Replying to Avatar JeffG

nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 has thoughts. 😅

For me personally, after talking to LOTS of bitcoiners who are deeply technical and very committed to open source AND still will only use a Coldcard, I'm never going to use anything else.

Call it social heuristics if you want, but I guarantee that 99.9% of bitcoiners (me included) have no idea how complicated it is to keep keys properly secure. If "verifiable source" is the tradeoff required, so be it.

It is written there already. Use Trezor, the real open source hw wallet.

Reply to this note

Please Login to reply.

Discussion

With easily available tools you can extract keys from a trezor one in minutes, this attack has been publicly demonstrated many times. https://m.youtube.com/watch?v=Y1OBIGslgGM

You can do the same with Coldcard, it's just not published because of NDAs.

"I" can't, can you? If yes then how?

So use passphrases and/or upgrade to a safe 3 or 5.