mirror of
https://github.com/slowmist/Blockchain-dark-forest-selfguard-handbook.git
synced 2024-11-14 09:55:57 +08:00
Compare commits
15 Commits
3a56797529
...
5168e85806
Author | SHA1 | Date | |
---|---|---|---|
|
5168e85806 | ||
|
9165a192d6 | ||
|
9498f49e89 | ||
|
fcde10233a | ||
|
c1d49e5c7e | ||
|
cdb3ac740d | ||
|
774208e0ce | ||
|
1148d5027c | ||
|
e4c30300de | ||
|
fd09488d9f | ||
|
4554f355a0 | ||
|
52fe25561d | ||
|
a8e2477733 | ||
|
59da1d63a3 | ||
|
c4130c6876 |
21
README.md
21
README.md
@ -2,13 +2,14 @@ Blockchain dark forest selfguard handbook<br>
|
|||||||
*Master these, master the security of your cryptocurrency.<br>*
|
*Master these, master the security of your cryptocurrency.<br>*
|
||||||
|
|
||||||
:fire:Website: https://darkhandbook.io/<br>
|
:fire:Website: https://darkhandbook.io/<br>
|
||||||
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
|
:cn:中文版: [《区块链黑暗森林自救手册》](README_CN.md)<br>
|
||||||
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
||||||
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
:kr:한국어 버전: [블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
||||||
*Note: V1, Update Logs, please see the Chinese version.*
|
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
|
||||||
|
:indonesia:Versi Indonesia:[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
|
||||||
|
|
||||||
Author: Cos@SlowMist Team<br>
|
Author: Cos@SlowMist Team<br>
|
||||||
Contact me:Twitter([@evilcos](https://twitter.com/evilcos))、即刻(@余弦.jpg)
|
Contact me:Twitter([@evilcos](https://twitter.com/evilcos))、Jike(@余弦.jpg)
|
||||||
|
|
||||||
Translator:
|
Translator:
|
||||||
>[Alphatu](https://twitter.com/Alphatu4) | C. | [CJ](https://twitter.com/0xnjars) | [JZ](https://twitter.com/scorpionzhang) | [Lovepeace](https://twitter.com/lovepeace_53) | [Neethan](https://mobile.twitter.com/neethanverse) | [pseudoyu](https://twitter.com/pseudo_yu) | [SassyPanda](https://twitter.com/sassypandacap) | ss | [XL](https://twitter.com/leixing0309)
|
>[Alphatu](https://twitter.com/Alphatu4) | C. | [CJ](https://twitter.com/0xnjars) | [JZ](https://twitter.com/scorpionzhang) | [Lovepeace](https://twitter.com/lovepeace_53) | [Neethan](https://mobile.twitter.com/neethanverse) | [pseudoyu](https://twitter.com/pseudo_yu) | [SassyPanda](https://twitter.com/sassypandacap) | ss | [XL](https://twitter.com/leixing0309)
|
||||||
@ -165,7 +166,7 @@ If you pay attention, you will find the download pages for both GPG tools give s
|
|||||||
|
|
||||||
**The mobile wallet** is similar to the browser extension wallet. However, it should be noted that the App Store has different versions for each region. Cryptocurrency is banned in Mainland China, so if you downloaded the wallet with your Chinese App Store account, there is only one suggestion: don't use it, change it to another account in a different region such as the US and then re-download it. Besides, the correct official website will also lead you to the correct download method (such as imToken, OneKey, Trust Wallet, etc. It is important for official websites to maintain high website security. If the official website is hacked, there will be big problems.).
|
**The mobile wallet** is similar to the browser extension wallet. However, it should be noted that the App Store has different versions for each region. Cryptocurrency is banned in Mainland China, so if you downloaded the wallet with your Chinese App Store account, there is only one suggestion: don't use it, change it to another account in a different region such as the US and then re-download it. Besides, the correct official website will also lead you to the correct download method (such as imToken, OneKey, Trust Wallet, etc. It is important for official websites to maintain high website security. If the official website is hacked, there will be big problems.).
|
||||||
|
|
||||||
**If it is a hardware wallet**, it is highly recommended to buy it from the official website. Do not buy them from online stores. Once you receive the wallet, you should also pay attention to whether the wallet is inact. Of course, there are some shenanigans on the packaging that are hard to detect. In any case, when using a hardware wallet, you should create the seed phrase and wallet address at least three times from scratch. And make sure that they are not repeated.
|
**If it is a hardware wallet**, it is highly recommended to buy it from the official website. Do not buy them from online stores. Once you receive the wallet, you should also pay attention to whether the wallet is intact. Of course, there are some shenanigans on the packaging that are hard to detect. In any case, when using a hardware wallet, you should create the seed phrase and wallet address at least three times from scratch. And make sure that they are not repeated.
|
||||||
|
|
||||||
**If it is a web wallet**, we highly recommend not to use it.Unless you have no choice, make sure it is authentic and then use it sparingly and never rely on it.
|
**If it is a web wallet**, we highly recommend not to use it.Unless you have no choice, make sure it is authentic and then use it sparingly and never rely on it.
|
||||||
|
|
||||||
@ -488,7 +489,7 @@ Metadata refers mainly to the embedded picture, motion pictures and other conten
|
|||||||
|
|
||||||
There are two main security concerns that may arise here:
|
There are two main security concerns that may arise here:
|
||||||
|
|
||||||
* One is that the URI where the image (or motion picture) is located might not be trustworthy. It can just be a randomly selected centralized service, on one hand there is no guarantee of availability, on the other hand the project team can modify the images at will, thus the NFT will no longer become an immutable "digital collectible". Generally it's recommended to use centralized storage solutions such as IPFS, Arweave, and select a well-known URI gateway service.
|
* One is that the URI where the image (or motion picture) is located might not be trustworthy. It can just be a randomly selected centralized service, on one hand there is no guarantee of availability, on the other hand the project team can modify the images at will, thus the NFT will no longer become an immutable "digital collectible". Generally it's recommended to use decentralized storage solutions such as IPFS, Arweave, and select a well-known URI gateway service.
|
||||||
* Another is the potential for privacy leakage. A randomly selected URI service might capture user's basic information (such as IP, User-Agent, etc)
|
* Another is the potential for privacy leakage. A randomly selected URI service might capture user's basic information (such as IP, User-Agent, etc)
|
||||||
|
|
||||||
Signing security is another big concern here, and we will illustrate it below.
|
Signing security is another big concern here, and we will illustrate it below.
|
||||||
@ -1049,8 +1050,10 @@ SlowMist, Twitter (@SlowMist_Team), e.g. Pds | Johan | Kong | Kirk | Thinking |
|
|||||||
English translator, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss |
|
English translator, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss |
|
||||||
Japanese translator, e.g. Jack Jia | Mia
|
Japanese translator, e.g. Jack Jia | Mia
|
||||||
Korean translator, e.g. Sharon | Jeongmin
|
Korean translator, e.g. Sharon | Jeongmin
|
||||||
|
Arabic translator, e.g. Ahmed Alsayadi | Gabr Alsayadi
|
||||||
|
Indonesian translator, e.g. Finball
|
||||||
Jike App
|
Jike App
|
||||||
Some Anonymous friends ...
|
Some Anonymous friends...
|
||||||
More info: https://darkhandbook.io/contributors.html
|
More info: https://darkhandbook.io/contributors.html
|
||||||
```
|
```
|
||||||
|
|
||||||
@ -1074,7 +1077,7 @@ As I've stated previously, when recommending a tool, I strive to describe it as
|
|||||||
|
|
||||||
Although I do not make any specific tool recommendations in this section, I would like to share a valuable mindset: the firewall mindset. The previously emphasized concepts of "zero trust" and "continuous verification" are actually part of this firewall thinking.
|
Although I do not make any specific tool recommendations in this section, I would like to share a valuable mindset: the firewall mindset. The previously emphasized concepts of "zero trust" and "continuous verification" are actually part of this firewall thinking.
|
||||||
|
|
||||||
예For example, in the use of wallets, signing is a major area of concern for fund security, with various sophisticated phishing methods related to signing, such as:
|
For example, in the use of wallets, signing is a major area of concern for fund security, with various sophisticated phishing methods related to signing, such as:
|
||||||
|
|
||||||
- The exploitation of native signing with eth_sign/personal_sign/eth_signTypedData_*, where eth_sign has been increasingly blocked by wallets.
|
- The exploitation of native signing with eth_sign/personal_sign/eth_signTypedData_*, where eth_sign has been increasingly blocked by wallets.
|
||||||
- The exploitation of authorization functions like approve/permit for Tokens/NFTs.
|
- The exploitation of authorization functions like approve/permit for Tokens/NFTs.
|
||||||
|
1162
README_AR.md
Normal file
1162
README_AR.md
Normal file
File diff suppressed because it is too large
Load Diff
14
README_CN.md
14
README_CN.md
@ -1,10 +1,12 @@
|
|||||||
区块链黑暗森林自救手册<br>
|
区块链黑暗森林自救手册<br>
|
||||||
*掌握这些,掌握你的加密货币安全。*
|
*掌握这些,掌握你的加密货币安全。*
|
||||||
|
|
||||||
🔥Website: https://darkhandbook.io/<br>
|
:fire:Website: https://darkhandbook.io/<br>
|
||||||
:us:English:[Blockchain dark forest selfguard handbook](README.md)<br>
|
:us:English: [Blockchain dark forest selfguard handbook](README.md)<br>
|
||||||
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
||||||
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
:kr:한국어 버전: [블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
||||||
|
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
|
||||||
|
:indonesia:Versi Indonesia:[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
|
||||||
|
|
||||||
Blockchain dark forest selfguard handbook<br>
|
Blockchain dark forest selfguard handbook<br>
|
||||||
*Master these, master the security of your cryptocurrency.<br>*
|
*Master these, master the security of your cryptocurrency.<br>*
|
||||||
@ -16,6 +18,7 @@ Blockchain dark forest selfguard handbook<br>
|
|||||||
|
|
||||||
| 日期 | 更新日志 |
|
| 日期 | 更新日志 |
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
|
| 2024/06/28 | V1.2 新增[阿语版](README_AR.md),感谢翻译者们。|
|
||||||
| 2024/05/16 | V1.2 新增[韩文版](README_KR.md),日文版及英文版同步更新!还有一点小修正>_< |
|
| 2024/05/16 | V1.2 新增[韩文版](README_KR.md),日文版及英文版同步更新!还有一点小修正>_< |
|
||||||
| 2024/04/24 | V1.2 新增`那些工具`章节及更新`贡献者`、`那些官网`。 |
|
| 2024/04/24 | V1.2 新增`那些工具`章节及更新`贡献者`、`那些官网`。 |
|
||||||
| 2023/05/24 | V1.1 `小心签名!`章节做了点更新。 |
|
| 2023/05/24 | V1.1 `小心签名!`章节做了点更新。 |
|
||||||
@ -1058,6 +1061,9 @@ Punycode 这种钓鱼方式,几年前就有真实利用了,比如 2018 年
|
|||||||
慢雾,Twitter(@SlowMist_Team),如:Pds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
|
慢雾,Twitter(@SlowMist_Team),如:Pds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
|
||||||
英文译者,如:Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
英文译者,如:Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
||||||
日文译者,如:Jack Jia | Mia
|
日文译者,如:Jack Jia | Mia
|
||||||
|
韩文译者,如:Sharon | Jeongmin
|
||||||
|
阿拉伯文译者,如:Ahmed Alsayadi | Gabr Alsayadi
|
||||||
|
印度尼西亚文译者,如:Finball
|
||||||
即刻
|
即刻
|
||||||
一些匿名的朋友
|
一些匿名的朋友
|
||||||
更多:https://darkhandbook.io/contributors.html
|
更多:https://darkhandbook.io/contributors.html
|
||||||
|
1145
README_ID.md
Normal file
1145
README_ID.md
Normal file
File diff suppressed because it is too large
Load Diff
13
README_JP.md
13
README_JP.md
@ -1,11 +1,12 @@
|
|||||||
ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック<br>
|
ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック<br>
|
||||||
*当ハンドブックの内容をマスターするということは、暗号資産におけるセキュリティをマスターするということです。<br>*
|
*当ハンドブックの内容をマスターするということは、暗号資産におけるセキュリティをマスターするということです。<br>*
|
||||||
|
|
||||||
:fire:Website: https://darkhandbook.io/<br>
|
:fire:Webサイト: https://darkhandbook.io/<br>
|
||||||
:us:English:[Blockchain dark forest selfguard handbook](README.md)<br>
|
|
||||||
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
|
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
|
||||||
|
:us:English:[Blockchain dark forest selfguard handbook](README.md)<br>
|
||||||
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
:kr:한국어 버전:[블록체인 다크 포레스트 셀프가드 핸드북](README_KR.md)<br>
|
||||||
*Note: V1, Update Logs, please see the Chinese version.*
|
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
|
||||||
|
:indonesia:Versi Indonesia:[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
|
||||||
|
|
||||||
著者: 余弦@慢雾安全团队<br>
|
著者: 余弦@慢雾安全团队<br>
|
||||||
連絡先:Twitter([@evilcos](https://twitter.com/evilcos))、Okjike(@余弦.jpg)
|
連絡先:Twitter([@evilcos](https://twitter.com/evilcos))、Okjike(@余弦.jpg)
|
||||||
@ -933,7 +934,6 @@ Web3の普及に伴い、Web3インフラやソーシャルプラットフォー
|
|||||||
|
|
||||||
以上、この部分について簡単に触れましたが、詳しく説明するつもりはありません。この分野の知識は膨大で、中には私が苦手とするものもあります。場合によって、習得すべき知識は以下です:
|
以上、この部分について簡単に触れましたが、詳しく説明するつもりはありません。この分野の知識は膨大で、中には私が苦手とするものもあります。場合によって、習得すべき知識は以下です:
|
||||||
|
|
||||||
|
|
||||||
* スマートコントラクトのセキュリティ分析とフォレンジック
|
* スマートコントラクトのセキュリティ分析とフォレンジック
|
||||||
* オンチェーン資金の送金分析およびフォレンジック
|
* オンチェーン資金の送金分析およびフォレンジック
|
||||||
* Webのセキュリティ分析とフォレンジック
|
* Webのセキュリティ分析とフォレンジック
|
||||||
@ -1048,14 +1048,15 @@ Googleはその後、この問題を完全に解決するためにAuthenticator
|
|||||||
SlowMist、Twitter(@SlowMist_Team),例えば:Pds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
|
SlowMist、Twitter(@SlowMist_Team),例えば:Pds | Johan | Kong | Kirk | Thinking | Blue | Lisa | Keywolf...
|
||||||
英語版翻訳者,例えば:Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
英語版翻訳者,例えば:Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
||||||
日本語版翻訳者,例えば:Jack Jia | Mia
|
日本語版翻訳者,例えば:Jack Jia | Mia
|
||||||
|
韓国語版翻訳者,例えば:Sharon | Jeongmin
|
||||||
|
アラビア語版翻訳者,例えば:Ahmed Alsayadi | Gabr Alsayadi
|
||||||
|
インドネシア語翻訳者,例えば:Finball
|
||||||
okjike
|
okjike
|
||||||
匿名の友人達
|
匿名の友人達
|
||||||
他の方:https://darkhandbook.io/contributors.html
|
他の方:https://darkhandbook.io/contributors.html
|
||||||
...
|
...
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
**このハンドブックに掲載するために採用されたあらゆる補足、例えば、特定の防御や事例に関するアドバイス、翻訳作業、大きなミスの修正など。**
|
**このハンドブックに掲載するために採用されたあらゆる補足、例えば、特定の防御や事例に関するアドバイス、翻訳作業、大きなミスの修正など。**
|
||||||
|
|
||||||
## その他のツールについて
|
## その他のツールについて
|
||||||
|
19
README_KR.md
19
README_KR.md
@ -2,15 +2,16 @@
|
|||||||
*이것들을 파악하면 암호화폐의 보안을 파악하는 것입니다.<br>*
|
*이것들을 파악하면 암호화폐의 보안을 파악하는 것입니다.<br>*
|
||||||
|
|
||||||
:fire:웹사이트: https://darkhandbook.io/<br>
|
:fire:웹사이트: https://darkhandbook.io/<br>
|
||||||
:cn:中文版:[《区块链黑暗森林自救手册》](README_CN.md)<br>
|
:cn:中文版: [《区块链黑暗森林自救手册》](README_CN.md)<br>
|
||||||
:us:English:[Blockchain dark forest selfguard handbook](README.md)<br>
|
:us:English: [Blockchain dark forest selfguard handbook](README.md)<br>
|
||||||
:jp:日本語版:[ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
:jp:日本語版: [ブロックチェーンのダークフォレストにおける自己防衛のためのハンドブック](README_JP.md)<br>
|
||||||
*참고: V1, 업데이트 로그, 중국어 버전을 참조하세요.*
|
:saudi_arabia:اللغة العربية: [دليل النجاة في الغابة المظلمة للبلوكتشين](README_AR.md)<br>
|
||||||
|
:indonesia:Versi Indonesia:[Buku Panduan menjaga diri didalam "dark forest"](README_ID.md)<br>
|
||||||
|
|
||||||
작성자: Cos@SlowMist Team<br>
|
작성자: Cos@SlowMist Team<br>
|
||||||
연락하기:Twitter([@evilcos](https://twitter.com/evilcos))、Jike App(@余弦.jpg)
|
연락하기:Twitter([@evilcos](https://twitter.com/evilcos))、Jike App(@余弦.jpg)
|
||||||
|
|
||||||
번역자&교정자:
|
번역자 & 교정자:
|
||||||
>[ChainWith Sharon](https://twitter.com/sharonmkt) | Jeongmin
|
>[ChainWith Sharon](https://twitter.com/sharonmkt) | Jeongmin
|
||||||
|
|
||||||
![alt this](res/this.png)
|
![alt this](res/this.png)
|
||||||
@ -1037,15 +1038,14 @@ SlowMist, Twitter(@SlowMist_Team), e.g. Pds | Johan | Kong | Kirk | Thinking | B
|
|||||||
English 역자, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
English 역자, e.g. Alphatu | C. | CJ | JZ | Lovepeace | Neethan | pseudoyu | SassyPanda | ss | XL
|
||||||
日本語 역자, e.g. Jack Jia | Mia
|
日本語 역자, e.g. Jack Jia | Mia
|
||||||
한국인 역자, e.g. Sharon | Jeongmin
|
한국인 역자, e.g. Sharon | Jeongmin
|
||||||
|
아랍어 역자, e.g. Ahmed Alsayadi | Gabr Alsayadi
|
||||||
|
인도네시아어 역자, e.g. Finball
|
||||||
Jike App
|
Jike App
|
||||||
익명의 친구들
|
익명의 친구들
|
||||||
더:https://darkhandbook.io/contributors.html
|
더:https://darkhandbook.io/contributors.html
|
||||||
...
|
...
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
**귀하의 기여가 이 핸드북에 포함되는 것이 적용되면 귀하는 기여자 목록에 추가됩니다. 예: 특정 안전 방어 제안 또는 사례 제공 번역 작업에 참여했습니다. 더 큰 오류 등을 수정했습니다.**
|
**귀하의 기여가 이 핸드북에 포함되는 것이 적용되면 귀하는 기여자 목록에 추가됩니다. 예: 특정 안전 방어 제안 또는 사례 제공 번역 작업에 참여했습니다. 더 큰 오류 등을 수정했습니다.**
|
||||||
|
|
||||||
## 도구들
|
## 도구들
|
||||||
@ -1117,8 +1117,7 @@ Scam Sniffer https://www.scamsniffer.io/
|
|||||||
Wallet Guard https://www.walletguard.app/
|
Wallet Guard https://www.walletguard.app/
|
||||||
Pocket Universe https://www.pocketuniverse.app/
|
Pocket Universe https://www.pocketuniverse.app/
|
||||||
|
|
||||||
|
Jike https://okjike.com/
|
||||||
即刻 https://okjike.com/
|
|
||||||
Kaspersky https://www.kaspersky.com.cn/
|
Kaspersky https://www.kaspersky.com.cn/
|
||||||
Bitdefender https://www.bitdefender.com/
|
Bitdefender https://www.bitdefender.com/
|
||||||
Cloudflare https://www.cloudflare.com/
|
Cloudflare https://www.cloudflare.com/
|
||||||
|
Loading…
Reference in New Issue
Block a user