In addition to being an "I can't buy hardware wallets" option, SeedSigner is also an "I'm not comfortable trusting hardware wallets" option.

Reply to this note

Please Login to reply.

Discussion

My trust is in the protocol, not the way I access it.

You guys planning anti klepto? Seems like stakes are higher with dark skippy and sd card swap attacks

None of the coordinators support anti-exfil so in part it's a chicken and egg problem, but hoping deterministic signature validation is incorporated into the psbt standard, that would be the best ux solution, rather than a second round of QR code exchange. Validating and deploying authentic software takes less than a minute, and we've always been about long term saving with bitcoin with relatively few spends, so card swap attack risk seems overblown when validating software is so fast and simple. With great power comes great responsibility, for those who are willing to assume the responsibility. Also, take a closer look at those emphasizing these issues and their motivations; it speaks to conflicts of interest that you've spoken about.

I can’t find any specs for it so it seems to be vendor proprietary for now. It would need to become a part of PSBTs somehow with SeedSigner’s model.

I had money, and I can relate that others hardware are safe.

But nostr:nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqpz4mhxue69uhk2er9dchxummnw3ezumrpdejqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezuamfdejs92xe5k is a thing that I can build, and trust because I can verify every part. And more important is fun.

Now, I see a time when government will ban hardware from entering the country. nostr:nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqpz4mhxue69uhk2er9dchxummnw3ezumrpdejqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezuamfdejs92xe5k is the secure choice.

You're not zap-able!

Is it possible for Seedsigner to securely validate its own updates? I do it anyway with CL or Sparrow but I'm sure most don't.

Software validation must always be done with another device, validation with Tails being the safest approach. 👍

+ several i know

verified that is