比特币技术 #3 - 与Shinobi探讨钱包 - WBD325

如果你没有能使用私钥签名的电脑，那笔钱就根本花不出去。

Like, if you don't have a computer that can actually take that private key and sign with it, like, you can't spend that money.

所以说私钥和由其生成的公钥虽然是钱包的核心支柱，但还需要很多其他支持。

And so it's like, you know, there there's a lot the the private key, the public keys that get generated from them, they're, like, the central pillar of a wallet.

但在我看来，如果没有那些附加功能，比如实际查找与该钱包关联的资金或花费那些钱的能力，你就无法拥有那个钱包。

But in my mind, you don't have that wallet without adding those other things, like the the ability to actually find money associated with that or spend that money.

好的。

Okay.

这说得通。

That makes sense.

好的。

Okay.

所以我放弃了纸质钱包的想法。

So I've discarded the idea of a paper wallet.

我的选择是听说过这些硬件钱包，但我得订购一个。

My options are I've heard about these hardware wallets, but I've got to order one.

这需要一些时间。

It will take some time.

我看到可以直接在手机上下载钱包，而且我买了...比如说我现在资金充裕？

I've seen that I can I can just download a wallet to my mobile phone, and I've bought, like, say, I'm I'm pretty flush?

我给自己买了30.40美元的比特币，并且在手机上看到了这些软件钱包。

I've bought myself $30.40 Bitcoin, and I've seen these software wallets on my mobile phone.

这对我来说是个明智的选择吗？

Is that a sensible option for me?

我是否应该下载一个软件钱包并把那些比特币转进去？

Should I should I download a software wallet and transfer that Bitcoin to it?

在我看来，这个问题百分之百取决于你实际拥有多少比特币。

This question, in my mind, a 100% of the time comes down to how much Bitcoin do you actually own.

好的。

Okay.

你知道，比如说如果你只有100美元的比特币，那可能还说得过去。

You know, like, if if you only have, say, a $100 of Bitcoin, that might make sense.

要知道，如果你只有100美元的比特币，却花100美元去买一个像Cold Card这样的硬件设备，这完全是不理智的。

You know, there there it's it's completely irrational to go spend, say, a $100 on a a hardware device like the cold card if you only have a $100 of Bitcoin.

从经济角度来说这很愚蠢。

Like, that's just economically silly.

但如果你持有1万美元的比特币，那就应该去买个安全设备。

But if you had, like, $10,000 of Bitcoin, I mean, go get the secured device.

把1万美元的比特币放在手机里是个非常糟糕的主意。

Like, putting $10,000 of Bitcoin on a phone is a really bad idea.

但如果你只有那么一点点钱

But if you just have that tiny amount

这有点像，我口袋里装着钱包，同时还有个银行账户。

Well, it's well, it's a bit like, I've got my wallet in my pocket, and I've got my bank account.

如果我有一百零两万英镑、美元之类的，我不会把这些钱都放在钱包里带着满街走，或者留在车里。

If I've got $1,020,000 pounds, dollars, whatever, I'm not gonna keep that in my wallet and walk around the streets with it or, you know, leave it in my car.

我可能只在钱包里放一两百美元现金，剩下的钱会存在更安全的银行账户里。

You know, I might have a 100 couple $100 in that wallet, but the rest I'm gonna leave in my bank account where it's a bit more secure.

这其实是类似的道理。

It's a it's a kinda similar similar scenario as well.

对吧？

Right?

嗯。

Mhmm.

没错。

Exactly.

是啊。

Yeah.

好的。

Okay.

所以我认为需要传达的重点是，人们应该根据不同的场景使用不同的钱包。

So I think the thing to get across then is that there are different wallets that people should be using therefore for different scenarios.

听着。

Listen.

我有一个桌面钱包。

I have a desktop wallet.

我手机上有个软件钱包。

I have a software wallet on my mobile.

我有个硬件钱包。

I have hardware wallet.

我还有三个用于多重签名的硬件钱包。

I also have three hardware wallets used for multisig.

你看，我现在已经能理解不同类型的钱包及其用途了。

So look, I'm at that point where I understand the different types of wallets and what they're used for.

但我认为对某些人来说，特别是新加入的人，我们应该试着解释清楚它们之间的区别。

But I think for some people, especially the new people coming in, we should try and break down what the difference is.

我觉得可以从解释热钱包和冷钱包的区别开始。

And I think a starting point is to explain the difference between a hot and a cold wallet.

你想从这点开始讲吗？

Do you wanna do you wanna start with that?

好。

Yeah.

你知道，热钱包就是你装在手机上的那种钱包。

So, you know, a hot wallet would just be that that wallet you put on your phone.

就是那种在联网的电脑或设备上存储着实际能花费资金的私钥的钱包。

Like, that's something that has the actual private keys that can spend the money on a computer or device that has a network connection.

这意味着别人有可能通过网络连接到那台电脑并试图进行干扰。

Like, it it is possible for people to connect to that computer and try to mess with it over the Internet.

绝对、完全是一种糟糕的大额资金存储方式。

Absolutely, utterly horrible way to store large sums of money.

比如，如果你只是想放些零花钱，日常消费用的钱，诸如此类，那倒是个合理的解决方案。

Like, if you just wanna have some pocket change, you're spending money, you know, stuff like that, perfectly reasonable solution.

但对于应该存放大部分积蓄的冷存储钱包来说，你的比特币净资产需要与那些实际能花钱的密钥分开保管，这些密钥不应该存放在联网设备上。

But a cold storage wallet where people should be keeping most of their their savings, your net worth in Bitcoin is where you separate those keys that can actually spend the money, and that's not on the network machine.

所以，就像你上次设置的那样，可以是在桌面上使用Spectre这类软件，而真正的私钥则存放在类似冷卡这样的设备上。

So, like, that would be, say, you know, Spectre on your desktop, like like you set up last time, with the actual private keys on something like a cold card.

因为这样一来，虽然人们仍能连接到那台电脑并试图进行操作，但他们必须实际拿到那张冷卡才能获得可以动用你资金的密钥。

Because that way, you know, yes, people can still connect to that computer and they can try to play games with it, but they have to physically get ahold of that cold card to get those keys that can spend your money.

因此，这就像是不同类型钱包之间最根本的区分方式。

And so, like, that is the most binary kind of divide between different types of wallets.

就这么简单，任何大额资金都不应该存放在热钱包里。

And, you know, just as simple as this, like, any large sum of money should never be sitting in a hot wallet.

应该转移到冷存储钱包中。

It should go to a cold storage wallet.

好的。

Okay.

如果说说我的个人钱包使用历程，我的第一个钱包就是最初在Coinbase购买比特币时使用的交易所内置钱包。

So if I talk about my personal wallet journey, my very first wallet was within the exchange I used when I first bought some Bitcoin on Coinbase.

我的比特币就存放在那个钱包里。

My Bitcoin sat in that wallet.

后来我在手机上装了个软件钱包，就像你刚才说的，我只转了很少的金额进去。

And then I had a software wallet on my phone, and similar to what you just said, it was like a very small amount that I transferred into it.

下一步我换成了硬件钱包，我记得第一个用的是Ledger。

My next step was go to a hardware wallet, and I think the first one I had was a ledger.

之后我又转到了多重签名钱包，算是进入了深度冷存储阶段。

And then I went to a multisig as kind of to kind of go to that deep cold storage.

让我们逐一讲解这些内容，以便大家理解。

Let's work through each one of those so people understand it.

所以即使他们拥有交易所账户，那里的比特币也是存放在钱包里的。

So even when they have an exchange account, the Bitcoin they have there is in a wallet.

对吧？

Right?

是的。

Yeah.

不过，这些币必须绑定到某个地方的某个密钥上，由某人持有，否则它们就无法存在。

Like, though, those coins have to be tied to some key somewhere that somebody's holding or they can't exist.

所以，这确实是个非常重要的问题需要考虑。

So, yeah, that that is a very important thing to think about.

要知道，如果你把币留在Coinbase上，可能不需要自己操心保管这些密钥来保护资金，但总得有人负责。

You know, if you just leave your coins on Coinbase, you might not have to worry about keeping those keys safe, in order to protect your money, but somebody does.

无论你是否持有密钥，总得有人确保这些密钥的安全。

Like, whether you have the keys or not, somebody always has to keep those keys safe.

否则，你的资金就会面临风险。

Otherwise, your money's at risk.

像Coinbase这样的平台，他们会为每个用户维护独立的钱包吗？就像独立的银行账户那样？

And with something like Coinbase, do they maintain a separate wallet for every individual user, like a separate almost like a separate bank account?

还是把所有比特币都存放在一个巨型钱包里？

Or do they keep all of the Bitcoin in one giant wallet?

你看到的余额只是数据库里的一个数字。

You see your balance that comes just from a database.

当你选择提现时，他们就从那个庞大的数据库里发送。

And when you choose to withdraw it, they send it from their big giant database.

是的。

Yeah.

是后者。

It's it's the the latter.

这里没有隔离。

There there's no segregation.

所有资产都存放在Coinbase的钱包和UTXO中。

Everything is just kind of in Coinbase's wallets and UTXOs.

不过我要说明他们确实提供一项叫Vault的服务，这基本上类似于Unchained Capital的多重签名方案——他们长期持有其中一把密钥。

Although I I will say they do have a service called the Vault, which is it's kind of like it's pretty much like the Unchained Capital multisig where they have one of the keys that's been around forever.

但这类服务是唯一会让你资产部分掌握在他人手中的情况，当然由于多重签名也不能算完全托管。

But, like, that type of of service is really the only situation where you're gonna have coins kind of in the hand of someone else, so to say, although not entirely because of multisig.

其他情况下，企业都是自行掌管密钥的。

Any other situation, it's just that that business has it in its own keys.

没有任何资产是根据用户账户进行隔离的。

Nothing is separated based on users' accounts.

没错。

Right.

因此说你在Coinbase拥有钱包其实有些误导。

So therefore, to say you have a wallet with Coinbase is actually slightly misleading.

你实际拥有的是登录账号和余额数据，这些资金都来自他们的大钱包。

What you have is a login and a balance which of which and I owe you from their big wallet.

你并不真正拥有自己的钱包。

You don't actually have your own wallet.

本质上你账户里只有余额记录。

You just essentially have a balance on your account.

可以说你的比特币确实存放在钱包里，但那不是你的钱包。

So to say your your Bitcoin is stored in a wallet, but it's not your wallet.

是他们的钱包。

It's their wallet.

好的。

Okay.

有道理。

That makes sense.

好的。

Okay.

所以我决定取出我的100美元。

So I've decided to withdraw out my $100.

我给自己弄了个软件钱包。

I've got myself a software wallet.

初次设置时我该注意些什么？

What should I be thinking about with that when I first set it up?

有什么需要特别注意的吗？

Anything I need to be thinking about?

嗯，显然，任何钱包都离不开你的助记词。

Well, obviously, any wallet, no matter what it is, your word seed.

要妥善保管、备份，确保安全。

Keeping that, backing that up properly, making sure that's safe.

好的。

Okay.

先生，什么是助记词？

What is my word, sir?

能给我解释一下吗？

Can you explain that to me?

好的。

Alright.

那我们来试试这个。

So let's let's try this.

生成比特币私钥时，你只需选取一个非常大的随机数，那就是你的私钥。

You generate a Bitcoin private key, you just pick a really large random number, and that's your private key.

就是一串非常长的0和1。

Just a very long string of zeros and ones.

如今钱包的工作原理是先生成一个原始密钥，然后基于它可以生成任意数量的密钥。

Now the way wallets work nowadays is you make that one original key, and then from that, you can make as many keys as you want.

现在好了。

Now okay.

那个巨大的随机数，显然如果指望人们手动记录0100110这样的数字，还要保证每个数字都不出错，这根本不可能。

That that big random number, obviously, if you just expect people to write down zero one zero zero one one zero, and not screw up a single digit of that, that's never gonna happen.

所以开发者们创建了一个包含2048个单词的特殊词典。

So what developers did is they made this special dictionary of 2,048 words.

基本上每个单词都对应一个非常具体的11位二进制数字定义。

And pretty much every one of those words has a a definition, so to say, of a very specific 11 digit binary number.

因此每个11位二进制数字都能精确对应词典中的一个单词。

And so each 11 digit binary number there could be maps to exactly one of these words.

这样当你的钱包生成这个用于派生所有私钥的大随机数时，它会将数字转换为词典中的单词，最终得到23个单词而非单纯的0和1。

And so this way, when when your wallet generates this really large random number that is going to generate all of your private keys, it translates the number into the words in the dictionary so that you wind up with 23 words instead of just zeros and ones.

而第24个单词，基本上就是对前23个单词进行哈希运算后，取其数值部分添加最后11位0和1转换成的单词。

And then that last word, the twenty fourth word, you pretty much just hash the first 23 and then make kind of take that, in the numerical value and add on, like, the last 11 digits, of zeros and ones and turn that into a word.

这有点像安全校验码。

And that's kind of like a safety check.

因为当你输入那23个单词时，系统会将第24个单词作为前23个单词的校验码。

Because when you enter in those 23 words, it's going to map the twenty fourth one to, like, a safety check of the other 23.

所以如果你输入助记词时任何单词出错，但最后一个单词正确，钱包就会判定不匹配。

So if you kinda type in a seed and any of the words are screwed up, but you have the last word correct, the wallet will go, no.

这是错误的。

This is wrong.

我们知道这是错误的，因为最后一个词不符合预期，其他部分都乱套了。

And we know it's wrong because that last word isn't what it's supposed to be because all the other ones got messed up.

所以这样做的全部意义就是确保当用户备份密钥时，他们面对的是熟悉的形式——习惯阅读和处理的单词，而不是一个长得离谱的二进制数字，十个人里有九个可能会抄错的那种。

And so the entire point of this is just to make sure that when the user goes to back up their keys, they have something they're used to reading, used to handling words instead of just a really long, you know, binary number that nine out of 10 people would probably copy down on.

好的。

Okay.

让我试着用超级简单的语言来解释。

So let me try and translate into what I think is super in super easy language.

钱包本身有一串超长的数字组合。

The wallet itself has this super long set of numbers.

对吧？

Right?

这串数字本质上就是该钱包的ID。

That is essentially the I ID for that wallet.

只要知道这串数字，你就能恢复那个钱包。

And if you know that, you you can restore that wallet.

我不太愿意称它为ID，更倾向于用密码来类比——它更像是密码而非ID。

I I wouldn't call it an ID so much as a I I would call it more of a password than the ID in an analogy.

好的。

Okay.

这是密码。

That's a password.

但为了让创建钱包的人更简单，与其记录这种容易出错的东西，记单词要容易得多。

But but but but to make it simpler for people creating wallets, rather than write down this thing that you can get wrong, it's much easier to write down words and memorize them.

严格来说，正在创建第一个钱包的听众只需要知道：他们需要记下并保存（我们稍后会讨论记录方式本身的问题）

So strictly speaking, for anyone listening to this who's creating their first wallet, all they need to know is they need to write down and store we'll come back to writing itself because that's an issue.

但他们必须保存那24个单词，因为这就是他们钱包的密码。

But they need to store those 24 words because that is the password to their wallet.

如果那个钱包被销毁或出现任何问题，比如是手机钱包且手机丢失了，他们可以重新下载钱包。

If that wallet is ever destroyed or anything goes wrong with it, say it's a mobile phone wallet and they lose their phone, they can download the wallet again.

输入那24个单词，就能恢复那个钱包，

Put in those 24 words, and it will restore that wallet for

他们。

them.

嗯。

Mhmm.

简单来说，那些单词就是你的钱，这是每个人都应该明白的最基本道理。

Like, those words are your money as far as, like, the simplest thing anyone should be thinking.

对。

Right.

那些单词就是你的钱。

Those words are your money.

那就是你的备份。

That's your backup.

好的。

Okay.

于是我拿到了第一个钱包。

So I get my first wallet.

我设置好它。

I set it up.

我把100美元的比特币转进去。

I send my $100 of Bitcoin to it.

我首先要做的就是备份那些单词。

The very first thing I should do is back up those words.

现在每个人都有自己处理这件事的方式。

Now everybody has their own way of doing this.

备份这些单词的最佳方式是什么？

What is the best way to back up these words?

有没有什么流程之类的？

Is there any kind of, like, process?

我的意思是，我的流程如下。

I mean, mine is as follows.

对吧？

Right?

我做的第一件事就是把它们写下来。

The very first thing I do is write them down.

然后我用那个钱包存入100美元。

And then with that wallet, I send the $100 in.

接着我会清空那个钱包，再用24个单词恢复它，确认我记录正确，并检查余额是否恢复。

I then wipe that wallet, and then I restore it from the 24 words to check that I've written them down correctly, and I check that the balance is restored.

这就是我创建新钱包的完整流程。

That's the process I go through for the creation of a new wallet.

这样讲清楚吗？

Does that make sense?

嗯。

Yeah.

你知道，显然我个人已经不再做这类操作了。

You know, obviously, I don't personally do anything like that anymore.

但如果你对操作正确性有哪怕一丝不确定、紧张或怀疑，就绝对应该这么做。

But if there is the slightest bit of uncertainty, of nervousness, of of doubt that you did something right, then you absolutely should do that.

你应该先发送小额资金，确保能正确恢复后再处理大额转账。

You should send a small amount first, make sure that you can recover it properly before you send larger amounts of money.

就是说，在你个人对比特币管理足够得心应手、不再感到担忧之前，不应该跳过这类验证步骤。

Like, you you should not be skipping something like that until you personally feel comfortable enough managing, you know, your Bitcoin that you do not actually feel worried like that.

如果你有任何疑虑或担忧，一定要先进行小金额测试，再发送大额资金。

If if you feel any doubt or any worry, absolutely, like, test things like that first before you send a significant amount of money.

好的。

Alright.

首次收听的朋友请注意，创建钱包时会要求你备份助记词。

So anyone listening first time, if you get a wallet, it's gonna ask you to back up your seed words.

一定要备份。

Do.

首先，清晰地抄写下来。

Just to begin with, just write them down clearly.

要清晰。

Clearly.

知道为什么吗？

Do know what?

我强调清晰是因为有次我抄完后发现自己认不出其中一个词。

I say clearly because once I wrote them down, I couldn't read back one of the words.

所以先清晰抄写，转入几美元，然后清除钱包（比如删除手机上的应用），再用助记词恢复钱包，确认那几美元仍在。

So write them down clearly, send a few dollars in, wipe the wallet, like delete it if it's on your phone, restore it, put in those seed words, and check that those few dollars still exist.

如果操作成功，说明你正确记录了主密码。

And if you've done, you have written down that master password correctly.

但备份完成后，你有什么建议？

But from that point of backing them up, what do you recommend?

把那张写着助记词的纸放在床底下或阁楼里。

Keeping them on that piece of paper, stick that piece of paper under the bed in the in the attic.

这样备份助记词靠谱吗？

Is that a good way of backing up your seed words?

这个嘛，其实完全取决于你想防范哪些风险。

Well, I mean, it it's entirely dependent on the risks that you want to protect yourself from.

好的。

Okay.

显然，你知道，一张纸是可以的，但有很多金属制品也能让你记录这些信息。

Obviously, you know, piece of paper is okay, but there are numerous, you know, pieces of metal, that will allow you to record this.

比如有些产品会提供带字母的小金属片，你可以把它们滑入槽中并锁定。

Like, are products where you get little tiles with letters on them, and you can slide them into a slot and lock them.

有些工具甚至能让你直接用锤子把字母敲进平整的金属板。

There's tools where you can literally take a hammer and smash the letters into a plain piece of metal.

我记得还有胶囊装置，你可以按顺序把金属字母滑进锁定的管子里。

I I think there's also capsules too where you can just, like, slide the the metal, letters in order into a locked tube.

显然，这比一张纸强多了——比方说如果你家失火被烧毁的情况。

Obviously, that is going to be way better than a piece of paper, say, if your house catches fire and burns down.

不过就记录载体而言，先用纸写完再说。

But, you know, as far as what you actually record those words on, just start with the piece of paper and get it done.

但随着时间的推移，你应该考虑用那些金属产品来增强耐久性，用来存储你的密钥。

But as time goes on, you should think about making that more durable with things like the these metal products that you can store your seed on.

因为随着时间推移，生活总在变化。

Because, you know, as time goes on, you know, life changes.

你周围的环境也在改变。

Your your environment around you changes.

可能今年你不担心房子着火，但几年后社会动荡，疯子半夜乱扔燃烧弹也说不定。

You know, you might not worry about your house burning down this year, but a couple years from now, I don't know, society could be going crazy and nut jobs run around at night throwing Molotov cocktails at random houses.

所以第一步还是先用纸质记录下来。

So it's just like start first with actually just getting it down on paper.

但持有时间越长，你就越应该考虑如何让这些文字的备份能抵御生活中可能出现的各种意外。

But over time, the longer you hold that, you should be thinking about making that backup of those words as, you know, resilient as possible to different things that could go wrong in your life.

我个人对用软件钱包备份100美元密钥比较随意，但换成存着完整比特币的硬件钱包就会谨慎得多。

And I guess, you know, like, with me, I'm a I'm a little bit more carefree about backing up the words to a software wallet with a $100 than I am to, say, a hardware wallet that might have, say, a whole Bitcoin in it.

你可以承担不同的风险，这很公平。

There's different risks that you can take, which is fair.

我记得有个金属装置，只需要记录每个词的前三个还是四个字母来着？

One of these metal devices I had, as I remember, I only had to record was it the first three or four letters of each word?

对。

Yeah.

是前四个字母。

It's the the first four.

因为

Because

前四个。

First four.

为这个设计的整个词典结构里，所有单词都是精心挑选的，确保不会有容易混淆的词。

The the whole structure of the the dictionary that was made for this, all of the words were specifically chosen so that there are no words that kind of could get confused.

你明白我的意思吗？

You know what I mean?

整个结构设计就是让尽可能多的单词拥有完全不同的字母组合，这样就不会混淆。

Like, everything was structured so that, as many words as possible have completely different, you know, letter structures so you can't confuse them.

唯一的例外可能不在实际词典里，比如单词'10'和'tent'。

Like, the the only kind of exception to that is kind of it's probably not in the actual dictionary, but, you know, like, the word 10 versus tent.

这些词确实有相似之处，但如果你分不清'10'和'tent'，可能就不该玩比特币。

Like, there are similarities in the words there, but maybe you shouldn't be playing with Bitcoin if you confuse the word 10 with tent.

接下来，我和Shinobi深入讨论了钱包的话题。

Next up, I talked to Shinobi more about wallets.

不过在开始前，先插播一条来自我们优秀赞助商的信息。

But before that, I've got a message from my amazing sponsors.

好的。

Okay.

我们要从Kraken开始讲起，这是我最喜欢的比特币买卖平台，也是我现在唯一使用的比特币交易平台。

We're gonna kick off with Kraken, which is my favorite place for buying and selling Bitcoin, and it's the only place I use right now for buying and selling Bitcoin.

Kraken一直被评级为最佳且最安全的加密货币交易所。

Now, Kraken is consistently rated the best and most secure crypto exchange.

正如你们所知，因为我每周都会强调，安全性对我来说至关重要。

And as you know, because I say it every week, security is really important to me.

除此之外，他们还拥有业内顶级的客户服务。

But on top of that, they have the best in class in customer service.

所以无论你是谁，身在何处，遇到什么问题，只要联系他们，他们都会帮你解决。

So if you got an issue, whoever you are, wherever you are, whatever it is, if you reach out to them, they're gonna get that fixed for you.

如果你想开始交易比特币，他们提供所有你可能需要的工具。

And if you wanna start trading Bitcoin, they have all the tools you could possibly need.

听着，无论你的经验水平如何，在kraken.com上注册并开始交易比特币都非常简单。

So listen, whatever your level of experience, at kraken.com, it couldn't be easier to sign up and start trading Bitcoin.

他们还开发了精美的移动优先应用，让你可以随时随地交易比特币。

They also have a beautiful mobile first app, so you can trade Bitcoin on the go.

通过他们的保证金交易期货和场外交易服务台，Kraken为你提供了所有交易选择。

And with their margin trading futures and OTC desk, Kraken has every option covered for you.

没有比这更好的比特币交易平台了。

There is no better place to trade Bitcoin.

你可以在kraken.com了解更多信息或下载应用。

You can find out more at kraken.com or download the app.

该应用支持iPhone和安卓设备。

It's available for the iPhone and Android.

只需搜索Kraken Pro，拼写是k r a k e n p r o。

Just search for Kraken Pro, which is k r a k e n p r o.

接下来，我们要介绍BlockFi。

Next up, we have BlockFi.

我们来聊聊他们发布的重要公告。

Let's talk about their big announcement.

这事发生在圣诞节前。

Happened before Christmas.

他们即将推出Visa比特币奖励信用卡，所有消费都能获得1.5%的比特币返利。

They am imminently going to be launching a Bitcoin rewards Visa credit card, where you can earn a 1.5% rewards in Bitcoin on all card purchases.

你知道的，我已经迫不及待想拿到这张卡了。

As you know, I cannot wait to get this.

我迫不及待想用比特币消费来积累数据了。

I cannot wait to start stacking stats with all my Bitcoin purchases.

我认为这将彻底改变游戏规则。

I think this is a massive game changer.

对此我感到非常非常兴奋。

Very, very excited about this.

他们已向所有人开放候补名单，无需成为BlockFi账户持有者即可加入。

They have opened up the waitlist to everyone, so you do not have to be a BlockFi account holder to join that waitlist.

如果你想了解更多，我一向建议大家自己做调研，但你可以访问blockfi.com（即bl0ckfi.com）。

And if you wanna find out more, I do always say do your own research, but head over to blockfi.com, which is bl0ckfi.com.

最后我们要讨论另一款钱包——Ledger。

And lastly, we're gonna finish up with another wallet, Ledger.

节目中提到的Ledger，是我人生中使用的第一款钱包。

Mentioned in the show, discussed in the show, now Ledger was the first wallet I ever used.

大约四年前...准确说现在已超过四年了。

About four years well, it's over four years ago now.

大概四年零两个月前，当我重新接触比特币时，第一次读到关于钱包的文章，那时就知道必须有个硬件钱包。

It's like four years and two months when I got back into Bitcoin, and I first started reading about wallets, and you need to have a hardware wallet.

我最终选择了Ledger的Nano s，直到今天还在用同一台设备。

It was a Nano s that I went with from Ledger, and I'm still using that exact same device today.

现在我来告诉你为什么我喜欢Ledger。

Now I'll tell you why I like Ledger.

归根结底在于用户体验。

It all comes down to UX.

设备本身超级容易使用。

The device itself is super easy to use.

它显然非常坚固耐用。

It's obviously robust.

它经受住了像我这样的笨蛋四年的折腾，而且通过Ledger Live，你可以安全地管理你的比特币。

It survived four years of a moron like me holding it, but also the Ledger Live, you can safely manage your Bitcoin itself.

它的设计非常精美。

It's beautifully designed.

使用起来非常简便。

It's so easy to use.

除此之外，如果你是安卓手机用户，你还可以将Nano s连接到手机上安全地管理比特币。

On top of that, if you're an Android phone user, you can actually connect your Nano s to the phone to safely manage your Bitcoin.

所以这是个非常值得一看的酷炫设备。

So it's a very cool device worth checking out.

如果你想了解更多，可以访问ledger.com。

If you wanna find out more, you can head over to ledger.com.

网址是ledger.com。

That is ledger.com.

好的。

Alright.

酷。

Cool.

现在我有了我的钱包。

So I've got my wallet.

我已经备份了我的私钥和助记词，这样即使发生意外，我也掌握着主密码。

I've backed up my private I've backed up my seed words, so I've got my master password should anything happen.

就这个钱包而言，如果要发送和接收比特币，我只需要按照这些基本操作指南进行。

So in terms of this wallet, if I want to send and receive Bitcoin, I've just got these various, you know, basic instructions.

我输入地址，点击发送，确认后交易就完成了。

I put in the address, so I click send, and I confirm, and it goes.

如果想接收比特币，就点击接收，获取地址后分享给别人。

And if I want to receive, I click receive, and I get the address, and I give it out to somebody else.

但你刚才提到这些公钥和私钥的概念。

But you're talking about these public and private keys.

我需要了解这些是什么吗？

Do I need to know what these are?

嗯，至少需要一定程度上的了解，是的。

Well, to at least some degree, yes.

你必须明白两者之间的区别——把公钥或地址给别人收款完全没问题，但绝不能泄露私钥。

You you you have to understand the diff the difference between the two at least in in the sense of it's perfectly okay to send somebody a public key or an address to send you money, but don't send them the private key.

对。

Yeah.

当然。

Of course.

因为如果有人拿到你的私钥，就能盗取你的比特币。

Because the if somebody has your private key, they can steal your Bitcoin.

不过说实话Shinobi，我记不得用这类钱包时什么时候显示过私钥。

But, honestly, Shinobi, I can't remember a time when I've used a wallet like this that it's ever showed me a private key.

可能显示过，但我确实没印象了。

I mean, it may have, but I can't remember it.

我只需要点击发送，交易就完成了。

I just click send, and it goes.

是的。

Yeah.

但我确实意识到，当我想接收比特币时，它会给我一个地址，一串很长的字符，然后我会把这个地址给别人。

But I do realize when I want to receive Bitcoin, it gives me an address, a big string of letters, and I do give that to somebody.

所以我是不是漏掉了什么？

So am am I missing something?

这些钱包实际上会把我的私钥暴露给我吗？

Are these wallets actually exposing my private key to me?

从视觉上看，不会。

Visually, no.

但我的意思是，每次用软件钱包签名时，无论钱包启动时自动签名，还是需要密码保护，这些密钥都必须解密并加载到电脑内存中才能完成签名。

But, I mean, every time with a software wallet that you go to sign something, you know, whether it just does it when the wallet boots up, whether it's password protected, like, those keys have to be unencrypted and actually put in the computer memory to actually sign that.

所以无论这种情况发生在你的台式机上（电脑上运行的其他程序可能窃取密钥），还是发生在像冷钱包这样无需担心的设备上（因为它不联网）。

So whether that's happening on your desktop, where, you know, other things running on the computer could potentially grab that, or whether that's happening on a device like a cold card where you don't have to worry about that because it's not connected to anything.

实际上，那个设备必须以某种可访问的方式存储着私钥。

Like, that device actually has to have that private key in some way that's accessible.

至于是否对用户完全隐藏，或者用户只能通过高级选项或菜单获取，这取决于不同的钱包设计。

And now whether that's hidden from the user, completely, whether the user can only get that through an advanced option or menu, that's kind of up the different wallet.

但当你签名时，那个密钥确实存在于那台机器里。

But, like, that key when you sign something is available there in that machine.

也就是说，如果你深入研究并找到方法，作为用户是可以直接访问到它的。

Like, that there is some way if you dig around and figure out how that you as a user could directly access that.

好吧。

Okay.

那我们先把密钥拆解清楚。

Well, let's break down the keys.

我们先做这一步。

Let's do that first.

给我解释一下公钥到底是什么。

So explain to me what the public key actually is.

公钥本质上就是私钥乘以图表上一个特殊点的结果。

So the public key is pretty much just the result of multiplying the private key, by a special point on a graph.

这就是比特币使用的加密曲线类型。

That's kind of the crypto curve that Bitcoin uses.

它真的就这么简单。

And it's it's really just that simple.

就像你拿着私钥，拿着比特币加密中这个特殊的数字，把它们相乘，砰的一下就得到你的公钥了。

Like, you take the private key, you take this number that's special in the cryptography that Bitcoin uses, and you just multiply them, and bam, that's your public key.

这其中整个关系就是所有那些加密机制，让你能够签名并验证签名是否正确。

And kind of the the whole relationship there is all of the the crypto that allows you to sign something to verify that a signature, is correct.

这完全涉及私钥、特殊数字和你通过两者相乘得到的公钥之间的关系。

It just involves the relationship between that private key, the special number, and the public key that you get from multiplying those two.

关键是你还能做其他数学运算，比如在不泄露私钥的情况下生成签名，然后仅用公钥来验证这个签名。

And the fact that you can do other kinds of math to, you know, make this signature without revealing the private key, to verify this signature only using the public key.

是的，如果你想真正理解这里的数学原理，最关键的是记住私钥就是一个完全随机的数字。

And, yeah, it's the the key thing to remember if you actually wanna understand the math here is that you just make the private key with a totally random number.

然后那个公钥，那个地址，你实际上是从私钥直接生成的。

And then that public key, that address, you're actually generating that directly from the private key.

所以一切总是从私钥开始的。

So everything always starts with the private key.

对。

Right.

但你刚才说的这些我其实不太懂。

But I don't really know much of what that is you've just talked about.

我敢肯定自己四年里从没刻意用过这些。

I've definitely never used that even in my four years consciously.

但我听说过这个。

But I've heard about it.

对吧？

Right?

但公钥到底是什么？

But what actually is the public key?

它有什么作用？

What does it do?

它是用来

What does it

干嘛的？

for?

它允许人们将UTXO锁定到该公钥上，而解锁的唯一方式是证明你能用与该公钥匹配的私钥签名。

It allows people to lock a UTXO to that public key, and the only way to unlock it is to prove you can sign with the private key that matches to that public key.

所以，可以把公钥想象成你用来锁定比特币的挂锁，而私钥则是实际用来解锁的钥匙。

So, like, think about, like, the public key as the padlock that you lock Bitcoins with, and the private key is the actual key you can use to unlock that.

好的。

Okay.

我们之前讲过UTXO。

So we covered UTXOs before.

本质上，账本上每个UTXO都关联着一个公钥吗？

Essentially, is every single UTXO on the ledger linked to a public key?

好的。

Okay.

所以对新手来说，一般答案是肯定的。

So the general answer for newbies is yes.

但忍者级答案是：严格来说，技术上并不必须如此。

The Shinobi answer is technically, strictly speaking, they don't have to be.

好的。

Okay.

因为我试图解释的是，这可能会更深入地探讨比特币的工作原理。

Because I'm trying to underlie like, this is gonna probably go to a little bit deeper about how Bitcoin works.

对吧？

Right?

在那个好的。

In that okay.

所以当我打开钱包时，我的钱包里有我的公钥。

So when I go into my wallet, my wallet has my public key.

它具体做什么？

Does it what does it do?

它会扫描区块链并找到与该公钥关联的所有UTXO，这样它就知道了？

Does it scan the blockchain and find all the UTXOs associated with that public key, and therefore it knows?

没错。

Exactly.

这正是钱包用来查询余额的方式。

That that is exactly what the wallet does to find your balance.

它只需获取所有这些公钥，然后检查区块链并寻找锁定在这些公钥上的任何UTXO。

It just takes all of those public keys, and it checks the blockchain and goes find any UTXO locked to any of these public keys.

然后呢？

And what?

它会扫描所有区块。

It scans through all the blocks.

嗯。

Mhmm.

所以基本上，我持有的所有比特币，也就是属于我的所有UTXO，都随机分布在区块链的各个区块中。

So so, basically, all the Bitcoin I hold, which is basically all the UTXOs that are mine, are distributed randomly through all the various blocks on the blockchain.

我的钱包会显示所有与我的公钥关联的UTXO，并将它们展示给我看。

And so my wallet goes in and says, right, these are all your UTXOs associated with your public key, and it displays them for me.

但就它们在比特币网络中的实际存在位置而言，我的某些UTXO可能和你的在同一个区块里紧挨着。

But in terms of where they exist in Bitcoin, you know, I could have some UTXOs that are sat next to yours in a specific block.

嗯。

Mhmm.

对我来说，用这种角度思考问题有点傻，不过确实...

I mean, it's to me, it's kinda silly to to think about things in those terms, but, you know, that yeah.

这种思考方式对新用户来说很有帮助。

That that is a helpful way, I think, for new people to think about it.

我之所以这么想，是因为我一直以为打开钱包就能知道我有多少比特币。

Well, I would I the reason I'm thinking about it like this is because I always assumed, look, my wallet opens and it knows how much Bitcoin I've had.

不知为何，我总以为我所有的比特币UTXO都整整齐齐地存放在同一个地方。

And for just some reason, I assumed all my bit all my Bitcoin, the UTXOs, were all nice and neatly in one place together.

但严格来说，实际情况似乎是钱包在扫描整个区块链，用我的公钥匹配并说：好

But strictly speaking, what it seems to me is happening is the wallet is going through the blockchain, scanning it with my public key, going, right.

这些都是你的UTXO，我们会列出来

These are all your UTXOs, so we'll list them out.

然后这是每个UTXO的价值，这就是你的总额

And then this is the value of each one, so here's your total.

嗯。

Mhmm.

是啊。

Yeah.

就像上周我刚往OpenDime里存了些币准备送人，希望能帮他们渡过难关

You know, like, I just the like, last week, I just loaded up an OpenDime to to give to somebody to hopefully push them over the hump.

那个UTXO就在最近几周的区块里

Like, that UTXO, that's in the last couple weeks of blocks.

我还有一些多年前创建的UTXO，自创建以来就从未移动过。

I also have UTXOs created years ago that still haven't moved since being created in that block years and years back.

那么钱包具体是做什么的？

So what does the wallet do?

它是逐块扫描，显示所有未花费的交易吗？这些交易是否与你的公钥匹配？

Does it just go block by block, show me all the unspent transactions, is this matched to your public key?

对。

Yep.

没错。

Right.

确认。

Tick.

我们会将其关联到你的钱包里。

We'll put that we'll associate that within your wallet.

这基本上就是它的功能。

That's essentially what it does.

让我再问你一个问题。

So let me ask you another question.

因为实际上，这样思考的话，听听反馈会很有意思。

So because this this actually, thinking about it like this, it'd be interesting to get the feedback on this.

现在理解了这些，我们刚才讨论的内容确实让我对比特币的认识又提升了一点。

This is even just understanding this now, what we've just gone through now, has just literally leveled up my understanding of Bitcoin a bit more.

就像我说的，作为用户体验从业者，我原以为钱包里存着我所有的UTXO，但实际上它们在比特币区块链上并不属于我。

Because as a UX person like I said, I just imagined there's my wallet and all my UTXOs somehow in the Bitcoin blockchain were all in mine, but they're not.

它们只是分散在链上，这挺有意思的。

They're all just scattered through it, which is kind of interesting.

假设我要花费一个UTXO，比如在623111号区块有0.5个比特币的UTXO，当我转给Shinobi时，区块链如何知道这个UTXO已被花费？

So at the point I go to spend one of my UTXOs say I've got a UTXO in block 623,111, and it's half a Bitcoin, and I go to spend that and I send that to Shinobi, okay, what does the blockchain do to know that one's been spent?

因为那个区块是密封的。

Because that block is sealed.

对吧？

Right?

作为未花费交易存在时，它是被密封的。

The one that it's in as an unspent, it's sealed.

它需要检查之后是否被花费了吗？

Does it have to look if it's been spent later on?

不需要。

No.

网络中的任何节点都会自动处理这件事。

It like, any node in the network will do that automatically.

好的。

Like Okay.

基本上每个节点除了保存所有区块外，如果愿意保留的话，还会维护UTXO集合。

Pretty much every node has, in addition to all the blocks, if they want to keep them, they have the UTXO set.

所以它只是所有尚未被花费的交易输出的集合。

So it's just a a collection of all the outputs from every transaction that have not been spent yet.

当你尝试花费时，如果那个代币不在集合中，网络就会判定交易无效。

And so when you go to spend that, if that coin you're trying to spend is not part of that set, then the network will just go invalid transaction.

这个检查会在交易提交到网络时立即执行。

Like, that that is checked immediately upon the transaction being submitted to the network.

所以实际上，我的钱包是通过节点来检查所有未花费交易的。

So actually, so what my wallet is doing is checking it's going via a node to check all the unspent transactions.

嗯。

Mhmm.

具体实现方式有几种不同的底层方案。

And there there's a couple ways, like, that can work under the hood.

比如说，如果你使用自己的节点，并用Spectre之类的工具导入钱包，它就必须逐块扫描，确保你的交易历史正确显示，包括你曾经拥有和花费过的币，这些都会出现在钱包里，整个过程都要走一遍。

Like, you know, if you're using your own node and say you import a a wallet with something like Spectre, that will literally have to go scan block by block and make sure, you know, your history is displayed, coins that you used to have and spent, show up in your wallet and go through all of that.

不是的。

No.

节点有个较新的功能，目前还没多少钱包采用，就是可以直接检查UTXO集。

There's a newer feature in nodes not many wallets are using so far where you can just directly check the UTXO set.

这样就能找到当前属于你且未花费的所有币，但不会显示过去的交易历史，因为它只检查UTXO集而非整个区块历史。

So find all of the coins that are unspent right now that you own, but that won't, show past transaction history because it's just checking the UTXO set instead of the whole block history.

而市面上大多数轻钱包，都是连接到某个节点，这个节点会专门建立所有独立交易的索引数据库。

And then most light wallets out there, just hook up to a node that kind of makes a a special, like, index of all the data that's just all the individual transactions.

所以当你连接到轻钱包后端时，大多数时候它只会查询那个独立交易数据库，而不是扫描整条链或检查UTXO集。

And so when you're connecting to, a Lightwallet's back end, most of the time, it's just gonna check that database of, like, individual transactions instead of scanning the whole chain or, you know, checking the UTXO set.

所以后端其实有几种不同的实现方式，但最终钱包必须通过其中一种方法找到这些UTXO，才能向你展示你拥有的资金。

And so it's like there there's these couple different ways it happens in the back end, but ultimately, that wallet has to find those UTXOs somehow through one of these methods to be able to show you the money that you have.

有没有可能我的钱包连接到某个恶意节点，这个节点提供的是过时或伪造的UTXO集，导致我的余额显示错误？

Is there any way my node sorry, my wallet could connect to I don't know, a rogue node, which has a a a old set or a fake set of UTXOs and tells me a wrong balance.

这种情况会发生吗？

Is that something that can happen?

是的。

Yeah.

这正是为什么那么多比特币用户极力主张运行自己的节点——因为你能掌控向钱包提供这些信息的来源。

And, you know, this is exactly why, you know, so many Bitcoiners are so ardent about running your own node because you know you are in control of that thing telling your wallet this kind of information.

这也解释了为什么现在大多数轻钱包都会连接到用户信任的后端服务（用户相信这些服务不会欺骗他们），而不是像早期轻钱包那样随机连接网络节点。

And, this is also why, you know, most Lightwallets, will correct or connect to a trusted back end that the user is trusting to not lie to them instead of random nodes on the network like Lightwallets used to do.

明白了。

Okay.

但即使连接到恶意UTXO集，它告诉我有个属于我的UTXO（实际已被花费），当我尝试花费它时，交易也不会成功对吧？

But if he even if it is connected to a, you know, a rogue set of UTXOs and it tells me I've got a UTXO, which is mine, which isn't, it has been spent, Even if I if I then try and spend it, that's not going to work right.

这会被拒绝的。

That's going to be rejected.

嗯。

Mhmm.

是的。

Yeah.

实际网络绝对不可能让你花那笔钱。

There's zero chance the actual network would let you spend that.

好的。

Okay.

好的。

Okay.

那么，基本上来说，钱包的功能是这样的。

So, basically, what a wallet does okay.

重申一下，它会检查所有未花费的交易，所有与我的公钥关联的交易。

Just to reiterate, it goes and checks all the unspent transactions, all the ones linked with my public key.

它会告诉我哪些是我的，然后计算出我的余额。

It tells me which are mine, and then it gets my balance.

当我想给Shinobi发送比特币时，这会从我列表中的两个UTXO中扣除。

At the point then that I want to send Shinobi I wanna send Shinobi a Bitcoin, and that's gonna be made off of two UTXOs in my list.

它们都是0.5个比特币。

They're both half a Bitcoin.

当我点击发送时，实际发生了什么？

When I click send, what actually is happening?

显然这里会用到我的私钥，但具体发生了什么？

This is obviously where my private key is used, but what is actually happening?

你会说正在签署交易，但这到底意味着什么？

You you will say a transaction is being signed, but what does that actually mean?

基本上，你的钱包只会显示交易信息，包括你正在花费哪些币、创建哪些新的UTXO（未花费交易输出），即你转账给谁，以及剩余的找零会返回到你控制的UTXO。

So pretty much, your wallet's just going to show you the transaction, which coins you're spending, which new UTXOs you're creating, so whoever you're sending money to, and then whatever change is left over going back to a UTXO U control.

它只会显示这些内容。

And it's just gonna show you this.

当你点击签名时，实际上就是对交易进行哈希处理，然后你的私钥会对这个哈希值进行签名。

And when you click sign, it pretty much just hashes the transaction, and then your private key signs that hash.

简单来说，你基本上就是用私钥乘以那个哈希值，这就是签名。

So you pretty much just kind of multiply that hash by the private key in in simplest terms, and that's the signature.

任何人都可以查看你花费的币所涉及的公钥，验证这个签名确实是由对应的私钥生成的，然后交易就会被广播到比特币网络，最终被打包进一个区块。

Like, anybody can look at the public keys involved in the coins you're spending, prove that this signature was actually made by the private keys that correspond to that, and then it just blasts it off to the Bitcoin network, and it eventually winds up in a block.

对。

Right.

所以软件会自动完成签名操作，生成需要发送到比特币网络的内容。

So the software automatically just does the the stuff which signs it, creates what it needs to create to send to the Bitcoin network.

然后比特币网络会验证这个私钥是否能对那个公钥进行签名。

The Bitcoin network then validates whether that private key can sign that public key.

嗯。

Mhmm.

如果能验证通过，就接受这笔交易。

And if it can, it accepts the transaction.

如果验证不通过，就拒绝它。

And if it can't, it rejects it.

是的。

Yep.

然后交易会进入内存池，抱歉。

And it goes into the Mempool, sorry.

内存池。

Mempool.

太好笑了。

That's so funny.

嗯。

Mhmm.

你知道吗？

You know what?

我在想，我们一直试图为公司想一个暂用名称，用来定义比特币的成就，但自从Thunder之后就没再考虑过。

I've think of a we've been trying to come up for a holding name for the company that defines what Bitcoin did and never read it since Thunder.

我觉得Memepool这个名字很棒。

I think Memepool would be great.

就这么定了。

There you go.

我打赌已经有人想到了。

I bet someone's got that.

为什么不呢？

Why not?

好的。

Okay.

不过让我们试着用更简单的说法来解释。

So but let's try and go in even simpler terms.

所以我想发送这笔交易。

So I want to send the transaction.

它获取那个UTXO。

It gets that UTXO.

将其进行哈希运算并与我的私钥结合。

It multiplies it hashes it with my private key.

我的私钥是如何存储在设备钱包里的？又是如何防止他人实际看到私钥内容的？

How is my private key stored on my device, in my wallet, and how how is that prevented from someone actually seeing what that is?

以硬件钱包为例——再次强调，任何持有大量资金的人都应该使用它——原因在于它要么物理上与电脑断开连接，要么...嗯。

Well, in the case of a hardware wallet, which, again, anybody with significant amounts of money should be using, it's because it's either physically not connected to the computer or Mhmm.

它与电脑的连接非常有限且经过安全加固。

The connection it has to the computer is very limited and secured.

因此密钥实际上只存在于那个专用设备上。

So that key is only actually on that special device.

除非有人能物理窃取该设备，或者攻破连接电脑的钱包之间的安全防护，否则密钥永远不会离开该设备，因此应该是安全的。

So unless somebody can either physically take that device or break, if it's a wallet that actually does connect to a computer, the security between that connection, then that key never leaves that device, so it should be safe.

现在说说软件钱包，比如桌面端或手机端那些实际将私钥存储在本地的情况。任何由非无能之辈设计的钱包都会用PIN码或密码等加密你的私钥，并以加密形式存储。

Now any software wallet, like on your desktop that actually keeps the private keys on your desktop or the same thing on your phone, any wallet that is not designed by an incompetent idiot will encrypt your private keys with a PIN code or a password or something, and they're stored encrypted.

但当你实际签署交易时，这些密钥必须被解密才能完成签名。

But when you actually go to sign a transaction, those keys have to be decrypted to actually sign.

因此在签署交易的那段时间里，密钥会暴露在你的普通电脑上，存在潜在被窃取的风险。

And so for that time period that you're signing a transaction, that key is exposed on your normal computer, and it could potentially be compromised.

好的。

Okay.

我要再梳理一遍这个过程。

I'm gonna work through this again.

明白。

Okay.

我的钱包已经选定了UTXO。

So my wallet has picked out the UTXO.

它通过我的公钥识别出这些UTXO。

It knows what it is because of my public key.

我想把资金转给你，所以需要用私钥签名。

I wanna send it to you, so I need to sign it with the private key.

你刚说私钥本身是由公钥派生出来的吗？

And the private key itself is did you say is derived from the public key?

不。

No.

反之亦然。

The the vice versa.

公钥。

The the public key

反过来也一样。

Vice versa.

由私钥派生而来。

Derived from the private key.

对。

Right.

好的。

Okay.

所以我用私钥k签署交易，然后发送到网络。

So I sign the transaction, k, with the public with the private key that is sent off to the network.

网络可以验证这是有效交易，因为它使用公钥来确保哈希值正确。

The network can check it's a valid transaction because it uses the public key to ensure that the hash is correct.

签名是正确的。

That the signature is correct.

但但是

But but

是的。

Yeah.

签名是正确的。

The signature is correct.

因为只有那个公钥才能与那个私钥匹配。

It it and and because because only that public key can be matched to that private key.

嗯。

Mhmm.

糟糕。

Shit.

我今天学到了很多。

I've learned so much more today.

我今天对比特币的理解简直提升了十倍。

I've literally 10 x my Bitcoin understanding today.

好的。

Alright.

酷。

Cool.

好的。

Okay.

那就完成了。

So that's done.

我都明白了。

I get all that.

太棒了。

That's great.

好的。

Okay.

那是个软件钱包，大部分操作都会在后台完成。

And that's a software wallet, and most of that will happen in the background.

但我现在明白它的运作原理了。

But I understand how it's working now.

好的。

Okay.

太好了。

Great.

我现在对比特币很着迷，Shinobi。

I'm now pretty into Bitcoin, Shinobi.

我买了一万美元的份额。

I bought $10,000 worth.

我需要一个硬件钱包。

I need a hardware wallet.

目前市场上有三种主流产品。

There there are three main ones on the market.

是的。

Yeah.

为了完全透明，你看，Ledger是我的赞助商之一。

And for complete transparency, look, Ledger are a sponsor of mine.

我也是Coldcard的粉丝，和Rodolfo是朋友。

I am also a fan of Coldcard and Friends with Rodolfo.

我确实有一个Trezor。

I do have a Trezor.

我认为这三款设备都值得讨论，因为在我看来——至少在Ledger和Coldcard之间——每款都适合不同的人群。

There are three devices I think all are worth addressing because I personally think each one well, I think certainly between Ledger and Coldcard, each one suits a different person.

我收到反馈说Trezor存在一些问题。

I have had feedback that there are issues with Trezor.

如果你想讨论的话，你的个人反馈在这里会很有价值。

Your personal feedback would be valid here if you wanna talk about it.

你觉得Trezor怎么样？

What do you think of Trezor?

说实话，在开始挑剔具体品牌之前，我更想先做个总体评论。

I mean, honestly, I'd rather kinda just make a general comment before we go into, like, nitpicking specific brands here.

这样，我们先从分类的角度来看问题。

You know, let let let's look at things in terms of category first.

我们把第一类称为Trezor。

You know, let's call the first category Trezor.

第二类叫Ledger，第三类叫Coldcard。

We'll call the second category Ledger, and we'll call the third category Coldcard.

好的。

So Okay.

首先，Trezor需要实际连接到电脑上使用。

A Trezor, one, you have to actually plug that into your computer.

其次，它没有安全芯片。

And two, there is no secure chip on that.

也就是说，如果设备落入他人之手，没有专门的物理安全芯片来保护设备。

Like, there is no special security chip on that that physically secures that device if somebody actually, like, got their hands on it.

严格来说，这比私钥直接存放在笔记本电脑上安全得多，但它缺乏物理安全防护——如果有人拿到设备，没有那种需要花费巨资才能破解的安全芯片来保护你的私钥。

Now that is, strictly speaking, way better than just having your private key sitting on your laptop, but it does not have that physical security where if somebody got their their hands on the device, there is that secure chip protecting your private keys that costs lots and lots of money to break and get past.

我能在这里提个问题吗？

Well, can I ask a question there?

如果我捡到一个Trezor，我是没办法破解的。

So if I've if I found someone to treasure, I'm not gonna be able to do that.

但拥有专业设备和技术的人可能可以黑进这个设备。

But someone with the right equipment and technology could probably hack the device.

是的。

Yeah.

关于这点我想说清楚。

If if you and this, I wanna be clear.

我指的是旧版本固件中已被修复的漏洞。

I'm speaking purely about old vulnerabilities that have been patched in the most recent firmware.

但如果你发现某人长期未更新固件的旧设备，我大概用70美元左右的设备就能破解它并获取私钥

But if you found someone's old treasure that they hadn't updated the firmware in a long time, I could probably break that with, like, $70 of equipment and get the private keys

从中获取

off of it.