Avatar
semisol
52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd
👨‍💻 software developer 🔒 secure element firmware dev 📨 nostr.land relay all opinions are my own.

would be great if they existed

and unfortunately NDAd secure elements are way ahead because they have been doing this for decades

and that’s what I’m going with

What changes?

Except that you know someone tried to access it and failed, and that’s what the failed PIN counter is for

Yeah, I said HWWs.

Also one seedsigner can handle all keys.

What to use: your choice and threat model

It can’t lol

Welcome to podcast-sponsored HWW manufacturer price gouging where you’ll spend $750+

The best multisig protection model is that physical time and distance requirements.

No duress PIN will protect you when they can extract your multisig descriptor from your laptop or a physical backup and check, or know your amount of holdings.

A wipe/brick feature will be as good as giving no PIN.

Physical backups will always be a weakness too.

Also, it is secure enough that it doesn’t need a brick or wipe PIN to resist attacks unlike some other HWWs nostr:note135yemgzr88wgw2ufmpw22avy7csn32nsdq87sa3c8hcmwz4pkgqszwhlyv

What if a 3-of-5 multisig was only $200? With HWWs that is.

video infrastructure is a complex topic

to make it work requires no effort with an MP4 on a server

to make it work WELL requires optimizations, and money for that to be usable (CDNs, servers for transcode and similar)

even one second of buffering can impact viewing experience for a normie

instead of funding ecash wallets maybe someone willing to work on the real problems should be funded

NXP

I cannot disclose much of the approach yet

Nostr lacks in secure identity nostr:note1r7kn47mslfrcqtyezt448rzy0mplwekagyr2ckvp7qkfwnz4wh7qqhgun3

we’re early is a way for devs to distance themselves from the fact that they:

- can’t make proper UX for anything

- can’t make good key management either

- are focusing on the wrong thing

- and are incompetent nostr:note10t6v0chxu20tedvl8u3lvp23cn6qj5q8s8q22ajen6tahsdtfz6ql5s3ys

No. Making my own witn a proper SE at a proper price point that won’t make your wallet cry for multisig.

Depending on your use case either of these could work

I’m working on an HWW because I’m done with all the shit ones.

They sell you an assembled and software loaded in China piece of garbage with “secure elements”. Those “secure elements” are meant for IoT, are cheap, and don’t have many protections and they have been broken over and over and over (example, Mk4 is broken).

Source: I did my research.

They actually don’t.

The average consumer only cares about 1 thing: convenience. Optimize for that or fail

If your experience is subpar in even 1 way your product is DoA