🟧 Bitcoin Full Node Security - 11 Tips To Keep Your Node Safe

[@iruatlocalhost]

Thread number 5 can be mitigated by using full disk encryption. Although an evil maid attack might pass through your securities a burglar running out with your node will result in a machine he cannot conceivably break into. And that's also one reason I don't like Raspberry Pis: their cpu doesn't include hardware accelerated encryption extensions therefore disk encryption is slow and cpu intensive. If you have something like a Rockpro64 or a bog standard PC you can enable full disk encryption at no performance cost.

[@sundayhonor548]

Please do more videos about Bitcoin full node I'm a newbie who needs guidance through it 🙏🏽

[@Bitcoinftm]

Any specific suggestions as to what you'd like to learn?

[@sundayhonor548]

@@Bitcoinftm Thank you for your response. I don't know how to connect it to the network so I could be verifying blocks. I just finished installing it.

[@justincross1247]

Also run a port scan against your ip address to make sure you're not exposing ports to the internet. A few months ago I downloaded the bitcoin blockchain with my real ip (not using tor) and then a couple days later someone tried to attack me because I had some database ports exposed to the web. I also googled my IP and saw it showed up on some github list of ips that are running bitcoin nodes. Lesson learned, keep my ports closed and never run bitcoin core with your real ip.

[@justincross1247]

The attacker left me a message in my database telling me to send them .21 btc to some address. Luckily they didn't get away with anything. They were only able to attack some nosql database of mine. I got my ip changed right away and closed all my ports

[@Bitcoinftm]

Great advice!

[@cryptoyor]

Thanks for the good stuff

[@Bitcoinftm]

Our pleasure!

[@rcdenis1]

How safe or unsafe is it to access your node remotely via OpenVPN? Thank you for posting.

[@Bitcoinftm]

Not sure, I'll need to investigate that.

[@axnoro]

The only password manager you should be using is keepass or its forks since it's fos software. Bitwarden and anything else means you are placing your trust in centralized institutions.

[@Bitcoinftm]

True, but your passwords are encrypted on their servers, so... is it that big a risk? You can also run Vaultwarden and host your own Bitwarden database over Tor if you want on Umbrel/Citadel.

[@ratzefummel2676]

KeePass is secure but don't install any 3rd party-plugins!

[@amjpais]

I have a question about Duress Pin. Does activating Duress Pin delete the node on my smartphone or does it delete the node on my Umbrel? TKS

[@Bitcoinftm]

Erases it on your phone only :)

[@icon134]

I do have a crypto cloaks raspberry pi on my desk at home but those nodes don't have any LN routing and thus could be considered a spoof whereas my LN node is somewhere else in my house. This does have good advice however.

[@NoOnezZup]

good tips

[@CE4JDM]

Jonathon, I started 3 days ago downloading the Bitcoin Core, and everything was going well until this morning. Everything seemed to stop about 39,000 blocks. No more peers. I'm using a direct satellite connection 24/7 (StarLink) that averages around 200Mbps download, and 30Mbps up. My core directory is on a 1TB SSD with over 450GB free at this point. Could it be that peers don't like too many others to set up nodes? Using Bitcoin Core 22. I just downloaded version 23. If I install it will it use all the data I've already downloaded? Any recommendations appreciated!

[@Bitcoinftm]

Not sure why that would happen, maybe restart your node, see if that works, it won't delete, it should continue.

[@CE4JDM]

@@Bitcoinftm It *did* restart! And my node is now up to date with 746454 blocks at this time. Thanks for your help!

[@Steff_63]

Danke!

[@Bitcoinftm]

Thank you!!

[@speedman007007]

Please post the link to the Reset Umbrel Password tool

[@Bitcoinftm]

I dont' have it but you can contact Aaron Dewes on Telegram / Citadel :)

[@niccologioia4941]

is tailscale safe? it looks very dangerous

[@Bitcoinftm]

Haven't tried it, but people I trust use it.

[@justincross1247]

Disable remote desktop on your operating systems on all your devices

[@Bitcoinftm]

Good tip!

[@cocoardo4394]

Biometrics arn't passwords. Don't use them. Also password manager are centralized big honey pots. But overall good video.

[@Bitcoinftm]

Biometrics are good for adding ADDITIONAL security to your OTP app, so that anyone who steals your phone out of your hand while it's logged in can't get in to it :) Also, you can store your password manager on your own node if you run Citadel or Umbrel. But what's more, you should only use a service that encrypts your passwords... so, no risk.

[@RagingLoon]

Not KeePass

[@russelldriver6394]

Can a node be as small as a rasberry pie?

[@Bitcoinftm]

Of course. I did a whole video on how that works: jle.vi/runanode

[@russelldriver6394]

@@Bitcoinftm Legend - I will watch now :)

[@Bitcoinftm]

Hardware guide: kit.co/jlevi/run-a-bitcoin-node

[@russelldriver6394]

@@Bitcoinftm most raspberry pi parts are out of stock on amazon UK. I really want to run a node but seems quite difficult to order all parts at the moment :(