Bitcoin singing devices must check the firmware signature at boot.
Not enough users check every download, NO user will check it before every boot.
This is a security anti-pattern, a terrible UX regression.
Bitcoin singing devices must check the firmware signature at boot.
Not enough users check every download, NO user will check it before every boot.
This is a security anti-pattern, a terrible UX regression.
What are you talking about?
Great feature on coldcard, thank you.
I'm comfortable with validating the nostr:nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqpz4mhxue69uhk2er9dchxummnw3ezumrpdejqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezuamfdejs92xe5k firmware before use, then loading that into the device memory. I also like to keep the validated OS version on a read-only CD backup.
Good luck, and I hope all other users too.
Yeah, a firmware on βaβ raspberryPi can be validated, as nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 said. Good luck