on master help sign in
Merge pull request #156 from urbit/faq-updates

Extensive updates to the FAQ

commitb2df387eca41842e6133c240854079ce72846826 authorMorgan Sutherland <msutherl@users.noreply.github.com> dateThu 25 Jul 2019, 17:33 (7 years ago) parentb77779b69df0ba
1 file changed+132−123
content/faq.md+132−123
content/faq.md+132−123
@@ -6,54 +6,54 @@ title = "FAQ"
66
77<details><summary>The Urbit Project</summary>
88
9−- [Why Urbit?](#urbit-project-1)
10−- [How secure is Urbit right now?](#urbit-project-2)
11−- [How can I contribute to Urbit?](#urbit-project-3)
12−- [What is Tlon?](#urbit-project-4)
13−- [Who works at Tlon?](#urbit-project-5)
9+- [What is Urbit?](#what-is-urbit)
10+- [How secure is Urbit right now?](#how-secure-is-urbit)
11+- [How can I contribute to Urbit?](#contribute)
12+- [What is Tlon?](#what-is-tlon)
13+- [Who works at Tlon?](#who-works-at-tlon)
1414
1515</details>
1616
1717
1818<details><summary>Azimuth</summary>
1919
20−- [What is Azimuth?](#azimuth-1)
21−- [What are stars, galaxies, and planets?](#azimuth-2)
22−- [How many planets, stars, and galaxies are active?](#azimuth-3)
23−- [What are comets and moons?](#azimuth-4)
24−- [What is a `@p`? Why is my username generated for me?](#azimuth-5)
25−- [Can I change my `@p`?](#azimuth-6)
26−- [How do I get an identity?](#azimuth-7)
27−- [How do I send an identity to someone else?](#azimuth-8)
28−- [What is the best way to access Azimuth?](#azimuth-9)
20+- [What is Azimuth?](#what-is-azimuth)
21+- [What are stars, galaxies, and planets?](#stars-galaxies-planets)
22+- [How many planets, stars, and galaxies are active?](#how-many-planets-stars-galaxies)
23+- [What are comets and moons?](#comets-moons)
24+- [What is a `@p`? Why is my username generated for me?](#what-is-@p)
25+- [Can I change my `@p`?](#change-my-@p)
26+- [How do I get an identity?](#get-an-identity)
27+- [How do I transfer an identity to someone else?](#transfer-identity)
28+- [What is the best way to access Azimuth?](#access-azimuth)
2929
3030</details>
3131
3232<details><summary>Urbit HD Wallet</summary>
3333
34−- [What is the Urbit HD Wallet?](#wallet-1)
35−- [What is a master ticket?](#wallet-2)
36−- [What is an ownership address?](#wallet-3)
37−- [What are proxies?](#wallet-4)
38−- [What are seeds?](#wallet-5)
39−- [What does it mean to “set public keys”?](#wallet-6)
40−- [What do I do if I want to own multiple points?](#wallet-7)
41−- [How should I take care of my Urbit HD Wallet?](#wallet-8)
42−- [I have a galaxy or star with lockup conditions. How does this work?](#wallet-9)
34+- [What is the Urbit HD Wallet?](#urbit-hd-wallet)
35+- [What is a master ticket?](#master-ticket)
36+- [What is an ownership address?](#ownership-address)
37+- [What are proxies?](#proxies)
38+- [What are seeds?](#seeds)
39+- [What does it mean to “set public keys”?](#set-public-keys)
40+- [What do I do if I want to own multiple points?](#multiple-points)
41+- [How should I take care of my Urbit HD Wallet?](#custody)
42+- [I have a galaxy or star with lockup conditions. How does this work?](#lockup-conditions)
4343
4444</details>
4545
4646<details><summary>Arvo</summary>
4747
48−- [What is Arvo?](#arvo-1)
49−- [What is unique about Arvo?](#arvo-2)
50−- [How is Arvo connected to Ethereum?](#arvo-3)
51−- [Will the Arvo network survive if Ethereum dies?](#arvo-4)
52−- [How do I install Arvo?](#arvo-5)
53−- [How do I use Arvo?](#arvo-6)
54−- [How do over-the-air updates work?](#arvo-7)
55−- [What is Landscape?](#arvo-8)
56−- [I have a point, now what?](#arvo-9)
48+- [What is Arvo?](#what-is-arvo)
49+- [What is unique about Arvo?](#what-is-unique-about-arvo)
50+- [How is Arvo connected to Ethereum?](#arvo-ethereum)
51+- [Will the Arvo network survive if Ethereum dies?](#if-ethereum-dies)
52+- [How do I install Arvo?](#install-arvo)
53+- [How do I use Arvo?](#use-arvo)
54+- [How do over-the-air updates work?](#over-the-air-updates)
55+- [What is Landscape?](#what-is-landscape)
56+- [I have a point, now what?](#now-what)
5757
5858</details>
5959
@@ -79,168 +79,177 @@ title = "FAQ"
7979
8080## The Urbit project
8181
82−### Why Urbit? {#urbit-project-1}
82+### What is Urbit? {#what-is-urbit}
8383
84−The internet began as a friendly, peer-to-peer network: friendly because the people with the ability to use such a thing were the same sort of nerds, and peer-to-peer because those nerds knew how to run their own servers. But, as the internet’s appeal spread to everyday people in the 90s, it was unrealistic for everyone to be the administrators of their own complex machines. So this peer-to-peer network was divided into clients (people) and servers (large corporations), a relationship that’s been solidifying ever since.
84+Urbit reimagines the internet as a peer-to-peer network designed to stay that way at a scale. Previous attempts to "decentralize" the internet have only attempted to solve certain corners of the problem. Urbit proposes that only a new stack, built from the ground-up as a tightly integrated system, can realize a truly peer-to-peer web.
8585
86−But one intervening development presents hope. Platforms like Amazon Web Services turn previously heterogeneous networking infrastructure into commodities. Now anyone can use it almost as easily as a faucet.
86+Combining a deterministic operating system (Arvo) and a secure, global identity layer (Azimuth), the Urbit project has created something that’s never existed before: an encrypted peer-to-peer network where you can be sure that messages are never tampered with or surveilled, and where others can be trusted to have good intentions.
8787
88−What’s missing, however, is a peer-to-peer software stack that everyone can use. That’s what Urbit is. We’re reimagining the internet as a peer-to-peer network that is designed to stay that way, even at a large scale, which is something that’s never been done before. All previous attempts to re-decentralize the internet have only attempted to solve certain corners of the problem, and thus have failed. Only a technical upheaval of the entire stack can bring back this dream. Urbit does just that, and already exists in a working state.
88+The online world anticipated by Urbit is a much friendlier one, much like the early Internet, where collegial discussion and collaboration was the norm. Problems that are unsolvable without large-scale political centralization in our current internet – data breaches, spam, fake reviews, malware-spreading, harassment – become tractable for individuals. You have one login for everything. You own and control all of your software and all of your data by default. Software is designed around the friendships, families, communities, and organization you're already apart of – not the other way around.
8989
90−In combining the determinism of Arvo, our OS, and the security of identity of Azimuth, our identity layer, we’ve done something that’s never been done before: we’ve created an encrypted peer-to-peer network where you can be sure that your message is secure: not tampered with, and sent exactly once.
90+### How secure is Urbit right now? {#how-secure-is-urbit}
9191
92−The internet anticipated by Urbit is a much friendlier one. You’re always “logged in” to your online services, without the need to remember usernames or passwords. Problems that are unsolvable in our current internet -- spam, fake reviews, malware-spreading, harassment -- are made uneconomical, since there’s a limited number of Urbit identities that function as reputation primitives.
92+Azimuth, Urbit's identity layer, is live on the Ethereum blockchain and has been audited by Open Zeppelin, Blockchain at Berkeley and Bloctrax. [We run a bug bounty program](https://hackerone.com/tlon) on HackerOne.
9393
94−### How secure is Urbit right now? {#urbit-project-2}
94+The rest of the Urbit project is still in research-mode. Arvo is safe to play with, but it’s not yet a place to store or share private information. Urbit's cryptographic protocols have not been professionally audited, and the operating system itself doesn't provide protection from attackers on the network.
9595
96−Azimuth, the Urbit identity layer, is ready for serious use. Its contracts have been audited by trustworthy third parties. We encourage everyone to use Azimuth as an identity solution, and to build software projects on top of it.
96+### How can I contribute to Urbit? {#contribute}
9797
98−The rest of the Urbit project is still in research-mode. Arvo is a fun operating system to play with, but it’s not yet a safe place to store sensitive data.
98+We encourage outside contributors to become a part of the project. The best way to do this is to check out [Urbit](https://github.com/urbit) on Github, look at the pinned repositories, and check out our [Contributing](https://urbit.org/docs/getting-started/contributing/) guide. After you've gotten familiar with the system, feel free to open issues and make pull requests.
9999
100−### How can I contribute to Urbit? {#urbit-project-3}
100+### What is Tlon? {#what-is-tlon}
101101
102−We encourage outside contributors to become a part of the project. The best way to do this is to check out [the Urbit GitHub](https://github.com/urbit) and look at the pinned repositories. Feel free to open issues and make pull requests.
102+Tlon is the San Francisco-based company that develops the open-source (MIT licensed) Urbit project.
103103
104−You’re also invited to join the [urbit-dev](https://groups.google.com/a/urbit.org/forum/#!forum/dev) Google group and public mailing list.
105−
106−### What is Tlon? {#urbit-project-4}
107−
108−Tlon is the San Francisco-based company that develops Urbit. Tlon doesn’t own Urbit, since Urbit is an open-source project with decentralized ownership.
109−
110−### Who works at Tlon? {#urbit-project-5}
104+### Who works at Tlon? {#who-works-at-tlon}
111105
112106You can see who we are at [tlon.io](https://tlon.io/).
113107
114108## Azimuth
115109
116−### What is Azimuth? {#azimuth-1}
110+### What is Azimuth? {#what-is-azimuth}
117111
118−Azimuth is a general-purpose identity system. It is the Urbit identity base-layer. This system is implemented as a suite of smart contracts on the Ethereum blockchain, and it determines which Ethereum addresses own which Urbit identities, called points. There is a fixed number of possible points, and they exist in three classes. Urbit uses it in Arvo, the Urbit OS.
112+Azimuth is a general-purpose PKI ("public key infrastructure") that Urbit uses as an identity system. This system is implemented as a suite of smart contracts on the Ethereum blockchain, and it determines which Ethereum addresses own which Urbit planets, stars, or galaxies. In Arvo, a single identity is called a "ship," whereas in Azimuth, a single identity is called a "point."
119113
120−### What are stars, galaxies, and planets? {#azimuth-2}
114+### What are stars, galaxies, and planets? {#stars-galaxies-planets}
121115
122−Points come in three classes: galaxies, stars, and planets. The length of a point’s name will tell you its class. Galaxies are 8-bit and have names like `~mul`. Galaxies issue 16-bit stars (`~dacmul`), which can themselves issue 32-bit planets (`~laptel-holfur`).
116+Azimuth points come in three classes: galaxies, stars, and planets. The length of a point’s name will tell you its class. Galaxies are 8-bit and have names like `~mul`. Galaxies issue 16-bit stars (`~dacmul`), which can themselves issue 32-bit planets (`~laptel-holfur`).
123117
124−Planets are intended for everyday use by an adult human, and there are 4.3 billion of them (2 to the 32nd power). Stars and galaxies, on the other hand, are meant to act as network infrastructure: on the Arvo network they provide routing and are responsible for distributing software updates.
118+Planets are intended for everyday use by individuals, and there are 4.3 billion of them (2 to the 32nd power). Stars and galaxies, on the other hand, are meant to act as network infrastructure: on the Arvo network they provide routing and are responsible for distributing software updates.
125119
126−### How many planets, stars, and galaxies are active? {#azimuth-3}
120+### How many planets, stars, and galaxies are active? {#how-many-planets-stars-galaxies}
127121
128−The raw data on most Azimuth events that have occurred can be found [here](https://azimuth.network/stats/events.txt). We’re currently working on generalized tooling for viewing these events.
122+The raw data on most Azimuth events that have occurred can be found [on the Azimuth website](https://azimuth.network/stats/events.txt). We’re currently working on generalized tooling for viewing these events.
129123
130−### What are comets and moons? {#azimuth-4}
124+You can also inspect and execute functions in the [azimuth.eth](https://etherscan.io/address/azimuth.eth#code) contract on Etherscan.
125+
126+### What are comets and moons? {#comets-moons}
131127
132128In addition to the three classes of Azimuth points mentioned above, there are two other kinds of Urbit identities that are not registered on Azimuth.
133129
134−Moons are 64 bits, are issued by planets, and have names like `~doznec-salfun-naptul-habrys`. Moons are meant for connected devices: phones, desktops, smart TVs, digital thermostats. Moons are subordinated to their parent planet.
130+Moons are 64 bits, issued by planets, and have names like `~doznec-salfun-naptul-habrys`. Moons are meant for connected devices: phones, desktops, smart TVs, digital thermostats, and other IoT devices. Moons are subordinated to their parent planet.
131+
132+Comets are 128 bits and have no parents. They can be launched by anyone. They are temporary, disposable identities. Being disposable and essentially unlimited, they will likely not be trusted by default by others on the Arvo network, though you shouldn't have any problem until the network grows much larger. They have long, hard-to-memorize names, like `~racmus-mollen-fallyt-linpex--watres-sibbur-modlux-rinmex`.
135133
136−Comets are 128 bits and have no parents. They can be launched by anyone. They are temporary, disposable identities. Being disposable and essentially unlimited, they will likely not be trusted by default by others on the Arvo network. They have long, hard-to-memorize names, like `~racmus-mollen-fallyt-linpex--watres-sibbur-modlux-rinmex`.
134+### What is a `@p`? Why is my username generated for me? {#what-is-@p}
137135
138−### What is a `@p`? Why is my username generated for me? {#azimuth-5}
136+A `@p` (pronounced *pat-pee*) is a name like `~zod` or `~lodleb-ritrul` composed of pronounceable, three-letter phonemic elements like `zod`, `lod`, `leb`, `rit` and `rul`. Shorter names, such as `~zod` and `~marzod`, are assigned to ships with special duties on the Arvo network ([stars and galaxies](@/docs/concepts/galaxies-stars-and-planets.md), respectively. Longer names like `~palfun-foslup` are identities for typical users.
139137
140−A `@p` (pronounced *pat-pee*) is a name like `~zod` or `~lodleb-ritrul` composed of pronounceable, three-letter phonemic elements like `zod`, `lod`, `leb`, `rit` and `rul`. Shorter names, such as `~zod` and `~marzod` are assigned to ships with special duties on the Arvo network ([stars and galaxies](@/docs/concepts/galaxies-stars-and-planets.md), respectively. Longer names like `~palfun-foslup` are identities for typical users.
138+These names map directly to a corresponding number in the urbit address space. Galaxies occupy the 8-bit address space, so any galaxy is actually a number between zero and 255. Stars occupy the 16-bit address space, and planets occupy the 32-bit address space.
141139
142−These names are pre-generated because they map directly to a number in the urbit address space. Galaxies occupy the 8-bit address space, so any galaxy is actually a number between zero to 255. Stars occupy the 16-bit address space, and planets occupy the 32-bit address space.
140+### Can I change my `@p`? {#change-my-@p}
143141
144−### Can I change my `@p`? {#azimuth-6}
142+Unfortunately not, since there is a 1:1 mapping between name and point.
145143
146−Unfortunately not, there is a 1:1 mapping between name and point.
144+### How do I get an identity? {#get-an-identity}
147145
148−### How do I get an identity? {#azimuth-7}
146+You can either find someone to give you one, or try an ERC-721 (NFT) exchange (Google or Twitter should help you with this). This will probably involve a purchase and a transfer to an Ethereum address that you own. We recommend using [Bridge](https://github.com/urbit/bridge/releases) to access the address that the point is transferred to.
149147
150−Find someone to give you one. This will probably involve purchasing one and having it transferred to an Ethereum address that you own. We recommend using our [Bridge](https://github.com/urbit/bridge/releases) software to access the address that the point is transferred to.
148+If you don't want to use Bridge, a tool like [Etherscan](https://etherscan.io) will allow you to execute functions in the [azimuth.eth](https://etherscan.io/address/azimuth.eth#code) contract.
151149
152−### How do I send an identity to someone else? {#azimuth-8}
150+### How do I transfer an identity to someone else? {#transfer-identity}
153151
154152Access the Ethereum address that holds the point you wish to transfer via [Bridge](https://github.com/urbit/bridge/releases).
155153
156−### What is the best way to access Azimuth? {#azimuth-9}
154+### What is the best way to access Azimuth? {#access-azimuth}
157155
158−We recommended using [Bridge](https://github.com/urbit/bridge/releases) for all Azimuth-related operations. It’s great for managing your points, as well as for viewing information about points you don’t own. We have seen publicly hosted versions of Bridge online and we do not recommend using these websites for security and privacy reasons.
156+We recommended using [Bridge](https://github.com/urbit/bridge/releases) for all Azimuth-related operations. It’s great for managing your points, as well as for viewing information about points you don’t own.
157+
158+We have seen publicly hosted versions of Bridge online. We strongly recommend avoiding these websites as they may compromise your security and privacy.
159159
160160## Urbit HD Wallet
161161
162−### What is the Urbit HD Wallet? {#wallet-1}
162+### What is the Urbit HD Wallet? {#urbit-hd-wallet}
163+
164+The Urbit Hierarchical Deterministic (HD) Wallet is a custom Ethereum wallet based on BIP39 and BIP44 – the same underlying technology used by wallet providers like Ledger, Trezor, Metamask, and MyEtherWallet. You can think of the Urbit HD wallet as a wallet of wallets, which lets you keep a single passphrase for all of your Azimuth keys. Azimuth uses multiple keys with different capabilities – a bit like permissions – so that you can keep the more valuable keys in cold storage while keeping less valuable keys, used in day-to-day operation, more easily accessible. If you're only operating a planet, you shouldn't have to worry this: you can simply think of your "master ticket" as the password to your Azimuth point. If you're operating a star or galaxy, the Urbit HD Wallet allows you to implement a multi-tier key custody scheme.
165+
166+To learn about the specifics, check out our [HD Wallet documentation](@/docs/concepts/azimuth.md#the-urbit-hd-wallet) and the [Urbit HD Wallet Spec (UP 8)[https://github.com/urbit/proposals/blob/master/008-urbit-hd-wallet.md].
163167
164−The Urbit Hierarchical Deterministic (HD) Wallet is a system that uses public-key cryptography to secure the ownership of Urbit assets. This means that the wallet system uses public/private key-pairs to make sure that only you have access to it. Such a key-pair has two components: a public key that may be disseminated widely, and a private key that only the owner should know. The former should be treated like a login, and the latter should be treated like a password.
168+### What is a master ticket? {#master-ticket}
165169
166−The Urbit HD Wallet is different from cryptocurrency wallets that you may be familiar with. The Urbit HD Wallet is not a single Ethereum key-pair that holds full power over its assets, but a system of many related Ethereum key-pairs that have distinct powers. To learn about the specifics, check out our [HD Wallet documentation](@/docs/concepts/azimuth.md#the-urbit-hd-wallet).
170+The "master ticket" is the entropy seed from your other Azimuth keys are derived. It should be treated like a master password: **you should never share it with anyone, and you must store it very securely (see our practices below).** This ticket is used to derive the Ethereum wallet that holds your ownership keys, your Arvo key – used to boot your Urbit – and the other keys associated with your Azimuth point. You’ll have a ticket if you used the Urbit Wallet Generator or claimed a ship on our hosted version of Bridge.
167171
168−### What is a master ticket? {#wallet-2}
172+If you're operating a planet, you can use your master ticket to authenticate with Bridge.
169173
170−In the context of the Urbit HD Wallet, master ticket is the entropy seed from which all of your other keys are derived. It should be treated like a master password: **you should never share it with anyone, and you must store it very securely (see our practices below).** This ticket can derive your ownership address and all of your proxy keys. You’ll have a ticket if you used the Urbit Wallet Generator or claimed a ship on our hosted version of Bridge.
174+### What is an ownership address? {#ownership-address}
171175
172−### What is an ownership address? {#wallet-3}
176+An ownership address is an Ethereum address that owns one or more of your Azimuth points. The Urbit Wallet Generator creates one Urbit HD Wallet and associated addresses for each of your Azimuth points. Using ownership key associated with your ownership address, you can transfer points to other people, meaning that it’s very important to store securely.
173177
174−An ownership address is an Ethereum address that has full rights over points assigned to it. It can transfer points to other people, meaning that it’s very important to secure its associated private key.
178+### What are proxies? {#proxies}
175179
176−### What are proxies? {#wallet-4}
180+Proxies are seeds derived from your master ticket used to generate sub-wallets, which are in turn used to generate keys that have the ability to execute different Azimuth functions associated with your Azimuth point. Proxies generally have restricted capabilities than your ownership seed. These capabilities include: spawning child points, voting, and setting networking keys.
177181
178−Proxies are Ethereum addresses that can be thought of as sibling sub-wallets of your ownership address. They are meant to be used much more often than the ownership address, and have more restrictive, less valuable rights than the ownership address. These rights include spawning child points, voting, and setting networking keys.
179−- Management Proxy: Can configure or set Arvo networking keys and conduct sponsorship related operations.
180−- Voting Proxy: Galaxies only. Galaxies are the part of the galactic senate, and this means they can cast votes on new proposals including changes to the Ecliptic.
182+- Transfer proxy: Can transfer your point to another Ethereum address.
181183- Spawn Proxy: For stars and galaxies only. Can create new child points.
184+- Management Proxy: Can configure or set networking keys and conduct sponsorship related operations.
185+- Voting Proxy: Galaxies only. Galaxies are the part of the galactic senate, which means they can cast votes on new proposals including changes to the "Ecliptic" contract, which defines the operations of Azimuth.
182186
183−### What are seeds? {#wallet-5}
187+### What are seeds? {#seeds}
184188
185−All Ethereum key-pairs in the Urbit wallet system, including proxies, are produced by 128-bit values called seeds. These seeds are yours alone. An ownership key key-pair is derived from an ownership seed. Also derived from the ownership seed are various proxy seeds, which proxy key-pairs are themselves derived from.
189+All Ethereum key-pairs in the Urbit wallet system, including proxies, are produced by 128-bit cryptographically random values called seeds. These seeds are the equivalent of the BIP39 mnemonic of an Ethereum wallet. These seeds are yours alone. An ownership key pair is derived from an ownership seed, and likewise the various proxy key pairs, are generated from their respective proxy seeds.
186190
187−### What does it mean to “set public keys”? {#wallet-6}
191+For detailed information, see the [Urbit HD Wallet Spec (UP 8)[https://github.com/urbit/proposals/blob/master/008-urbit-hd-wallet.md].
188192
189−This means registering the public keys of your point's encryption and authentication keys (together known as "networking keys") with Azimuth, so that others can discover them. The corresponding private keys can then be used to, for example, run a ship on the Arvo network.
193+### What does it mean to “set public keys”? {#set-public-keys}
190194
191−You want to reset these keys if they are compromised, and periodically for maximum security.
195+This means registering the public keys of your point's encryption and authentication key pairs (together known as "networking keys") with Azimuth, so that others can discover them. The corresponding private keys can then be used to, for example, run a ship on the Arvo network.
192196
193−### What do I do if I want to own multiple points? {#wallet-7}
197+You want to reset these keys if they are compromised, or if your ship has sunk. This is of little practical significance today, but resetting your networking keys resets your relationship with other ships on the network.
194198
195−We recommend using different HD Wallets for each point. You are able to assign any number of points to a single Ethereum address, however.
199+### What do I do if I want to own multiple points? {#multiple-points}
196200
197−### How should I take care of my Urbit HD Wallet? {#wallet-8}
201+We recommend using different HD Wallets for each point. You are able to assign any number of points to a single Ethereum address, however, since they are just ERC-721 tokens.
202+
203+### How should I take care of my Urbit HD Wallet? {#custody}
198204
199205Urbit points have accompanying security realities that must be taken seriously. Cryptographic assets are unique among things of value, because all of the responsibility for keeping those assets safe rests with the party that owns them.
200206
201−But the nature of decentralization means that there is no authority that has the power to restore any lost or stolen wallet. Neither can anyone force you to follow good security practices. At most, they can give you recommendations. **Remember:** if critical items, such as your ownership key, are lost or compromised, your assets are likely gone forever.
207+The nature of decentralization is such that there is no authority that has the power to restore any lost or stolen wallet. Neither can anyone force you to follow good security practices. At most, they can give you recommendations. **Remember:** if critical items, such as your ownership key, are lost or compromised, your assets are likely gone forever.
202208
203209Below we list some good practices for storing keys, strictest first. Higher-value assets should be secured with stricter measures.
204210
205−**Security Tier 1: Cold Storage**
211+#### Security Tier 1: Cold Storage*
206212
207213Cold storage refers to any method in which secrets are stored in a way that is not accessible to any network. Cold-stored keys should only ever be generated offline.
208214
209215Cold storage media options:
210216- Printing the secret on a piece of paper. However, paper wallets are vulnerable to various forms of physical damage, such as rot, water damage, smoke, or fire. Laminating the paper can mitigate some of these risks, but the lamination can potentially trap moisture. Make sure that you trust the printer: some have memory and network connections.
211−- Storing the secret on a brand-new USB stick or hardware wallet that is never connected to a networked machine.
212−- Engraving the secret on a strip of stainless steel. This medium is resistant to both water damage and fire damage.
217+- Storing the secret on a brand-new USB stick or hard drive that has never been connected to a networked machine.
218+- Storing the secret on a hardware wallet like Ledger or Trezor.
219+- Engraving the secret on a strip of stainless steel. This medium is resistant to both water and fire damage.
213220
214221Places to store your cold-storage media:
215−- A hidden safe in your home.
216−- A safe-deposit box at a bank.
217222
218−It’s a good idea to store your keys redundantly; for example, on both a USB stick and a piece of paper in the safe, in case one of those methods fails. If you deem a key to be valuable enough, you can **shard** it into thirds (or other splits) and store each third in secure, geographically distributed locations.
223+- A hidden safe in your home
224+- A safe-deposit box at a bank
225+
226+It’s a good idea to store your keys redundantly; for example, on both a USB stick and a piece of paper in the safe, in case one of those methods fails. If you deem a key to be valuable enough, you can **shard** it into thirds (or other splits) and store each third in secure, geographically distributed locations. Urbit HD wallets for galaxies automatically provide a 3-way sharded master ticket.
219227
220−**Security Tier 2: Hardware Wallet**
228+#### Security Tier 2: Hardware Wallet or Paper Wallet
221229
222230A hardware wallet is a digital storage device that’s purpose-built to store cryptographic secrets. They are unaffected by typical key-stealing malware, and have built-in security mechanisms that other digital devices lack. Do research and make sure that you are buying an authentic device manufactured by trustworthy, technically competent security experts with a good reputation. Trezor and Ledger are two popular brands of hardware wallets.
223231
224−At this tier, it’s permissible to connect a hardware wallet to your networked machine.
232+A "paper wallet" is a physical medium printed or engraved with a secret. These are resistent to network attacks, but have the downside that the secret must be entered into a computer by hand, exposing the user to attacks from malware and evesdroppers.
225233
226−**Security Tier 3: On Your Computer**
234+#### Security Tier 3: On Your Computer
227235
228236This tier includes any method where secrets are stored on an everyday computing platform. Some such methods are:
229237
230−- Encrypted PDFs containing a secret on your desktop’s drive.
231−- Storing secrets on a cloud account protected by multi-factor authentication.
238+- Encrypted PDFs containing a secret on your desktop’s drive
239+- Storing secrets on a cloud account protected by multi-factor authentication
240+- Storing secrets in a password manager
232241
233242This method is risky for a number of reasons. Networked computers can contain malware. Computers that see common use are also prone to crashes and data loss. Storing secrets on cloud accounts mitigates the risk of data destruction, but it exposes a much larger attack surface to malicious actors.
234243
235244For all of these reasons, make sure that you only use Tier 3 methods for the storage of low-value secrets.
236245
237−### I have a galaxy or star with lockup conditions. How does this work? {#wallet-9}
246+### I have a galaxy or star with lockup conditions. How does this work? {#lockup-conditions}
238247
239248There are two kinds of release schemes for locked up assets: linear and conditional.
240249
241−In either scheme, you start out being able to take one star out of lockup, regardless of the terms set around the lockup as a whole. This way, you get to participate with a star right away. Become useful!Go do something cool!
250+In either scheme, you start out being able to take one star out of lockup, regardless of the terms set around the lockup as a whole. This way, you get to participate with a star right away. Become useful! Go do something cool!
242251
243−If your lockup involved a galaxy, all its stars will be locked up, but you will have immediate, lock-free control of the galaxy. You will likely need it to use that star.
252+If your lockup involved a galaxy, all of its stars will be locked up, but you will have immediate, lock-free control of the galaxy. You will likely need it to use that star.
244253
245254Note that the "releasing" of stars just means that they become available for you to claim. They don't automatically get transferred to you, you have to withdraw them from the appropriate lockup contract.
246255
@@ -250,51 +259,51 @@ Conditional release is a bit more complicated. If your stars are in conditional
250259
251260## Arvo
252261
253−### What is Arvo? {#arvo-1}
262+### What is Arvo? {#what-is-arvo}
254263
255−Arvo is the Urbit operating system. Unlike conventional operating systems, it’s functional and deterministic. Arvo is written in Hoon, our purely functional programming language.
264+Arvo is the Urbit operating system, and also the name of the operating system's kernel. Unlike conventional operating systems, it’s functional and deterministic. Arvo is written in Hoon, our purely functional programming language, which compiles to Nock, a compact bytecode language.
256265
257−Instances of the Arvo operating system, called ships, communicate as peers on what we refer to as “the Arvo network.” The Arvo network succeeds where other peer-to-peer networks have failed. Using Azimuth, Arvo ships can prove their identities to one another.
266+Instances of the Arvo operating system, called ships, communicate as peers on what we refer to as “the Arvo network.” Using Azimuth, Arvo ships can prove their identities to one another.
258267
259−### What is unique about Arvo? {#arvo-2}
268+### What is unique about Arvo? {#what-is-unique-about-arvo}
260269
261−Arvo is much different from other operating systems because of its determinism. Processing in the system happens in a unique way: when an event happens, a transition function takes that event and the old state of Arvo, and then produces an effect and a new state of Arvo. To visualize:
270+Arvo is quite different from other operating systems in many ways, but notably because it's completely deterministic. Processing in the system happens in a unique way: when an event happens, a transition function takes that event and the old state of Arvo, and then produces an effect and a new state of Arvo. To visualize:
262271
263272[event, old state] -> [effects, new state]
264273
265−Thus, all events are permanently logged in the system, and you can always go back and see the state of the system at any point in time.
274+All events are logged to disk, so you can always restore the system to a previous point in time.
266275
267−### How is Arvo connected to Ethereum? {#arvo-3}
276+### How is Arvo connected to Ethereum? {#arvo-ethereum}
268277
269−When an Arvo ship (instance) is started for the first time, you must use a key-file containing the private keys for your Azimuth point's networking keys. Azimuth uses the Ethereum blockchain as its decentralized ledger.
278+When an Arvo ship (instance) is started for the first time, you must use a "keyfile" containing the private keys for your Azimuth point's networking keys. Azimuth uses the Ethereum blockchain as its decentralized ledger.
270279
271280See our [Getting Started](@/docs/getting-started/_index.md) guide to learn how to get your ship onto the Arvo network.
272281
273−### Will the Arvo network survive if Ethereum dies? {#arvo-4}
282+### Will the Arvo network survive if Ethereum dies? {#if-ethereum-dies}
274283
275−Yes. It would be annoying, but Azimuth would be ported to another kind of decentralized ledger.
284+Yes. It would be annoying, but Azimuth would be ported to another decentralized ledger.
276285
277−### How do I install Arvo? {#arvo-5}
286+### How do I install Arvo? {#install-arvo}
278287
279288Check out our guides [here](@/docs/getting-started/_index.md).
280289
281−### How do I use Arvo? {#arvo-6}
290+### How do I use Arvo? {#use-arvo}
282291
283292The [Using](@/docs/using/_index.md) section of the documentation will help you out.
284293
285−### How do over-the-air updates work? {#arvo-7}
294+### How do over-the-air updates work? {#over-the-air-updates}
286295
287−Your sponsor, a star or galaxy that your ship “lives” under, may send you new source code for your system. When you receive new source code from your sponsor, your system recompiles itself using that code, performs any necessary data migrations, and keeps running. Ideally this happens seamlessly without the user even noticing, although there is sometimes a slowdown while rebuilding the system from source.
296+Your sponsor, a star or galaxy that your ship "lives under", may send you new source code for your system. When you receive new source code from your sponsor, your system recompiles itself using that code, performs any necessary data migrations, and keeps running. Ideally this happens seamlessly without the user even noticing, although there is sometimes a slowdown while rebuilding the system from source.
288297
289−### What is Landscape? {#arvo-8}
298+### What is Landscape? {#what-is-landscape}
290299
291−Landscape is an experimental Arvo web interface that includes social functions such as chat and publishing. You can access Landscape by navigating to `http://localhost` or `https://your-planet.arvo.network`, where `your-planet` is your running ship, connected to the Arvo network.
300+Landscape is an experimental Arvo web interface that includes social functions such as chat and publishing. You can access Landscape by navigating to `http://localhost:PORT`, where PORT is typically 80, 8080, or 8081 (check your boot messages).
292301
293−### I have a point, now what? {#arvo-9}
302+### I have a point, now what? {#now-what}
294303
295304Follow our guide on how to boot a ship [here](@/docs/getting-started/booting-a-ship.md).
296305
297−Get on the [mailing list](/../#mc_embed_signup). Learn [Hoon](@/docs/learn/hoon/_index.md).
306+Get on the [mailing list](/../#mc_embed_signup). Learn [Hoon](@/docs/learn/hoon/_index.md). Sign up for [Hoon School](@/hoonschool.md).
298307
299308## Grants
300309
@@ -362,4 +371,4 @@ We recommend storing each star in its own in its own Ethereum wallet. The privat
362371### Can I delegate a bounty or proposal to someone else? {#grants-14}
363372
364373No. Not unless explicitly authorized by Tlon.
365−[Make stuff](@/docs/getting-started/contributing.md).
374+[Make stuff](@/docs/getting-started/contributing.md).