Nostr Web Client

That feature is basically the same as 2-of-2 or passphrases, and the problems with 2-of-2 have been pretty well documented by now.

I did my own research and architecturally it is significantly flawed. There are many weak points where you could be getting a backdoored device. The used secure elements are weak and outdated.

“Don’t trust, verify” goes much deeper than reading some marketing claims about “ultra secure” from the vendor and I see too many people falling for it. New Trezor for example is “quantum ready” but any device within the last 15 years is as well.

Personally I’d recommend something like a SeedSigner with a proper multisig and a BitBox maybe.

Marc 2mo ago

Does the BitBox have an air-gapped mode?

Reply to this note

Please Login to reply.

Discussion

Cykros 2mo ago 💬 3

They prefer to write articles about why airgaps aren't as useful as we think.

Stinks of "filters don't do anything."

Airgaps aren't a be all and end all. But they are one element of a solid security strategy, and writing it off is exactly why I'm not a Bitbox customer.

SeedSigner ("the man") 2mo ago

I believe they have written off air gapping as “security theater”.

JackTheMimic 2mo ago

It literally isn't though. Data flow control is not some "nice to have" feature. You, as a human, literally don't know what information is being sent over NFC, Bluetooth, and USB. Unless you use a highly sophisticated hub that is essentially a clone for data passthrough.

I am still waiting on Semisol to give the non "trust me bro" explanation on why these devices are insecure WITHIN their use parameters. Secure elements without a broadcast mechanism, without code that (absent authorization from the owner) diseminates the secret, or a cryptographic flaw making it trivial to brute force, WHAT exactly is nostr:nprofile1qqs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30gpz9mhxue69uhkummnw3ezumrpdejz7qgkwaehxw309askwemj9ehx7um5wghxcctwvshsz9thwden5te0wfjkccte9ejxzmt4wvhxjme0e68ksk referring to?

Marc 2mo ago 💬 1

Nothing is perfect. If the NSA wanted my sats, they could probably break my air-gapped wallets, but I prefer air gapped hardware.

Shug 2mo ago