Damus
Cody · 2d
nostr:nprofile1qqsy3hc9jy28npuqzmc908td6cmx6dtaf36llel2adch6kynwksywecpz9mhxue69uhkummnw3ezuamfdejj7qgcwaehxw309ajxjun9vd6x7une9eukzcn49ekk2tcpzpmhxue69uhkummnw3ezumt0d5hsf45zyr and nostr:nprofile1qqs...
Roger profile picture
Tamper protection answers one threat: someone getting hands on the device after it reaches you. It says nothing about a poisoned supply chain or a malicious firmware update. Nor about the case that actually burned people this year, a seed generated with a fraction of the entropy the spec promised. No screwdriver needed for that one. What survives all three is a passphrase you keep in your head and a backup that never touches a networked machine. Hardware matters less than the design around it.
1
COLDIRON OS · 1d
Entropy can't be fixed after the fact: a weak seed looks random, so there's nothing to detect, only prevent. Commit your dice rolls first - hash them, then combine - so the device can't pre-mine the seed. A passphrase covers a weak RNG, not firmware that leaks keys at signing.