Distributed Ledger
Auto Added by WPeMatico
Xage introduces Zero Trust remote access cloud solution for hard-to-secure environments
When a hacker broke into the computer systems of the Oldsmar, Florida water supply last month, it sent up red flags across the operational tech world, whether that’s utilities or oil and gas pipelines. Xage, a security startup that has been building a solution to help protect these hard-to-secure operations, announced a Zero Trust remote access cloud solution today that could help prevent these kinds of attacks.
Duncan Greatwood, CEO at Xage, says flat out that if his company’s software was in place in Oldsmar, that hack wouldn’t have happened. Smaller operations like the one in Oldsmar tend to be one-person IT shops running older remote access software that’s vulnerable to hacking on a number of levels.
“It’s not difficult to compromise a virtual network computing (VNC) connection. It’s not difficult to compromise a stale account that’s been left on a jump box. What we started to do last year was deliver what we call a Zero Trust remote access solution to these kinds of customers,” Greatwood told me.
This involves controlling access device by device and person by person by determining who can do what based on them authenticating themselves and proving who they are. “It doesn’t rely on knowledge of a device password or a VPN zone password,” he explained.
The solution goes further with a secure traversal tunnel, which relies on a tamper-proof certificate to prevent hackers from getting from the operations side of the house — whether that’s a utility grid, water supply or oil and gas pipeline — to the IT side where they could then begin to muck about with the operational technology.
Xage also uses a distributed ledger as a core part of its solution to help protect identity policies, logs and other key information across the platform. “Having a distributed ledger means that rather than an attacker having to compromise just a single node, it would have to compromise a majority of the nodes simultaneously, and that’s very difficult [if not impossible] to do,” he said.
What’s more, the ledgers operate independently across locations in a hierarchy with a global ledger that acts as the ultimate rules enforcer. That means even if a location goes offline, the rules will be enforced by the main system whenever it reconnects.
They introduced an on-premise version of the Zero Trust remote access system last October, but with this kind of technology difficult to configure and maintain, some customers were looking for a managed solution like the one being introduced today. With the cloud solution, customers get a hosted solution accessible via a web browser with much faster deployment.
“What we’ve done with the cloud solution is made it really simple for people to adopt us by hosting the management software and the core Xage fabric nodes in this Xage cloud, and we’re really dramatically reducing that time to value for a remote access solution for OT,” Greatwood said.
You might be thinking that CISOs might not trust a cloud solution for these sensitive kinds of environments, and he admits that there is some caution in this market, even though they understand the benefits of moving to the cloud. To help ease these concerns, they can do a PoC in the cloud and there is a transfer tool to move back on prem easily if they are not comfortable with the cloud approach. So far he says that no early customers have chosen to do that, but the option is there.
Xage was founded in 2017 and has raised $16 million so far, according to Crunchbase data.
Early Stage is the premier “how-to” event for startup entrepreneurs and investors. You’ll hear firsthand how some of the most successful founders and VCs build their businesses, raise money and manage their portfolios. We’ll cover every aspect of company building: Fundraising, recruiting, sales, legal, PR, marketing and brand building. Each session also has audience participation built-in — there’s ample time included in each for audience questions and discussion.
Powered by WPeMatico
Coinbase lets you withdraw funds to your debit card
Cryptocurrency exchange Coinbase is adding a new way to withdraw funds from your Coinbase account. If you’ve added a compatible debit card to your account, you can transfer USD, EUR or GBP to your bank account nearly instantly.
There are some drawbacks, and the main one is that you’ll pay a lot of fees. In the U.S., Coinbase deducts 1.5% from the transaction, or a minimum $0.55 if it’s a small transaction. In the U.K. and Europe, you pay 2% in fees or a minimum fee of £0.45/€0.52, respectively.
You also need to have a compatible card. Not all debit cards support incoming transfers. You need to have a Visa card that supports Visa Fast Funds. In the U.S., you can also use a Mastercard card with Mastercard Send.
It’s hard to know whether your bank or card issuer support those features. The best way to figure it out is probably by adding your card to Coinbase and seeing what Coinbase says.
Coinbase isn’t removing other withdrawal methods. For instance, if you’re looking for a cheaper way to withdraw your funds in Europe, a SEPA bank transfer costs €0.15 per transfer. And Coinbase supports instant SEPA transfers if your bank has enabled that.
The company also lets you link your PayPal account with your Coinbase account. Your funds should hit your PayPal account within a few seconds, and there are no fees on Coinbase’s side.
As you can see, there are many ways to move money from your bank account to your Coinbase account. Some of them are slower than others, some of them are more expensive than others. Crypto-to-crypto transactions are a bit simpler by comparison, as you only need your recipient’s wallet address to send tokens.
Image Credits: Coinbase
Powered by WPeMatico
Buzzy Ethereum wallet app Argent comes out of stealth
Argent is launching the first public version of its Ethereum wallet for iOS and Android. The company has been available as a limited beta for a few months with a few thousand users. But it has already raised a seed and a Series A round with notable investors, such as Paradigm, Index Ventures, Creandum and Firstminute Capital. Overall, the company has raised $16 million.
I managed to get an invitation to the beta a few months ago and have been playing around with it. It’s a well-designed Ethereum wallet with some innovative security features. It also integrates really well with DeFi projects.
Many people leave their crypto assets on a cryptocurrency exchange, such as Coinbase or Binance. But it’s a centralized model — you don’t own the keys, which means that an exchange could get hacked and you’d lose all your crypto assets. Similarly, if there’s a vulnerability in the exchange API or login system, somebody could transfer all your crypto assets to their own wallets.
At heart, Argent is a non-custodial Ethereum wallet, like Coinbase Wallet or Trust Wallet. You’re in control of the keys. Argent can’t initiate a transaction without your authorization for instance.
But that level of control brings a lot of complexities. Hardware wallets, such as Ledger wallets, ask you to write down a seed phrase so that you can recover your wallet if you lose your device. It requires some discipline and it’s hard to understand if you’re not familiar with the concept of seed phrases.
Even Coinbase Wallet tells you to back up your seed phrase when you first create a wallet. “We see them as advanced tools for developers,” Argent co-founder and CEO Itamar Lesuisse told me.
That’s why a new generation of wallets tries to hide the complexity from the end user, such as ZenGo and Argent. Creating a wallet on Argent is one of the best experiences in the cryptocurrency space. Your wallet is secured by something called ‘guardians’.
Trust your friends
A guardian can be someone you know and trust, a hardware wallet (or another phone) or a MetaMask account. Argent also provides a guardian service, which requires you to confirm your identity with a text message and an email. If you lose your phone and you want to recover your wallet on another phone, you need to speak to your guardians and get a majority of confirmations. If they can all confirm that, yes, indeed, your phone doesn’t work anymore and you want to recover your crypto assets, the recovery process starts.
Let’s take an example. Here’s your list of guardians:
- Argent’s own guardian service
- Two friends who are also using Argent
- A Ledger Nano S hardware wallet
In total, there are five different factors involved, you including. If you lose your phone, you can recover your wallet by downloading Argent on another phone (factor #1), asking Argent’s guardian service to send you a text and an email to confirm your identity (factor #2) and confirming your identity with the Ledger Nano S (factor #3).
You have reached a majority and the recovery process starts. You’ll get your funds in 36 hours so that you have enough time to cancel it it’s a hijacking attempt.
But you could also have downloaded the Argent app on another phone (factor #1) and pinged your two friends (factor #2 and #3) directly. If they can confirm the same sequence of characters (emojis in that case), the recovery process would start as well.
“I’m interested in social recovery, multi-key schemes,” Ethereum creator Vitalik Buterin said in a TechCrunch interview in July 2018. It’s not a new concept as social media apps already use social recovery systems. On WeChat, if you lose your password, WeChat asks you to select people in your contact list within a big list of names.
In Argent’s case, social recovery adds an element of virality as well. The experience gets better as more people around you start using Argent.
In addition to wallet recovery, Argent uses guardians to put some limits. Just like you have some limits on your bank account, you can set a daily transaction limit to prevent attackers from grabbing all your crypto assets. You can ask your guardians to waive transactions above your daily limits.
Similarly, you can ask your guardians to lock your account for 5 days in case your phone gets stolen.
Betting on Ethereum
Argent is focused on the Ethereum blockchain and plans to support everything that Ethereum offers. Of course, you can send and receive ETH. And the startup wants to hide the complexity on this front as well as it covers transaction fees (gas) for you and gives you usernames. This way, you don’t have to set the transaction fees to make sure that it’ll go through.
The startup plans to integrate DeFi projects directly in the app. DeFi stands for decentralized finance. As the name suggests, DeFi aims to bridge the gap between decentralized blockchains and financial services. It looks like traditional financial services, but everything is coded in smart contracts.
There are dozens of DeFi projects. Some of them let you lend and borrow money — you can earn interest by locking some crypto assets in a lending pool for instance. Some of them let you exchange crypto assets in a decentralized way, with other users directly.
Argent lets you access TokenSets, Compound, Maker DSR, Aave, Uniswap V2 Liquidity, Kyber and Pool Together. And the company already has plans to roll out more DeFi features soon.
Overall, Argent is a polished app that manages to find the right balance between security and simplicity. Many cryptocurrency startups want to build the ‘Revolut of crypto’. And it feels like Argent has a real shot at doing just that with such a promising start.
Powered by WPeMatico
Crypto wallet app ZenGo launches savings mode
ZenGo is expanding beyond the basic features of a cryptocurrency wallet — letting you hold, send and receive crypto assets. You can now set aside some of your crypto assets to earn interests. In other words, ZenGo now also acts like a savings account.
The company has partnered with two DeFi projects for the new feature. DeFi means “decentralized finance”, and it has been a hot trend in the cryptocurrency space. DeFi projects are the blockchain equivalent of traditional financial products. For instance, you can lend and borrow money, invest in derivative assets and more.
If you want to learn more about DeFi, here’s an article I wrote on the subject:
But let’s come back to ZenGo. When you have crypto assets in your ZenGo wallet, you can now open the savings tab, pick an asset, such as Dai, and select what percentage of your holdings you want to set aside.
After that, all you have to do is wait. You get an overview of your savings “accounts” at any time. This way, you can see your total earned interests. Interests are automatically reinvested over time. You can move your money from those DeFi projects back to your wallet whenever you want.
Behind the scene, ZenGo uses the Compound protocol, a lending DeFi project. It works a bit like LendingClub, but on the blockchain. Some users send money to Compound to contribute to liquidity pools. Other users borrow money from that pool.
Interest rates go up and down depending on supply and demand. That’s why you currently earn more interests when you inject DAI or USD Coin in Compound. But that could change over time.
ZenGo also uses Figment in order to stake Tezos. This time, it isn’t a lending marketplace. When you lock some money in a staking project, it means that you support the operations of a particular blockchain. Few blockchains support staking as they need to be based on proof-of-stake.
For the end user, it looks like a savings account whether you’re relying on Compound or Figment. There are other wallet apps that let you access DeFi projects, such as Coinbase Wallet and Argent. But ZenGo thinks they’re still too complicated for regular users.
Powered by WPeMatico
Coinbase launches margin trading for some users
Cryptocurrency exchange Coinbase is launching margin trading today. Margin trading lets you trade on leverage. But it works both ways — margin trading lets you multiply your gains and your losses.
Margin trading is going to be available on Coinbase Pro, the company’s exchange interface for educated investors. Both retail and institutional investors will be able to submit margin trading orders with up to 3x leverage. It’ll work with any pair of assets with USD as the base currency.
For now, the feature is limited to 23 U.S. states if you’re a retail investor. Institutional investors in 45 states and nine international countries can access margin trading, though.
There are many potential use cases for margin trading. For instance, you can allocate a tiny portion of your portfolio to a margin trading order to hedge across multiple positions. Coinbase believes it has enough liquidity to help investors set up sophisticated margin trading orders.
If you’re a retail customer living in one of the 23 states where margin trading is available, you might not be able to use it. The company wants to restrict margin trading to the most advanced traders.
Coinbase is going to track your past activity on Coinbase Pro and look at trades, balances, deposits and withdrawals. If you’re an active trader, you’ll be able to access margin trading.
Here’s the list of 23 U.S. states with margin trading for retail investors: Florida, Texas, Illinois, New Jersey, Virginia, Georgia, Arkansas, Alaska, Oregon, Connecticut, New Hampshire, Massachusetts, Nebraska, North Carolina, Oklahoma, Colorado, Kansas, Maine, South Carolina, Utah, Wisconsin, Wyoming and West Virginia.
Disclosure: I own small amounts of various cryptocurrencies.
Powered by WPeMatico
Tangle EE project joins Eclipse Foundation to bring distributed ledger apps to enterprise
As the number of IoT devices proliferate, and machines conduct transactions with machines without humans involved, it becomes increasingly necessary to have a permissionless system that facilitates this kind of communication in a secure way.
Enter the IOTA Foundation, a Berlin-based open-source distributed ledger technology (DLT) project, which has hooked up with the Eclipse Foundation to bring IOTA DLT to the enterprise via the Tangle EE project. For starters, this involves forming a working group.
The distributed ledger idea first emerged as a way to distribute digital currency on the blockchain. Since then, there have been multiple ideas, both open source and commercial, to bring this concept to the enterprise to provide a secure, immutable and frictionless way to share data.
One such open-source project is IOTA, which saw an issue with DLT as it was being implemented by other entities. “IOTA is the first distributed ledger technology that went beyond blockchain with a completely new architecture that resolves the bottleneck problems of blockchain that has prevented real-world adoption,” Dominik Schiener, co-founder of IOTA Foundation, told TechCrunch.
The broad vision is to provide a way for machines and devices to communicate securely. “We provide a protocol layer that enables both humans and machines to bulk transact value without fees, as well as ensure data integrity, which is, of course, increasingly important in the age of Internet of Things, where hundreds of billions of devices are being connected over the next decades,” Schiener said.
Tangle EE is the part of the project aimed at enterprise users — EE stands for Enterprise Edition — that can take this technology and enable larger organizations to build applications on top of the project. For starters the foundation is working with the Eclipse Foundation to bring corporate entities on board who can help better define the requirements of the large business user.
Dell Technologies and STMicroelectronics are the first major companies joining the project, but the hope is that through discussion and dialogue, Tangle EE will begin to gain traction. “The main reason why we created Tangle EE was because of the discussions that we’ve had with corporations. They really understood that we need to have a working group around IOTA to discuss the application layer, to discuss what kind of solutions we can develop broadly across industries, but also really start having more serious discussions about the protocol,” Schiener said.
Much like the Linux Foundation, the Eclipse Foundation will provide a governance framework for the project. “The Eclipse Foundation will provide a vendor-neutral governance framework for open collaboration, with IOTA’s scalable, feeless and permissionless DLT as a base,” Mike Milinkovich, executive director of the Eclipse Foundation, explained in a statement.
If it gains traction, more companies will join in the coming months and years, and begin building out Tangle EE, while developing applications based on the protocol.
Powered by WPeMatico
Clear gets $13M Series A to build high-volume transaction system on the blockchain
Clear is an early-stage startup with a big ambition. It wants to build a blockchain for high-volume transaction systems like payments between telcos. Today it announced a $13 million Series A investment.
The round was led by Eight Roads with participation from Telefónica Innovation Ventures, Telekom Innovation Pool of Deutsche Telekom, HKT and Singtel Innov8.
That the strategic investors were telcos is not a coincidence. The early use case for Clear’s blockchain transaction network involves moving payments between worldwide telcos, a system that today is highly manual and prone to errors.
Clear co-founder Gal Hochberg says what his company does is to take commercial contracts and turn them into digital representations, often known in digital ledger terms as a smart contract.
“What that lets us do is create a trusted view of the true status of the relationship within the company’s business partners because they’re now looking at the same pricing and usage. They can find any issues in real time, either in commercial information or in service delivery, and they can even actually resolve those inside our platform,” Hochberg explained.
By putting these high-volume, cross-border transactions onto the blockchain with these smart contracts to act as automated enforcer of the terms, it means that instead of waiting until the end of the month to find errors and begin a resolution process, this can be done in real time, reducing time to payment and speeding up conflict resolution.
“We use blockchain technology to create those interactions in ways that it is auditable, cryptographically secure and ensures that both sides are synced and seeing the same information,” Hochberg said.
For starters, the company is working with worldwide telco companies because the number of transactions, and the way they cross borders make this a good test case, but Hochberg says this is only the starting point. They are not in full-blown production yet, but he says they have proven they can process hundreds of millions of billable events.
The money should help the company get into full carrier-grade production some time in the first half of this year, and then begin to expand into other verticals beyond telcos with the help of today’s investment.
Powered by WPeMatico
Hyperledger Fabric, the open-source distributed ledger, reaches release 2.0
The open-source Hyperledger Foundation announced the release of Hyperledger Fabric 2.0 today, the first such project to reach a 2.0 release.
It’s a notable milestone. The blockchain as a business tool has certainly had a rocky road over the last few years, but there is still plenty to like about smart contracts that have automated compliance checks built-in. Hyperledger Fabric 2.0 has lots of new features with that in mind.
The biggest updates involve forcing agreement among the parties before any new data can be added to the ledger, known as decentralized governance of the smart contracts. In practice, it means that the system will prevent any entity from writing to the ledger until there is consensus among the parties involved in the transaction, a basic blockchain tenet.
This is a requirement because the beauty and the curse of the distributed ledger is that it is an immutable record. Once you have written something in the ledger, it becomes very difficult to change it without the agreement of all those involved in the contract. You want to make sure you get it right before you commit something to the ledger.
Along those same lines, developers can build in automated checks along the way. As they say, this ensures the parties can “validate additional information before endorsing a transaction proposal.”
Brian Behlendorf, executive director at Hyperledger and a big advocate of open-source distributed ledger technology, says this is a big milestone for the project and the organization as it looks to help organizations adopt distributed ledger technology.
“Fabric 2.0 is a new generation framework developed by and for the enterprises that are building distributed ledger capabilities into the core of their businesses. This new release reflects both the development and deployment experience of the Fabric community and confirms the arrival of the production era for enterprise blockchain,” Behlendorf said in a statement.
That remains to be seen. The rise of blockchain in business has moved at a slow pace, but this release shows that the open-source community is still committed to building enterprise-grade distributed ledger technology. Today’s announcement is another step in that direction.
Powered by WPeMatico
Xage now supports hierarchical blockchains for complex implementations
Xage is working with utilities, energy companies and manufacturers to secure their massive systems, and today it announced some significant updates to deal with the scale and complexity of these customers’ requirements, including a new hierarchical blockchain.
Xage enables customers to set security policy, then enforce that policy on the blockchain. Company CEO Duncan Greatwood says as customers deploy his company’s solutions more widely, it has created a set of problems around scaling that they had to address inside the product, including the use of blockchain.
As you have multiple sites involved in a system, there needed to be a way for these individual entities to operate, whether they are connected to the main system or not. The answer was to provide each site with its own local blockchain, then have a global blockchain that acts as the ultimate enforcer of the rules once the systems reconnected.
“What we’ve done is by creating independent blockchains for each location, you can continue to write even if you are separated or the latency is too high for a global write. But when the reconnect happens with the global system, we replay the writes into the global blockchain,” Greatwood explained.
While classical blockchain doesn’t allow these kinds of separations, Xage felt it was necessary to deal with its particular kind of use case. When there is a separation, a resynchronization happens where the global blockchain checks the local chains for any kinds of changes, and if they are not consistent with the global rules, it will overwrite those entries.
Greatwood says these changes can be malicious if someone managed to take over a node or they could be non-malicious, such as a password change that wasn’t communicated to the global chain until it reconnected. Whatever the reason, the global blockchain has this power to fix the record when it’s required.
Another issue that has come up for Xage customers is the idea that majority rules on a blockchain, but that’s not always a good idea when you have multiple entities working together. As Greatwood explains, if one entity has 600 nodes and the other has 400, the larger entity can always enforce its rules on the smaller one. To fix that, they have created what they are calling a supermajority.
“The supermajority allows us to impose impose rules such as, after you have the majority of 600 nodes, you also have to have the majority of the 400 nodes. Obviously, that will give you an overall majority. But the important point is that the company with 400 nodes is protected now because the write to the ledger account can’t happen unless a majority of the 400 node customers also agrees and participates in the write,” Greatwood explained.
Finally, the company also announced scaling improvements, which reduce computing requirements to run Xage by 10x, according to the company.
Powered by WPeMatico
Coinbase announces USDC Bootstrap Fund to support DeFi projects
Coinbase is announcing a new initiative called the USDC Bootstrap Fund. As the name suggests, the company wants to support developers with a fund composed of USDC tokens.
DeFi, or Decentralized Finance, is a recent trend in the blockchain space. DeFi projects are traditional financial products that you’d expect from a traditional bank, such as lending protocols and derivatives, built on top of a blockchain.
Thanks to the decentralized nature of these protocols, it’s harder to censor them and more people should theoretically be able to access those services.
Going back to Coinbase, the company thinks there’s not enough liquidity for some DeFi protocols. The startup wants to improve that by investing USDC directly in DeFi protocols. Those investments are smart contracts, and returns should be provided by a counterparty, such as a borrower or taker.
In other words, it’ll become much easier to borrow USDC using some DeFi protocols as Coinbase is providing a pool of USDC tokens. Counterparties will have to provide crypto collateral and pay some interest rate.
Coinbase is also announcing its first two investments through the USDC Bootstrap Fund. The company is handing 1 million in USDC to Compound, and 1 million in USDC to dYdX.
Powered by WPeMatico