Yesterday, I saw on the news that PayPal now allow its users to buy and sell and hold bitcoin and other cryptocurrencies in their PayPal online wallet, but judging by the way it is, it seems like "our hands in your pocket" do you think its safe to leave huge amount of crypto in such wallet?, also I read alot of reviews online about PayPal and they were not so good, alot people complained about how their PayPal account get blocked for no good reason and their money are stuck in these accounts, so what do guys think?

Divide investment objectives into short, medium, and long-term segments whenever possible, matching the natural life stages of youth, middle age, and seniors. It also makes sense to align bank and brokerage accounts to short and intermediate terms, while retirement accounts focus exclusively on the long term (heavy penalties are incurred when those funds are accessed prematurely). In fact, there is no good reason to take advantage of IRAs, SEPs, and other retirement accounts unless dire circumstances offer no viable alternatives.


توصيات العملات   توصيات الذهب

Short- and medium-term goals also aid SMART planning, allowing a quick review to gauge progress on savings for home, car, vacation, or family obligations. Intermediate-term planning can also include a more general description, denoting the capital set aside for the inevitable "rainy day." This allocation of emergency funds can also serve as a firewall between life's surprises and the much larger retirement account, allowing that capital to remain intact, configured to serve its intended purpose.

https://www.gold-pattern.com/en

Don't despair if you've reached middle age without investment planning because the significant benefits add up quickly when work begins. Of course, you'll need to catch up if your finances are flashing red, which requires lifestyle changes until your income matches or exceeds expenses. Debt management will be necessary to get on the right track because it makes no sense to earn 5% or 10% per year on an investment account when several credit cards have reached their limits with interest rates of 18%, 20% or 25 %.

 

Learning to invest in midlife has the benefit of experience - that is, you can more accurately gauge your future earning power by examining your family's current career paths. It's often possible for higher-earners to catch up, building investment wealth quickly under these circumstances, but still it will likely require sacrifices. Sadly, incomes often stagnate into middle age, with dead-end jobs and locked careers that keep family finances afloat but prevent the creation of more substantial savings.

 

It is critical that retirement accounts are fully funded through middle age and through the end of employment, even when this forces other lifestyle changes. Financial burdens are likely to increase over time, due to rising health care and parenting costs (which may include college tuition). Going into retirement with little more than government checks in hand can produce well-founded anxiety, especially when one spouse has depended on the other for decades, and should be avoided at all costs.

Gold Signals

There are more people working past retirement age today than at any time in the last century. However, government rules require investors to begin withdrawing funds from retirement accounts (other than Roth IRAs) at age 70½. Along with a longer life expectancy, this requirement adds new importance to investment planning in the retirement years. It makes perfect sense for older people to continue to accumulate wealth through work or investment until death whenever possible, especially if one of the spouses will depend on the funds as a widower or widower.

 

Gold Signals

Last year, at least five major crypto exchanges were hacked. Here are the details:

December 2017: Hackers steal $63 million in cryptocurrency from NiceHash.

• January 2018:  Hackers steal more than $500 million in cryptocurrency from Coincheck.

• February 2018: Hackers steal approximately $195 million in cryptocurrency from BitGrail.

• June 2018: Hackers steal roughly $40 million in cryptocurrency from Coinrail.

• June 2018: Hackers steal $30 million in cryptocurrency from Bithumb.

And that's not all -- there were other hacks that happened as well. In this article, I’ll explain why so many exchanges are being hacked.

As I explained in my last Forbes article, crypto security is hierarchical: Protocol, exchange and personal wallet security are the three layers. This hierarchy means that if you have an issue at the coin protocol layer, you will be compromised, regardless of how secure your second and third layers are. At the same time, the complexity of the protocol level means it’s harder to find an issue like a DAO hack than finding a vulnerability at the lower layers like exchanges and wallets. That is why hackers target exchanges -- it’s the most efficient way for them to steal your money. Protocols are hard to hack, and wallets are too distributed. Exchanges are a good fit for them.

Now that we've described why exchanges are the most attractive targets for hackers in the crypto world, it’s a good time to understand why they're hackable.

The reason is simple. Any crypto exchange is a centralized single point of failure, vulnerable by design. As a centralized web application with functions to execute transactions and one or a few big crypto wallets inside, exchanges are prone to the same security problems as all other websites. All the usual application aspects such as frontend JS, mobile app, terminals and other clients on the client side and APIs and data repositories on the back end need to be protected. In my experience, the most critical security problems for crypto exchanges are split into the following buckets:

The Client Side

• XSS: Cross Site Scripting (aka XSS), which is the most popular client-side vulnerability, allows attackers to use your browsers as their own. The reason for this is an ability to inject malicious JS/HTML code to the web page generated by vulnerable servers. There is a myth that two-factor authentication (2FA), such as Google Authenticator or SMS code, saves from such vulnerabilities, but in fact, it does not. A malicious Javascript that gets to the page due to this vulnerability simply substitutes the withdrawal wallet address right before you withdraw funds. You do not see anything and can not prevent it in any way.

• Open redirects that help hackers perform phishing-like attacks: This is an ability to redirect you in an arbitrary way from the link to your crypto exchange. It sometimes looks like it wouldn't be an issue, but technically, it allows attackers to do two things: 1) list exchange in search engines like Google as a malicious website, and 2) increase the success rate of malware installation attack because of the trust to the exchange domain. The typical attack looks like a link to the original domain of your exchange (not a phishing one, a real one) that downloads some sort of “new version of trading desktop client,” which technically is a malicious software that steals your wallet.

• SSL issues related to mobile apps (like certificate pinning): This is a minor issue. However, it’s become critical when users travel to countries like China, Iran or Russia where governments could intercept internet connections by their own certificates.

Common CSRF attacks are not in the list because two-factor authentication is widely implemented in the exchanges.

The Server Side

• NoSQL/key-value injections: These injections are mainly in the popular storage modules like Redis, Memcached and MongoDB. Similar to the older, more well-known SQL attacks that were mainly fixed at the frameworks and ORM level, there are similar attacks targeting new technologies like NoSQL and in-memory databases. These are newer and are rarely discovered by developers and frameworks.

• Logic issues, mainly race conditions: These issues are critical and hard to discover by automation tools like source code analyzers. An example of this is simultaneously processing more than one withdrawal transaction, which could result in a negative account balance.

• Authentication issues (e.g., bypasses): Sometimes passwords and even 2FA don't work just because of authentication bypass issues. These are logical or input validation problems, allowing access to the user session without proper credentials being checked.

There are also other types of security breaches in which hackers steal GAS, not coins themselves. In this instance, it’s a proof-of-stake (PoS) cryptocurrency in which all the coins in your wallet generates GAS, an alternative currency used to sign other transactions. Again, the GAS itself is an alternative coin in any PoS-based cryptocurrency, and a lot of them belong to crypto exchanges because they hold users PoS coins like ETH and NEO. That’s why if somebody steals GAS, you will never know about this as a client of crypto exchange.

Who is the victim in the case of GAS stealing? Technically, it would be an exchange, but at the same time, would you know if your transaction fees were higher because of the GAS? GAS is one of the good reasons why it’s so important to understand security basics while dealing with crypto.

Let’s summarize all the things explained above:

All the crypto exchanges have weaknesses in the architecture because they were never designed in cryptocurrency protocols. Any crypto exchange is an ordinary centralized web application with all the same issues that plague any other web application. Web application vulnerabilities resulted in many crypto exchanges being compromised recently. Some exchanges never announced hacks because attackers stole only GAS, not coins themselves and users never knew about these incidents.

SOURCE

The development of BTC and its adoption or utility actually have been developing during this time. So far, many broaden the adoption of BTC as payment, not only for trading or investment.

however, the challenges are too many such as:
~ Law and legality in-country
~ Not supported by some countries and banned from them
~ Closed-minded from many people in the worldwide
~ Consider that BTC has been used for crimes

Actually many people have proven that BTC is not what they think. But of course, it needs more process. Moreover, as you said that BTC is not able to see or hold. It is only a digit.

Quote from: mamun777 on October 07, 2018, 11:06:41 AM

Hi everyone,

 I have some Dogecoins. I read it hit 2 billion market cap. I am a newbie . a friend suggested that i dump it and buy reddcoin.

Experts  please suggest.

I do not know in which price you was bought dogecoin. But I can assure you need to hold dogecoin until price reach 45-50 satoshi. Then sell.