Good morning Nostr

It is good to see that many people’s efforts have helped people move their coins into safety.

While I hope that the hardware wallet industry and developers will learn a lesson from this, I think that many will have the wrong takeaways, or none at all.

This is not the first time that such things have happened, as seen with the Blockchain.info wallet, and I don’t think it will be the last.

It is embarrassing that the same mistakes happen over and over again.

These companies are often managed by people with little understanding of cryptography and security. A flawed leadership then leads to flawed products.

While open source, AI security audits, etc., are nice, they are not going to solve the problem at all.

I would recommend anyone who wants to make a signing device first study the history of cryptography, hardware security, and related topics. Then decide whether you want to take the risk.