Damus
Open in Damus
oblick · 5d
Short version: running SkySigner from a USB stick protects the key at rest, not in use. Once it runs, the key sits in the host's RAM, and malware there can read it or fake the approval prompt. A boota...
 SkyLords profile picture
SkyLords @SkyLords
That is a useful explanation. I have already been experimenting with NIP-46 in SkySigner but the USB idea is something I have only recently started exploring. I understand that running it from a USB drive would not provide the same security as a dedicated signing device with its own screen and confirmation button. I am especially interested in the ESP32 projects you mentioned and will take a closer look at them. The NIP-49 suggestion is worth investigating too. For now I am trying to understand what security improvements I can realistically achieve with the hardware I already have rather than buying another device.
1
oblick · 4d
With what you already have, the best upgrade is often an old Android phone: factory reset it, install only Amber, and use it as your NIP-46 signer. You get a separate screen and an approve button for free. On the PC side: keep the key encrypted at rest (NIP-49), approve each request manually, and g...