detaching that that wallet through ether skiing and that is like the the actual full cutoff like no more access talking in between what you're connected to and and your wallet. So that's much more comprehensive than just disconnecting through meta mask.

Correct. Yeah. And then that like kind of like gets me into like the next subject of like hot and cold storage, I think. I mean, like a lot of folks kind of gloss over the hot and cold storage thing because, one, it kind of takes some sort of technical knowledge to set up any sort of wallet like Ledger, for example. And that does take some time and explaining. And you know that some people are like usually going to the Quick guide on the Ledger website and then probably just like paying attentio

And, you know, reason for these Ledger wallets. I like to kind of explain in the metaphor of like say I own a bike and, you know, I'm going to my public school, you know, and everyone knows that that's keanu's bike for kid etherium spike. Because my stickers on there, it's my color and they see me come in with it every day, right? And then I, you know, some someday, you know, someone comes by and they steal that bike. You don't have no security for everyone I know, I trust at the school knows th

Then they're not going to take it. But then you go into a second layer of security by by getting your bike chain, and then you have a combination key on there or a physical key that you put in the lock, depending on how strict you want to be with it, right? And then, you know, now I have a second layer of security on top of my bike that I can, you know, rely on and know that you know people aren't going to come by and be able to steal us because they need to know the combination to get to my bik

Um, take a little bit further, further and bring it into like a Web 3 mindset. Think of it as, now I have a motorcycle and I need to, you know, I own a key to that motorcycle. So that's basically my private key to my motorcycle. And then, you know, I leave my motorcycle out and somehow some smart hacker comes along, gets into my bike from the computer or, you know, hotwires it or something like that and steals it. Then you would, you know, bring in your secondary layer of defense.

Which would be like chaining the motorcycle up to something which I know sounds ridiculous, but then just for like an example. So then you think of the chain as a Ledger wallet. You know my main wallet, which is the motorcycle, which is my meta mask wallet. I know the private key for. I own a key for that so I can, you know, operate it and turn it on and stuff. But you know, now we're in a world where hacking is so much more advanced that someone can come by and get into these things. So we have

Something. So yeah, think of it that way as layering on security and a lot of that. Another misconception that folks have about these wallets is that your crypto is actually stored on the wallet off chain. That's actually not true. Like most of these, you have to think of them kind of like the lock thing I just said. The metaphor there is where you have a met like tournament match, sorry, a Ledger wallet that you're you know, it's attached to the blockchain, specifically the.

Ethereum blockchain and you know you have the private key that you generate for your meta mask and then I can go and put that lock on anything that I want to for my Ledger. So I can take my Ledger, throw it on meta mask, throw it on Queen base, throw it on crypto.com or any other sort of things that I want.

I like the I like the analogy of the bike and the biking that, you know. That's something that I'm able to kind of visualize and understand easily.

But.

As far as you know, having our our seed phrase and.

Making sure that we keep that safe.

I think what I'm trying to ask is.

Why aren't these wild? Why is? Why are things like a like a seed phrasing and keeping that safe not enough to keep our wallet safe?

So why? Why is keeping your seed phrase not enough to keep your wallet safe? So yeah.

So we we have our bike and we have and we have everybody that that knows that that that's our bike. Like, how come that isn't enough like.

Like if I if I'm very, if I'm the first time coming in to to Web three and I have this wallet and I'm like well why do I need this Ledger? Like why do I need this key? Like it's me that's not keeping this phrase enough.

Right, right. I think, I think the biggest thing there is because honestly, because we're human, we forget shit, we lose stuff, you know, we're not very careful with our things, you know, and we need extra layers of security, whether it be on your house, you know, you put a lock on your door so you know, animals and other people don't get in, you know, you put garage openers that are only activated by you by a personal fob that you own. You know, we, we kind of automate and secure a lot of thing

And you know that also layers into securing yourself in web three and making sure that like you're practicing you know the correct hygiene of not losing your Social Security cards, locking it in a secure place, not losing your bank cards, you know, putting them in a physical wallet in your pocket. And that's right next to you, you know, you know the the security goes on and on and it's even like the layering of cakes and kind of go into multi signature logs say I have a meta mask wallet that.

I want to purchase and appease or move transactions and all sorts of stuff like that I can actually take like give you a wallet whether it be on meta mask, Ledger, whatever. I can give Miyagi a wallet because I can see him there and I get myself a wallet and then so basically you would set this wallet up to say, hey every time we go to make a transaction, purchase an NFT, do any sort of work like that we we need a signature from two of these three persons.

And we can all know each other or we could not know each other. So like say, you know, if some sort of hacker got new all three of us and it was, you know, planning on attacking all three of us with different links and stuff and compromised all the wallets, then that'd be kind of like easy for them, right? But if we split up those people so they don't know each other, that makes a little bit more advanced. So you're basically layering on different layers of a cake of security, essentially, wheth

So people want to keep their assets safe and we are human, so we tend to forget things. You know, we're not going to be able to be on top of that, you know, 24/7, 30 to 365 days a year, you know, so, yeah.

Yeah, I just, I just asked that question for the, you know, for the people that are like well this that this is so much just me not having this wallet and making sure I keep this keep this seed phrase that you know this golden ticket, this golden key to all my NFT's and my crypto. How come that's that's not enough?

I would love to jump into the the multi threaded conversation because this is something that I myself have been quite interested in for a while and I know it's the subject of the thread that we that we put up here on the Jumbotron. But before we jump into that I'll take a second to just reset the room. This is ohh. Now do you present to the Commons I'm boss 2.0 we are talking to kid Etherium about wallet security. We've already kind of covered meta mask and.

How that that that metamath wallet that we have is is pretty much your access to to the blockchain and how we can go into settings and and.

Arlington, the purposes log our wallet out of of a website, but to be able to actually cut off you know the the functionality between your wallet and what you're connected to that we have tools in either the end that can help that and we also went over hot and cold storage and so let's, let's jump into this, this multi signature wallet because I know this is something that you're passionate about and like I said it's been something that I've been interested in as well.

Yeah, this, this is this has been something that's really fun for me because like I've kind of just challenged myself to dive into the technology. It caught my eye the other day. It's been around for a long time, originally created for Bitcoin wallets and that kind of thing. And yeah, like, so I kind of just dove into this, read up on a lot of things. There was a great article by Vitalik Buterin that he wrote about social recovery, while it's not really opened up my eyes to to more methods than

And how it was being used, especially like in corporations and businesses, there are certain corporations out there that would that are using multi signature wallets and all that kind of stuff. So yeah, like diving into it, you could have like I said earlier, multiple wallets to open up a single wallet and you know multiple blockchains are doing this. There's Monero that has one. I was messing around on the Ethereum blockchain with open Zeppelin defender and one of their Oakland Zeppelin.

Desert contract makers. So like I'd make just as a simple you know 721 NFT contract and then I would attack like deploy that from my wallet and then afterwards I took my wallet that I deployed that contract from and added three other wallets. So anytime I wanted to make a transaction if I wanted to mint an NFT on that smart contract that I deployed I would have to approve it through my other my other wallets.

And so I did all this on the gorelli network. It was pretty fun. You have to set up three accounts, and then, you know, since I had access to all three, I could really just run a buck and test out different ways of, you know, doing transactions. I transferred ownership of the smart contract from one wallet to another and all sorts of different crazy things. There's a lot you can do with them here.

Yeah when we were having our conversation I remember you were you were walking through it and it's it's it's an easy process it it does take a little bit a little bit of knowledge of wallets and and using them and and how to access it. But once you have that basic knowledge even with with using things like like meta Mask I think would would would be enough to be able to go in and and create a multi signature or.

Functionality for multiple wallets, is there a tool that kind of allows that to be done easily?

Yeah, so I was messing around with the open open Zeppelin defender you can, it kind of works with gnosis safe. Also they have a really cool tool, but all of them kind of work in in the same. Like you're able to upload wallets, connect your wallet to the website, you know, add in different wallets, you just copy and paste the addresses into like the functions and it builds out like a workflow essentially. So it'll say hey I want to make this wallet and I have like my main.

Call it and I paste that name in there and then I want these three wallets to have ownership of that wallet. And then I put in the next 3 wallets. And then so with those 3 wallets, I know that those three people or myself has the private key or the seed phrase. And so if that gets stolen, then one of those goes down and that's kind of a risk there. You know, that's something that like we, we kind of like that. And so like like oh, you know what? You do five of seven wallets all the way up to lik

To 99 and her 99 wallet you know crazy things like that. So there are there are ways that like you could compromise it. I mean you could make the wallet bigger. It depends on whose hands it's in because if you do it for business you might be handling this with a as CEO, CTO, CFO and multiple C level executives, you know and do they all have the technical knowledge to operate a meta mask wallet. Remember in store their seed phrase properly, you know there's a lot of a lot of things that you got.

Think about there is like this is a new technology that people will be utilizing and some people might be developing and creating on it and some people might be managing it. So there's a lot of different things there that you kind of have got to look at, you know?

Kind of getting getting back into you know how how the the multi things are set up is there. I know you've got to have the majority but it's is it is there a way that is that Madrid already kind of built in like you say you've got it's got to be three people out of five or can you delineate I need four people out of five for this or I need all five people to sign off on this before.

That happens, or it does it? Is it just usually?

Pretty much just set up.

You one or two out of less out of the duration.

If that makes sense.

Yeah, there, there are. There are multiple things that you can put in there, like kind of towards the end when you're getting these set up. So like you can set a time frame. Like each person has to do this within 15 minutes of when the transaction is made on the original wallet or the wallet that you're keeping safe, right. They can put time frames. You can put, you know, wait on, you know. So if you had like a wallet that had, you know, 60 persons that were managing.

You know all these different wallets to get into one for the company and certain votes had weight by how much Ethereum they have in their wallet. Like you can get crazy with that and do all sorts of different things and like so like you know higher level executive would have a higher vote weight than you know an entry in turn or something. I don't know. But there's different ways that you could you could run this through. You could even do like a 1224 where at least like 12 persons out of the po

Have to approve before it goes through, you know, half and half, but did that also, you know?

You have to look at like the security stuffs for that as well. Like is this an attack surface? Is this something that you know, an attacker can breach all these wallets by doing what attack you know, on on the human level, you know, and social engineering these folks and then use that to gain ownership to something you know, the possibilities are kind of endless I feel like with how you get these wallets set up.

Ah OK. So yeah that's that that that's definitely something that that was in in in my brain like like you were talking about like that 12 of 24. So it doesn't always have to be you know it's gotta be definitely at least half or you know the majority but it wouldn't have to be like 22 or 24 you know no matter what there are parameters that you can move around but you do have to keep security of whatever it is you're trying to keep secure in mind to make sure that you know you don't change those p

Inadvertently make it a little bit easier to gain access to your assets.

Yeah, exactly. It's crazy. Like all the different ways you can get. You just think about using this and then like, people just think right now using it in a business sense. But I kind of was thinking of taking it even further than that to, like, Charlotte ownership, parental controls. Like if you give your kids a school lunch wallet or something that they can like, you know, upload onto a card from crypto.com or something. I don't know. And then like, they got a wallet address and then so every

To school, you know, your parents could approve and transaction, you know, on lunch and make sure they're not heading over to you know, whatever, storage, buying all sorts of different stuff. You know, we currently like I think you can do that with debit cards, but you got to like work through some sort of like app that they have. Like this is just far more simple. You know, it's on the transaction level, it sends it out and then you just approve or say no.

See This is why I wanted you that's why I wanted wanted to talk to you about because like that that's, I mean, of course I'm I'm not a parent, but something like that has never crossed my mind. Like in not and even that that youth case of something like a like a parental control.

In my brain I was thinking about like collective finance and and.

How they are, and I'm sure there are other functionalities on on other dapps and other wallets that can do things where hey, OK, we're all going to go in on.

This particular NFT or we are all.

You know, we're all going to pull our ease to be able to do something 1234 and five, and we've got to.

We all putting in and so we've got that opportunity now to well if we all want to buy this and this is what you know the time and the price we want to buy it at. We've got to have this this many people. I think that's always the first things that a lot of people go to when when they think about things like multi signature wallets you know outside of the outside of the business standpoint. So just wrapping my brain around something like a parental control you know and and using that in that way t

Yeah. And like, what if you even used it in like a will or an inheritance, you know, those families fighting over inheritances and stuff. And you have to have like some expensive mediary, third party lawyer or someone to basically work through their will and like divvy out these things for people. But if they just had, you know, a wallet or some sort of, you know, service that could set up these wallets and then divvy up their assets and then say approvals based on where this asset goes.

Based on the asset that they they choose. You know, it's like what if I want my, you know, Loser Club to go to one daughter and then I want one of my other, you know, cool people, cool serious people or my anaji pieces to go to my other daughter. You know, and I decided to be out there. Let's go. You know, or, you know, say they have like dead fellows is having their thing at the end of the this month. You know over in LA and you know what if what if the Community manager runs off of the wallet

Crazy. And no one has any say or like the dev just you know and like I'm sure they have like stuff in place. I'm just you know, kind of making up scenarios. But if you have that within an organization you said an employee or someone out and then like you don't have to submit receipts or something like they give you a wallet to use and they'll be like OK like we'll we'll approve all food transactions. We'll approve all, you know, expenses on drinks or something like that or two entry to the speci

All sorts of different things like that, like you could specify and it makes it less messy and like less human interaction, less friction I feel like. But.

Yeah, like at as you as you mentioned earlier, I feel like there's there's so much more that.

You know we could we've only scratched the surface surface especially when it when it comes to to the multi signature wallets but.

It's always so important to make sure that we have that that technical basis of.

Using meta mask or using.

Whatever basic wallet that we have to to 1st interact with the blockchain and and understand how all that happens before we start to move into into all the into all the rest.

There like in in your experience or if you were speaking to kind of someone who was interested in getting into into web three or getting into.

Transacting on the blockchain, what would be?

Almost a a good tier to follow to make sure that they they understand each one of these processes. Oh well to make sure they understand each process before they move on to the next. Like what are a few things I might need to make sure that I know when I transact on meta mask and understanding before I move into getting a Ledger and from there getting into multi signatures or doing more.

Alright, I I would say it's like it it honestly, I mean it took me a lot of practice like there was times where.

I mean I've I've messed around with meta mask since they first started and.

It's been pretty interesting, like all the fumblings I've had or settings or like I've even like lost seed phrases for wallets and stuff. Like I have one wallet that was set up on, it's on an old computer, it's at a Maya therium wallet, immune wallet, and I've lost, I lost the seed phrase to that and all sorts of things. And yeah, so like I was, I was kind of careless with them because in the beginning they were really just like for understanding smart contracts and blockchain, but I would say.

Like definitely, you know, making your meta mask the the biggest thing is saving your seed phrase in a secure place. Whether you you could put on metal rings each phrase in order you could.

You know, printed out on a metal card, store it like in a safe if it's written down on the piece of paper or whatever. Meta mask is really like your entry and exploratory tool, but also think of it as like your bank account or a bank account that you're utilizing to interact on the blockchain. But kind of just like familiarizing yourself, like clicking on the bubbles going into like your settings and all that kind of stuff. Like there's general settings, there's.

Like, you're earlier, I was kind of like mucking around and the security and privacy settings, like all sorts of different stuff like that. And then like kind of just dive into what what each setting does. You know, you go out and you buy a new iPhone, you buy a new, you know, Android. Like you dive into the settings and stuff like this should be no different. It's a piece of technology that you're using, you know. So yeah kind of getting getting used to that YouTube everyone. Like you can learn

Stuff their websites always have documentation, but like a saying earlier, performing those hygiene things and making sure that like you're removing, you know, cash from websites or any sort of stuff like that, that meta mask might be holding up. Umm, I always clean those things out. And then like the connected sites, if you're on a wallet, you can click those three bubbles, do the connected sites, and then remove all of those. But just kind of learning about how to, like, navigate it.

Mess around with it, break it, all that kind of stuff. And then when you feel like you know I need, I'm gonna start doing some transactions and stuff like have a minty while like you use like you know, then you can jump into that. That's that's funny because I personally don't use emitting wallets.

Just it's just my wallet you know? But I have it secured with like ledgers and stuff too as well, so.

Yeah, probably like that's the first thing with meta mask.

Got now. Yeah, I'll be now yeah. Ohh now you taught me. I'll be I'll be having me freaked out.

I gotta hang on to my assets. So I've got I've got one wallet, not that I'm.

The area super strict about it that I do have one that I'm super strict about, but.

It it's almost like for me, like I've got one wallet for for these tokens, I've got one wallet for these tokens, I've got one wallet for this, and I've just it's too much happens, too much happens, and I don't want to get caught slipping.

I do not want to get caught slipping and so even if I've got to if it's got to be a little bit of an extra step or two.

To make sure that I'm going to hang on to these NFT's that I pay, that I, you know, use my good hard earned money for, I'm doing it.

Exactly. Yeah, I that's like, that's the crazy thing too. It's like, so I work for, you know, a, a tax crypto company, right. And one of the ways that, you know, they track taxes on all these things is by pulling each wallet. It's like, curious to see like how that work if you have multiple wallets that you're using and like how how that would go with taxes and how they would track those or whatever, you know?

I just know I'm glad I'm not the one that has to figure it out.

No.

Right, that's.

Yeah, true.

First and foremost, it ain't me.

To it's not me either, I just make sure it's secure.

I'm a dancer. I can only count to 8. That's that's it. That's my running joke. If it's past eight, I can't count it. Sorry.

Yeah.

I would like to give our listeners and opportunity to come up and ask any questions. If you've got any questions about wallet security for kid Ethereum, go ahead and feel free to request. And as I just kind of reset the room for the last time, this is Ohh Naji you presents the comments. I am boss 2.0 we're talking wallet security with kid Adrian. We've covered almost all the things that we've been talking about on, you know, on not only.

The thread that Kitty Etherium posted it's right there at the top of the Jumbotron, but also just a few basics kind of. I feel like it's almost like the.

Beginner, intermediate, kind of advanced.

You know, kind of tiers of of wallet security from getting comfortable with meta mask and making sure you're practicing with it and transacting and knowing the functionalities and knowing the settings and how to use it.

To then kind of going into some of the hot and cold storage and then big time learning about multi signature wallets. I also down in the chat if you take a look I did put the the two tools that Kenneth has spoken about that the token approvals for either scan that's there and also opens Zeppelin.

And again, if you would like to, if you have any questions for connecting and feel free to request and you can grab the mic and ask them. But I would like to know a little bit more about Open Zeppelin.

And and just that that functionality like how did you come come across that and when you were setting up the multi signature wallet it was?

Not necessarily mind-blowing, but I just hadn't hadn't seen.

Live demo of you were literally just putting it like clicking the boxes of of the parameters and so it's not something that needs a lot of coding, coding intellect or coding knowledge to be able to go in and create that because you talk a little more about that.

Yeah, definitely. So yeah, open Zeppelin, defender, open Zeppelin. So I was messing around with my multi sigs and I was like, you know, I'm gonna I'm gonna jump in there and start making them in different ways. So try and Monero. And I tried a few other things but like I couldn't really like latch on or get going with them. I feel like I need a little bit more, a little bit more like a time sync. I was kind of just like doing this at like 2:00 AM.

So yeah, I found open Zeppelin defender, there was this guy on YouTube and the dude only has like 100 followers on Twitter, but probably because his name said that he it's like off grid author. So you know, he's definitely you know, staying away. But anyways, getting into this like open defender opens up 1 Defender is really those really cool because it was. I already kind of know how to read smart contracts and so like I could go in.

And use another tool, open Zeppelin wizard and right just kind of like quick contracts. It kind of pre fills in the code for you based on what you want to do and it has a little bubble and it explains like what you're doing. So before you click on the thing and they're most like the mostly explainable to like there's a a burn function there's a way to transfer. There's like all sorts of different functions in there that you can put in there, very selfless like explainable.

So I built out the quick contract with that. This is the very first one I built. It's all on the Gorelli network. So like in one of the hard things I found was I was researching other documentation on the like on doing this process through opens up and and everyone was referring to Rinkeby network and it was all the documentation was old.

Getting old, it was six months old and that's old in crypto, you know. And so like I actually found someone like on a form saying using Gorelli network is better and like that's how fast these things move. You know like and I'm sorry like that's after the merge is why that happened right. But no one accounted for that wrote we wrote their documentation. So I kind of had to figure it out on my own from there and then. So yeah, it opens up and it has all these options here like you can say I want

Face.

We use the gnosis chain to help you create like a multi signature wallet and there's a drop down that gives you any sort of network that you want. So there's finance, there's Polygon, avalanche sea chain, there's all the test network. So if you really just want to get in here and mess around like an arbitrium, there's even a test network in there for arbitrium which is a new you know thing coming out here. But yeah like there's like a lot of cool stuff you can do and then like all of the things

Like, OK, What am I exactly doing here? You know, there's like auto task function which is showing you lost where I was like thinking about getting creative with like automating tasks. So like say you have a company and payday is every two weeks or first of the 15th and you know the finance team needs to approve that everyone gets paid. So they have a etherium wallet that has an auto task on there. For every payday it sends out the employees funds and then the finance team has just approved that

During the day, make sure everything's correct and then they can move on. You know, in business goes on as usual. But yeah, there's a lot of cool stuff that you can really do with this.

I like that. Let that last, that last scenario that you gave, because we were we had a oh, not university conversation last Saturday and we were talking about, you know, how great the blockchain is for for you know better finances, financial independence and things like that. And I was, I was saying just because all last week I feel like everywhere I turned there was always, there was always there was funny stuff.

Going on with the money, you know, there were kind of money going places that you know didn't necessarily get signed off on or.

There's a lot of different scenarios and I'm sure we see them all across the timeline and and with with other organizations and so.

You you giving that that scenario.

Helps me.

Put my brain in that mind of OK, this is something that that can be used.

To help further secure.

And and put checks and balances in place to make sure that things are happening the way they need to and that the people that know that need to know what's going on are in the know.

Because it it very much just seems like sometimes, you know, with the amount that goes on and the the free and how often it happens. I'm like do these people know what's going on with, with these wallets with this cryptocurrency you know that they're handing out or that they may not know that it's that's going here or what what is being used for?

So I love that this this can this can help people have that functionality of having it. It's on the blockchain and we know the blockchain is immutable. It's not going anywhere. So it can a be tracked and #2 it can. You know it's it's transparent, it will.

It will. It will tell on you.

It will. It will. And like another thing too. It's like if you're ever.

Do not buy that from Amazon. Like, you know someone definitely or could have like gotten ahold of it, set up a wallet wiped it and then you know, or messed with like the the device itself like always buy it from the retailer you know, make sure it's coming from the right website. Even checking their website. Like there could be a bug you know Ledger website out there or something. But you know, just taking those steps like always double checking and like making sure you're not going to be like j

You know, triple, double checking what you're doing is you're going through all those kinds of stuff.

Got it, got it. Got it. I'm gonna give our last call for if there's anyone that would like to request a Mike to come up to speak. That's our last call for that but I wanna get a moment and I want to I know you're a crypto veteran. I want you to tell us a little bit about your your journey in in crypto and and web three like and I think it's fascinating there's been you know you don't always get to meet a lot of people who have been in the space for.

For such a long time, give us a little like overview of that. Come on and flex on us real quick, talk your stuff.

Ohh man yeah. So I guess like how I how I got started. Actually I was a lot younger and I I had had started selling Bitcoin, not Bitcoin. Sorry. I'm selling like World of Warcraft in Runescape gold. Like I played a little bit of World Warcraft with my buddies. And then there we we kind of like moved over to Runescape because that was the thing that I was more interested in. And you're like, hey.

You can. You can sell Runescape Gold Online and one of the easiest ways to to sell that online was for Bitcoin. You know, anyone would take any sort of thing for Bitcoin at the time, you know, there was also, you know, I had the Silk Road going on mountain. Gox had happened a lot a little bit earlier, you know, and that was kind of like my first introduction. So was my I had a friend who was taking like multimedia and web design classes with and he had an older brother who was in college and all

College buddies were talking about Bitcoin and all kinds of stuff. And so they started even like using it for like let's activities and all that kinds of stuff. And then we got roped into those sort of things and like, those were my first experiences of like transferring funds with Bitcoin, you know, later on.

It wasn't until I got into, I started working as a debt collector and I got him to like kind of getting into the finance world and seeing those things and etherium came up. And so, you know, I bought a little bit of that. It was like 3 bucks at the time.

God $3.

Just crazy and like ohh $3. Yeah I I was telling my bosses and all these people about it and they're like no you're crazy. Like yeah they were talking like I was absolutely crazy. This wasn't going to work out. It was all fake. And then like like well they were buying like all these like foreign currencies from some sort of exchange and stuff. It was kind of silly, but yeah I got a couple of them.

Turned like $505.00 into like just about $400.00 within a couple weeks. And so I was doing this.

A little bit up until 2017 when things really took off and then actually lost a lot of money because of crypto kitties. At the time they were congesting the network and it took three days for my transaction to go through them. By then I lost like $1000 worth of etherium that I had had. But yeah, so I ended up really really with nothing. And then yeah like I worked as I worked as a debt collector.

For a long time, and that's how I got the name kid, etherium. I was working at this debt collection place and one of my managers. So I had a buddy there and we would always just talk crypto. We'd go back and forth about like Ripple and Tron, which one is better? I always argued that Tron was better. And so we always, yeah, we were just going back talking about crypto and stuff. And one of the directors came by and he was like, hey, how's it going today, guys? And our managers, like, hey, I'd be

Boy and kid etherium all day just talking about crypto and we just thought it was so funny. So my buddy and I started like drawing up these like comics for Bitcoin boy and kid Etherium and the name just stuck like later on once. Like I was so ecstatic. Like when I got my ENS I paid $114.00 in gas for it, but it was worth it because like, that's when I finally got my first name.

But yeah, I worked as a.

Because that's solid. Like that's solid. Like to me it just, I mean it, it sound, it sounds like somebody that's been in the space for a minute, but it also sounds like like the daring and superhero. And not to say you're here to like save eat, but it's just, it's not. It's nice.

It's it's crazy. But yeah I mean I've I've just like I've made every mistake along the way. Like I lost all my Tron to a hack like I have and I and like I kind of purposely do these things from time to time too just to like test stuff out and see like what things are about. And yeah like I've wrapped the theory and had to fix that and like unwrap my thing. A lot of folks you know had done that on accident and they think their theorems gone and like all sorts of crazy stuff. But yeah like I even

For the longest time I you know, I started working in technology the last couple of years and then I finally saw this crypto company, the one it's called tax bit and so I applied for them. Yeah, here I am working for this crypto company. It's cutting edge and not part of the security team doing like IT stuff and.

You know, it's really giving an opportunity to to really be close to the industry and learn a lot of stuff, especially from a tax perspective, even though like I know nothing about taxes. Well, I know a lot more now I would say. But just like it's been, it's been an interesting journey because like I've always believed in Bitcoin and Etherium. And like, even when people are just like, told me I was crazy, I was like, wow, this is going to work out. Like it's got to work out. It's going to like i

Labor the rest of my life, you know, this is this is something that definitely gives a lot of people more power. So yeah.

That's the word that last that last statement is a word. It it it definitely does. It definitely does. I see we have this up here who requested to speak. Welcome to the Commons next. Would love for you to go ahead and and come here. Do you have any questions for for kids anymore? Anything you'd like to contribute for our conversation on wallet security?

Um, actually I did have a question also. Thank you. Appreciate it. Um, what you're doing is absolutely amazing. Anything to educate is a great initiative. But I just wanted to ask a question which was, I know that we're technically not supposed to have wallets on our phone, but a lot of us do. I do. So I typically advise people that if they like click a sketchy links that they like download a free antivirus on the phone.

And run a scan. But what are your thoughts on just like navigating meta mask or I guess temple wallets on your phone?

Hmm. That's, that's good question, honestly. Yeah, like I I utilize.

Task on my phone quite a lot. I even like go as far as like utilizing the browser, like if I'm doing crypto stuff or if I'm attaching to crypto websites. Like today I got an AirDrop from Zed run and so I went to Meta Mask, went to the browser, went to zedrun.com and attached my wallet again when mucked around in there. I don't. I don't think it's necessarily bad to have your stuff on your phone. The main risk again lies within where human like if you lose your phone.

In your your seed phrases on your phone, then that's gone, right? Unless you can somehow get like a backup from iCloud or Google or something like that. So I would say if you're going to have those sorts of things on your phone, like definitely have cloud storage to back them up. Although it is still insecure like in your phone gets hacked, but like again, you're not like, it's more of like you're going to mess around, you're going to find out.

If you're messing around on sketchy sites like you're gonna find out. I did that back in 2015 and got my iPhone locked for two weeks, like, and they held it for ransom for bitcoins. So you know, like it's that's how far are you going with this? Like, and I was looking at like some crazy banana coin and like all this stupid stuff and like I knew what I was doing, probably not a good idea on these websites. And the one I knew obviously was bad. So it really depends. Definitely. If it is a sketchy

First, I don't necessarily like trust me.

Virus scanning software on phones because really they I don't feel like they do as much. You know that stuff like you could just find on the Internet I guess.

But yeah, like the phones aren't super bad for having wallets on. Like, as long as you put the seed phrase in a safe place, you're good.

Got you. Got you. Definitely. I try to run links through a website called virus total. It's virustotal.com to see if they're malicious. It's come in handy a few times.

Yeah.

Ohh yeah, that one's really good actually. Yeah, I've had there's a security researcher who showed me that when I first started and it was really cool.

That's awesome. OK that was validation cause I shouted from the rooftops, but I've definitely used it on some emails that look sketchy. Just spam emails. I can kind of tell, but I just want further validation that the e-mail is sketchy and it'll be like, oh this is malicious. But yeah, I typically run things links through there first, but.

Yeah, I've just heard. And also the seed phrase being on the phone is like not a good idea. I think I was in a spaces or no. I was in a clubhouse room like a year ago and there was someone who had his seed phrase on his phone and he got like his wallet drained live. It was terrible. He somehow gave someone access to something and they just like took control of his wallet and transitioned all of it to a new wallet and there was nothing he could do. But anyway.

I guess the the best thing is just stay away from sketchy links. I always like tell people not to click on any links anyone DMS you, even if you think they're like your friend. Like just copy and paste it in virus total or.

See if you cannot click it. But I know that with certain collaborations you kind of have to. Like if there's a Google forms or something and you're on the back end looking at submissions and it's like, OK, you kind of have to click it, but boss, what are you gonna say?

Ohh no that's you can go ahead no worries. No worries I was.

I was just waiting till the conversation around it out because it's it's definitely some some good things to continue to think about and that's those are some of the basics that.

You know I I encourage people to to continue to to look around you know every if if we try to.

Yeah.

Encompass every single thing you know that that you have to remember when it comes to wireless security we'll be here all night plus tomorrow. So this is this is definitely a a place to start and and I I hope it's it's kind of giving us an overview for those of us who are in this space now and if anyone's listening after and an overview of things to look at and things to think about as you.

Yeah.

They come into the faith or as you continue coming, as you continue moving and becoming more confident in in using blockchain technology. So thanks so much Ness also for that. For virus total, I tossed that down in the chat thread. So if you are interested in any of the tools we've been talking about here in the space, the token approvals on either skin and Open Zeppelin defender and also virus total that that nest put us onto, feel free to look down there in that chat and I'll make sure I read.

So I tossed these tools also in in a thread type pretty much kind of talking about what we've what we've spoken about this evening, so.

I love it.

Thank you. Thank you so much.

Yeah, that's awesome. I love it. Especially like you have. Those links are the dangerous. I actually have written a Bitcoin malware before on one of my test devices.

And it was as simple as like sending an e-mail link. And basically what it would do is run this program in the back of your computer and go into the clipboard. And the logic was smart enough to tell the clipboard that like when you're copying a Bitcoin address, it'll recognize that that is a Bitcoin address. And so as you're copying pasting, you don't know in the background of your clipboard has this malware attached to it searching for Bitcoin addresses. And as soon as you copy one, I replace y

And then your clipboard is what's compromised on your computer, so it's going to paste my address instead of yours, and it's pretty, pretty scary stuff. It was also fun because I bricked my computer.

Messing around with it.

See that that's the stuff I'm talking about like I I don't have confidential I don't I ain't got time for that. So you know all the all the things that I I try my damnedest to make sure that I'm keeping saying that I am you know looking at these links I'm trying to I do all my own research before I jump into before I jump into something. I'm not a DJ in by any stretch of the imagination so you're not just gonna catch me just clicking on some.

Saying let's go get this free man and flip this baby. I'm like, Nah, that's too much. Like I have to stay connected to too much technology and I feel like it's already too much. But continue to just be vigilant. I know that's what I always hear from.

A good friend of ours are not. Do you think I'm Jasmine Brunson who runs rectify I she just says, be vigilant. You cannot sit around and be LAX and expect that you know that these apps or these websites or even projects are looking out for you. So make sure that you are taking care of yourself. Ness, go ahead.

I just wanted to say, um, another really, really important security tip. Like, probably the most important of them all is happy birthday. Happy birthday, Ryan.

Thought I forgot I did not.

I was like I was getting there. Focus. Like OK or what?

Yeah.

Thank you.

Thank you. Thank you so much.

Thank you.

Enjoy. Enjoy your day, enjoy your day reflects many more years of blessings.

Thank you. Yeah, it has. It has been a good day.

Yes, thank you for hosting us on your birthday.

It's been fun.

Well, no, it's I'm, I'm. It's the middle of the week. What I'm supposed to do? Turn up on a weird say. Like that's wild.

Ohh no, it's your birthday.

I won't wait till Friday. Saturday we'll see. You know, if you don't see me online, you know what I'm doing.

But thank you so much the the outpouring of love has been, has been so, so so good. I am. I'm so grateful for everyone that I connect with here on Twitter and in the blockchain tech space. So I I appreciate the love it is always returned to unfold. Please know that also.

We will go ahead and ask, we say land this plane. It's been a great conversation. We've been right at a little bit more than like a few minutes, more than an hour talking about wallet security with kid etherium.

Let us know like where we can find you. Let us know what you're up to out here in these swept these streets. I know you are here doing a lot, so let us know.

Yeah. Thank you so much for posting this. Like I said, especially on your birthday, you know, happy birthday. Yeah, I'm new to Twitter, honestly. Like I've only been on Twitter for like, I don't know, few months or so. I made the account a long time ago, but never even like logged in as much. But yeah, you can just message me on Twitter. I'm also on LinkedIn a lot as well. That's where I'm more like professional about the about the lemonhead, you know, over there. But I do I do spot the the NFT.

Family didn't kind of shake it up a bit, but yeah, those are the two places that you can find me and I'm always happy to help and learn from other people. Honestly, I've just learning and absorbing every for everyone around me.

Well, I will say thank you to you. I know we've, we've kind of been been planning this for a little bit of time and I'm looking, I'm, I'm trying to make an actual full pivot to making our the common spaces kind of educational kind of fun like you know with a little bit of fun interspersed here and there. I still always want to make sure that I highlight our Onaji family and Keanu is one of our onaji fam.

But.

Oh yeah, I forgot to change my PFP.

Like that.

How are you but?

Like I said, I'm I I am looking forward to trying to bring a lot more education here to the to the common spaces. So if you like it, let your friends know. Tell them to pull up on Wednesday evenings.

But again thank you so much to Kenneth Dam for taking some time out of your evening and from your family to spend some time with us here in the comments. Thank you to all of you who have you know who are listening not only now but after this Wednesday night, we are oh not to you all that good type of stuff. 10K PFP project you can follow us at on IG at on IG and our website is on ig.com. Got to make sure I get all that plug in.

But any final words from our special guests, Kenneth, Miriam, any any final things from you?

No, no thank you for hosting. Uh, sorry if I was a little nervous at 1st and jumbled up my friends. Like fumbling around through the mask and then I nicked myself in the beginning, but I got my head together eventually with some of the information there. But yeah, yeah, thank you.

Yeah. No, it was OK. It was all good. It was, it was all good. And like I said, I very much appreciate you. Thank you taking the time out to to share so much of this with us. There's so much, so many good gyms in here that I will make sure that I toss in this thread and make sure I spread this, this space all over. So we will go out with a little bit of chill vibes. So feel free to take off as the music plays. But again, thank you so much for meeting you.

For joining us here in the comments, I'm boss 2.0 we'll be back next Wednesday. We're going to be talking about hackathons with Jasmine Brunson, bubbly orca from Rectify AI. She travels the world snatching up these hackathon #1 so she's going to come in and let us know the skinny on all that. So we hope to see you guys then and take care of yourself.