Vault

vault

Photo Credit: Ewere Diagboya As you move faster and faster with your DevOps practice, there is a piece of the puzzle that seems to be a little snag. That snag can cost you a whole lot, in terms of system security, management and updates. Application Parameters/Configurations; these guys practically determine how our applications run. It spans across database connection, to login credentials for RabbitMQ and other secret credentials. As a security practice, you do not want these credentials to be visible in your codebase when committing your code to your VCS (Version Control System). One of the ways to secure these credentials is by using Environment Variables which can be injected in the particular environment you need those secrets and configurations, instead of the values as they are. There also needs to be a place where these data need to be stored for safe keeping and if possible encrypted where they are stored. We shall be looking at these 3 secret storage solution used by DevOps engineers. Each of these has their pros and cons and we shall be analyzing them with the following criteria: a. Costb. Securityc. API/SDK Integrationd. Features Cost **AWS Secrets Manager**This is a managed service by AWS and according to AWS Pricing, this service costs $0.40 per secret per month $0.05 per 10,000 API calls. For context purposes, if you store 100 secrets (password, API Keys, etc) you pay $40 a month and if you request the value of the secret with a 40,000 API calls in a month you pay $0.2. more here **Hashipcorp’s Vault**This is an open-source tool. Meaning you are in charge of setup and scaling the service. You will need to set it up on a Virtual Machine and the VM you use will determine the cost and other operational costs involved in updating, securing the server in which Vault will be installed and configured on. **AWS Parameter Store**Still a managed service on AWS but this time it is under a feature called Systems Manager. It basically costs nothing. Did you just see that? Yes I mean it costs NOTHING. see here Security **AWS Secrets Manager**Secrets manager is quite a new service which is fully managed by AWS to the security of credentials stored on it is tied to IAM access on your AWS account. You can also integrate Secrets Manager with . Which helps to encrypt the data that is stored. Secrets Manager also comes with a secret rotation feature which allows you to automatically rotate API keys, passwords and more. This can be configured and wired with a Lambda Function to help with the rotation. AWS KMS **Hashipcorp’s Vault**Everything that has to do with the security of the vault application is solely the user’s responsibility. Vault stores the passwords inside the machine it is installed in and encrypts the data. It supports various backend storages; Filesystem, AWS S3, Azure, Google Cloud Storage, MongoDB. secret rotation feature here ( ) more here https://www.vaultproject.io/docs/internals/rotation.html **AWS Parameter Store**Just like the Secrets Manager, the security is tied to your IAM account in AWS. All requests are made either via the API or CLI. The keys for both are generated from the console and used. There is no secret rotation feature of any sort, except you want to customize one. API/SDK Integration Here they all have APIs and SDKs to retrieve stored keys. So for this grading they all pass General Features **AWS Secrets Manager**- Secured storage of secrets on AWS- Allow encryption of keys stored via KMS- Key rotation can be configured within a specific period- Privilege Access Management (IAM) **Hashipcorp’s Vault**- Stores secret in the filesystem or a database- Encryption as a Service- Privilege Access Management **AWS Parameter Store**- Secured storage of secrets on AWS- Allow encryption of keys stored via KMS- Privilege Access Management (IAM) Based on these features. You can choose which you can use for storing and retrieving your secrets. But it is crucial that you have a vault to store password, API Keys and connection strings.

AWS Secrets Manager vs. Hashicorp Vault vs. AWS Parameter Store

A Game-Changer for On-chain Borrowers The launch of Credit Vaults aims to address the growing demand for stable and accessible credit among new on-chain entities, like fintech and payment companies. These borrowers are given the ability to design their own terms, which includes the ability to choose their own interest rates and payback schedules, which is one of the distinguishing characteristics of Credit Vaults. In addition, this model guarantees greater annual percentage yields (APYs) for lenders due to its full utilisation, which makes it a profitable choice for all parties involved in the relationship. Morgan Krupetsky of Ava Labs shared, “Avalanche is the ideal platform to support the launch of Clearpool’s Credit Vaults. The collaboration with Clearpool showcases a mutual commitment to developing innovative digital financial products and a shared focus on bringing tokenized assets and greater utility into the Avalanche ecosystem.” Transforming Fintech Lending: Introducing Short-term, Liquid Options Banxa teamed up with Clearpool to create the first Credit Vault. This will let Banxa borrow up to 5 million USDT. This agreement is very important because it lets lenders use a unique seven-day payback choice and get extra AVAX token benefits. The easy availability and flow of money is one of the main issues in the field of autonomous finance. This tool solves the issue and sets a new standard for adaptability and effectiveness. Leading the Charge Banxa, a key player in the crypto infrastructure space, has embraced the flexibility and opportunities provided by Clearpool's Credit Vaults. "Clearpool's Credit Vaults offer us the flexibility to meet our liquidity requirements," said Holger Arians, CEO of Banxa, highlighting the importance of customizable terms and the potential to attract a broader lender base. Cauris, specializing in private credit for fintech companies, plays a crucial role in managing the Credit Vault, emphasizing security and integrity in the system's design. Credit Vaults, which were added by Clearpool to Avalanche, are a major step forward in on-chain banking. Clearpool is not only meeting the needs of the market right now by making credit options more open, easy to get to, and effective, but they are also actively shaping the future of DeFi loans. This new way of doing things is likely to bring even more institutional and fintech players to the platform, making Clearpool even more of a star in the decentralised finance credit market. The announcement that Clearpool has recently made on its most recent initiative, which is the expansion into the Avalanche platform, as well as the release of a cutting-edge product known as Credit Vaults, is a big step forward for the company. Through this strategic choice, Clearpool is able to expand its horizons inside the DeFi market, marking the beginning of a new chapter for the company. Clearpool at the Forefront The launch of the Credit Vaults is a significant milestone, establishing Clearpool as a leader in the rapidly evolving DeFi space. The platform's ability to attract over 20 institutions for borrowing, including giants like Jane Street, underscores the growing interest and confidence in Clearpool’s offerings. Jakob Kronbichler, CEO & Co-founder of Clearpool, stated, “Launching Credit Vaults on Avalanche marks a major milestone for Clearpool and the RWA sector as we pioneer migrating credit on-chain.” Don’t forget to like and share the story! Image credits: Shubham's Web3 Vested Interest Disclosure: This author is an independent contributor publishing via our brand-as-author program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR

Clearpool Revolutionizes DeFi Lending with Credit Vaults on Avalanche

ক্লিয়ারপুল তুষারপাতের উপর ক্রেডিট ভল্টের সাথে ডিফাই ঋণের বিপ্লব ঘটায়

Clearpool revolutioniert die DeFi-Kreditvergabe mit Credit Vaults auf Avalanche

Clearpool revoluciona los préstamos DeFi con bóvedas de crédito en Avalanche

Clearpool révolutionne les prêts DeFi avec des coffres-forts de crédit sur Avalanche

क्लियरपूल ने एवलांच पर क्रेडिट वॉल्ट के साथ DeFi लेंडिंग में क्रांति ला दी

Clearpool が Avalanche の Credit Vault で DeFi 融資に革命を起こす

Clearpool은 Avalanche의 신용 금고를 통해 DeFi 대출에 혁명을 일으켰습니다.

Clearpool revoluciona empréstimos DeFi com cofres de crédito no Avalanche

Clearpool совершает революцию в кредитовании DeFi с помощью кредитных хранилищ на Avalanche

Clearpool, Avalanche'ta Kredi Kasaları ile DeFi Kredilendirmesinde Devrim Yaratıyor

Clearpool cách mạng hóa hoạt động cho vay DeFi bằng kho tín dụng trên Avalanche

Clearpool 利用 Avalanche 上的信用库彻底改变了 DeFi 借贷

A big event is now taking place in the heart of Singapore, a nation that is well-known for its innovative and financial practices, and it is likely to have a huge influence on the field of decentralised finance (DeFi). For Thetanuts Finance, this endeavour, which focuses on reinvesting and producing Liquid Restaking Tokens (LRTs), represents a big step forward in comparison to previous endeavours. This also represents the beginning of a new century for users of Pendle's PT-eETH, which will give them with opportunities that have never been made available to them before to maximise their profits in areas that have not been explored before. Now, let's have a look at this incredible innovation and how it will fundamentally revolutionise the way that investors in decentralised finance make choices. A Leap into the Future of Staking Imagine if the Ethereum (ETH) that you have staked is actively protecting other networks and providing you with rewards that go above and beyond the Ethereum Mainnet. The minds behind restaking, EigenLayer, made it happen, so it's not just a dream. Through the usage of $stETH in liquid restaking protocols, restaking enables users to create "Liquid Restaking Tokens" (LRTs), a novel kind of asset that is expected to transform return generation. Leading this change is EtherFi, whose Total Value Locked (TVL) is more over $2.5 billion. Users may now mint LRTs—specifically, $eETH—thanks to EtherFi. By doing so, they can have access to additional perks like EigenLayer points and protocol loyalty points. However, since they increase the potential rewards to a whole new level, third-party LRTs like Pendle Finance's PT-eETH are what truly pique people's attention. The Innovation of PT-eETH With a fixed annual percentage rate (APY) of around 20% and the guarantee of payback for $eETH at a 1:1 ratio at the conclusion of the period, Pendle Finance's PT-eETH stands out as a real novelty. Pendle Finance distinguishes itself in the competitive DeFi industry by providing investors with a unique opportunity to get consistent rates and transparent profits. Thetanuts Finance: Pioneering New Frontiers As far as on-chain options protocols go, Thetanuts Finance is in the forefront. It is currently entering the LRT industry with its Leveraged LRT Strategy Vault. This vault is not simply another DeFi product; rather, it is a strategically important tool intended to maximise the potential of $PT-eETH and provide customers with previously unheard-of returns growth. Imagine 'zapping' your $PT-eETH into a yield generation maelstrom, where it remains in one place and works to generate more profits. The Leveraged LRT Strategy Vaults from Thetanuts Finance make this feasible. Users may use $PT-eETH to borrow $ETH. Once borrowed, $ETH is placed in the ETH Call ("ETH-C") Basic Vault, where users may profit from option bonuses and features, but there is a catch: they must accept short volatility risk.    The yield creation symphony that Thetanuts Finance creates is composed of EigenLayer Points, EtherFi Loyalty Points, Pendle $PT-eETH Fixed Yield, Thetanuts Finance $ETH-C Basic Vault Option Premiums, and the soon-to-be-released $NUTS Rewards. This creative approach to yielding profits demonstrates Thetanuts Finance's commitment to provide its consumers value and advantages. The Ripple Effect: Shaping the DeFi Ecosystem Not only is Thetanuts Finance's Leveraged LRT Strategy Vault a brand-new product, but it is also a disruptive force that is anticipated to generate a substantial amount of demand within the DeFi community. Due to the fact that there are already 150,000 $PT-eETH in circulation, the market may undergo substantial changes, which highlights the significance of the novel initiative that Thetanuts Finance is working on. In light of the fact that Thetanuts Finance is getting ready to launch extra procedures for making use of Liquid Restaking Tokens (LRTs), additional choices are becoming accessible. Only the beginning has begun with this strategic vault. It is a stepping stone to a future in which LRTs will play a significant role in the investment plans of decentralised finance and intelligent investors will be able to get a greater variety of returns. The Essence of Innovation When it comes to the decentralised financial business, Thetanuts financial is a perfect example of what it means to innovate on a basic basis. It is clear that the company is continually looking for new ways to make money, not just for its clients but for the whole DeFi community as a whole, as seen by the fact that it has joined the market for Leveraged LRT Strategy Vaults. The company known as Thetanuts Finance is among the most successful businesses operating in an industry that thrives on change. They are in the vanguard of paving the way for a future in which decentralised finance expands beyond the traditional boundaries of the sector and embraces fresh investment and wealth generation tactics. This future is being paved by them. At the same time as we are entering a new era of decentralised finance (DeFi), we are able to feel the excitement that is rising up on our shoulders. The debut of Thetanuts Finance's Leveraged LRT Strategy Vaults is not only a significant achievement, but it is also a symbol of hope and a testament to the boundless possibilities that decentralised finance (DeFi) has to offer. This launch is a significant milestone. It is possible that pioneers like Thetanuts Finance, who are not afraid to go into unexplored territory, are responsible for the hopeful view that can be found about the future. Don’t forget to like and share the story! This author is an independent contributor publishing via our brand-as-author program. Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure:

Revolutionizing DeFi: Thetanuts Finance and the Dawn of Leveraged LRT Strategy Vaults

Revolutionierung von DeFi: Thetanuts Finance und der Beginn der Leveraged LRT Strategy Vaults

Revolucionando DeFi: Thetanuts Finance y el amanecer de las bóvedas de estrategias LRT apalancadas

Révolutionner DeFi : Thetanuts Finance et l'aube des coffres-forts stratégiques LRT à effet de levier

DeFi में क्रांति लाना: Thetanuts फाइनेंस और द डॉन ऑफ लीवरेज्ड LRT स्ट्रैटेजी वॉल्ट्स

DeFi の革命: Thetanuts Finance とレバレッジ LRT 戦略ボールトの夜明け

DeFi 혁명: Thetanuts Finance와 레버리지 LRT 전략 금고의 탄생

Revolucionando o DeFi: Thetanuts Finance e o surgimento dos cofres de estratégia LRT alavancados

Революция в DeFi: Thetanuts Finance и появление стратегических хранилищ LRT с кредитным плечом

DeFi'de Devrim Yaratıyor: Thetanuts Finans ve Kaldıraçlı LRT Strateji Kasalarının Şafağı

Cách mạng hóa DeFi: Thetanuts Finance và Bình minh của Kho chiến lược LRT có đòn bẩy

彻底改变 DeFi：Thetanuts Finance 和杠杆式 LRT 策略金库的黎明

Subscribe to my Data Youtube Channel and Podcasts, Links Here Data Vault modeling is an approach to data warehouse design that offers a unique method for handling complex data from disparate sources in a way that is agile, flexible, and scalable. Developed by Dan Linstedt in the early 2000s, Data Vault modeling addresses many of the challenges associated with traditional data warehousing methods, such as the star schema and snowflake schema. By emphasizing the separation of concerns between the structure of data and the integration of data, Data Vault enables businesses to adapt quickly to changes in their data environment, making it an ideal choice for dynamic, fast-paced industries. The core philosophy of Data Vault modeling revolves around capturing data in its most granular form, ensuring that every piece of information is stored without loss of detail or context. This approach not only facilitates better data governance and compliance but also enhances data quality and usability across the organization. Core Concepts of Data Vault Modeling At the heart of Data Vault modeling are three primary concepts: Hubs, Links, and Satellites. Each plays a vital role in the structure and function of a Data Vault model. represent the unique business keys within the organization. They are the cornerstone of the Data Vault architecture, ensuring that data is accurately linked across various sources. Hubs connect Hubs together, forming relationships between different pieces of data. These Links are crucial for establishing the context and associations among disparate data elements, making it possible to construct a comprehensive view of the organization's data landscape. Links provide descriptive details about the Hubs and Links, such as attributes, historical changes, and timestamps. Satellites allow for the storage of context and change over time, enabling detailed analysis and reporting. Satellites Data Vault modeling stands out by offering a way to accommodate big data and analytics needs, thanks to its inherent scalability and flexibility. Unlike traditional models that may require significant redesign as new data sources are introduced, Data Vault's modular nature allows for easy expansion and adaptation without disrupting existing structures. Comparing Data Vault with other data modeling techniques highlights its advantages in handling complex and changing data environments. While star schemas and snowflake schemas offer simplicity and are well-suited for specific reporting needs, they lack the agility and scalability that Data Vault brings to handling diverse and evolving data sources. Benefits of Data Vault Modeling Implementing Data Vault modeling in data warehousing projects brings several key benefits: Scalability and Flexibility Due to its modular design, Data Vault can easily scale to accommodate growing data volumes and complexity. New Hubs, Links, and Satellites can be added to the model without disrupting existing structures, making it highly adaptable to changes in business requirements. Ease of Integration Data Vault's structure simplifies the integration of data from disparate sources, providing a consistent and unified view across the organization. Its design enables the efficient incorporation of new data sources, facilitating a more comprehensive data strategy. Improved Data Quality and Governance The granular approach of Data Vault modeling enhances data quality, as each piece of information is stored in detail with clear lineage. This structure also supports better data governance practices, with built-in mechanisms for compliance, auditability, and data security. Enhanced Auditability and Compliance Features Data Vault's inherent tracking of historical data and its ability to capture metadata make it exceptionally well-suited for meeting audit and compliance requirements. The model's design ensures that changes are recorded in a way that supports traceability and accountability, essential for regulatory compliance. These benefits make Data Vault modeling an attractive option for organizations looking to build robust, scalable, and compliant data warehousing solutions that can adapt to future needs and challenges. Planning and Implementing a Data Vault Model Implementing a Data Vault model in your organization requires careful planning and a structured approach. Here's a step-by-step guide to help you get started: Step-by-Step Guide on Starting with Data Vault Modeling : Begin by gathering detailed business requirements and understanding the data needs of your organization. This will guide the design of your Data Vault model. Understand Your Business Requirements : Evaluate your existing data infrastructure to determine how well it can support a Data Vault architecture. Consider factors like storage capacity, processing power, and existing data integration processes. Assess Your Current Data Infrastructure : Based on your requirements, start designing your Data Vault model. Identify the Hubs, Links, and Satellites that will form the structure of your data warehouse. Design Your Data Vault Model : Choose the tools and technologies that best support Data Vault modeling. This may include specific database platforms, ETL tools, and data modeling software. Select the Right Tools and Technologies : Begin the construction of your Data Vault by creating the Hubs, Links, and Satellites. Implement data loading processes to populate your Data Vault. Build and Deploy Your Data Vault : As your data needs evolve, continue to expand and refine your Data Vault model by adding new Hubs, Links, and Satellites as required. Iterate and Expand Key Considerations: Infrastructure, Tools, and Team Skills : Ensure your infrastructure can handle the volume and velocity of data expected. Scalability and performance are key. Infrastructure : Select tools that are compatible with Data Vault modeling principles and can automate parts of the process to improve efficiency. Tools : Your team should have a strong understanding of Data Vault principles, as well as skills in data modeling, database management, and ETL processes. Team Skills Data Vault Project Lifecycle The lifecycle of a Data Vault project encompasses several phases, from initial planning and design to deployment and maintenance. It's important to adopt an iterative approach, allowing for continuous improvement and adaptation to new business requirements. Best Practices for Data Vault Modeling Adhering to best practices in Data Vault modeling can significantly enhance the success of your data warehousing project. Here are some key tips to follow: Effective Hub, Link, and Satellite Design : Focus on business keys that are stable and uniquely identify business objects. Hubs : Model relationships clearly, including many-to-many relationships, to accurately represent business processes. Links : Capture as much descriptive information as necessary, considering the rate of change and the importance of historical data. Satellites Data Loading Strategies : Depending on your data volume and frequency of updates, choose between full loads (reloading all data) and incremental loads (loading only new or changed data) to optimize performance. Full Loads vs. Incremental Loads Managing Historical Data and Changes Over Time Implementing a robust strategy for tracking historical changes is crucial. Use Satellites to record time-variant attributes and employ effective dating techniques to keep track of historical data. Following these best practices and considerations will help ensure a smooth implementation of Data Vault modeling in your organization, leading to a flexible, scalable, and future-proof data warehouse. Example of Data Vault Modeling To better understand how Data Vault modeling works in practice, let's walk through a simplified example involving customer orders. This example will help illustrate the structure and relationships between Hubs, Links, and Satellites in a Data Vault model. Scenario Overview Consider a retail company that processes customer orders. We want to model data involving customers, products, and orders. The Data Vault model will include three Hubs (Customer, Product, Order), one Link (Order Details), and Satellites to store descriptive and historical information. Hubs Hubs represent the core business concepts. In this scenario, we have: Hub Customer (Hub_Customer) Column Name Description HUB_ID Unique identifier CUSTOMER_ID Business key (ID) LOAD_DATE Date of record entry RECORD_SOURCE Source of data Hub Product (Hub_Product) Column Name Description HUB_ID Unique identifier PRODUCT_ID Business key (ID) LOAD_DATE Date of record entry RECORD_SOURCE Source of data Hub Order (Hub_Order) Column Name Description HUB_ID Unique identifier ORDER_ID Business key (ID) LOAD_DATE Date of record entry RECORD_SOURCE Source of data Link Links model the relationships between Hubs. In this case, we have: Link Order Details (Link_OrderDetails) Column Name Description LINK_ID Unique identifier ORDER_HUB_ID Foreign key to Hub_Order PRODUCT_HUB_ID Foreign key to Hub_Product CUSTOMER_HUB_ID Foreign key to Hub_Customer LOAD_DATE Date of record entry RECORD_SOURCE Source of data Satellites Satellites provide descriptive details and historical information about Hubs and Links. Satellite for Customer (Sat_CustomerDetails) Column Name Description HUB_ID Foreign key to Hub_Customer NAME Customer's name EMAIL Customer's email LOAD_DATE Date of record entry RECORD_SOURCE Source of data Satellite for Product (Sat_ProductDetails) Column Name Description HUB_ID Foreign key to Hub_Product NAME Product name DESCRIPTION Product description PRICE Product price LOAD_DATE Date of record entry RECORD_SOURCE Source of data Satellite for Order Details (Sat_OrderInfo) Column Name Description LINK_ID Foreign key to Link_OrderDetails QUANTITY Quantity ordered ORDER_DATE Date of the order DELIVERY_DATE Expected delivery date LOAD_DATE Date of record entry RECORD_SOURCE Source of data Continuing from our example of Data Vault modeling with customer orders, let's delve into how these models are used in practice and the benefits they offer. Using the Data Vault Model in Practice Querying Customer Orders Suppose you want to generate a report showing all orders placed by a specific customer along with product details. Using the Data Vault model, you would: : Use to find the corresponding to the customer of interest. Identify the Customer Hub_Customer HUB_ID : With the customer's , query to retrieve all s associated with the customer. Find Related Orders HUB_ID Link_OrderDetails ORDER_HUB_ID : For each , look up to gather details about each order, such as quantity and order date. Fetch Order Details ORDER_HUB_ID Sat_OrderInfo : Use from to join with for product names, descriptions, and prices. Retrieve Product Information PRODUCT_HUB_ID Link_OrderDetails Sat_ProductDetails Analyzing Product Sales Over Time To analyze how product sales have varied over time, you can: : Query and to collect quantities and order dates for all products. Aggregate Order Data Link_OrderDetails Sat_OrderInfo : Use to join with for product names. Join with Product Information PRODUCT_HUB_ID Sat_ProductDetails : Group the aggregated data by product name and time period (e.g., month, year) to analyze trends and patterns in product sales. Time-based Analysis Benefits of Using Data Vault Models in Practice Flexibility in Querying Data Vault's separation of business keys (Hubs), relationships (Links), and descriptive information (Satellites) offers unparalleled flexibility in querying data. Users can easily navigate between different aspects of the data, combining them in various ways to answer complex business questions. Scalability As new data sources are integrated, new Hubs, Links, or Satellites can be added without disrupting existing structures. This modular growth capability ensures that the data warehouse can scale alongside the business. Auditability and Data Governance Each component in a Data Vault model includes and , providing a clear audit trail of when data was added and its source. This feature supports rigorous data governance practices and compliance requirements. LOAD_DATE RECORD_SOURCE Handling Historical Data The Data Vault model excels at managing historical data through Satellites. Changes over time are captured in detail, allowing businesses to track trends, perform historical analyses, and make informed predictions. Enhanced Data Quality By clearly separating different aspects of data and maintaining detailed metadata, Data Vault models help in identifying and rectifying data quality issues. This structure promotes high data integrity and reliability for reporting and analytics. Conclusion The practical use of Data Vault models, as illustrated through querying customer orders and analyzing product sales, demonstrates the methodology's strengths in flexibility, scalability, and data governance. By adopting Data Vault modeling, businesses can build a robust foundation for their data warehousing and analytics needs, capable of adapting to change and supporting complex data landscapes. Also published . here

Intro to Data Vault Modeling: Agility, Scalability, and Practical Applications Explained

After three years as co-founder and CTO at Yield Protocol, I decided to become an to other projects. Euler Finance is one of my first clients, and has taught me a great deal about what I can do for others. It has revealed a niche that no other person is working on, that few can do as well as I can, and that some clients will appreciate and pay for. advisor and consultant This article is many things: a barely disguised marketing product to land more clients, a technical review on the EVC, but mostly a heart-felt effort to explain what it is that I have found that I can do, that I love doing, that is useful, and that is a viable career. It is extraordinary. An Architecture and Implementation Review My work reviewing the EVC was not a security audit, even if it makes the EVC more secure. I guess you could call it an architecture and implementation review. My goal was to simplify the EVC, to decrease the degree of surprise from those studying the codebase, to increase the quality of the docs, to reduce attack surfaces. In doing so, aesthetics played an equal role to technical expertise. It is a bit of an art. That review played on my natural talents, and the team at seem to be happy. I feel I brought significant value for them, at a fraction of the cost of an audit. Euler Now that the EVC is public, I can describe the work on detail. I’ll do the same for the upcoming Euler products, as well as a couple other clients in my pipeline that can’t be disclosed yet. Maybe one day it will become an industry standard. The was 1049 sloc of new code distributed over 5 contracts, already after several audits, plus 231 sloc of a library from Euler v1 that had been audited several times and seen significant production use. original code The review of the EVC happened over 19 hours of work spread over 3 weeks. The was 972 sloc, with the library unchanged. 6 external functions were removed, as well as a number of internal functions. Significant clarity was achieved over the critical features in the implementation, as well as with the documentation. resulting code Where others take pride in codebases with 100k sloc of solidity, I take pride in removing 75 lines and 6 external functions from a single contract. The following sections describe the different features of the EVC, and how they were reviewed and refactored. The EVC as a Flexible Router The EVC implements a maximally flexible routing system that allows several modes of user interaction, along with call nesting through reentrancy and checks deferred. As a complex and mission-critical feature it was simplified to facilitate audits and reduce attack surfaces. From the original implementation, we did the following changes. The external function was removed. recoverRemainingETH The external function functionality was merged into call. callback The internal function was merged into impersonate. impersonateInternal The restriction on calling the ERC1820Registry was removed. The restriction on using for callbacks was removed. batch The and functions were renamed to explicit descriptors. impersonate callInternal The authentication subsystem was refactored and renamed for clarity. The resulting implementation is more compact, has less requirements, is better named, and in general is simpler. Call Depth Tracking The original implementation included an advanced mechanism to keep track of the exact level of nesting at each call, which would be used to detect when the execution is at the outermost level of execution and the deferred checks should be executed. Upon careful analysis, it was possible to remove this mechanism in favour of a simple and explicit boolean variable set in the context in the outermost nesting level. Operator Authentication It was possible to simplify the operator authentication feature, replacing authenticateOwner and authenticateOwnerOrOperator for a single authenticateCaller function. Apart from making the code easier to understand, this also removed duplicated code which is a risk in itself. Check Validation The EVC implements an advanced system of flexible checks. Checks on accounts and vaults can be mandated by the caller, the controller, or EVC functions that keeps track of user and vault associations. This system was mapped out with the areas of risk pinpointed. The collusion of controller and operator roles in a single account could be exploited with damages to the users that allowed the collusion to happen. The capacity of the controller to forgive checks in the context of liquidations is an area of risk which cannot be eliminated. The capacity of callers to clear deferred checks by executing them immediately was an area of concern, as it could be unexpected by those that required the checks. This could be addressed by removing the capacity. Conclusion A couple of months ago, when I started an advisory and consultancy career path, I had no idea about what was that I was actually doing, and in particular I didn’t know what my actual work would be. Thanks to Euler Finance, I’ve had a glimpse of a service that I love doing, that others find useful, that I’m good at, and that others will pay for. That is much more than I could have expected. With regards to the EVC, none of the ground-breaking features in the EVC are my ideas, I take no credit for that. However, I’m immensely proud to have steered its implementation towards a state that I find more beautiful, safer, easier to integrate with, and easier to audit. I am incredibly grateful to the team at Euler, but in particular to two people. for trusting me and hiring me even when I had such an unclear work plan, and also to , lead developer for the EVC, for his patience in replying to my questions and his open-mindedness to have his code criticised, sometimes refactoring it himself beyond my expectations. Michael Bentley Kasper Pawlowski

Euler Vault Connector: An Architecture and Implementation Review

SEC v. Binance Court Filing, retrieved on June 5, 2023 is part of . You can jump to any part in this filing . This is part 57 of 69. HackerNoon’s Legal PDF Series here FACTS IX. BINANCE AND BAM TRADING WERE REQUIRED TO BUT DID NOT REGISTER AS AN EXCHANGE, BROKER-DEALER, OR CLEARING AGENCY. THIRD CLAIM FOR RELIEF Violations of Sections 5(a) and 5(c) of the Securities Act (Against Binance for the Unregistered Offer and Sale of Simple Earn and BNB Vault) 520. The Commission realleges and incorporates by reference herein the allegations in Paragraphs 1-35, 80-238, 282-363, and 510-513. 521. At all relevant times, by engaging in the conduct alleged in the Complaint, specifically by offering and selling the Simple Earn and BNB Vault programs without a registration statement filed or in effect as to those securities, Binance, directly and indirectly, made use of the means and instruments of transportation or communication in interstate commerce or of the mails to sell securities through the use or medium of any prospectus or otherwise, carried or caused to be carried through the mails or in interstate commerce, by any means or instruments of transportation, those securities for the purpose of sale or for delivery after sale, and/or made use of the means and instruments of transportation or communication in interstate commerce or of the mails to offer to sell or offer to buy through the use or medium of a prospectus or otherwise of those securities. 522. By reason of the conduct described above, Binance violated, is violating, and, unless enjoined, will continue to violate Securities Act Sections 5(a) and 5(c) [15 U.S.C. §§ 77e(a), (c)]. Continue Reading . Here About HackerNoon Legal PDF Series: We bring you the most important technical and insightful public domain court case filings. This court case 1:23-cv-01599 retrieved on September 6, 2023, from is part of the public domain. The court-created documents are works of the federal government, and under copyright law, are automatically placed in the public domain and may be shared without legal restriction. docdroid.net

Binance Accused of Unregistered Sales of Simple Earn and BNB Vault Products

SEC v. Binance Court Filing, retrieved on June 5, 2023 is part of . You can jump to any part in this filing . This is part 41 of 69. HackerNoon’s Legal PDF Series here FACTS VII. BINANCE AND BAM TRADING ENGAGED IN UNREGISTERED OFFERS AND SALES OF SECURITIES. C. Binance Offered and Sold Its BNB Vault and Simple Earn Programs as Securities. 325. Binance has offered two other securities on the Binance.com Platform—the “BNB Vault” and “Simple Earn” programs. 326. Binance has regularly marketed the Simple Earn and BNB Vault programs as profit-making opportunities to investors in the United States and elsewhere. 327. Binance markets Simple Earn as programs that pay interest to investors who lend their crypto assets to Binance for fixed or flexible lengths of time. The interest paid depends on the crypto asset lent and the duration of the loan. For instance, investors who lent a particular crypto asset through Simple Earn as of April 24, 2023 were promised profits of 18.9%. 328. Binance determines the Simple Earn rate for each of its offerings at its discretion, taking into account various “factors which are carefully designed to ensure that rewards paid to users are sustainable and competitive.” 329. According to Binance, it may pool assets loaned through Simple Earn and use its managerial expertise to deploy them “for a variety of purposes,” including on-chain staking, loans, or for operational purposes by other business units within Binance. 330. Throughout the spring of 2020, Binance tweeted that it was offering a 15% APR for participants in the BUSD-specific Simple Earn product, and 10% in the Simple Earn product for another crypto asset. 331. BNB Vault is a similar program that is limited to holders of BNB and described on Binance.com as a “BNB yield aggregator” whereby investors can lend their BNB to Binance to earn investment returns. 332. In November 2020, Binance announced the BNB Vault launch: “#Binance Launches BNB Vault – Earn Daily Income from the $BNB Ecosystem.” 333. Binance states on its website that BNB “deposited” in BNB Vault will be “flexibly allocated in different products to help users maximize potential rewards.” These products include Simple Earn and “Launchpool,” a product advertised as rewarding users for staking tokens in connection with new token launches. Similar to Simple Earn, Binance has offered varying APR returns for BNB Vault investors. 334. One tweet from Binance touted the profit potential of BNB Vault: “Just one click can increase how much you earn with your #BNB. BNB Vault combines the multiple income benefits of #Binance Smart Chain, Launchpool, Savings, #DeFi Staking, and more through just one interface.” A second tweet linked to a Binance.com page with a heading “Introducing BNB Vault: One-Click Earning for Your BNB Holdings.” 335. In both the Simple Earn and BNB Vault programs, Binance pools the crypto assets lent by investors and uses those assets to generate revenue that was used to pay returns to investors in Simple Earn and BNB Vault. Investors share pro rata the benefits of their pooled investments in the Simple Earn and BNB Vault programs. 336. Binance exercises discretion and uses its entrepreneurial expertise in managing both programs, including identifying liquidity needs, negotiating with Launchpool issuers, choosing terms, holding and controlling the invested assets, and generating revenue, through its operation of the Binance.com Platform to pay the Simple Earn and BNB Vault investors. 337. From October 2019 through October 2022, at least 3,200 and as many as 16,500 U.S. investors have participated in the Simple Earn investment programs, and at least 1,400 U.S. investors have participated in the BNB Vault program. 338. Since the inception of each, Binance has thus offered and sold both Simple Earn and BNB Vault as investment contracts and, therefore, as securities. Continue Reading . Here About HackerNoon Legal PDF Series: We bring you the most important technical and insightful public domain court case filings. This court case 1:23-cv-01599 retrieved on September 6, 2023, from is part of the public domain. The court-created documents are works of the federal government, and under copyright law, are automatically placed in the public domain and may be shared without legal restriction. docdroid.net

How Binance Offered and Sold Its BNB Vault and Simple Earn Programs as Securities

In its ongoing journey to reshape the crypto investing landscape, Struct Finance, a DeFi platform that enables investors to engage with tailored interest rate products linked to digital assets, is thrilled to announce the launch of the BTC.B-USDC Vaults. The tranche-based BTC.B-USDC Interest Rate Product was made possible by effectively leveraging Avalanche’s BTC.B (Bridged Bitcoin) for DeFi applications. The new vault beautifully complements Struct Finance’s Genesis USDC Vaults, heralding an exciting era in DeFi yield opportunities. Struct Finance built the new vault on top of GMX's Liquidity Provider Token (GLP) to generate predictable yields for BTC in the form of fixed returns, and USDC in the form of variable returns, while still leveraging a secure asset and minimizing volatility and exposure to other risks. “Our BTC.B-USDC Vaults represent an innovative application of Bitcoin in DeFi. We're taking full advantage of Avalanche's Bridged Bitcoin (BTC.B) to bring about a fresh wave of opportunities in the digital asset space,” said Ersin Dalkali, the Co-founder of Struct Finance. While continues to dominate the market, its inherent lack of a DeFi layer has traditionally made native yield generation quite challenging. Avalanche has unlocked new possibilities for Bitcoin in DeFi with BTC.B (Bridged Bitcoin). Unlike WBTC which relied on centralized bridges, BTC.B is minted via Avalanche Core — a decentralized bridge — and can be trustlessly bridged across networks using the Layer Zero bridge. Bitcoin At present, Bitcoin investments in prominent lending pools yield between 0.2–0.5%. Even the stable swap pools offering wBTC-BTC.B products only manage to deliver returns of about 2%. Struct’s BTC.B-USDC product shatters these limitations, offering significantly higher yields. The purpose of BTC.B is to empower BTC holders to explore DeFi opportunities on the Avalanche blockchain, without the need to acquire secondary tokens or rely on centralized bridges. BTC.B represents BTC coins transferred to the Avalanche blockchain in the form of ERC-20 tokens. With over 6000 BTC bridged and a fully diluted value of $180 million, BTC.B is carving a niche for itself in the crypto arena. The Bitcoin ETF applications by BlackRock, WisdomTree, and Invesco – three of the world’s leading asset managers – are not just a mere submission. It is a signal that the traditional financial realm is ready to embrace Bitcoin on a new level. Recently, the US Securities and Exchange Commission (SEC) gave the green light to a 2X leveraged Bitcoin ETF, sparking an enthusiastic wave of speculation and anticipation for approval of a spot Bitcoin ETF. Disclaimer: This release is for informational purposes only and should not be construed as financial promotion. Delta hedging Amid the highly volatile crypto industry, Struct Finance’s Interest Rate Products allow anyone to split and repackage the risk of any yield-bearing DeFi assets in different parts to fit their risk profile through an innovative process called “tranching.” Every Interest Rate Product is a single vault split into two portions, or tranches that have different return configurations: A Fixed-return Tranche for conservative investors looking for consistent returns A Variable-return Tranche for investors with a higher risk appetite seeking superior returns The yield from the underlying asset flows into the fixed tranche first to ensure predictable returns. The remainder is then allocated to the variable tranche, which gets enhanced exposure to the underlying yield-bearing asset. Compared to the fixed tranche, the variable tranche might accrue more yield, less yield, or no yield. As part of its BTC.B-USDC Vaults, Struct Finance has implemented a unique approach to managing investment risk: delta hedging. While the fixed tranche takes center stage with its high yield, the variable side of the product offers an additional layer of intriguing complexity and potential. Upon deployment of funds into the vault, the BTC.B in the fixed tranche gets converted into GMX’s GLP token, setting up a position that’s short Bitcoin against GLP and contributing a negative delta. In contrast, the USDC on the variable side is converted into GLP, which inherently carries a positive delta. This innovative delta-hedged product design achieves a fine balance between the positive and negative delta forces. It results in a robust strategy that allows investors to confidently navigate the crypto market’s inherent volatility. This artful interplay of the fixed and variable sides within the vaults opens the doors for investors to tap into the potential of Bitcoin investments like never before. By catering to a diverse range of risk appetites, Struct Finance ensures that both retail and institutional investors can tailor their strategies to maximize their returns, regardless of market conditions. About Struct Finance Struct Finance is at the forefront of the DeFi revolution, with a vision to transform the design and utility of financial products. It empowers users to design their own financial instruments, harnessing the power of tokenized, yield-bearing positions to unlock a world of diverse investment opportunities. Moreover, its cutting-edge financial products adopt a tranche-based system, smartly distributing yield between different investor classes. This balanced approach guarantees a steady yield for risk-averse investors while also offering the prospect of heightened returns to the more adventurous. Initially available on Avalanche, Struct Finance plans to go multichain in the near future. For more information, visit: | | | Website Twitter Discord Telegram This story was distributed as a release by Chainwire under HackerNoon’s Brand As An Author Program. Learn more about the program here: https://business.hackernoon.com/brand-as-author

Struct Finance Introduces Tranche-based BTC.B-USDC Vaults, Revolutionizing DeFi on Avalanche

Struct Finance presenta bóvedas BTC.B-USDC basadas en tramos, revolucionando DeFi en Avalanche

Struct Finance présente des coffres-forts BTC.B-USDC basés sur des tranches, révolutionnant DeFi sur Avalanche

स्ट्रक्चर फाइनेंस ने ट्रेंच-आधारित बीटीसी.बी-यूएसडीसी वॉल्ट पेश किया, जो हिमस्खलन पर डेफी में क्रांति ला रहा है

Struct Finance が Tranche ベースの BTC.B-USDC ボールトを導入、Avalanche での DeFi に革命を起こす

Struct Finance apresenta cofres BTC.B-USDC baseados em tranche, revolucionando o DeFi no Avalanche

Struct Finance giới thiệu Kho tiền BTC.B-USDC dựa trên Tranche, cách mạng hóa DeFi trên Avalanche

Struct Finance 推出基于 Tranche 的 BTC.B-USDC 金库，彻底改变 Avalanche 上的 DeFi

A few months ago, I made a video on and the several security shortcomings of . One of them being the closed, proprietary security model, especially given how sensitive passwords are to our online ecosystem. LastPass getting hacked LastPass With a proprietary, closed-source security model and the hosting of passwords in the cloud, many users have chosen to move to open-source, self-hosted solutions, where they can have full visibility into the source code and full control of how their passwords are handled. There are pros and cons to this solution. Pros Secure and private data storage. Uncompromised data security as long as the system has been properly secured. Full user control over where passwords are stored. It's a bit harder than opening notepad and pasting in passwords, but it provides easier integration and flexibility once you have the vault setup. Cons Lack of flexibility with a hybrid device ecosystem like computers and phones. Active maintenance and security of the server. So when should you choose to self-host over using a cloud option? If you are a one-person team, managing your own passwords is doable and can also be fun for users who want to partake in this project. It can also be risky to self-host a [password vault](https://password vault) if a user lacks full security competence and exposes the vault to the internet. The more users one has to manage, the harder it gets, in terms of compute power to serve the various devices as well as managing many users. So if you are in a family or business, using a cloud option may be easier. Let’s set up a self-hosted vault in Passbolt using a docker container. I am on a Windows 10 machine. I do have Desktop installed and will not be going over . Docker how to install Docker Desktop You can do this on any device, it may be slightly different depending on the OS. Watch the Video Tutorial https://youtu.be/t77qcvfv0wk?embedable=true&transcript=true This article was part of where we share the best tech content that YouTube has to offer. HackerNoon’s YouTuber series If you want to see more from this series, check it out here.

How to Build a Self-Hosted Password Vault: A Step-by-Step Guide

কীভাবে একটি স্ব-হোস্টেড পাসওয়ার্ড ভল্ট তৈরি করবেন: একটি ধাপে ধাপে নির্দেশিকা

So erstellen Sie einen selbst gehosteten Passwort-Tresor: Eine Schritt-für-Schritt-Anleitung

Cómo crear una bóveda de contraseñas autohospedada: una guía paso a paso

Comment créer un coffre-fort de mots de passe auto-hébergé : un guide étape par étape

सेल्फ-होस्टेड पासवर्ड वॉल्ट कैसे बनाएं: एक चरण-दर-चरण गाइड

セルフホスト型パスワード ボールトを構築する方法: ステップバイステップ ガイド

자체 호스팅 비밀번호 저장소를 구축하는 방법: 단계별 가이드

Como construir um cofre de senha auto-hospedado: um guia passo a passo

Kendi Kendine Barındırılan Şifre Kasası Nasıl Oluşturulur: Adım Adım Kılavuz

Cách xây dựng Kho lưu trữ mật khẩu tự lưu trữ: Hướng dẫn từng bước

如何构建自托管密码库：分步指南

The Treasure Vaults of Opar

With the rising adoption of healthcare apps and wearable devices that gather medical data, the importance of data privacy for healthtech companies is greater than ever. Broadly defined, “ . While this includes applications from traditional healthcare providers, it also includes technology that handles healthcare data, like fitness apps, nutrition apps, or biometric wearables. This means that the companies behind these technologies — healthtech companies — often deal with . healthtech” is any technology that assists with someone’s healthcare protected health information (PHI) Healthtech companies greatly benefit consumers, but working in this space also means plenty of risks. For example, is a set of rules that governs how organizations use and protect the PHI of their patients and customers. HIPAA Companies that work with PHI must ensure they’re HIPAA-compliant, lest they face fines, lawsuits, or closures. However, HIPAA is only a starting point if you want to provide truly robust privacy protections for your customers. In this article, we’ll look at how your healthtech company can implement greater privacy safeguards by using a in your applications. We’ll also discuss why it’s important to exceed the bare minimum of what is required by law for PHI, as doing more for data privacy can actually win you customers and improve your healthtech products. data privacy vault But first, let’s lay the groundwork with a brief treatment of HIPAA and PHI. Understanding HIPAA Compliance and PHI HIPAA is the baseline of compliance for protecting patient health data. Commonly considered the legislation which codified medical data privacy in the United States, HIPAA represents the minimum bar for safeguarding PHI that any healthtech company must meet. Why PHI is Unique Financial data, such as a reissued credit card or an updated credit score can change, and we have standards, such as , to regulate the use of this data. Personally identifiable information (PII), such as a home address or a driver’s license number can also change. For handling PII, we have regulations like or . PCI GDPR CCPA However, PHI is a unique kind of data because the majority of PHI typically doesn’t change. For example, laboratory results or entries in a patient’s medical history are fixed. Because of this, HIPAA takes the protection of client health data very seriously. How PHI is defined One of the key ways that HIPAA protects patients in the US is by defining what sort of data is considered PHI. Essentially, PHI is any information that can be used to identify an individual and that is related to the following: That individual’s past, present, or future physical or mental health or condition The provision of healthcare to that individual Payment for the provision of healthcare to that individual That means that if someone’s name, contact information, photo, or ID number is attached to the health-related data point, it’s also considered PHI, and it needs to be kept safe. HIPAA rules apply to what the US Department of Health and Human Services (HHS) calls “ ” as well as . If you’re operating without HIPAA compliance, then you’re liable to face some serious penalties, including hefty fines, customer remediation costs, and even being added to a public list of breaches commonly referred to as the HIPAA . Covered Entities and Business Associates any health-related applications that deal with PHI So, if your business takes health data and ties it to any kind of identifier for a specific person, then it is very likely to be subject to HIPAA. Wall of Shame From the vantage point of simple compliance, it’s hard to overstate the importance of HIPAA for healthtech companies. How a Data Privacy Vault Protects PHI Fortunately, protecting your customers’ PHI data is possible. The HHS provides . Companies can detach health data from identifiers so that it can no longer be used to identify an individual. guidance on how to de-identify PHI However, the challenge for healthtech companies is ensuring that they’re doing this correctly. There’s no room for mistakes. If you try to “roll your own” solution, you take precious engineering resources from your core business needs, and you’ll lack the confidence that you’ve covered all your bases. Instead, many of today’s healthtech companies are looking to the architectural pattern. A data privacy vault — and specifically one that is designed to deal with healthcare data — allows you to securely store identifiers for customers in an isolated, encrypted data vault that’s from normal transactional data. This kind of enables you to de-identify health data, protecting both your customers and your business. By providing tokenization, masking, and redaction capabilities, a data privacy vault makes working with protected data much less risky. data privacy vault separate healthcare data privacy vault Now that we’ve discussed the risks of non-compliance and the solution for protecting customer PHI, the big question is this: Is it worth it? Instead of adopting tried-and-tested tools to secure your customer data fully, would it be acceptable just to assume some risk and hope for the best? Let’s consider this. Reducing the Risk (and Scope) of a Data Breach Perhaps your company is already up and running a data privacy vault, and you’ve implemented other mechanisms for protecting your customers’ PHI. without You may feel like you’ve already invested a lot and don’t want to sink more effort into something that feels like a net-neutral investment. But it’s important to realize that you can still end up on the HIPAA Wall of Shame with a breach that impacts even if you have basic protections in place. as few as 500 customers, Not only that, but the best repayment to your customers for their trust in you is building a more trustworthy system. While it may seem you’ve met HIPAA’s standards for de-identification of PHI, reducing even a small risk of a breach by introducing a data privacy vault can win even greater trust from your customers. Take a look at the above example architecture. Notice that only tokenized, masked, or redacted information would be passed between different parts of your systems, allowing you to exceed HIPAA requirements and keep you off the Wall of Shame. Building Customer Trust Building a privacy-centric system will do more than just keep you out of trouble. It can also be a great tool for driving customers to your business. By protecting customer data, you can actually make better use of it. Isolating customer PHI in a data privacy vault allows you to use that data in various workflows and extract valuable insights identifiable data. without compromising Choosing a good tool for managing PHI will also require you to establish various data governance policies and access controls. By specifying these operational pieces of your business, you can ensure your customers’ trust is well placed. Given the high demand for privacy in any consumer technology today— and especially in healthtech — prioritizing these policies and standards sets your company apart as a leader in privacy, differentiating your business from competitors. Conclusion If you still want to learn more about HIPAA compliance or how a data privacy vault can help you with other aspects of HIPAA, there’s out there for that. plenty of information Fortunately, with the great tools available on the market, building a secure solution for your healthtech business is completely possible and easy to start immediately. Protecting your customers from compromised PHI is serious business, so make sure to use the right tools to safeguard your customer health data. Also published here.

How a Data Privacy Vault Protects PHI for Healthtech Users

Keeping track of all our passwords is a hard thing, especially because it’s a bad practice to re-utilize them across multiple accounts, they also must be strong and hard to guess. Our best solution is to use a password manager, this way we can get strong and hard-to-guess passwords and we avoid the hassle of memorizing all of them (which btw I can’t), they are all in one place, but what happens if your password manager has a security breach and your passwords vault gets leaked? That happened four months ago, and they are only telling you now. A Quick Recap of What Was Happening August 25, 2022 LastPass posted an that they had noticed an unusual activity two weeks earlier and started investigating it, but there was no evidence of access to any customer data. Apparently, the attacker only had access to a portion of the source code through the development environment. official note September 15, 2022 They had completed their investigation and forensics with the team, after finishing the investigation they concluded that the attackers activity was limited to a 4-day time frame in August and that the team was quick to contain the incident. Mandiant Also according to their investigation, the breach happened in the development environment, which technically has no access to customers data or password vaults. Even having access to users encrypted passwords vaults, nothing can be done without the user’s master password, which is part of their zero-knowledge security model (keep that last sentence in mind though) November 30, 2022 As part of their transparency commitment, they added an update to the breach situation, stating that they noticed unusual activity on a third-party cloud storage service, which is both shared by LastPass and GoTo, and again, they launched an investigation with the Mandiant team. This time they stated that the breach that happened in August actually gave the attacker access to “certain elements” of customers information, but that all the passwords are safe, again, due to their zero-knowledge security model. What is Happening Now? The day is December 22, 2022, LastPass came to the public to tell that, on the security breach of August, the attacker was able to get personally identifiable information, including company name, end-user name, emails, billing addresses, telephone numbers and IP addresses, as well as, wait for it, . 🤯 Password Vaults According to LastPass, your password vault is totally safe and is uncrackable, considering you have followed all their guidelines to secure master-password creation. At the moment there is no evidence that any unencrypted credit card data had been leaked, which at this point, I have my concerns since they took 4 months to come to the public saying that PII and password vaults are in the attackers hands. You can check the entire Notice of Incident here How Safe Are my Passwords? If you have followed the entire LastPass guideline for password creation, you are probably safe, attackers will start using dictionaries of billions of already leaked passwords (RockYou2021 dictionary has incredible 8.4 billion passwords) to speed up the process. Attackers may also try to brute-force your password, but if you think it would take them a really long time, think again. As technology evolves, it also decreases the time to crack passwords, the jump between an RTX 3090 and an RTX 4090 is almost 2x for nearly every algorithm. You might be wondering how much time then, would it take for someone to crack a complex password, someone actually tested that with the most recent hardware, they used an RTX 4090 8-card rig and were able to crack a highly complex 8 digits password in 48 minutes using Hashcat, according to this article. BitDefender So to be extra sure that your accounts are safe is highly recommended that you change all the accounts passwords that you have stored within LastPass, including your master password.

LastPass Confirms Hackers Stole Encrypted Password Vaults... Four Months Ago

LastPass confirma que los piratas informáticos robaron bóvedas de contraseñas cifradas... hace cuatro meses

LastPass confirme que des pirates ont volé des coffres-forts de mots de passe cryptés... il y a quatre mois

LastPass पुष्टि करता है कि हैकर्स ने एन्क्रिप्टेड पासवर्ड वॉल्ट चुरा लिए हैं ... चार महीने पहले

LastPass は、ハッカーが暗号化されたパスワード ボールトを盗んだことを確認します... 4 か月前

LastPass confirma que hackers roubaram cofres de senhas criptografadas... Quatro meses atrás

LastPass xác nhận tin tặc đã đánh cắp kho mật khẩu được mã hóa... Bốn tháng trước

LastPass 确认黑客在四个月前窃取了加密密码库

The Count of Monte Cristo,by Alexandre Dumas, père is part of HackerNoon’s Book Blog Post series. You can jump to any chapter in this book here: . Volume Four, Chapter 74: The Villefort Family Vault [LINK TO TABLE OF LINK] Chapter 74. The Villefort Family Vault Two days after, a considerable crowd was assembled, towards ten o’clock in the morning, around the door of M. de Villefort’s house, and a long file of mourning-coaches and private carriages extended along the Faubourg Saint-Honoré and the Rue de la Pépinière. Among them was one of a very singular form, which appeared to have come from a distance. It was a kind of covered wagon, painted black, and was one of the first to arrive. Inquiry was made, and it was ascertained that, by a strange coincidence, this carriage contained the corpse of the Marquis de Saint-Méran, and that those who had come thinking to attend one funeral would follow two. Their number was great. The Marquis de Saint-Méran, one of the most zealous and faithful dignitaries of Louis XVIII. and King Charles X., had preserved a great number of friends, and these, added to the personages whom the usages of society gave Villefort a claim on, formed a considerable body. Due information was given to the authorities, and permission obtained that the two funerals should take place at the same time. A second hearse, decked with the same funereal pomp, was brought to M. de Villefort’s door, and the coffin removed into it from the post-wagon. The two bodies were to be interred in the cemetery of Père-Lachaise, where M. de Villefort had long since had a tomb prepared for the reception of his family. The remains of poor Renée were already deposited there, and now, after ten years of separation, her father and mother were to be reunited with her. The Parisians, always curious, always affected by funereal display, looked on with religious silence while the splendid procession accompanied to their last abode two of the number of the old aristocracy—the greatest protectors of commerce and sincere devotees to their principles. In one of the mourning-coaches Beauchamp, Debray, and Château-Renaud were talking of the very sudden death of the marchioness. “I saw Madame de Saint-Méran only last year at Marseilles, when I was coming back from Algiers,” said Château-Renaud; “she looked like a woman destined to live to be a hundred years old, from her apparent sound health and great activity of mind and body. How old was she?” “Franz assured me,” replied Albert, “that she was sixty-six years old. But she has not died of old age, but of grief; it appears that since the death of the marquis, which affected her very deeply, she has not completely recovered her reason.” “But of what disease, then, did she die?” asked Debray. “It is said to have been a congestion of the brain, or apoplexy, which is the same thing, is it not?” “Nearly.” “It is difficult to believe that it was apoplexy,” said Beauchamp. “Madame de Saint-Méran, whom I once saw, was short, of slender form, and of a much more nervous than sanguine temperament; grief could hardly produce apoplexy in such a constitution as that of Madame de Saint-Méran.” “At any rate,” said Albert, “whatever disease or doctor may have killed her, M. de Villefort, or rather, Mademoiselle Valentine,—or, still rather, our friend Franz, inherits a magnificent fortune, amounting, I believe, to 80,000 livres per annum.” “And this fortune will be doubled at the death of the old Jacobin, Noirtier.” “That is a tenacious old grandfather,” said Beauchamp. “Tenacem propositi virum. I think he must have made an agreement with death to outlive all his heirs, and he appears likely to succeed. He resembles the old Conventionalist of ’93, who said to Napoleon, in 1814, ‘You bend because your empire is a young stem, weakened by rapid growth. Take the Republic for a tutor; let us return with renewed strength to the battle-field, and I promise you 500,000 soldiers, another Marengo, and a second Austerlitz. Ideas do not become extinct, sire; they slumber sometimes, but only revive the stronger before they sleep entirely.’” “Ideas and men appeared the same to him,” said Albert. “One thing only puzzles me, namely, how Franz d’Épinay will like a grandfather who cannot be separated from his wife. But where is Franz?” “In the first carriage, with M. de Villefort, who considers him already as one of the family.” Such was the conversation in almost all the carriages; these two sudden deaths, so quickly following each other, astonished everyone, but no one suspected the terrible secret which M. d’Avrigny had communicated, in his nocturnal walk to M. de Villefort. They arrived in about an hour at the cemetery; the weather was mild, but dull, and in harmony with the funeral ceremony. Among the groups which flocked towards the family vault, Château-Renaud recognized Morrel, who had come alone in a cabriolet, and walked silently along the path bordered with yew-trees. “You here?” said Château-Renaud, passing his arms through the young captain’s; “are you a friend of Villefort’s? How is it that I have never met you at his house?” “I am no acquaintance of M. de Villefort’s,” answered Morrel, “but I was of Madame de Saint-Méran.” Albert came up to them at this moment with Franz. “The time and place are but ill-suited for an introduction.” said Albert; “but we are not superstitious. M. Morrel, allow me to present to you M. Franz d’Épinay, a delightful travelling companion, with whom I made the tour of Italy. My dear Franz, M. Maximilian Morrel, an excellent friend I have acquired in your absence, and whose name you will hear me mention every time I make any allusion to affection, wit, or amiability.” Morrel hesitated for a moment; he feared it would be hypocritical to accost in a friendly manner the man whom he was tacitly opposing, but his oath and the gravity of the circumstances recurred to his memory; he struggled to conceal his emotion and bowed to Franz. “Mademoiselle de Villefort is in deep sorrow, is she not?” said Debray to Franz. “Extremely,” replied he; “she looked so pale this morning, I scarcely knew her.” These apparently simple words pierced Morrel to the heart. This man had seen Valentine, and spoken to her! The young and high-spirited officer required all his strength of mind to resist breaking his oath. He took the arm of Château-Renaud, and turned towards the vault, where the attendants had already placed the two coffins. “This is a magnificent habitation,” said Beauchamp, looking towards the mausoleum; “a summer and winter palace. You will, in turn, enter it, my dear d’Épinay, for you will soon be numbered as one of the family. I, as a philosopher, should like a little country-house, a cottage down there under the trees, without so many free-stones over my poor body. In dying, I will say to those around me what Voltaire wrote to Piron: ‘Eo rus, and all will be over.’ But come, Franz, take courage, your wife is an heiress.” “Indeed, Beauchamp, you are unbearable. Politics has made you laugh at everything, and political men have made you disbelieve everything. But when you have the honor of associating with ordinary men, and the pleasure of leaving politics for a moment, try to find your affectionate heart, which you leave with your stick when you go to the Chamber.” “But tell me,” said Beauchamp, “what is life? Is it not a halt in Death’s anteroom?” “I am prejudiced against Beauchamp,” said Albert, drawing Franz away, and leaving the former to finish his philosophical dissertation with Debray. The Villefort vault formed a square of white stones, about twenty feet high; an interior partition separated the two families, and each apartment had its entrance door. Here were not, as in other tombs, ignoble drawers, one above another, where thrift bestows its dead and labels them like specimens in a museum; all that was visible within the bronze gates was a gloomy-looking room, separated by a wall from the vault itself. The two doors before mentioned were in the middle of this wall, and enclosed the Villefort and Saint-Méran coffins. There grief might freely expend itself without being disturbed by the trifling loungers who came from a picnic party to visit Père-Lachaise, or by lovers who make it their rendezvous. The two coffins were placed on trestles previously prepared for their reception in the right-hand crypt belonging to the Saint-Méran family. Villefort, Franz, and a few near relatives alone entered the sanctuary. As the religious ceremonies had all been performed at the door, and there was no address given, the party all separated; Château-Renaud, Albert, and Morrel, went one way, and Debray and Beauchamp the other. Franz remained with M. de Villefort; at the gate of the cemetery Morrel made an excuse to wait; he saw Franz and M. de Villefort get into the same mourning-coach, and thought this meeting forboded evil. He then returned to Paris, and although in the same carriage with Château-Renaud and Albert, he did not hear one word of their conversation. As Franz was about to take leave of M. de Villefort, “When shall I see you again?” said the latter. “At what time you please, sir,” replied Franz. “As soon as possible.” “I am at your command, sir; shall we return together?” “If not unpleasant to you.” “On the contrary, I shall feel much pleasure.” Thus, the future father and son-in-law stepped into the same carriage, and Morrel, seeing them pass, became uneasy. Villefort and Franz returned to the Faubourg Saint-Honoré. The procureur, without going to see either his wife or his daughter, went at once to his study, and, offering the young man a chair: “M. d’Épinay,” said he, “allow me to remind you at this moment,—which is perhaps not so ill-chosen as at first sight may appear, for obedience to the wishes of the departed is the first offering which should be made at their tomb,—allow me then to remind you of the wish expressed by Madame de Saint-Méran on her death-bed, that Valentine’s wedding might not be deferred. You know the affairs of the deceased are in perfect order, and her will bequeaths to Valentine the entire property of the Saint-Méran family; the notary showed me the documents yesterday, which will enable us to draw up the contract immediately. You may call on the notary, M. Deschamps, Place Beauveau, Faubourg Saint-Honoré, and you have my authority to inspect those deeds.” “Sir,” replied M. d’Épinay, “it is not, perhaps, the moment for Mademoiselle Valentine, who is in deep distress, to think of a husband; indeed, I fear——” “Valentine will have no greater pleasure than that of fulfilling her grandmother’s last injunctions; there will be no obstacle from that quarter, I assure you.” “In that case,” replied Franz, “as I shall raise none, you may make arrangements when you please; I have pledged my word, and shall feel pleasure and happiness in adhering to it.” “Then,” said Villefort, “nothing further is required. The contract was to have been signed three days since; we shall find it all ready, and can sign it today.” “But the mourning?” said Franz, hesitating. “Don’t be uneasy on that score,” replied Villefort; “no ceremony will be neglected in my house. Mademoiselle de Villefort may retire during the prescribed three months to her estate of Saint-Méran; I say hers, for she inherits it today. There, after a few days, if you like, the civil marriage shall be celebrated without pomp or ceremony. Madame de Saint-Méran wished her daughter should be married there. When that is over, you, sir, can return to Paris, while your wife passes the time of her mourning with her mother-in-law.” “As you please, sir,” said Franz. “Then,” replied M. de Villefort, “have the kindness to wait half an hour; Valentine shall come down into the drawing-room. I will send for M. Deschamps; we will read and sign the contract before we separate, and this evening Madame de Villefort shall accompany Valentine to her estate, where we will rejoin them in a week.” “Sir,” said Franz, “I have one request to make.” “What is it?” “I wish Albert de Morcerf and Raoul de Château-Renaud to be present at this signature; you know they are my witnesses.” “Half an hour will suffice to apprise them; will you go for them yourself, or shall you send?” “I prefer going, sir.” “I shall expect you, then, in half an hour, baron, and Valentine will be ready.” Franz bowed and left the room. Scarcely had the door closed, when M. de Villefort sent to tell Valentine to be ready in the drawing-room in half an hour, as he expected the notary and M. d’Épinay and his witnesses. The news caused a great sensation throughout the house; Madame de Villefort would not believe it, and Valentine was thunderstruck. She looked around for help, and would have gone down to her grandfather’s room, but on the stairs she met M. de Villefort, who took her arm and led her into the drawing-room. In the anteroom, Valentine met Barrois, and looked despairingly at the old servant. A moment later, Madame de Villefort entered the drawing-room with her little Edward. It was evident that she had shared the grief of the family, for she was pale and looked fatigued. She sat down, took Edward on her knees, and from time to time pressed this child, on whom her affections appeared centred, almost convulsively to her bosom. Two carriages were soon heard to enter the courtyard. One was the notary’s; the other, that of Franz and his friends. In a moment the whole party was assembled. Valentine was so pale one might trace the blue veins from her temples, round her eyes and down her cheeks. Franz was deeply affected. Château-Renaud and Albert looked at each other with amazement; the ceremony which was just concluded had not appeared more sorrowful than did that which was about to begin. Madame de Villefort had placed herself in the shadow behind a velvet curtain, and as she constantly bent over her child, it was difficult to read the expression of her face. M. de Villefort was, as usual, unmoved. The notary, after having, according to the customary method, arranged the papers on the table, taken his place in an armchair, and raised his spectacles, turned towards Franz: “Are you M. Franz de Quesnel, baron d’Épinay?” asked he, although he knew it perfectly. “Yes, sir,” replied Franz. The notary bowed. “I have, then, to inform you, sir, at the request of M. de Villefort, that your projected marriage with Mademoiselle de Villefort has changed the feeling of M. Noirtier towards his grandchild, and that he disinherits her entirely of the fortune he would have left her. Let me hasten to add,” continued he, “that the testator, having only the right to alienate a part of his fortune, and having alienated it all, the will will not bear scrutiny, and is declared null and void.” “Yes.” said Villefort; “but I warn M. d’Épinay, that during my life-time my father’s will shall never be questioned, my position forbidding any doubt to be entertained.” “Sir,” said Franz, “I regret much that such a question has been raised in the presence of Mademoiselle Valentine; I have never inquired the amount of her fortune, which, however limited it may be, exceeds mine. My family has sought consideration in this alliance with M. de Villefort; all I seek is happiness.” Valentine imperceptibly thanked him, while two silent tears rolled down her cheeks. “Besides, sir,” said Villefort, addressing himself to his future son-in-law, “excepting the loss of a portion of your hopes, this unexpected will need not personally wound you; M. Noirtier’s weakness of mind sufficiently explains it. It is not because Mademoiselle Valentine is going to marry you that he is angry, but because she will marry, a union with any other would have caused him the same sorrow. Old age is selfish, sir, and Mademoiselle de Villefort has been a faithful companion to M. Noirtier, which she cannot be when she becomes the Baroness d’Épinay. My father’s melancholy state prevents our speaking to him on any subjects, which the weakness of his mind would incapacitate him from understanding, and I am perfectly convinced that at the present time, although, he knows that his granddaughter is going to be married, M. Noirtier has even forgotten the name of his intended grandson.” M. de Villefort had scarcely said this, when the door opened, and Barrois appeared. “Gentlemen,” said he, in a tone strangely firm for a servant speaking to his masters under such solemn circumstances,—“gentlemen, M. Noirtier de Villefort wishes to speak immediately to M. Franz de Quesnel, baron d’Épinay.” He, as well as the notary, that there might be no mistake in the person, gave all his titles to the bridegroom elect. Villefort started, Madame de Villefort let her son slip from her knees, Valentine rose, pale and dumb as a statue. Albert and Château-Renaud exchanged a second look, more full of amazement than the first. The notary looked at Villefort. “It is impossible,” said the procureur. “M. d’Épinay cannot leave the drawing-room at present.” “It is at this moment,” replied Barrois with the same firmness, “that M. Noirtier, my master, wishes to speak on important subjects to M. Franz d’Épinay.” “Grandpapa Noirtier can speak now, then,” said Edward, with his habitual quickness. However, his remark did not make Madame de Villefort even smile, so much was every mind engaged, and so solemn was the situation. “Tell M. Nortier,” resumed Villefort, “that what he demands is impossible.” “Then, M. Nortier gives notice to these gentlemen,” replied Barrois, “that he will give orders to be carried to the drawing-room.” Astonishment was at its height. Something like a smile was perceptible on Madame de Villefort’s countenance. Valentine instinctively raised her eyes, as if to thank heaven. “Pray go, Valentine,” said; M. de Villefort, “and see what this new fancy of your grandfather’s is.” Valentine rose quickly, and was hastening joyfully towards the door, when M. de Villefort altered his intention. “Stop,” said he; “I will go with you.” “Excuse me, sir,” said Franz, “since M. Noirtier sent for me, I am ready to attend to his wish; besides, I shall be happy to pay my respects to him, not having yet had the honor of doing so.” “Pray, sir,” said Villefort with marked uneasiness, “do not disturb yourself.” “Forgive me, sir,” said Franz in a resolute tone. “I would not lose this opportunity of proving to M. Noirtier how wrong it would be of him to encourage feelings of dislike to me, which I am determined to conquer, whatever they may be, by my devotion.” And without listening to Villefort he arose, and followed Valentine, who was running downstairs with the joy of a shipwrecked mariner who finds a rock to cling to. M. de Villefort followed them. Château-Renaud and Morcerf exchanged a third look of still increasing wonder. About HackerNoon Book Series: We bring you the most important technical, scientific, and insightful public domain books. This book is part of the public domain. Urbana, Illinois: Project Gutenberg. Retrieved April 2022, from Dumas, Alexandre. 2022. The Count of the Monte-Cristo. https://www.gutenberg.org/files/1184/1184-h/1184-h.htm#linkC2HCH0074 This eBook is for the use of anyone anywhere at no cost and with almost no restrictions whatsoever.  You may copy it, give it away or re-use it under the terms of the Project Gutenberg License included with this eBook or online at , located at . www.gutenberg.org https://www.gutenberg.org/policy/license.html

The Count of Monte Cristo, Illustrated: Chapter 74 - The Villefort Family Vault

Very often when people talk about security, the discussion of password managers or vaults come up. These can be useful for individuals. However, they carry some real risks for companies, if they’re not carefully considered. , and by all accounts from the attacker thoroughly so. A password vault system called Thycotic came heavily into play along with some other measures designed to add rather than remove security. Uber was recently breached https://hackernoon.com/how-an-18-year-old-teen-breached-uber-without-hacking-a-single-system?embedable=true There are a few things I want to start off with: the technology and tools themselves are not at fault here, instead it’s down to the implementation of them and the wider design of Uber’s systems password managers and vaults are used interchangeably, but usually a password vault will be more of an enterprise system for a company to protect credentials across the business rather than for a single user security is complicated, and when it hasn’t been designed in from the start you end up with large vulnerabilities that mean the smallest mistake can become a massive breach with very little notice What happened in the Uber hack? We start off with notification fatigue. The attacker, supposedly a 17 year old “TeaPot” from the UK found credentials (likely purchased online) of an Uber contractor and began sending multi factor authentication requests to them repeatedly. This is rapidly becoming a common attack, simply trying to annoy people into accepting the notification, although in this case they also sent a message via WhatsApp claiming to be from Uber IT and telling the contractor that there was an error, and if they accepted the notification it would stop the alerts. After the contractor accepted the alert TeaPot claims to have accessed the intranet and found a script with admin credentials for the Thycotic Secrets Vault Uber uses to manage their credentials. Admin credentials could mean everything in the password vault was available to the attacker, and this seems to be what happened. Supposedly it included access to the bug bounty programme, meaning TeaPot gained access to unfixed vulnerabilities in Uber’s apps and systems. So are password vaults bad? Here’s the problem. Security is complicated and managing credentials is tough. At the scales Uber and other unicorns work at, many not built for security from the start they are effectively working on a foundation of quicksand. Desperately trying to retrofit security into systems never designed for it while still trying to operate as a business and keep up with investor demands. Password vaults such as Thycotic are not, themselves, a bad idea, but what would have helped in Uber’s case? You’ll see a lot of talk about zero trust principles, which mean not trusting any one device in a network to access anything, but while these principles are talked about a lot they are impossibly hard to implement if they’re not built in from the start. Not having a password vault is another option, and that might have helped simply because it would mean less likelihood of having all those credentials in one place. On the other hand, it means users are much more likely to use weak passwords in the first place and to store them in insecure ways such as on a spreadsheet or text file. If they’re implemented properly, password vaults make managing secure systems much, much easier for users. The real fault here was in having admin credentials to the password vault in the first place, instead individual accounts should be created with access only to the credentials they need. No external contractor, no matter how trusted, should ever have access to that level of credentials - they simply do not need it. I wouldn’t be comfortable even with the most trusted of employees having that sort of access. It’s the type of thing you split into multiple pieces, spread between several members of the board, and lock in a safe for emergencies, such as your whole IT team being abducted by aliens. Should I use a password vault? One thing that did come up after the attack was a lot of security product vendors selling their solution as the one and only that would have prevented it. At best, these should be completely ignored, as the weaknesses that led to the breach were (and almost always are) complex and multifaceted with no easy fix. The other was that a lot of people were questioning whether password vaults or managers were suddenly a new and massive risk to take, and whether they were safe to use. Image via URegina The simple answer is yes, if it’s useful and makes sense for you. A well-set-up vault lets you use much more secure passwords, rotate them regularly, and manage them well. Many enterprise secret vaults will change passwords after each use and manage a lot more than user credentials such as certificates and other private keys. The more complex answer is that any tool you use to simplify security will introduce trade offs and their own risks to an environment. A password vault will give you more secure passwords and better management of credentials, but the trade off is that all of these credentials in one place make it a tempting target for an attacker and can cause a minor breach to become more serious fast.

Uber & Thycotic: Are Password Vaults a Huge Security Vulnerability?

Uber y Thycotic: ¿Son las bóvedas de contraseñas una gran vulnerabilidad de seguridad?

Uber et Thycotic : les coffres-forts de mots de passe sont-ils une énorme vulnérabilité de sécurité ?

उबेर और थाइकोटिक: क्या पासवर्ड वॉल्ट एक बड़ी सुरक्षा भेद्यता है?

Uber & Thycotic: パスワード保管庫は巨大なセキュリティ脆弱性ですか?

Uber e Thycotic: os cofres de senha são uma enorme vulnerabilidade de segurança?

Uber & Thycotic: Kho chứa mật khẩu có phải là lỗ hổng bảo mật lớn không?

Uber & Thycotic：密码库是一个巨大的安全漏洞吗？

DeFi Option Vaults: Options Democratized

Bóvedas de opciones DeFi: opciones democratizadas

Coffres-forts d'options DeFi : options démocratisées

DeFi Option Vaults: विकल्प डेमोक्रेटाइज़्ड

DeFi オプション保管庫: 民主化されたオプション

Cofres de opções DeFi: opções democratizadas

DeFi Option Vaults: Các tùy chọn được Dân chủ hóa

DeFi 期权库：期权民主化

What is Vaultwarden? is an alternative implementation of API written in Rust. It’s compatible with official Bitwarden clients and is a perfect choice for a self-hosted vault. Being written in Rust makes it lightweight, unlike the original Bitwarden which is written in C# and quite resource-heavy. Vaultwarden Bitwarden server Why Podman? Docker doesn’t work properly with systemd. The problem is that systemd doesn’t monitor a docker container but a docker client. It means if the container crashes but the client is running, the systemd will not restart the container. It’s caused by Dockers’ client-server architecture. There’s a workaround for it but using a native solution seems more reasonable. is an open-source, daemon-less, Linux-native tool to run containers. It was developed under standards and it works perfectly with systemd. Because of its daemon-less nature, it allows running containers under an arbitrary user. Podman OCI Install Podman I will show how to install podman in Ubuntu 20.10, for other distributions refer to : the official guide sudo apt update
sudo apt install podman Run Vaultwarden My normal setup includes the admin panel enabled and registration of new users disabled. To enable the admin panel we have to pass an environment variable. It is recommended to use a long random string for this value. We can generate it using the command: ADMIN_TOKEN openssl rand openssl rand -base64 48 One more thing to do before we run our vault is to create a data directory. In this directory Vaultwarden stores its config and database: sudo mkdir /vw-data Now everything is ready to run Vaultwarden: sudo podman pull vaultwarden/server:latest
sudo podman run -d --name vaultwarden.pod -e ADMIN_TOKEN=YOUR_RANDOM_TOKEN_GOES_HERE -v /vw-data/:/data/ -p 8000:80 vaultwarden/server:latest Create systemd service Create a service file under : /etc/systemd/system/vaultwarden.pod.service sudo touch /etc/systemd/system/vaultwarden.pod.service I like to have the suffix to differentiate native services from containerized services. .pod Put the following content to the service file: [Unit]
Description=Vaultwarden/Bitwarden Server (Rust Edition)
Documentation=https://github.com/dani-garcia/vaultwarden
Wants=syslog.service

[Service]
Restart=on-failure
ExecStart=/usr/bin/podman start -a vaultwarden.pod
ExecStop=/usr/bin/podman stop vaultwarden.pod

[Install]
WantedBy=multi-user.target Here are a few things worth pointing out: is instructing to only restart the service when it exits with non-zero code. It allows us to stop the service using the as well as the command. Restart=on-failure podman stop systemctl To store the container’s logs to syslog we have . The option instructs to attach the container’s STDOUT and STDERR. podman start -a -a is needed to start our container on system boot. The option basically means that the service should be started when all network services are up and the system is ready to accept logins. If you omit the option your service will start on boot. WantedBy multi-user.target WantedBy NOT The option tells that syslog should be started when our service is being started. However, it’s a weak requirement and the service will still start if syslog fails to start. In other words, we would like to have logs but it’s not mandatory for our service. Wants=syslog.service Reload the daemon: sudo systemctl daemon-reload And check the Vaultwarden status: sudo systemctl status vaultwarden.pod
● vaultwarden.pod.service - Vaultwarden/Bitwarden Server (Rust Edition)
     Loaded: loaded (/etc/systemd/system/vaultwarden.pod.service; disabled; vendor preset: enabled)
     Active: active (running) since Thu 2022-05-26 15:25:08 UTC; 1 day 20h ago
       Docs: https://github.com/dani-garcia/vaultwarden
   Main PID: 19461 (podman)
      Tasks: 11 (limit: 1112)
     Memory: 26.9M
     CGroup: /system.slice/vaultwarden.pod.service
             ├─19461 /usr/bin/podman start -a vaultwarden.pod
             └─19574 /usr/libexec/podman/conmon --api-version 1 -c e2a6a794ddf8bb74308a9f64b98871913f6a46a8370c921dcb353f5db721cea0 -u e2a6a794ddf8bb74308a9f64b98871913f6a46a8370c921dcb353f5db721cea0 -r /usr/bin/crun -b /var/lib/containers/storage/overlay-containers/e2a6a7> Now you can stop/start the Vaultwarden service: sudo systemctl stop vaultwarden.pod
sudo systemctl start vaultwarden.pod Previously published . here

Running Vaultwarden in a Container as a systemd Service Using Podman

Should the DeFi Option Vaults Worth $700 Million Charge Fees to Investors? Defi options vaults (DOVs), a type of DeFi structured product based on options trading, have become a sensation from the second quarter of 2021, attracting the attention of retail Defi investors and various institutional institutions. From the beginning, DOVs have developed dramatically to become a significant portion of the $700 million Defi option TVL, having a trading volume of billions of dollars per month. The largest DOVs include , , , Katana, and . ThetaNuts Ribbon Finance StakeDAO Friktion PsyFinance Investors place their money in the vaults, and the vaults invest the money in various options. Before DOVs, option strategies were only available to qualified investors through OTC internet trading or self-execution on options exchanges like Deribit. Distinctive base yields, typically 15% to 50% have been achieved via vanilla covered call and cash-covered put techniques. In addition, tokens are given out, resulting in an even higher return for users. Hedge funds that are actively managed often carry a “2/20” fee. This entails a 2% management charge on assets under management (AUM) and a 20% profit performance fee. Several hedge funds have abandoned the 2/20 paradigm these days. The 2/20 strategy is regarded as exceedingly costly and is only used by elite hedge funds that routinely beat by a significant margin. On the other hand, index funds have been pushed towards a zero-fee approach. Passive funds are expected to have no expenses, yet renowned index fund managers like Vanguard can still charge a 0.06 percent management fee. Why the large gap in fee structures? Hedge fund managers are paid a premium for originating and executing special strategies. These could be discretionary active-trading strategies, or algo-based systematic strategies, or even high-frequency trading strategies. The premium is paid for ‘alpha’ or active strategies that are able to outperform the general market. On the other hand, index funds do not get this premium because they deliver passive strategies that do not require any special input from the fund manager. These strategies could be anything from buying a basket of stocks or bonds to structured derivatives strategies. Index funds could get strong returns, but that would still not warrant high fees as the returns are generated from passive strategies working well in a favourable market and not because of any special effort from the fund manager. Similarly, Crypto DOVs such as Ribbon and Friktion are charging exorbitant management and service fees to crypto investors. Due to this, it does not make sense for DOVs like Ribbon and Friktion to charge fees to crypto investor’s users. What role do DOVs play? DOVs belong to the same category as index funds because of the passive nature of the strategies that are being executed. DOVs currently execute covered option strategies for their users, typically 10-15 delta strikes on 1-week expiries. There is no active trading or special algorithmic system. The beauty of DOVs is that these simple strategies perform very well due to the structurally high implied volatility of the underlying asset. Covered option strategies are very common and can be easily executed on exchanges like Deribit or OTC desks. The DOV protocol is primarily an infrastructure provider. They provide access and make it easy for the Defi user to execute these strategies in a trustless manner. A nominal management fee is perhaps acceptable for Ribbon Finance and other DOV protocols for this service. However, zero fees protocols such as ThetaNuts provide more value to investors considering the nature of the strategy implemented. The DOV protocols do not deliver anything extraordinary strategy-wise as a platform provider. For the facilitation of passive strategies, DOVs, in our opinion, have no reason to charge any performance fees. To any TradFi investor, charging performance fees on weekly covered option strategies would be shocking and seen as extreme profiteering. This should not be tolerated just because it is DeFi. For the DOV space to grow sustainably, the industry players need to put users first. Is it fair for DOVs to charge performance fees? Hedge funds that charge performance fees always have a clawback mechanism (or high watermark). This protects investors by allowing the investor to take back performance fees from previous years if there are losses in the most recent year. This way, the fund manager cannot take performance fees in one good year then leave the investor to bear all the losses in subsequent years. Zero Fees products such as Thetanuts are the future for decentralized DOVs. Without these clawback features, DOVs that charge performance fees expose investors to asymmetrical risk-reward, haircuts on profits and full impact on losses. These fee-charging DOVs effectively benefit from all the upside without taking any of the downside risks. Not quite fair to users. Impact of fees on DOV returns The main concern for any DOV user should be the negative impact on profits. While it might not be obvious to the investors weekly, levying fees on vaults severely impact DOV returns over time. To illustrate the effect of charging fees, the data shows a backtested performance of cash-secured puts strategies on BTC in 2021*, comparing four scenarios. BTC Strategy Total Return and the impact of fees (%) Percentage Difference from Best Performance (%) Thetanuts (zero fees) 22.2791 Vaults with a 2% AUM fee and 10% Performance fee 15.3913 -30.92 Vaults with only 10% Performance fee 17.5197 -21.36 Vaults with only a 2% AUM fee 20.0662 -9.93 Looking at the graph above, one can see how differing charge structures have a significant negative influence on the return created for consumers over the course of the year 2021. Investors choosing a DOV that charges both a 2% AUM and a 10% performance fee will lose the most money. Project Fees Ribbon 2% annualised management**10% performance if ITM Friktion 10% performance, 0.1% withdrawal StakeDAO 0.5% withdrawal Thetanuts 0 Fees Katana 0 Fees PsyFinance 0 Fees DeFi Products and Decentralized Asset Management - Whats in the Future There are various use cases and appropriate justifications for charging different sorts of fees to investors when employing structured products. However, there is no need to collect any fees in the case of individual option vaults that are executing an automated option strategy. The rise of protocols such as ThetaNuts that offer zero fees against the fee-based structure of Ribbion is going to be the next paradigm shift in the crypto ecosystem as the fees structures become completely decentralized and more focused on the community itself. Catch all the breaking news, and Don’t forget to like the story! Image credits: @QCP Capital and . Dane Deaner The content of this story DO NOT represent the views of HackerNoon and are meant as information only from the lens of the independent contributor. Please DYOR before investing.

Why DeFi Option Vaults Should Not Charge Fees 

have developed a Defi-focused wallet with the ability to store and mint non-fungible tokens (NFTs). Users will also be able to connect directly with Defi protocols including yield farms and liquidity pools. Kirobo The decentralized application (Dapp) development company is working on a set of DeFi security and usability services. They aim to make Defi more accessible and user-friendly to regular people, funding this initiative with a $5 million investment from Digimax in 2021. NFTs & Defi: Two Rapidly Growing Crypto-Based Markets Only a small handful of crypto enthusiasts knew what non-fungible tokens (NFT) were at the start of 2021. However, according to the most recent figures, about had been spent on NFTs by the end of that year. This makes the market for digital artwork and collectibles nearly as valuable as the entire art industry. $41 billion Decentralized Finance (Defi) has also grown considerably, reaching a market size of by February 2021. $72 billion Both of these markets are expected to grow even more as the crypto space continues to attract mainstream attention. With this increased adoption comes the need for tools that can be used within this sub-industries of the blockchain space. We have browser-based solutions like MetaMask that can be used for minting and storing NFTs, as well as storing tokens for use with Defi tools. However, due to phishing attacks, compromised PCs, and user error, a sizeable amount of MetaMask users have lost their funds. To combat some of the issues, Liquid Vault was developed by Kirobo. The wallet gives users the ability to cancel transactions and create a backup wallet. What Is Liquid Vault? Liquid Vault is a security-focused, non-custodial crypto wallet with Defi functionality. The wallet enables users to interact with Defi protocols, as well as store cryptocurrencies and digital assets. The wallet also enables users to store and mint NFTs on their wallets. Digital content associated with a token can be viewed through a digital album, without having to leave the wallet. Liquid Vault’s Features Features of the Liquid Vault include: Users can create a backup wallet that will seize control of the Vault after a predefined period of inactivity. Backup - This feature distributes assets from the vault to designated "heirs", providing a non-custodial solution to crypto inheritance upon death. Inheritance - Users can connect the Liquid Vault to any external dApp with Wallet Connect capabilities. Dapp Connect - An “undo button” for crypto transfers. Enables users to cancel a transaction until the moment the counterparty confirms it with a password sent through a separate channel. Safe Transfer - Users can avoid DEX slippage by trading directly with other holders at your own prices. Swaps - Holders of Kirobo NFTs have the opportunity to have their transaction gas fees refunded by staking KIRO. No-gas trading - Dapp Connect Users can also connect to smart contracts on most blockchains via Dapp connect, this enables users to access Defi services including: Yield farming protocols such as Compound and Aave Decentralized exchanges (DEX's) and staking platforms like Uniswap and SushiSwap Decentralized apps (dApps) including NFT marketplaces, DEX's, and more The feature is similar to the Wallet Connect feature on the MetaMask wallet. The Outlook for the NFT Market While most individuals are focused on picking the finest NFT-related projects to invest in and perhaps profit from, other thought leaders are considering what NFTs could imply for society as a whole. "It's non-fungible tokens (NFTs) that will drastically transform human civilization and culture," says analyst . He and others envision fair communities created on decentralized platforms that use NFTs as governance tokens to allow users a say in community growth. Andrew Steinwold Investment bank Jeffries believes the NFT market could be worth over by 2025. $80 billion The Future of Decentralized Finance According to data from , Defi’s Total Value Locked increased from $700 million in December 2019 to $20 billion by the end of 2020, and is currently at $204 billion. Defi Llama Defi will eventually replace the existing financial system, with its outdated and expensive layers of intermediaries. This is despite the fact that Defi currently holds only a fraction of the trillions of dollars held by traditional banks. Bulls believe At this early moment in the cycle, much like in the early days of e-commerce, it's difficult to predict exactly how the landscape will appear. However, given that the total addressable market is in the trillions of dollars and that access is currently difficult for non-crypto natives, growth will almost certainly continue. Adoption will spread as access becomes easier in the areas of liquidity providing, yield farming and non-custodial exchanges. Conclusion While I believe NFTs will continue to draw attention, particularly in relation to the metaverse and blockchain-based games, I believe the DeFi area will continue to show massive growth. DeFi has grown in maturity over the last year and continues to be a cutting-edge industry. Investors will continue to be attracted by the high yields, and RDeFi will take Defi to the next level, increasing adoption and liquidity. As these two industries grow, so will the need for non-custodial protocols and tools.

Kirobo Brings NFT Minting to Crypto Wallets via Liquid Vault

Stories, News & Mentions about VAULT

Vault’s Stories on HackerNoon