Cyph3rp9nk on nostr

Open in Damus

@Cyph3rp9nk 1767357816

The only wallets that meet this requirement are those that do not have any secure element.

It is unfortunate that influencers who are not cryptographers, or even computer scientists, are recommending and analyzing hardware wallets.

A Trezor T (despite its vulnerability) with a passphrase of more than 128 bits of entropy is more secure than any hardware wallet with a secure element and a PIN.

Whichever HWW you use, you have to realize that you must use a seed + passphrase with more than 128 bits of entropy, and therefore a secure element becomes unnecessary as well as inadequate because they sell it to you as if a passphrase is not necessary, and on top of that you have to trust something that is a black box, such as the secure element.

It's incredible how much nonsense I have to listen to in this Bitcoin space.

Cyph3rp9nk @Cyph3rp9nk · 31w

Kerckhoffs' cryptography principle (also called Kerckhoffs' desideratum, assumption, axiom, doctrine, or law) was stated by Dutch cryptographer Auguste Kerckhoffs in the 19th century. The principle states that a cryptosystem must be secure even if everything about the system, exc Show more

136❤️10🤙3👍2♥️1😂1🧡1

Davi Pinheiro · 31w

Quem menos sabe é quem mais compra. Conhecimento é nosso maior patrimônio.

Arándano · 31w

I fully agree on this and I would also like to add the attack vector of being registered as a purchaser in a vendor database, which can be even worst if you define your home address as delivery address. With a #seedsigner or #krux DIY hardware signer, buying the hardware elements from different ven...

observer👁️🌐 · 31w

What is your position on the #Trezor Safe 7 which uses an open source secure element?

satstacker · 1w

Ser, in your view, what is the ‘gold standard’ for seed creation 🙏

So by this logic an old phone with lineage is better than a pixel with grapheneOS

lontivero · 1w

So true. I listened influencers, who are just enthusiastic users, analyzing HWW and ranking them by security. Completely insane. And yes, if you care about protecting your money, a passphrase is necessary.

How about nostr:nprofile1qqsf80gvdu7vhtj88z9srtrvuzevqyc3fh9yczxkufcj6nlhzsz68scpzus8wumn8ghj7un9d3shjtnddaehgu3wwp6kytcpzcs8wumn8ghj7mn0wd68ytn00p68ytnyv4mz7vr3nu5 ?

This is very interesting. Though if one needs to be a cryptographer or computer science to figure out self custody then Bitcoin is just destined to dead end in centralization by career or training level. In that case the current market cap is probably the limit (or too high).

I’m not with you on this crusade. I agree with Kerckhoffs' cryptography principle in theory, but in practice adding a secure element to something that would already have passed Kerckhoffs principle can improve things by requiring sophisticated hardware to attack a device. There is another princip...