What are folks using as an alternative to google authenticator? They’ve released a new version which gives google an un-encrypted copy of all of your 2fa keys. They did it for ‘migration’ and connivence but it feels like a security nightmare to me.

Why do I like the Jade hardware wallet more and more every day?

Firstly, because it is totally open source, both firmware and hardware, you can build your own Jade.

Secondly, because it doesn't have secure element, but even so the data is strongly encrypted in its chip, making up for Trezor's mistake by having a totally open source architecture and without having to rely on third parties as in the case of hardware wallets that use Secure element.

To make this possible, and to sum it up, the encryption of the seed is done through two signatures, one signature is the pin and the other signature is a remote blockstream server.

In order to extract the encrypted seed from the Jade device, you would need to know the pin, have physical access to the device, and hack the remote blockstream server (Remote PIN Oracle).

You can even set up your own Remote PIN Oracle server if you don't trust blockstream or they stop providing service, but keep in mind that blockstream can't do anything with the key they keep, it is only one of the three parts needed to decrypt the seed.

Third, the possibility of air-gapped transactions.

Fourth, it is the price, much cheaper than the rest of the manufacturers.

Fifth, it is a hardware wallet only Bitcoin and Liquid Network, no shitcoins.

Hmm Revolut just blocked my account...

Beer

Core

Ready for multisig???

#Ledger #Cold-storage

Bamburgh Castle