Security is a blanket term, I'm discussing one aspect - privacy.
Remember it's more about having access to your shit at all times - why would you want all that shit on your EDC anyways?
Just makes sense to use open source software vis a vie privacy concerns like tracking.
No one (smart) is advocating you download Google apps or use the graphene device for shenanigans.
One dedicated Bitcoin device.
Purposefully setup to protect your privacy.
I have most of my BTC in cold storage. Why would I not want to be able to access a million sats in hot storage and my Lightning wallet on my edc?
I definitely want to access some of my bitcoin and especially my LN wallet on my edc. I do not want to have to boot up a second device just to pay a lightning invoice.
I'm obviously referring to cold storage & management of access to your long term stack.
Well I cannot access my cold storage on my phone. I have to plug it in to my PC
It's better security practice to set it up with graphene and only use it that way though.
You can even do this on a pixel tablet if you prefer.
How could that possibly be better than doing it on Linux with disk encryption?
Way better, everything is cut off except for 1 application.
Your computer is a security nightmare from so many angles and not as concealable or portable.
I can drop my phone in a faraday bag and then only use it on public internet sources away from anything tied to my identity.
Graphene x Bluewallet x SeedSigner
Open Source from start to finish.
Airgapped.
What else do you need?
You think your phone is more secure than a Trezor or Passport? Really?
You have completely misunderstood the setup.
SeedSigner is the airgapped signing device.
That isn’t any more secure than a regular airgapped wallet / multisig
It is though, and definitely better than using a HWW that has so much supply chain risk like your trezor.
SeedSigner uses generic non BTC related parts.
A sandboxed phone w graphene is more secure than pretty much any Linux setup a normal person will execute.
What supply chain risk? The Trezor has tamper evident packaging.
Say that again to yourself AFTER you build a seedsigner
Ancap - the graphene device substitutes your computer. The internet connected device must always also be secure. Not just the HWW.
The trezor is subject to supply chain attack. No matter what bag it comes in. All the centralized HWW's are. So, do multi vendor on your multi-sig.
I’m sorry dude but the idea that a smartphone is more secure than an airgapped hardware wallet like a Passport is the most retarded thing I’ve ever heard a bitcoiner say.
These wallets have checks that prove they were not tampered with. How do you think a supply chain attack is more likely than a security vulnerability in GrapheneOS
Dude you're being a fucking regard
The phone is in place of your computer, not a hardware wallet.
You use the hardware wallet, airgapped preferably, with an internet connected device.
That's either a computer, tablet, or phone.
You literally said your setup is better than a HWW. If you are using an airgapped wallet, then the security of the internet connected device literally does not matter.
No I didn't, I said it's better than using Linux on your computer.
Go re read the thread my guy.
Phone or Computer x Blue Wallet x SeedSigner
Airgapped = SeedSigner.
Get it now?
Phone or computer x foundation passport
SeedSigner was the reference point for that take
That’s not airgapped. If the device connects to the internet, it isn’t airgapped. Your device is broadcasting the transaction
it's air gapped on Graphene via Permissions
So how is the transaction broadcast? This is not cold storage. It is not as secure as a passport.
Apps can ignore permission settings, or use hidden permissions. Huge part of why I like have root on Android
is that proven on GrapheneOS? If so....kinda ruins their entire schtick
Idk I just know it happens on LineageOS. So far it’s only been google speech recognition, it gains mic permission even though I have it disabled in the settings. I know because a root app called bouncer (auto revokes permissions), will ask if I want to revoke the mic permission in speech recognition randomly, despite having the permission denied in settings.
Many apps have a permission called “access restricted settings” and many can read device state, meaning they can read your device ID
