Nostr Web Client

semisol 1y ago

Please fill this short survey if you can related to my in development signer, and renote for visibility.

You can also register for testing for early access + a free signer (only shipping) in what I expect to be late 2025 Q1.

https://forms.office.com/r/CxzzG4Wqam

Reply to this note

Please Login to reply.

Discussion

elsat 1y ago

Its not clear to me what this product is. Do you have a webpage or note describing the product?

semisol 1y ago

It’s explained in the survey. But it’s a smart card.

You can either use it with NFC or the contact interface.

BIP-39 seeds, BIP-32 xprvs or nsecs are supported.

A PIN code of any length with any characters is used for access control.

semisol 1y ago

I have made this more clear and added it to the start of the survey instead of the bottom of the first section.

ben 1y ago

so the smart card holds the private key and the EAL6 certification provides some assurance that the keys are secure?

semisol 1y ago

yes

also, unlike most HWW vendors, proper industry standard software development practices will be employed

frphank 1y ago

I bet Crowdstrike had them too

semisol 1y ago

good point

except that is considerably better than “throw shit at a wall until it sticks” approach that some HWW manufacturers take

though they also do not know how an SE should be properly used

Fryheid 1y ago

It would really help to be able to add comments/clarifying questions to some of the questions and answers

semisol 1y ago

At the end of the survey there is extra comments

Rand 1y ago

t-y already looking

frphank 1y ago

Is this open source.

semisol 1y ago

Unfortunately not, the firmware interface and DPA and fault injection countermeasures are under NDA.

All tooling outside it though will be.

semisol 1y ago

There’s also the issue that you can’t verify whatever the factory may have loaded initially (so all installed “updates” are tampered with by the previous FW) and that I cannot provide the toolchain to compile it even if I share the code

Rand 1y ago

t-y 4 sharing ^ semisol

frphank 1y ago

Hmk. Sounds like a no-go.

frphank 1y ago

An implantable variant would be cool.

https://vivokey.com/apex/

Derek Ross 1y ago

Microsoft Forms? Formstr.app in disbelief.

semisol 1y ago

I see no reason to use Nostr for this, and if Microsoft decides to censor my very simple product survey, I can always self host.

ABH3PO 1y ago

I mean if you're also okay with Microsoft collecting the day of your participants, go ahead, formstr is not perfect yet, but it definitely needs to exist.