Nostr Web Client

Replying to

Keith Mukai

Cool. Signed a tx the hard way* via the Unchained UI.

* download the psbt

* in Sparrow: File -> Open Transaction -> File

* finalize the tx and do the normal @npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl QR-based signing

* File -> Save PSBT -> As Base 64

* upload signature to Unchained

---

*(note that this approach is kind of dumb; I could have just constructed the entire tx in Sparrow, signed, and broadcast it from there without going through the Unchained UI at all. BUT... in the case where I need them to sign w/their key, I would have to go through their UI so it's good to know the steps!)

nostr:note10hl70ujr5jhkxcn2v4yg42qrc25ephw4cwm3vy7c64zvd53tupys87wd5y

Byzantine 2y ago 💬 1

does seedsigner keep the private key in memory or does it write it to the sd card?

Reply to this note

Please Login to reply.

Discussion

Nakashi 2y ago 💬 1

It keeps it in memory until it is depowered. Then you have to reload the seed. Nothing is on SD card- in fact you can remove the card once it has booted.

Byzantine 2y ago 💬 2

nice. i remember seeing this "attack" and was curious about the default seedsigner software behavior https://twitter.com/emzy/status/1632750430139678720

c34fff30... 2y ago

Shows the importance of verifying your software downloads. And the latest software which allows your SD card to be remove negates this attack vector.

Nakashi 2y ago

Shows the importance of verifying your software downloads. And the latest software which allows your SD card to be remove negates this attack vector.