I missed the part where it's simple 😄

Great anecdote, thanks for sharing.

I had only one such incident, a mini-incident, when working on Joinmarket. We originally used a master secret generated from a user passphrase (before shifting to the more sane model of bip39 compatibility), and the code had a bug where a null password was actually accepted instead of rejected, resulting in an easily guessable master secret. When some guy used this he noticed some (thankfully small) deposits had been made in the past. Sheesh, it was really amateur hour back then, lol. I read his post, figured out what happened, and had no choice (really) but to immediately swipe his funds - because he'd posted it all on reddit for anyone to see. So then I had the bizarre experience of trying to figure out if I should get him to sign a message with the private key of the address he'd sent funds *from* .. before eventually realizing there was no point; literally the only sane thing to do was to send funds back to that address, although I first asked him if he still had access to it. What an unholy mess. Thankfully in my case people were mostly still using play amounts, this was 2015 iirc. So only about 1% of your experience. You really can't fuck around if you're generating people's wallets and those people are *ordinary users*. At least with Joinmarket almost all of them were very tech knowledgeable back then.

It can have them physically (certainly wifi), but switched off. Nvk used to argue you have to physically remove it, which is an absurd misassessment of risk imo (compared with supply chain risk of bitcoin-specific devices).

This is not a realistic threat. Using a bitcoin-specific device is a much more plausible threat, albeit it still *could* be a very small threat (supply chain attack).

I wouldn't be surprised if you're right. It all seems like a rather expensive near future, though.

Interesting, thanks.

In case a battle seems unwinnable, perhaps grimly fighting on is not the best plan; perhaps a better plan is to look for a new type of weapon.