Replying to Avatar DETERMINISTIC OPTIMISM 🌞

Dumb take.

There are a bunch of other attack surface those wallets don't protect you against and there are lots of trade offs.

Second under Mitigations; COLDCARD has always done RFC6979 signatures. That with repro builds are perfectly adequate. jade requires pin servers to be secure that is a huge trade off. Bitbox requires usb, huge trade off.

nostr:note16748fqunfxq63y980gl7me3u7d6zklvg8tscg45fpfw2lhzpv05qw2l5y4
Avatar
Machu Pikacchu 1y ago

COLDCARD is excellent; thank you for your dedication to security.

Question: when someone buys a hardware wallet they provide a shipping address that can later be leaked. Ledger famously leaked customer emails and physical addresses for example. Any tips on mitigating that? Use an alias and ship to your employer’s address?

Reply to this note

Please Login to reply.

Discussion

Avatar
DETERMINISTIC OPTIMISM 🌞 1y ago

Coinkite deletes the shipping information after 90 days, but that's a promise you can't verify.

Best yet, is to use a alias, pay with bitcoin and ship to a pobox or hotel instead. Or buy in person from a reseller.