Building an FAQ for Passport Prime. I need your help 👇
What questions do you have for me? Can be anything from orders, timelines, features, hardware, security, connectivity etc
I won't answer in the comments, just using your input to populate the FAQ.
Why should anyone upgrade to this ?
Will it support Silent Payments?
Normally a small code base is always better. So how do all these additional security features, increase potential attack vectors/risks?
The backup cards. Can they be restored somewhere else. A guide on using all functions without passport
When does mine arrive : )
What mitigations are there against a $5 wrench attack? Carrying around a single device that stores private keys, online account credentials and other sensitive material seems pretty risky.
I imagine these are pretty easy assumptions for some, but:
- How are OS / App updates managed?
- What is the Prime's battery life?
- What is the security model for apps? (Maybe explain App signing, sandboxing, permission management, available App APIs?)
- How is disk encryption implemented?
- My PC doesn't have Bluetooth, can I still use Prime?
- Can I use Prime airgapped?
- What protections are there against physical attacks?
- I already have a HWW, is Prime still useful?
- How does Stateless Mode work?
- What makes Prime better than a standard U2F Key (i.e. YubiKey)?
- What makes Prime better than a TOTP password manager on your phone?
- What is the feature roadmap for Prime?
This ☝️
- Is a duress or brick me pin implemented?
- Can I create own entropy for seed generation (similar to seedsigner)?
- can I use prime without envoy? What are the downsides if I do?
What would worry me, all your eggs in one basket. So if lost or stolen, what's the back up protocols to recover?
1) technical specs of quantum bluetooth
2) why is it more secure than AES or other encryption
3) Is it actually quantum resistant encryption or was that word used for marketing purposes?
I like the device, great work to you all, but the use of the quantum wording made my eyes roll tbh
It's sounds pretty sturdy from the materials used but how indestructible is it? How far have you drop tested it from and could it survive being driven over etc?
Are all elements interconnected? E. G. Is the Bluetooth element connected to the secure storage?
The device has many attack vectors, are there any airgaps in the device to limit something from being compromised?
i think the largest issue you're going to deal with is the "something that stores your private keys should do nothing else"
so this is likely not going to be a main cold storage device.
but to address that concern
wondering if there are any 3rd party audits being performed on the finished product?
- How many secure elements is it in a Passport Prime?
- Please provide information about the secure element(s)
From what I found online it’s pretty solid. 1 FAQ would be What are the passport prime limitations for advanced bitcoin users?
How can I restore from the 3 backup cards if foundation company no longer exists (knock on wood😉)
I'm curious about how the key card backup system works. Will this system ensure that the private keys will never touch the phone? When recovering the wallet how will that work? I got the impression that you would have to tap one of the cards to your phone, causing the seed phrase to be revealed on the phone.
Also going into more on how the Bluetooth system works. Will the device have a camera or is it all bluetooth now?
