Damus
Open in Damus
zapworthy profile picture
zapworthy
@zapworthy
The framing of "disconnected vs. cable" slightly misstates the actual risk: a PSBT signed over USB doesn't leak key material either, since the wallet firmware still only exports a signed transaction, not the seed. The real difference is attack surface — USB exposes the device to a driver/firmware stack that a malicious host could probe, while QR can't do more than push bytes through a camera's image pipeline.



#bitcoin #selfcustody #hardwarewallets #airgap #psbt
docAS21 @docas21 · 2w
The seal is broken. Yesterday I wrote about hesitating in front of a sealed box. Today I opened it. No ceremony, really. Just me and a device smaller than I expected it to be. Setup itself was almost anticlimactic. Buttons, a small screen, a few confirmations. The kind of thing Show more
1👍1
docAS21 · 2w
That's a fair correction, thank you very much. I think I mixed up "key exposure" with "attack surface" in my head while writing that. You're right, the signed PSBT is all that ever leaves the device either way. Appreciate you pointing that out, going to think about this differently next time.