Nostr Web Client

Replying to

ShiShi21m

I personally wouldn't want everything ready to go on my phone that I carry with me in case I lose it.

Graphene is better than iOS in many ways, especially if youre worried about or want active to real privacy.

It's a no brainer

Ancap Revolt 11mo ago

I think in terms of security, Graphene is at best equal to iOS.

And if I lose my phone, it’s locked anyway. They won’t be able to change the password, and I can use my seed phrase to recover my hot wallet, and change my LND credentials to disconnect my alby wallet.

And privacy only exists if you don’t use mainstream apps. If you use Google, google maps, YouTube, X, TikTok, Instagram, Facebook marketplace, or basically any website, you’re being tracked.

One of the big reasons I like having root access is I can disable trackers in apps. You would be surprised how many apps have dozens of trackers.

Reply to this note

Please Login to reply.

Discussion

ShiShi21m 11mo ago

Security is a blanket term, I'm discussing one aspect - privacy.

Remember it's more about having access to your shit at all times - why would you want all that shit on your EDC anyways?

Just makes sense to use open source software vis a vie privacy concerns like tracking.

ShiShi21m 11mo ago

No one (smart) is advocating you download Google apps or use the graphene device for shenanigans.

One dedicated Bitcoin device.

Purposefully setup to protect your privacy.

Ancap Revolt 11mo ago

I have most of my BTC in cold storage. Why would I not want to be able to access a million sats in hot storage and my Lightning wallet on my edc?

I definitely want to access some of my bitcoin and especially my LN wallet on my edc. I do not want to have to boot up a second device just to pay a lightning invoice.

ShiShi21m 11mo ago

I'm obviously referring to cold storage & management of access to your long term stack.

Ancap Revolt 11mo ago

Well I cannot access my cold storage on my phone. I have to plug it in to my PC

ShiShi21m 11mo ago

It's better security practice to set it up with graphene and only use it that way though.

You can even do this on a pixel tablet if you prefer.

Ancap Revolt 11mo ago

How could that possibly be better than doing it on Linux with disk encryption?

ShiShi21m 11mo ago

Way better, everything is cut off except for 1 application.

Your computer is a security nightmare from so many angles and not as concealable or portable.

I can drop my phone in a faraday bag and then only use it on public internet sources away from anything tied to my identity.

ShiShi21m 11mo ago

Graphene x Bluewallet x SeedSigner

Open Source from start to finish.

Airgapped.

What else do you need?

Ancap Revolt 11mo ago

You think your phone is more secure than a Trezor or Passport? Really?

ShiShi21m 11mo ago

You have completely misunderstood the setup.

SeedSigner is the airgapped signing device.

Ancap Revolt 11mo ago

That isn’t any more secure than a regular airgapped wallet / multisig

ShiShi21m 11mo ago

It is though, and definitely better than using a HWW that has so much supply chain risk like your trezor.

SeedSigner uses generic non BTC related parts.

ShiShi21m 11mo ago

A sandboxed phone w graphene is more secure than pretty much any Linux setup a normal person will execute.

Ancap Revolt 11mo ago

What supply chain risk? The Trezor has tamper evident packaging.

ShiShi21m 11mo ago

Say that again to yourself AFTER you build a seedsigner

MarcG 11mo ago

Ancap - the graphene device substitutes your computer. The internet connected device must always also be secure. Not just the HWW.

The trezor is subject to supply chain attack. No matter what bag it comes in. All the centralized HWW's are. So, do multi vendor on your multi-sig.

Ancap Revolt 11mo ago

I’m sorry dude but the idea that a smartphone is more secure than an airgapped hardware wallet like a Passport is the most retarded thing I’ve ever heard a bitcoiner say.

These wallets have checks that prove they were not tampered with. How do you think a supply chain attack is more likely than a security vulnerability in GrapheneOS

ShiShi21m 11mo ago

Dude you're being a fucking regard

The phone is in place of your computer, not a hardware wallet.

You use the hardware wallet, airgapped preferably, with an internet connected device.

That's either a computer, tablet, or phone.

Ancap Revolt 11mo ago

You literally said your setup is better than a HWW. If you are using an airgapped wallet, then the security of the internet connected device literally does not matter.

ShiShi21m 11mo ago

No I didn't, I said it's better than using Linux on your computer.

Go re read the thread my guy.

Phone or Computer x Blue Wallet x SeedSigner

Airgapped = SeedSigner.

Get it now?

Ancap Revolt 11mo ago

Phone or computer x foundation passport

ShiShi21m 11mo ago

SeedSigner was the reference point for that take

ShiShi21m 11mo ago

nostr:nevent1qqsfqfpd6z9k9jp82qnhj4hlefh8ldlk47l75eypnvqaqfx3p3ac6xgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsyg8zyc984uem8w3sqaq3r3zk0y7w7kxj4dput9jmmwm9t7g0juue4spsgqqqqqqslqa3k8

Ancap Revolt 11mo ago

That’s not airgapped. If the device connects to the internet, it isn’t airgapped. Your device is broadcasting the transaction

unknown 11mo ago

it's air gapped on Graphene via Permissions

Ancap Revolt 11mo ago

So how is the transaction broadcast? This is not cold storage. It is not as secure as a passport.

unknown 11mo ago

he would have to enable network permissions to allow it to broadcast......

I think that is his thinking process

Ancap Revolt 11mo ago

That’s what I thought. Sure it’s more secure than my BlueWallet on iOS, but it is far less secure than my Trezor.

Ancap Revolt 11mo ago

Apps can ignore permission settings, or use hidden permissions. Huge part of why I like have root on Android

unknown 11mo ago

is that proven on GrapheneOS? If so....kinda ruins their entire schtick

Ancap Revolt 11mo ago

Idk I just know it happens on LineageOS. So far it’s only been google speech recognition, it gains mic permission even though I have it disabled in the settings. I know because a root app called bouncer (auto revokes permissions), will ask if I want to revoke the mic permission in speech recognition randomly, despite having the permission denied in settings.

Many apps have a permission called “access restricted settings” and many can read device state, meaning they can read your device ID