Hoping to clarify what seems to be a misunderstanding by nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx about how the Pi Zero hardware shapes the nostr:npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl security model.
(see: nostr:npub10uthwp4ddc9w5adfuv69m8la4enkwma07fymuetmt93htcww6wgs55xdlq #320)
I'm not about drama, certainly not looking to increase it.
Please give this a read and hit me back w/any questions:
https://gist.github.com/kdmukai/e270dd1c7b53b8daea4a9fc1ac89847c
What he said about seedsigner security ?
A bitcoiner told me he will never use a seedsigner because it doesn't have any secure element and you have to trust raspberry or the reseller.
For what i've understand seedsigner doesn't need a secure element because they doesn't store private keys + when the key is created or load in the device, he's never connected to internet.
The specific thing I'm referencing / responding to is included in the writeup linked in the original post.
As for what you said, you're correct: there's no attempt to store any secrets in a SeedSigner so it's irrelevant that there's no secure element. The device is never connected to the internet (there is no wifi or bluetooth hardware onboard) and, ideally, it's only ever powered via a usb battery. So no physical connection ever to any internet-connected device.
I read your post on github, very interesting and educational.
