Worth making a note for #bitcoin as well as guns. Here are my first thoughts about how this affects bitcoin security...

We can assume all other gun safe vendors have similar backdoors and would also comply.

Single sig in a commercial safe cannot be trusted.

Rogue employees are a risk even if you have no valid warrants.

Ultimately I think this only leaves multi-sig with some level of security through obscurity about where the keys physically are.

I think coldcard with a pin wins here if you insist on single sig. You can hide the metal seed backup in a secret location and hope the pin saves you

Ephemeral key systems like seedsigner mean keeping your seed handy in plain text, in that case safe entry means game over.

Passphrases can help too but must be secured in a place and way that safe access does not leak them. Also a place that would not be subject to the same warrant.

Anyone else have points to add?

nostr:nevent1qqs8kek6wdpknftkzwvzts2lf3r64h3a779f7py8vszmfsnyadzlx4cpp4mhxue69uhkummn9ekx7mqzyz37k224f0f8ljnl20mxyuhyhdvaqehj7vts3ne5z4qvk3efl0vyzqcyqqqqqqg9pc9yq

Reply to this note

Please Login to reply.

Discussion

Great points. I think for the most part this does not change anything for normal bitcoin security advice. Single sig in a commercial safe should be fine. Once it does it to a large monetary level, multi sig is a must anyway. To me it mainly highlights the importance of opsec and thinking about all aspects of your physical security.

Yeah, multisig is the antidote to this risk.

One CC in a potentially pwned safe, one hidden under a mountain, one in your safe deposit box. Still need PINs too, like you mentioned.

Also, if you're buying a safe from a store, employees with potential backdoor access shouldn't know that one of their safes are in your house, right?

That's one item you probably don't wanna fill out the owner's registration card for...

No delivery either or the delivery drivers know what is up. I know for a fact moving a safe is a ton of work.