Cause it’s plugged into your computer via USB. A malicious Trezor Suite update could potentially swipe your seed.
Air-gapping offers incredible peace of mind.
Discussion
Going to ask what I suspect is not a great question, but doing it anyway… Coldcard does USB and air-gapped. Is there conventional wisdom on how much security the SD gives you above and beyond USB?
Never being connected is obviously preferable. But I’m sure the devs wouldn’t do it if it was an outsized liability.
Just learning and curious 🙏
This presentation by one of the guys at Bitbox claims air-gapping offers little practical benefit:
As far as firmware updates goes, though, it gives me incredible peace of mind doing it via SD compared to USB, since even if the firmware update is malicious, it can’t extract your seed remotely if it’s air-gapped.
Awesome + informative, thank you 🙏
I think there is a clear benefit for Airgap, even moreso after watching his presentation.
Especially the benefit of QR signing.
Only so much data can be fit into a QR code.
In his defense, there was no product available that effectively signed QR transactions as smoothly as SeedSigner does today or even a year or two ago.
He did this examination in 2020-21.
Followed. Great handle BTW Anonsequitur
You spelled CuckCard wrong